What Lenders Look For in Business Bank Statements
Business Owners Finance
Bank statements · Account conduct · Business lending
Most statement-based business lending assessments can be understood through three core questions: what is genuine trading revenue, how the account behaves between deposits, and what existing obligations are already visible. This guide shows how Australian lenders use those questions, how many months they may ask for, how cash, transfers, tax payments and multiple accounts are treated, what to send, and what to do when the statements do not support the amount requested.
Quick Answer
Most statement-based business lenders use the account to verify genuine trading receipts, account conduct and existing financial commitments. They then look at signals such as deposit consistency, balance recovery, dishonours, tax payments, other lender repayments and unusual transfers. Money moved between your own accounts, borrowed money and owner injections are not customer revenue. If the lender also has BAS, tax returns or financial statements, the banked deposits do not have to match those documents line for line, but material differences may need to be reconciled.
Also called: bank statement red flags, account conduct, how lenders read bank statements, what lenders check on bank statements.
| Where you are | The question underneath it | Start here |
|---|---|---|
| About to apply | What will the lender actually see, and what will it count? | What counts as turnover |
| Getting the statements together | What file do I send, and where do I get it from? | What format lenders accept |
| Asked to explain something | How do I answer a question about one transaction? | What goes in the covering note |
| Everything runs through one account | Does mixing business and personal money sink this? | When business and personal share an account |
| Cash takings are part of the business | Will cash deposits count as turnover, or will they be treated as unexplained credits? | How cash deposits are read |
| Sales land in more than one account | Do I need to show the other bank account or merchant facility too? | When revenue is split across accounts |
| The deposits do not match the BAS or financials | Is the difference normal, or will the lender think the turnover is wrong? | Why the numbers can differ |
| ATO debits or a payment plan are visible | Does the tax payment automatically sink the application? | How ATO payments are read |
| Declined, and told it was the statements | Was it the income, the conduct, or the size of the ask? | When the statements do not support the ask |
| Wondering what you can leave out | Can anything be removed before the file is sent? | Blacking out transactions |
If you would rather read the version written for your trade, the same material sits in the hospitality hub, the trades hub, the transport hub and the broader business owners finance hub, each with the transaction patterns that are normal in that industry.
Before you read on
This guide is about business lending: an overdraft, a working capital facility, an equipment or asset purchase, a loan into a company, a trust or a sole trader name. Two adjacent things it is not about, so the wrong reader can leave quickly and the right one can stay.
It is not about bank statements requested for a rental application or for a government payment assessment. Those assessments are looking for something else entirely and nothing on this page transfers to them. It is also not the home loan version of the question. If you are buying or refinancing a home, the lender is working from a different rulebook and, more importantly, a different evidence base. That fork is the first thing set out below, because getting it wrong is the single most common reason a business owner walks into a lender with the wrong expectations.
What do lenders look at on your bank statements?
Most statement-based business lending assessments can be understood through three core questions: what did customers genuinely pay the business, how does the account behave between those deposits, and what financial obligations are already visible in the transaction history. Different lenders weight the detail differently, but this framework explains why the same statement can be read very differently from a simple total of money in and money out.
- Trading income. The money customers actually paid you for goods or services, once transfers, drawdowns and owner contributions have been stripped out.
- Account conduct. How the account behaves between those deposits: failed payments, balance recovery, time spent overdrawn, revenue direction and how an existing limit is used.
- Obligations. The repayments, direct debits and facility charges visible in the transaction feed, whether or not the application listed them.
The first is turnover, and it is where most files go wrong, because money arriving in an account is not the same as money earned. A quarter can look far bigger than the business is, purely because of transfers, a drawdown and an asset sale. That is set out in what counts as turnover and in how transfers and owner contributions read. The second is account conduct, the behaviour of the account rather than the size of the numbers on it. The third is obligations, meaning the repayments, direct debits and existing facilities a credit assessor can see running through the account whether or not you listed them on the application.
Is a business loan assessed the same way as a home loan?
No, and the difference that matters is not the rulebook, it is the evidence base. A bank statement does a different job in different files. Where a full documentation lender treats it as corroboration for figures that already exist in a tax return, a cashflow or low documentation lender treats it as the primary evidence of income. That is why the same document can be waved through in one assessment and taken apart line by line in another, and why working capital facilities lean on statements that a property secured term loan might barely open.
It is commonly asserted that lenders work from tax returns, financial statements and an accountant's letter rather than raw bank statement deposits. For full documentation lending that is broadly right. For the low documentation and cashflow lending that most self-employed borrowers actually reach for, it is wrong, because in those products the statements are the income evidence. There is no second document behind them to fall back on. Read the wrong half of that fork and you will either over-prepare a tax pack nobody asked for, or hand over statements you have never looked at as a lender would. The wider running order a credit team works through is set out in what a business lender checks first.
The regime is different as well, and it is worth stating precisely rather than in slogans. The consumer credit rules reach credit provided wholly or predominantly for personal, domestic or household purposes, or to purchase, renovate or improve residential property for investment purposes, or to refinance credit previously provided for that purpose. Credit provided for a business purpose sits outside that coverage. This does not make business lending a free-for-all: it means the protections a borrower is used to from the consumer side, and the assumptions that come with them, do not automatically follow them into a business file. What that actually leaves you with is set out in the protections that apply on a business purpose loan.
Coverage of the National Credit Code, as stated by the Australian Securities and Investments Commission, read 2 September 2026: asic.gov.au, National Credit Code. The statute itself is section 5 of the National Credit Code, "Provision of credit to which this Code applies". A regulator's plain English statement of coverage, not advice on any particular contract.
What can lenders see if you share your bank data through open banking?
Through open banking a lender sees the transaction data you agreed to share, for the period and purpose you agreed to, and the sharing is voluntary. The Australian Government's Consumer Data Right material puts it plainly: "Consumer Data Right is an opt-in service, which means you can choose whether to use it or not", and "Your data must be destroyed or de-identified when it's no longer needed or at your request, unless an exception applies."
What a lender then does with a live data feed rather than a set of exported files is that lender's own process, not a difference in what the rules permit it to look at. The lender is still trying to reconcile trading receipts, account behaviour and visible commitments, and the credit assessment does not become a different task simply because the delivery method changed. Whether any particular lender offers a document based alternative is a question for that lender.
