How lenders use it
A lender puts a person at each point where a decision affects an applicant. The software reads, checks and drafts. The analyst reads the file, looks at the sources and records the decision and the reasons. The audit record shows who decided and what they saw.
Data protection law explains why this matters when the applicant is a person. Article 22 of the GDPR gives people a right. They need not accept a decision based only on automated processing when it has legal or similarly significant effects. In UK law, the Data (Use and Access) Act 2025 replaced Article 22 with Articles 22A to 22D from 5 February 2026. They treat a decision as solely automated when there is no meaningful human involvement.
In December 2023 the Court of Justice of the EU decided the SCHUFA case (C-634/21). It held that a credit score can itself count as an automated decision when the lender relies on it heavily. So a lender cannot avoid the rule by saying a person signs off if the person follows the score.
Lenders therefore design the review so that it is meaningful. The reviewer needs the authority and the time to disagree. They need to see the facts behind the output, not only the output. The lender should record cases where the reviewer overrides the system. These points are general information and not legal advice.
Common confusions
Human in the loop is not the same as human on the loop. In the first, a person approves each step. In the second, a person watches and steps in when needed.
A person in the process is not the same as a person in the decision. If staff only approve what the system says and never change it, the review may not count as meaningful.
The rules apply most clearly to decisions about individuals, such as sole traders and guarantors. Many business loans go to companies, but the guarantor is still a person. Lenders check this for each product.
Questions lenders ask
Is AI allowed in lending decisions?
Yes, with conditions. Using AI to prepare information is common. Data protection law restricts fully automated decisions about people. The EU AI Act also covers credit scoring of natural persons. A lender should keep a person responsible for the decision.
What counts as meaningful human review?
A person who has the authority, skill and time to question the output, sees the evidence behind it and can change the result. A review that always agrees with the system is a warning sign.
What did the SCHUFA ruling decide?
In case C-634/21, the Court of Justice of the EU looked at credit scores. It held that producing a score can be an automated decision under Article 22 GDPR when a lender relies strongly on it to decide on a loan. The ruling was given on 7 December 2023.
What should a lender record to show human review?
Who reviewed the file, what they saw, what they changed and why they decided as they did. The record should also show the sources of the facts. This makes the review checkable later.
Related terms
- AI intake agent: Software that completes the file before credit review
- Financial AI agent: An AI that does a finance task with tools
- Credit memo: The lender's written case for a credit decision
- Personal guarantee: An owner's promise to repay if the company cannot
Related pages
- Business loan application intake for lenders
- Business loan origination software compared
- Klarefi for independent business lenders
- All glossary terms
This page is general information for lenders. It is not legal, tax or credit advice.