CredoLab

Device metadata carries no meaning until the models read it, and that reading is the entire proposition. Models convert application ownership patterns, device characteristics, contact and message counts and interaction habits into a creditworthiness signal. A 2025 addition estimates income from thousands of anonymized behavioral signals shown to correlate with earnings. Institutions can retrain those models on their own populations. Deriving a credit assessment from the shape of someone's phone use is achievable no other way.

The company positions itself as an addition rather than a replacement and its chief product officer states the limit clearly, that banks still carry out their ordinary income and identity verification while this provides a complementary assessment conducted at a behavioural level rather than a compliance or transactional one. The score enters an existing decision rather than becoming it. Nothing describes what weight lenders give the signal, whether a low behavioural score alone can decline an applicant, or what review applies when it contradicts conventional evidence.

The training base is large and stated: over 21 million loan applicants across more than 70 lending partners and roughly a trillion data points. That matters because behavioral scoring is only as good as the outcome data behind it. Per client retraining on local populations addresses model transfer, the failure that undermines imported scorecards. A partner reports up to 40 percent uplift when the signal is combined with fraud detection.

The company is also candid that earlier alternative data attempts failed on predictiveness. What is missing is any accuracy, lift or validation figure for the models themselves, and no explanation is offered of how a behavioral score can be reasoned about by the lender relying on it.

The volume figures are large. Models are built on more than 21 million loan applicants across over 70 lending partners, more than $1 billion of lending is supported, and roughly a trillion data points have been analyzed. Behavioral patterns are learned across 50 countries, having started from 21. Two customers are named publicly: a Philippine bank's digital lending business from 2019 and a regional financial comparison platform.

A partnership with a listed fraud and identity company reports up to 40 percent uplift in combined credit and fraud protection. The company has operated since 2016 and notes plainly that its banking clients have generally declined to be named.

One explicit control exists and it is a good one: individual institutions can train models on their own datasets and customise them to the characteristics of their local populations, so a lender's scoring is not simply inherited from other people's borrowers. Against that the company also markets behavioural patterns learned across 50 countries as an immediate advantage applied to new markets, which is a shared layer by definition.

Both are stated and the boundary between them is not, so nothing describes what a client contributes, what it draws from the pooled patterns, or what happens to a scored applicant's signals afterwards.

The privacy position is stated in architectural terms, as the data source demands. Collection occurs only after explicit opt-in, expressed by the company as no consent, no collection, full stop, under a stated data processing agreement. What leaves the device is metadata rather than content.

The company states no personally identifying information ever leaves the handset, that it does not know an applicant's name, email, address or telephone number, and that its income model never accesses identifying data. Messages are not read and contacts are counted rather than captured. For a product that asks permission to inspect a person's phone, defining the boundary at the device is the strongest available answer.

There is no public attestation, certification, trust center or enumerated framework. One control is described: a one time password used as a unique identifier to confirm the applicant is the handset's owner. That addresses a specific fraud vector rather than constituting an assurance program. Banks in more than 20 markets have completed supplier assessment on a product that reads device data, so the underlying review has been demanding. None of it is published.

A data processing agreement is cited and no regulator, statute or supervisory framework is named anywhere, which is a notable gap for a product operating across more than 20 jurisdictions with materially different rules on device permissions, consent validity and alternative data in credit decisions.

The regulatory environment for this specific technique has moved, with a major platform operator restricting the permissions personal loan applications may request in several of the markets where such scoring is most used, and none of that context appears in published material.

The case cuts sharply both ways. The inclusion argument is real: around two billion adults lack formal financial access, conventional scoring cannot assess them at all, and income prediction addresses precisely the missing proof of earnings that excludes people with no payslip. Local model calibration reduces the risk of importing one market's assumptions into another. The unaddressed side is severe.

Consent is borrowed rather than independent, as the company itself describes: its application is downloaded only during a specific credit application, and if the user trusts the bank they trust the vendor. That consent is sought from first time borrowers under time pressure in markets where literacy varies.

More fundamentally, the signals include device model and age and application ownership, which are proxies for wealth: the price of an applicant's phone becomes an input to their credit decision. No fairness testing, no analysis by device tier and no adverse outcome data is published.

CredoLab publishes no guarantee, indemnity or correction process. The applicant's only real control is at the point of consent, where they may decline, though declining during a credit application carries an obvious cost. Beyond that they have nothing. Someone scored down because of an older handset, an unusual application mix or sparse contacts will not be told that device metadata influenced the outcome. They cannot see which signals counted and have no route to contest or correct a behavioral inference about themselves.

The input side is described in detail, since the source is the applicant's own device. The company enumerates what it reads, covering application ownership patterns, device model and age, message and contact counts, file sizes and interaction habits, and states what it does not read. That specificity lets a buyer and in principle a regulator assess the method. There is no external data dependency to disclose, which is itself the point of the approach. No model provider, hosting arrangement or subprocessor list appears.

Delivery is deliberately flexible. The product comes as a white labeled application the lender brands, as an embedded development kit inside an existing journey, and through a partner's orchestration layer that performs data callouts to the scoring service. The company describes it as modular and fitting into existing workflow. That variety matters because consent is only credible when the collection point sits inside the lender's own application flow. No named core banking, origination or bureau system appears.

No general hosting, region selection or residency policy is published. One instance is documented through a partner arrangement, where the scoring service is described as hosted locally in the market being served, which suggests in country deployment is available. That is a single example rather than a stated policy. For a vendor operating across more than 20 jurisdictions collecting device derived data, a published residency position would matter considerably.

Pricing, packaging and basis of charge are not published. The delivery model spans a white labeled application, an embedded kit and interface access through a partner's orchestration layer, which would ordinarily price differently. Nothing indicates whether charge falls per scored applicant, per approved loan or by subscription.

Buyer coverage is wide and precisely enumerated, spanning banks, consumer finance companies, auto lenders, online and mobile lenders, insurance companies, retailers and, through a partner integration, mobile wallets. For a company of this size, reach is global: lending is supported across more than 20 countries and behavioral patterns are calibrated across 50, concentrated in emerging and digital first markets where the underlying problem is most acute. The signal is applied to underwriting, fraud and income estimation.