Australian Government, Consumer Data Right, Your rights, read 2 September 2026: cdr.gov.au/your-rights. Describes the consumer's rights under the framework. Whether a particular lender offers an alternative to data sharing is that lender's process, not an entitlement under the framework.
What counts as turnover on your bank statements, and what gets struck out?
For a bank-statement assessment, the lender is trying to isolate genuine customer receipts from credits that came in by another route. Money arriving is not automatically revenue: transfers, facility drawdowns, owner injections, asset-sale proceeds and refunds can all increase gross credits without increasing trading income. The exact calculation is lender-specific, especially where GST, refunds or several trading accounts are involved. A quarter that looks strong can shrink by a third once the non trading credits come out, and a quarter that looks thin can hold up perfectly well once a lender sees that the deposits are all genuine sales.
The plain English version of the test is already published, and it is worth quoting because almost nobody writing about bank statements uses it. The Australian Taxation Office lists what a business excludes from its assessable income, and three of those exclusions are exactly the credits that inflate a bank statement: "money you have borrowed", "money you contribute as the business owner", and "GST you have collected". The same list also excludes gifts or inheritance, earnings from a hobby, and prizes and awards not related to your business. None of that is revenue. All of it can land in a business account.
Australian Taxation Office, "What to exclude from your business's assessable income", page last updated 7 May 2025, read 2 September 2026: ato.gov.au. A tax definition, not a lender rule and not a serviceability calculation. It explains the logic a credit assessor is applying; the lender still applies its own credit policy.
Behind that list sits a framework, and the framework is what lets you predict the answer for a transaction the list does not name. The Australian accounting standard on cash flow statements sorts every movement of cash into three families. Operating activities are "the principal revenue-producing activities of the entity and other activities that are not investing or financing activities". Investing activities are the "acquisition and disposal of long-term assets and other investments not included in cash equivalents". Financing activities are those "that result in changes in the size and composition of the contributed equity and borrowings", and the standard's own examples of financing inflows include "cash proceeds from issuing shares or other equity instruments" and "cash proceeds from issuing debentures, loans, notes, bonds, mortgages and other short-term or long-term borrowings".
Australian Accounting Standards Board, AASB 107 Statement of Cash Flows, definitions at paragraph 6 and financing examples at paragraph 17, read 2 September 2026: standards.aasb.gov.au. An accounting classification, not a lender rule. It explains why the proceeds of a loan or an asset sale are not trading income; a lender still applies its own credit policy in its own way.
Put the two together and the useful distinction is between customer receipts and non-trading credits. A drawdown is financing. Money introduced by an owner, director or shareholder is a non-trading credit whose accounting treatment may be equity, a loan, a reimbursement or another related-party movement. Selling a business-use asset that is not trading stock is an investing inflow. The ATO excludes GST collected from gross income for tax purposes, but a lender's banked-turnover calculation is a separate credit-policy question and may be reconciled against BAS or other evidence rather than handled identically by every lender. None of those credits should be assumed to be customer revenue simply because they appear on the statement. Where this bites hardest is on statement-led facilities whose size depends heavily on verified trading receipts. An overdraft assessed off the statements or a working capital facility may use the trading line as an important input rather than simply adding every credit that hit the account.
One further filter runs alongside it. A lender is not only asking how much came in, it is asking how many customers it came from. Turnover that is genuine but arrives almost entirely from one payer reads as a thinner line than the same figure spread across many, which is a separate assessment again and is covered in revenue concentration risk.
| Money arriving in the account | Counts as trading income | What it actually is |
|---|---|---|
| Customer paying for goods or services | Yes | Gross income from your everyday business activities, which is the assessable line and the one a lender is trying to isolate. |
| GST included in customer receipts | Adjusted / lender-specific | The ATO excludes GST collected from gross income for tax purposes. A lender may reconcile banked receipts against BAS or other evidence, so do not treat one GST method as a universal credit rule. |
| Drawdown on a loan, overdraft or facility | No | Financing. The standard names cash proceeds from loans and mortgages as a financing inflow, and the tax office names "money you have borrowed" as an exclusion. |
| Owner, director or shareholder money paid in | No | A non-trading credit. Depending on the structure and records, it may be a capital contribution, director or shareholder loan, reimbursement or related-party transfer. |
| Sale of a business-use vehicle, plant or equipment that is not trading stock | No | An investing inflow from disposing of a long-term asset, not a customer receipt from the ordinary thing the business sells. |
| Transfer in from another account you own | No | Your own money moving. Underwriters call these contra or wash transactions and net them out. |
| Refund or reversal from a supplier | No | An expense coming back, so it reduces cost rather than adding revenue. |
| Gift or inheritance paid into the business account | No | Named in the tax office exclusions as "gifts or inheritance". It tells a lender nothing about trade. |
Neither source above is a lender rule. The tax definition and the accounting classification explain why a credit assessor treats these credits the way it does; the credit policy that decides your application belongs to the lender.
What if your bank statement turnover does not match your BAS or financial statements?
A difference does not automatically mean the bank statements, BAS or financial statements are wrong. Bank statements show when cash actually moved. BAS and financial statements can measure sales on a different timing basis, and the bank account can also contain GST, transfers, refunds, merchant settlements and other movements that are not a one-for-one copy of accounting revenue. Where a lender has both sets of documents, the useful question is whether the difference can be reconciled, not whether every total is identical.
The Australian Taxation Office explains one of the biggest timing differences directly. If a business accounts for GST on a cash basis, BAS amounts are attributed to the period in which payment is received or made. Under non-cash accounting, a sale can be attributed to the earlier period in which payment is received or an invoice is issued. That means an invoice, a BAS and a bank deposit can legitimately sit in different periods even though they describe the same underlying sale.
Australian Taxation Office, "Completing your BAS for GST", read 3 September 2026: ato.gov.au. Cited for BAS timing under cash and non-cash GST accounting only. It is not a lender assessment rule.
It is also normal for a lender to hold more than one evidence type. One major bank's current business loan guidance says applicants may need their latest bank statements and may also be asked for tax returns, activity statements or tax office portal statements. That does not establish a universal reconciliation formula, but it explains why a credit assessor can notice a difference between documents and ask you to bridge it.
