Codat vs Ocrolus (2026)
Two routes to the same underwriting question, what is really flowing through this business, answered from opposite directions. Codat is the pipe: a permissioned live connection into more than 20 named accounting, banking and commerce platforms, bidirectional, documented in full, and secured by a current ISO 27001 certificate and a named SOC 2 Type II. Its privacy rests on architecture, since the business itself consents and can withdraw. Its conspicuous gap is outcomes: no lender results published after nine years, a choice rather than a stage of life. Ocrolus is the reader: documents the borrower supplies, parsed at 750,000 applications a month, with customer results published in detail and two external validations. GSE approved income analysis shifts repurchase risk, and capture accuracy is insured through the Lloyd's market, meaning a third party priced the error rate. Architecturally, one requires the borrower to connect, the other only to upload, and many lending stacks end up needing both.
- Consent architecture is your privacy answer. The business itself authorizes the connection and can withdraw it, credentials are never stored, and the data subject is a party to the arrangement rather than an unwitting one.
- Published security assurance is your gate. A current ISO 27001 certificate of registration and a named SOC 2 Type II can be checked without a sales conversation.
- Live connection beats point in time documents. Bidirectional feeds across more than 20 named platforms support continuous portfolio monitoring and serve the credit and treasury functions of the same bank from one integration.
- Outcome evidence decides it. Roughly 750,000 applications a month with named institutions and executives quantifying results, statement review down more than 90 percent, 8,500 staff hours saved, against a rival publishing no outcome figures after nine years of operating.
- External validation of accuracy is your bar. GSE approved income analysis eligible for representations and warranties relief, and data capture accuracy insured through the Lloyd's market, mean two independent parties priced and staked something on the error rate.
- Documents are what your applicants actually have. Analysis of bank statements, pay stubs and tax forms across 1,000 document types serves mortgage, consumer and SMB borrowers who cannot or will not connect live accounts.
This comparison is published by AI FinTech Index, an independent research platform that publishes independent ratings of AI vendors for financial services. Codat and Ocrolus are each graded against the same capability taxonomy, from each vendor's own public materials and the regulatory record, under the AI FinTech Index verification standard. No vendor pays for placement, and no vendor has reviewed this page. How this evidence is graded
Plain facts
| Codat | Ocrolus | |
|---|---|---|
| Primary category | Credit Decisioning & Underwriting | Lending & Banking Operations |
| Founded | 2017 | Not published |
| Headquarters | London, United Kingdom | New York, New York, United States |
| Website | codat.io | www.ocrolus.com |
Side by Side
Select any grade to read the note behind it.
| Axis | C Codat |
O Ocrolus |
|---|---|---|
| AI Centrality | ||
| Autonomy and Oversight Model | ||
| Model Risk Management and Transparency | ||
| Operational and Outcome Evidence | ||
| AI Safety and Data Stewardship | ||
| GLBA and Data Privacy Posture | ||
| Security Certifications and Trust Center | ||
| Regulatory Status and Licensure | ||
| AI Governance and Bias Disclosure | ||
| AI Liability and Recourse | ||
| Model Supply Chain Disclosure | ||
| Core Systems and Integration Depth | ||
| Deployment Model and Data Residency | ||
| Commercial Transparency | ||
| Institution and Segment Coverage |
Product updates
The latest logged changes from each vendor, newest first, each linked to its source.
Ocrolus
-
Pricing / packaging
Every Ocrolus mortgage customer now gets Ocrolus Detect, its document fraud product, at no added cost.
Source -
Product / capability
Ocrolus's October 2026 release notes add a Conditions API for lenders not on Encompass, with endpoints to list, create, update and clear conditions on a Book and two webhook events for generated and updated conditions, plus a Doc Expiration tab that checks loan file documents against Fannie Mae and Freddie Mac age limits measured to the closing date.
Source
The short version of each
Codat
Codat supplies the permissioned live pipe into small business finance: bidirectional connections to more than 20 named accounting, banking and commerce platforms, documented in full. It is secured by a current ISO 27001 certificate and a named SOC 2 Type II, with a privacy architecture where the business itself consents and can withdraw. According to the AI FinTech Index, the conspicuous gap is outcomes, with no lender results published after nine years. Its models train across more than 100,000 businesses under a cross customer arrangement disclosed in passing and never governed, and unsupervised categorization carries no correction route.
Source: AI FinTech Index, 2026
Ocrolus
Ocrolus reads borrower supplied documents at 750,000 applications a month and publishes its customer results in detail. According to the AI FinTech Index, it carries two external validations: government sponsored enterprise approved income analysis that shifts repurchase risk, and capture accuracy insured through the Lloyd's market, meaning a third party priced the error rate. Its published customer count moved from 500 plus to 400 plus between late 2024 and early 2026, a decrease worth understanding in diligence. No accuracy by business type or document population is published.
Source: AI FinTech Index, 2026
Common questions
Is Codat better than Ocrolus for small business underwriting?
Two routes to the same underwriting question, what is really flowing through this business. Codat is the pipe, a permissioned live connection into more than 20 named accounting, banking and commerce platforms, bidirectional and documented in full. Ocrolus is the reader, documents the borrower supplies, parsed at 750,000 applications a month. One requires the borrower to connect, the other only to upload, and many lending stacks end up needing both. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 12, 2026. No vendor pays for placement.
What external evidence backs Ocrolus's accuracy?
Two external validations: government sponsored enterprise approved income analysis shifting repurchase risk off the lender, and capture accuracy insured through the Lloyd's market, meaning a third party priced the error rate and stands behind it financially. Its customer results are published in detail alongside them. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 12, 2026. No vendor pays for placement.
What is Codat's privacy and assurance position?
The business itself consents to the connection and can withdraw it, which puts the data subject in control by architecture. Security rests on a current ISO 27001 certificate and a named SOC 2 Type II. The conspicuous gap is outcomes, no lender results published after nine years, which reads as a choice rather than a stage of life. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 12, 2026. No vendor pays for placement.
What is ungoverned at Codat?
Codat's models train across more than 100,000 businesses with the cross customer arrangement disclosed in passing and never governed, and its categorization runs unsupervised with no correction route, so a miscategorized revenue stream has no path back. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 12, 2026. No vendor pays for placement.
What diligence items remain?
Ocrolus's published customer count moved from 500 plus to 400 plus between late 2024 and early 2026, a decrease worth understanding directly. Neither vendor publishes accuracy by business type or document population, which is where either product's errors would concentrate. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 12, 2026. No vendor pays for placement.
Where does each publish the most, and the least?
Codat publishes most on its integrations, its security certifications and its consent based privacy, and publishes no lender results or governance of its shared training. Ocrolus publishes most on customer results and external validation of its accuracy. Neither publishes accuracy by business type or document population. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 12, 2026. No vendor pays for placement.
Related comparisons
Other published head to head assessments involving these vendors or their closest peers. The full set for this category is on the Credit Decisioning & Underwriting page.
Codat's models train across 100,000+ businesses with the cross customer arrangement disclosed in passing and never governed, and its categorization runs unsupervised with no correction route. Ocrolus's published customer count moved from 500+ to 400+ between late 2024 and early 2026, a decrease worth understanding in diligence, and neither vendor publishes accuracy by business type or document population.