Commonwealth Bank, "What do you need to apply for a business loan?", read 3 September 2026: commbank.com.au. A current lender document checklist, not a statement that every business loan requires every document.
| Difference you can see | Why it can happen | What can help reconcile it |
|---|---|---|
| Invoice and payment fall in different periods | The accounting or GST timing can differ from the date cash lands in the bank. | Invoice ledger, aged receivables or the invoice and matching payment if requested. |
| Bank deposits include GST | The bank shows the gross amount received, while BAS and accounting reports separate or classify GST differently. | BAS and the GST or sales report used to prepare it. |
| Sales settle through EFTPOS or an online merchant facility | The payment processor can batch sales into settlements, so the deposit line is not necessarily one customer sale per bank entry. | Merchant settlement report matched to the banked batches. |
| Money moves between two business accounts | The same cash can appear as a credit in more than one account even though the business only earned it once. | Both account statements, with the matching debit and credit identified. |
| Refunds or reversals appear in the period | A credit or debit can reverse an earlier transaction rather than represent a new sale or new expense. | Credit note, refund record or the original transaction and reversal. |
Do not manufacture a reconciliation simply to make two totals agree. If you cannot explain the difference from the records, fix the bookkeeping with your accountant or bookkeeper before relying on the figures in a finance application.
Do cash deposits count as turnover on a business bank statement?
Cash deposits can be genuine trading receipts, but the lender still needs to be able to reconcile them to the way the business actually gets paid. A cafe, market trader or other cash-taking business can legitimately bank cash sales; a business that normally invoices by bank transfer and suddenly shows large unexplained cash deposits presents a different question. The useful evidence is consistency: cash takings, deposit frequency and the business records should tell the same story.
The Australian Taxation Office tells businesses to record the amounts actually received and paid, regularly reconcile what goes through the account and why, and bank cash sales income into the business account regularly so the banking record and GST reporting reconcile. That is a record-keeping rule, not a lender approval rule, but it explains what makes a cash deposit evidentially useful rather than merely unexplained.
Australian Taxation Office, "Banking records for business", read 3 September 2026: ato.gov.au. Record-keeping guidance only. It does not say a lender must count a cash deposit as revenue; the lender still applies its own credit policy and may ask for supporting records.
How do lenders treat transfers between your own accounts and money you put in?
Transfers between your own accounts do not create customer revenue, and money introduced by an owner, director or shareholder is also a non-trading credit rather than a sale. A credit assessor will usually try to match an internal transfer to the corresponding debit and then identify what an owner or related-party payment actually represents. Underwriters often describe matched internal movements as contra or wash transactions. The accounting label for an owner or related-party credit can differ by structure and records, so the safe lending description is simply that it is not customer revenue until its source is understood.
Identifying them is the easy half. The half that costs applications is the explanation, because a large credit with a bare narration and no matching debit anywhere the lender can see is not a neutral event. It is an open question, and open questions on a statement do not resolve themselves. They move the file into a manual queue while somebody waits for an answer, which is exactly the pattern set out in the bank statement patterns that send a file to manual review.
There is also a housekeeping point that the tax office makes for its own reasons and that happens to solve the lending problem at the same time. Its guidance on using business money and assets for private purposes says: "You should consider setting up a separate bank account for your business to pay business expenses from, and avoid using it to pay for your private expenses", and "If you take money out of the business or use its assets, make sure you keep proper records that explain all relevant transactions, including all income, payments and loans to you and your associates from the business." A business account that has been kept separate, with records that explain the movements in and out, is also the account that reads cleanly to a credit assessor.
Australian Taxation Office, "Using your business money and assets for private purposes", page last updated 2 July 2026, read 2 September 2026: ato.gov.au. Cited for those two statements only. The page carries a notice that its content is under review following a recent court decision, so nothing else on it is relied on here.
How the tax system treats money you take out of your company or lend into it is a question for your accountant, not for this page and not for your broker. It is a live area, it is being reviewed, and the answer turns on facts about your structure that no general guide can see. What this page can tell you is how the movement reads on a statement, which is a different question with a much more stable answer.
| What it is | How it appears on the statement | How it reads to a lender |
|---|---|---|
| Customer payment | Credit with a payer name or invoice reference, usually repeating across the period. | Trading income. This is the line the facility is sized from. |
| Transfer between your own accounts | Credit on one account and a matching debit on another, often same day, often round. | Contra or wash. Netted out, and neutral once the matching side is visible. |
| Director or shareholder money in | Credit from a personal name, frequently at month end or when the balance is low. | Non-trading credit. It may be equity, a director/shareholder loan or another related-party movement; the lender may ask what it represents and why it was needed. |
| Related entity transfer | Credit from a second business name under the same ownership. | Not assumed to be customer revenue. It may prompt a request for the related entity or matching account if that is needed to reconcile the movement. |
| Refund or reversal | Credit that mirrors an earlier debit, sometimes with the same narration. | A cost coming back. Neutral if it is obviously paired, a question if it is not. |
| Facility drawdown | Large single credit, often followed immediately by a large outgoing payment. | Financing. Excluded from income, and it also tells the lender the facility exists. |
Worked example: the quarter that was not as big as it looked
A trading business hands over the statement window the lender asked for. Added up crudely, the credits across it look like the best quarter it has ever had, and the owner asks for a facility sized to match. The credit assessor strips it back. One large credit is a transfer in from the business's own second account, where takings had been parked. Another is a drawdown on an equipment facility that already existed. A third is the proceeds of selling an old vehicle.
Walk all three out and the trading line is materially smaller than the raw total, and it is that smaller figure the lender was always going to work from. Nothing improper happened here, and nothing was hidden. The owner simply presented a total the lender was never going to accept, and then had to argue about the gap from a weaker position. Handing over the same statements with the three credits identified in advance costs nothing and changes the whole shape of the conversation.
How do you label transfers so they read correctly?
Label at the source, keep the narration consistent, and send a short covering note rather than expecting whoever opens the file to infer it. Most transfer descriptions are set when the payment is made, not afterwards, so the fix is upstream: use a narration that names what the movement is, use the same wording every time, and avoid narrations that look like a sale when they are not. A credit that reads the same way every month becomes background. A credit that reads differently every month becomes a question. The narrations that reliably attract attention are set out in bank statement narration red flags.
The covering note is the other half, and it is the part almost nobody does. A short page listing the non-trading credits by date and amount, with one line each on what they were, can remove a large category of follow-up questions before they are asked. What goes in one is set out in the covering note. This matters most on the products where the statements carry the whole file, which is set out in low documentation and cashflow facilities.
What is account conduct, and what does a lender read it from?
Account conduct is how the account behaves, as distinct from how much money goes through it, and a lender reads it from the pattern of failed payments, overdrawn periods, limit usage and met obligations across the statement window. It is the phrase every business owner is told matters and almost none has had explained, largely because there is nothing authoritative to point at.
That is worth stating plainly rather than hedging. We found no Australian government or industry-association source that publishes a universal account-conduct threshold for business lending. That matters because conduct settings sit inside lender and product credit policy and can change. A number quoted without a named lender, product, date and scope should therefore be treated as a policy example or practitioner observation, not an Australian rule.
Seven signals are especially useful when you read the account the way an assessor will, and the first is the one most commonly missed.
- Who the failed payment was to, which matters more than how many there were.
- Recency and pattern, ahead of raw count.
- Time spent overdrawn, and whether the account recovers within its own cycle.
- How an existing limit is used, and whether it has quietly become term debt.
- Obligations visible in the transaction feed, listed on the application or not.
- Balance pattern, including repeated low points and whether the account recovers from them.
- Revenue direction, meaning whether genuine customer deposits are broadly stable, rising, falling or simply seasonal.
Who the failed payment was to. A dishonoured payment is not a single category of event. A failed direct debit to a trade supplier can read differently from a failed payment to a credit provider, because the two may point to different problems. The first may be a working-capital timing problem inside a trading relationship. The second is a missed credit obligation. Neither has a universal score attached to it, but knowing who the failed payment was to gives the assessor more context than a raw count alone. Two businesses with an identical count of failed payments can land in completely different places on this dimension alone, and it is the single most useful thing to look at before you hand statements over. The pattern is worked through in detail in how a lender reads dishonours on hospitality statements.
Recency and pattern, ahead of raw count. Recent events can carry more weight than older ones where the lender is trying to understand the current trading position, and a run that has clearly stopped can read differently from one that continues to the closing date. The important point is direction of travel rather than a raw event count on its own. This is the part of a cash flow assessment that a spreadsheet total cannot capture.
Time spent overdrawn and where the balance sits. Not whether the account has ever gone below zero, which for a trading business is unremarkable, but whether it lives there, and whether it comes back. An account that dips and recovers within the cycle is describing normal trading. An account that never recovers is describing something else.
How a limit is used. A facility that is drawn and repaid through the period is doing the job it was written for. A facility that has remained fully drawn for a long period can look less like a working-capital buffer and more like permanent debt, which may prompt the lender to ask whether the structure still fits the way the business uses it. That distinction is the main reason a lender looks at how an existing business overdraft has actually been operated rather than at the limit on the letter.
Obligations visible in the transaction feed. Repayments, direct debits and facility charges running through the account tell a lender what commitments exist regardless of what the application listed. This is also where an assessor may discover commitments that were omitted or described differently on the application.
Which transactions on a business bank statement attract a question?
The transactions that attract a question are the ones a credit assessor cannot account for from the statement alone, and they fall into a small and predictable set. None of them is a decline on its own, and every one of them closes with an explanation that costs nothing to supply. The same set turns up in asset finance assessments, where existing equipment repayments are usually visible long before anyone asks about them.
| What is on the statement | What a lender reads from it | What closes it |
|---|---|---|
| A large credit with a bare narration | An amount that cannot be tied to a customer, so it is excluded from turnover and queried. | One line naming what it was, and the matching debit if it was your own money moving. |
| Repayments to another credit provider | An existing commitment, whether or not the application disclosed it. | Listing it on the application before the assessor finds it on the statement. |
| A tax office payment arrangement debit | That an arrangement exists, and whether it is being met on the account. | Saying so up front, with the arrangement visibly being met across the same window. |
| Cash deposits that do not match how the business is paid | A mismatch between the trading story and the account, which invites a question rather than a conclusion. | An explanation consistent with how the business actually takes payment. |
| Round sum credits at month end | Usually an owner contribution, read as a signal about how the account is funded. | Naming it as contributed equity rather than leaving it to look like a sale. |
None of these is a decline on its own and none of them is a lender rule. This is what the transaction looks like to somebody reading the account cold, which is the only thing a statement can tell them.
Do ATO payments or a tax payment plan automatically stop a business loan?
No universal rule says an ATO debit or a payment arrangement automatically stops a business loan. What the statement tells the lender is that a tax obligation exists and, where an arrangement is visible, whether payments appear to be being met. That can trigger a request for the current ATO position, the arrangement terms or other supporting evidence. Whether the position is acceptable then depends on the lender, the product and the wider file.
That follow-up is not hypothetical. One major bank's current online business lending support says applicants need to declare outstanding tax office arrears or debt, and that it may verify the position using a tax office accounts summary showing account balances, overdue amounts and payment plans, plus account transactions. The useful move is therefore to know the current ATO position before you apply and make sure any arrangement you disclose can be evidenced.
NAB, "ATO documentation requirements", read 3 September 2026: nab.com.au. NAB's own online business-lending process. It establishes that ATO arrears, debt and payment plans can be declared and verified; it does not publish a universal rule that an ATO arrangement is automatically accepted or declined.
Why some patterns attract a question
Australia's financial intelligence regulator publishes indicators for non-bank lenders and financiers to use in their reporting obligations. Its list includes a customer who "has unusual transaction patterns or frequency of transactions", who "makes large value deposits into their account over a short period", who "uses cash repayment options excessively or unexpectedly, inconsistent with their profile", who "makes regular or frequent structured cash payments", who "applies for multiple loans, credit cards, and/or finance products within a short period of time", or "whose first payment defaults".
These are anti-money-laundering reporting indicators. They are not credit assessment criteria and they are not a decline list. They explain why a lender's systems sometimes surface a pattern for a human to look at, which is a different event from a lender concluding anything about you. The regulator says so itself: on their own, one of these indicators may not suggest suspicious activity, and the list is not exhaustive.
AUSTRAC, "Indicators of suspicious activity: non-bank lenders and financiers", page last updated 30 September 2024, read 2 September 2026: austrac.gov.au. Reporting indicators only, not credit assessment criteria, and not a statement that a lender suspects wrongdoing.
One correction is worth making here, because it circulates widely and it sends business owners into the wrong argument. It is often said that a lender assessing your statements must satisfy itself that you can comfortably afford the repayments, with that duty attributed to the financial ombudsman. Those responsible lending obligations largely do not reach credit provided for business purposes, so a business borrower who argues an application on that footing is arguing from a protection that is not there. The ombudsman is relevant to business lending, and correctly so, but through a different door: it has a published approach to complaints about lending to small business, and it considers whether a firm's credit assessment was appropriate. That is a complaint pathway after the fact, not a standard the lender owes you at the counter, and it is set out in the protections that apply on a business purpose loan.
Worked example: three failed payments that did not sink the file
A business shows three failed direct debits inside one month. On a raw count that looks bad, and the owner assumed the application was finished. Two things changed the read. All three were to the same trade supplier, on a standing arrangement, in a month where a large customer paid late. And the account recovered on the same statement page: the payments went through on the retry, the balance came back, and the following month is clean.
What a credit assessor takes from that is a timing problem inside a trading relationship, with the recovery visible in the same document. Had the same three failures been to a credit provider, or had the account still been sitting at its lowest point at the closing date, the read would have been materially worse with an identical count. The count was never the thing being assessed.
From our broking, indicative
What follows is what we see change outcomes when we prepare files, described qualitatively. No figure, band, count, threshold or timeframe is given, because none can be given honestly: nobody publishes one, they differ by lender and product, and a number invented here would be lifted and repeated as though it were a rule.
- The counterparty behind a failed payment moves an assessment more than the number of failures does, and it is the first thing we look at when statements come in.
- A trough that repeats at the same point every year reads very differently from one that has never happened before, and the difference is usually closed by evidence rather than by argument.
- An unexplained credit often creates a follow-up. The same credit with a one-line explanation attached is easier to assess because the reader does not have to infer what it was. A large share of avoidable time on statement-based files comes from this gap.
- Open questions are a common reason a file moves to manual review or pauses for more information. In practice, an unanswered request can be more damaging to momentum than a transaction that has a clear, supportable explanation.
- Before we submit, we ask for the non trading credits identified, the failed payments named with who they were to, and a plain explanation of any month that looks unlike the others.
Indicative only, based on files we have prepared and placed, as at September 2026. Not a quote, not an offer, and not a prediction about your application. Actual outcomes depend on lender policy and your circumstances at the time of application. General information only, not financial advice.
How far back do lenders look at your bank statements?
How far back a lender looks depends on what the statements are doing in the assessment, and there is no universal Australian period. No government body and no industry association publishes one, so every figure in circulation comes from an individual lender's own document checklist. One major bank's published business loan application guide is a concrete example, saying business account statements for the past six to 12 months may be requested, and that is that institution's checklist rather than a market rule. Other products can use a shorter recent window, while seasonal, larger or more complex files may need a longer look or extra evidence.
The period changes because the statements do different jobs in different assessments. A statement-led lender may be using the account as the primary evidence of trade; a full-document lender may already have tax returns and financial statements and use the bank account to corroborate them. Trading age, seasonality, facility size, whether BAS or other records are supplied and whether the account shown is genuinely the primary trading account can all change what is requested.
Westpac, "Applying for a business loan", read 3 September 2026: westpac.com.au. Westpac says business account bank statements showing cash flow, deposits, withdrawals and balances for the past six to 12 months may be requested. This is one named institution's published application guidance, not an industry-wide rule.
| Lender type | What the statements are doing in the assessment | What that means for the window |
|---|---|---|
| Online and cashflow lenders | Carrying the whole income assessment, usually read from a data feed rather than documents. | Often a shorter recent window because the statements are carrying much of the income assessment and recency matters to the model. The lender sets the period and it varies by product. |
| Non-bank and low documentation lenders | Standing in for tax returns and financial statements as the primary evidence of trade. | Often a broader window than a highly automated cashflow product because the lender is trying to see a trading pattern rather than a single recent snapshot, sometimes alongside activity statements. |
| Major bank business lending | Corroborating financial statements and tax returns the lender already has. | Published bank guidance can ask for six to 12 months of business account statements, alongside other financial evidence, because the statements are one part of the wider assessment rather than the only evidence. |
| Asset and equipment financiers | Confirming servicing capacity and showing what existing equipment commitments already run through the account. | Set by the size and type of the asset, and shorter on a small facility against a straightforward asset than on a large one. |
| Private and specialist lenders | Supporting an exit and a security position more than an income calculation. | Least standardised of all. The window is negotiated with the file rather than published, and it follows the story the lender is being asked to underwrite. |
The six to 12 month range above is a published bank example, not a universal market rule. Where no current Australian primary or named-institution source supports a specific band for a lender type, this table explains what moves the window instead of inventing one.
Within any one of those types, the window then moves for reasons you can anticipate. Trading age moves it: a business that has been trading a long time is asked for a window that proves a pattern, while a newer one is often asked for everything it has. Seasonality moves it, because a lender that can see your quiet season needs a window long enough to contain it. Facility size moves it, and a larger ask buys a longer look. Whether activity statements are supplied moves it, because a second source of evidence reduces how much work the statements have to do alone. And whether the account you have shown is genuinely the primary trading account moves it, because a lender that suspects it is looking at a secondary account will ask for more, not less.
- Trading age, and whether the business has a history long enough to show a pattern.
- Seasonality, and whether the window contains a full cycle rather than a slice of one.
- Facility size, since a larger request is assessed against a longer look back.
- Whether activity statements are supplied alongside the account.
- Whether the account shown is the primary trading account or a secondary one.
This is also why the estate's own material on statement periods can look inconsistent when it is read side by side. The hospitality version of this question, the working capital guide and the overdraft version are each describing the lender type that actually funds that product. They are not disagreeing with each other.
How does a seasonal dip or a one-off bad month read?
A seasonal dip and a one-off bad month both read badly when they are unexplained and read normally when they are evidenced, and the evidence is different in each case. A seasonal dip is closed by showing the same shape in an earlier year, because a trough that repeats is a feature of the business rather than a decline in it. A genuine one-off is closed by naming the cause and showing the recovery in the same document. The failure mode in both is identical: the borrower knows why the month looks like that, assumes it is obvious, and lets a stranger draw the conclusion instead.
Worked example: the window that made a normal year look like a decline
A business with a pronounced quiet season hands over a statement window that happens to sit across it. Read in isolation the file describes a business whose takings fell away and had not recovered by the closing date, which is a decline. Read against the previous year it describes a business that does exactly this every year and comes back every year, which is a season.
Nothing about the business changed between those two readings. What closed the gap was the earlier period, supplied alongside, plus one sentence saying what to look at. A lender cannot see the shape of your year from a window that does not contain it, and it will not assume the generous version on your behalf.
Can you black out transactions on a bank statement before you send it?
Do not black out or edit transactions unless the lender has explicitly told you what may be removed. An altered or incomplete statement may be rejected or sent back for a complete bank-issued copy, and a black box placed over electronic text may not actually remove the underlying data. The safer default is to send the complete statement and explain the transaction separately.
A redacted bank statement is simply a statement where information has been removed or obscured before it was handed over, whether that is a transaction, a balance, a payer name or a personal identifier. The word carries no special legal meaning here, and it does not describe a version of the document a lender has agreed to accept.
Start with the technical half, because it is the part almost nobody knows and it decides the practical question on its own. The Federal Court of Australia publishes a guide on redacting documents in electronic form, and its advice is blunt: "do not use black shapes over the text being redacted. The redacted text will only be hidden from view but not removed from the document." Making the text white has the same flaw, because "while the text is hidden from view, it can still be accessed by copying and pasting." Using a PDF annotation tool to draw a box has the same flaw again: "if you do this, the text will still be found through search or copy and paste."
So a black box does not remove the transaction. It can make the document visibly altered while leaving the underlying text sitting in the file, retrievable by anyone who selects it or searches it. That means the redaction method may fail technically before the lender even decides whether the information was permitted to be removed. Whatever the argument for withholding a line, this method does not achieve it.
Federal Court of Australia, "Guide to redacting documents in electronic form", read 2 September 2026: fedcourt.gov.au. This is court filing guidance about redaction technique. It is not lender guidance about what may be withheld from a lender, and it is not permission to redact anything. It is cited here for one point only: a black box does not remove the underlying text.
| What you do | What actually happens to the document | How it lands with the lender |
|---|---|---|
| Draw a black shape over the line | The text is hidden from view but not removed from the document. | Visibly altered, which may trigger a request for the complete document, while the hidden text can still be retrievable. |
| Make the text white | The text is hidden from view but can still be accessed by copying and pasting. | The text may still be retrievable and the document is visibly altered, so do not assume this is an acceptable lender process. |
| Use an annotation tool to box it out | The text remains findable through search or copy and paste. | The underlying text can remain searchable, so the annotation does not solve the technical problem or establish that the lender permits the redaction. |
| Obscure an identifier such as a tax file number | A narrow and legitimate category, but the technical problem above is unchanged. | Acceptable only where the lender's own process allows it. Ask first rather than assume. |
| Send the statement whole with a covering note | Nothing is altered. The explanation travels beside the document. | The safest default where the lender has not authorised redaction: the original evidence remains intact and the explanation travels beside it. |
There is one narrow carve-out and it is narrower than people hope. Obscuring a personal identifier such as a tax file number is a different act from obscuring a transaction, and some lenders' processes allow it. Some do not. It is a question to ask before you send, not a liberty to take, and it does not extend one line further than the identifier itself.
The legitimate move is the opposite of removal: annotate, do not remove. Send the statements complete, and send a short note alongside that explains the transactions you were worried about, which is set out in how to prepare and send them. An explanation gives the assessor context without altering the evidence and can remove the need for a separate follow-up on that transaction. The specific things that trigger a follow-up request are set out in what makes a lender come back and ask, and where the underlying history is genuinely difficult, the honest approach is set out in cleaning up a statement position before you apply, which is about timing and presentation, never about altering a document.
The consequence side is real and there is a concrete Australian case for it. A mortgage broker was convicted on eighteen charges relating to false or misleading documents supporting loan applications, seventeen of them under section 160D of the National Consumer Credit Protection Act 2009, a provision that makes it an offence for a person engaging in credit activities to give information or documents to another person that is false in a material particular or materially misleading. The magistrate indicated that, had the mitigating factors been different, full-time imprisonment was on the table.
Australian Securities and Investments Commission, media release 16-293MR, 6 September 2016, read 2 September 2026: asic.gov.au, media release 16-293MR. Read the qualifier with the fact. Section 160D bites a person engaging in credit activities and it sits in the consumer credit regime. It is not the provision that applies to a business borrower handing over their own statements. It is cited here as the concrete Australian consequence case, not as a provision that applies to you.
That last point needs both halves or neither, because half of it is dangerous. It is true that the verification duties people usually cite here come from consumer credit legislation, and that those duties largely do not reach credit provided for business purposes. It does not follow that altering a statement is safe on a business loan. A business borrower's exposure runs through general misrepresentation and document offences instead, and through the contract itself, where a materially false document supplied to obtain credit is a problem regardless of which regime the credit sits in. Anyone weighing what may or may not be withheld from a document given to a lender should speak to a solicitor, not to a broker and not to a guide.
How do you prepare and send your bank statements to a lender?
The safest default is a complete bank-issued statement for the period requested, or the secure bank-data method the lender specifically asks you to use, plus a short note explaining anything a reader could not account for. The aim is simple: give the lender a continuous, attributable record of the account and remove avoidable questions before the file reaches assessment.
What format do lenders accept bank statements in?
The safest default is the bank's own complete statement file, or the secure data-sharing method the lender specifically offers. Different lenders can accept different evidence, so the useful question is not whether one format is universally "allowed"; it is whether the document is complete, attributable to the bank and covers the requested period without gaps.
| What you send | Best use | What to expect |
|---|---|---|
| The bank's own statement, downloaded from internet banking or the statement archive | Best default | Carries the account details, period, balances and institution formatting a lender can attribute to the bank. |
| A lender-approved secure bank-data feed | Alternative where offered | The lender receives the transaction data you agreed to share. Whether this replaces documents is lender-specific. |
| A screenshot or photo of a screen | Usually supporting only | Often lacks the account header, full period and continuity needed to stand in for a complete statement, so expect a request for better evidence. |
| A transaction search exported to a spreadsheet | Supporting evidence if requested | Useful for analysis, but it is a filtered transaction export rather than the bank's complete statement record. |
| A report from accounting software | Supporting evidence | Useful for reconciliation, but it is the business's accounting record rather than the bank's record of the account. |
| A statement with pages or months missing | Avoid | Creates a continuity gap and commonly leads to a request for the complete requested period. |
| A secondary account instead of the main trading account | Additional evidence | May be relevant where revenue or commitments sit there, but it does not automatically replace the account that carries the main trading activity. |
Send the period the lender asked for as one continuous run, not a selection of favourable months from inside it, and check that the account name and entity make sense against the application. Where the structure or account ownership needs explaining, say so at the front rather than leaving the assessor to discover the mismatch late. The follow-up requests this avoids are set out in what makes a lender come back and ask.
What if your business uses more than one bank account or merchant facility?
Tell the lender where the trading money actually lands and supply the accounts or merchant records it asks for rather than assuming one bank account tells the whole story. If sales are split between a main account, a second bank account and a merchant facility such as an EFTPOS or online-payment service, one statement can understate revenue while transfers between the accounts can overstate it if they are counted twice. The clean presentation is a map of which account receives what, with internal transfers identified so the same sale is only counted once.
A statement from one account does not magically reveal every other account you hold, but transfers, lender repayments and merchant settlements can show that another account or facility exists and create a follow-up question. If you use open banking, the lender receives the data you agreed to share under that process; if you provide documents, the lender sees the documents you supplied and whatever other commitments are visible inside them.
What goes in the covering note?
A covering note is a short explanation listing the transactions a reader could not account for, usually by date and amount with one line on what each one was. It is not a formal document, it does not need letterhead, and it is not part of the bank statement. It travels beside the evidence so the assessor can reconcile unusual items without having to infer the explanation.
| What to list | What it stops |
|---|---|
| The account itself: which entity, which account, which period, and whether it is the primary trading account | The mismatch question, asked at the end of the assessment instead of the start. |
| Every non trading credit by date and amount: transfers in, drawdowns, owner contributions, asset sales, refunds | Your turnover being read as larger than it is, then corrected downward in the assessment rather than by you. |
| Any failed payment, naming who it was to | A trade supplier timing problem being read as a missed credit obligation. |
| Any month that looks unlike the others, and why | A season being read as a decline, or a one-off being read as a trend. |
| The obligations already visible on the account | An undisclosed commitment being found on the statement, which is where they are almost always found. |
What does a good bank statement explanation look like?
Keep it factual and transaction-specific. For example: "14 August, $25,000 credit from N Lim: director funds introduced to cover a supplier payment while two customer invoices were outstanding. Not customer revenue. The matching supplier payment is on 15 August." That sentence tells the assessor the date, amount, source, purpose and whether it belongs in turnover without trying to sell the file.
If the item is a failed payment, use the same structure: date, amount, who the payment was to, why it failed, when it was successfully paid and whether the same pattern continued. If the month was seasonal, name the season and attach the comparable earlier period rather than asking the assessor to take the explanation on trust.
A covering note is not a statutory declaration and the two should not be confused. A covering note is an unsworn explanation that travels beside your file and carries no formality at all. A statutory declaration is a sworn document with legal consequences for a false statement, and it is used only where a lender, an insurer or another party specifically asks for one. If you are asked for a statutory declaration rather than an explanation, that is a different request and it is worth asking why before you sign anything.
Write it in plain sentences and keep it to what is true. The point is not persuasion, it is removing the reason somebody has to stop and wait. That waiting is where most statement based files lose their time, and it is the same mechanism set out in what a business lender checks first.
What if your business and personal money go through the same account?
A sole trader can use one account for business and personal transactions, although separating them makes the lending assessment easier. Partnerships, companies and trusts are different: Australian Government guidance says they must have a separate business bank account for tax purposes. If a sole trader uses one account, the personal payments and expenses need to be clearly identified so the lender can isolate genuine business receipts and commitments.
Opening a separate account today does not change the historical window you are about to hand over. What it does is make future periods easier to reconcile. For the current application, say at the front that the account is mixed, identify personal transfers or drawings, and do not make the lender guess which deposits are customers. Where an account has been mixed for a long time, the patterns a credit assessor may need explained are set out in the bank statement patterns that send a file to manual review.
Australian Government, business.gov.au, "Set up your business bank account", read 3 September 2026: business.gov.au. It states that a sole trader does not have to have a business bank account, while a partnership, company or trust must have a separate account for tax purposes, and says personal payments or expenses must be clearly identified where one account is used for both.
What happens if your statements do not support the amount you asked for?
The lender may offer less, ask for more evidence or decline the request. The useful next step is to identify whether the gap came from presentation, the statement period, the size of the request, the product structure or a separate credit issue before submitting another application. A gap between the ask and the evidence is a normal outcome, not a verdict on the business, and the useful question is which of several quite different problems produced it. The options below are in order, and the ones that cost nothing come first deliberately.
The first move is almost always presentation rather than credit. A large share of the files where the statements "did not support" the ask are files where non trading credits were counted as income by the borrower and stripped out by the lender, or where a legitimate credit was never explained and was therefore discounted. Where that is the problem, a covering note or better reconciliation may be enough to get the evidence read correctly. The second is timing: if the window caught a trough, a later window may not, and waiting for a cleaner period is a real option rather than an admission of anything. The third is the size of the ask, which can be brought back to what the evidence carries. The fourth is the product, because the same evidence supports different structures differently.
Only after those does it make sense to move to the credit side, and the credit side has its own order. If the real blocker is history rather than turnover, that shows up on the business credit report rather than in the statements, and it is worth knowing which of the two is actually stopping the file before spending applications finding out. Where the history is genuinely impaired, lending for businesses with credit issues exists and is priced accordingly. Where the turnover is sound but the structure is wrong, the wider business lending options and, for a facility that flexes with the trading cycle rather than sitting as term debt, working capital funding are the places that gap usually closes.
| What is actually going on | The move | What it changes |
|---|---|---|
| Non trading credits were counted as income | Re-present the turnover line with the transfers, drawdowns and asset sales identified. | Costs nothing, and it usually changes the number the lender was working from rather than the number you were. |
| A legitimate credit was never explained | Supply a short covering note naming the transaction and what it was. | Removes the discount a lender applies to anything it cannot account for. |
| The window caught a trough | Supply the earlier comparable period, or wait for a window that contains a full cycle. | Turns an apparent decline back into a season, with evidence rather than argument. |
| The ask is larger than the evidence carries | Reduce the request to what the trading line supports and revisit later. | May turn an oversized request into a smaller amount that better matches the evidence, without pretending approval is guaranteed. |
| The product is wrong for the evidence | Change the structure rather than the number. | Different facilities can use the same evidence differently, so a structure change may be more useful than repeatedly submitting the same request. |
| Credit history is the real blocker | Check the credit file before spending more applications on statements. | Stops you fixing the wrong problem, which is the most expensive mistake available here. |
If you are not sure which of those six you are in, diagnose that before the next application rather than assuming the statements simply need to look "cleaner". Talk it through with a broker before the next application rather than after it, because another application can create another credit enquiry depending on the lender and process, and it is better to understand the blocker before spending that enquiry.
What protections apply when the loan is for business purposes?
Fewer than on a consumer loan, and the boundary is set by statute rather than by custom. The National Credit Code applies where the debtor is a natural person or strata corporation and the credit is provided wholly or predominantly for personal, domestic or household purposes, or to purchase, renovate or improve residential property for investment purposes, or to refinance credit previously provided for that purpose. Business purpose credit sits outside it.
The mechanism people actually encounter is the declaration. Under section 13 of the Code, headed "Presumptions relating to application of Code", a declaration made by the debtor before entering the contract that the credit is for a purpose that is not a Code purpose creates a presumption that the Code does not apply. That presumption is not a formality and it is not absolute. The declaration is ineffective if, when it was made, the credit provider knew or had reason to believe, or would have known or had reason to believe had it made reasonable inquiries, that the credit was in fact for a Code purpose. It is also ineffective if it is not substantially in the form the regulations require. And a person commits an offence if their conduct induces a debtor to make a declaration that is false or misleading in a material particular, carrying a criminal penalty of two years imprisonment.
National Credit Code, Schedule 1 to the National Consumer Credit Protection Act 2009, sections 5 and 13, read in full 2 September 2026: austlii.edu.au. General information about how the regime is structured, not advice on any particular contract.
What remains is a complaint pathway rather than a lending standard. The financial ombudsman has a published approach to lending to small business, which covers complaints made by an eligible small business about credit provided to them for business or investment purposes, other than investment in residential property by an individual, and which explains how it assesses whether a financial firm's credit assessment was appropriate. That is worth knowing about and it is not the same thing as a duty owed to you at the point of application.
Australian Financial Complaints Authority, its approach to lending to small business, read 2 September 2026: afca.org.au. Describes the ombudsman's approach to complaints. It is not a lender assessment standard and it creates no entitlement to credit.
A business lender is not marking your statements out of ten. The useful framework is three questions: what did customers genuinely pay the business, how does the account behave between those payments, and what obligations are already visible. Many avoidable problems come from counting non-trading credits as revenue, showing only part of the trading picture, or leaving a perfectly explainable transaction unexplained. Fix the classification and context first, then decide whether there is a genuine credit or capacity problem underneath it.
Key takeaway: separate customer receipts from non-trading credits, show the full trading picture, explain unusual items before they become follow-up questions, and do not alter the evidence unless the lender explicitly permits a specific redaction.Frequently asked questions
Business lenders use bank statements to verify genuine trading receipts, account conduct and existing financial commitments. They then look at deposit consistency, balance recovery, dishonours, tax payments, other lender repayments, unusual transfers and whether the account shown is genuinely carrying the business trade. Consistency across the window matters more than the size of any single deposit.
Lenders generally want a statement that makes the trading position easy to reconcile: genuine customer deposits that are reasonably consistent with the business, an account that recovers through its normal cash cycle, existing commitments being met and unusual credits explained. A smaller, repeatable trading pattern can be easier to assess than one large unexplained month.
The patterns most likely to create follow-up questions are unexplained large credits, failed payments to credit providers, an account that remains at its low point, undisclosed commitments and transaction narrations that make the source of money unclear. None is automatically fatal across every lender; the consequence depends on the product, the pattern and the explanation.
On a business bank statement, a red flag is better understood as a pattern that needs explanation rather than an automatic decline rule. Examples include recent failed payments, a facility that stays fully drawn, credits that cannot be tied to customers, repeated low or negative balances that do not recover, declining genuine deposits and obligations that were not disclosed. We found no Australian government or industry-association source that publishes a universal threshold for those credit-policy signals.
In a loan file, a red flag usually indicates an unanswered question rather than a decision. It moves the application from an automated path to a manual one, where somebody waits for an explanation that may never arrive. That waiting is where most statement based files lose time, and an explanation supplied up front removes the flag before it costs anything.
Bank statements show cash movements, while BAS and financial statements can use different timing and accounting treatments. Differences can arise from GST, invoice timing, merchant settlements, transfers between accounts, refunds and other non-trading credits. A mismatch is not automatically a problem, but where the lender has both documents it may ask you to reconcile the difference with the underlying records.
How far back a lender looks depends on the lender type, because the period is set by what the statements are doing in the assessment. There is no universal Australian period: no government body or industry association publishes one, and the figures in circulation come from individual lenders' own document checklists. What moves the window is trading age, seasonality, facility size, whether activity statements are supplied, and whether the account shown is the primary trading account.
Yes. Business lenders may use bank statements to verify cash flow, deposits, withdrawals, balances and existing commitments, and on some low-documentation or cashflow products the banking data can carry much of the income assessment. The information may be supplied as documents or through a bank-data feed you agree to share, depending on the lender.
Do not black out or edit transactions unless the lender has explicitly told you what may be removed. An altered or incomplete statement may be rejected or sent back for a complete copy, and Federal Court guidance warns that putting a black shape over electronic text may hide it visually without removing the underlying data. The safer default is to send the complete statement and explain the transaction separately.
Do not assume anything may be blacked out. If the lender permits removal of a personal identifier such as a tax file number, follow that lender's process and limit the change to what it has authorised. Transactions, balances and payer names are part of the evidence being assessed and should not be obscured without explicit permission.
It depends on who is doing it and under which regime, and the concrete Australian case is a criminal one. A mortgage broker was convicted on eighteen charges relating to false or misleading documents supporting loan applications, seventeen of them under section 160D of the National Consumer Credit Protection Act 2009, with the magistrate indicating that full-time imprisonment had been available absent the mitigating factors. Read the qualifier with the fact: section 160D bites a person engaging in credit activities and sits in consumer credit, so it is not the provision that applies to a business borrower supplying their own statements, whose exposure runs through general misrepresentation and document offences instead. This is a question for a solicitor rather than a broker.
Yes. The Australian Government's Consumer Data Right material states that the service is opt-in, so you can choose whether to use it. Whether a particular lender offers a document-based alternative is that lender's process, so ask before applying if you do not want to share data through open banking.
A lender or accredited data recipient sees the banking data you agreed to share for the period and purpose covered by your consent. The Consumer Data Right framework also places rules around use and retention of that data. The lender then applies its own credit assessment to the information it received.