Mifundo adds bank data to cross-border credit reports before a November deadline

Mifundo, a Tallinn credit data company, has added bank account data to the cross-border credit reports it supplies to European lenders, through a partnership with the London open banking provider Yapily. The reports already draw on credit bureaus and registers in more than 20 countries, and the company says its platform covers more than 70 per cent of the European population.

The integration is the least important part of the announcement. What gives it weight is a date. The revised Consumer Credit Directive, known as CCD2, applies across the European Union from 20 November 2026, and Article 6 of it names nationality and place of residence as grounds on which a consumer legally resident in the union must not be discriminated against. A rejection that once read as caution now has to survive a test of justification.

The deadline is 20 November

The directive does not ban credit risk assessment. It constrains what a lender may treat as a reason, and the wording matters as much as the principle.

• Article 6 identifies nationality and place of residence as grounds on which consumers legally resident in the EU must not be discriminated against, which the company describes as an addition to the protections already set out in Article 21 of the Charter of Fundamental Rights.
• Recital 31 states that the rule does not oblige a bank to enter new markets or to serve areas where it does not already do business, and does not prevent different conditions where those are objectively justified.
• Articles 18(3) and 19 keep the requirement that a creditor can reach credit data held in other member states when assessing a borrower's creditworthiness.

Read together, those provisions leave a narrow but real obligation. Inside the markets where a bank already operates, an applicant cannot be turned away solely because of nationality or residence. Risk remains a legitimate reason to decline. The absence of a domestic credit file is not, by itself, a fact about risk, and it is the thing lenders have treated as one.

What a lender in one country can see

The company's own example is a customer who spends ten years building a repayment record in one member state, moves to another, and arrives at the new lender looking like someone with almost no file at all. The history exists. It sits with a bureau the new lender has no direct route into.

The obstacle is plumbing. Across 27 member states, credit information sits with different providers, in different scoring models, languages and legal bases for access. Yapily's contribution is account data rather than credit history: transactions that a customer consents to share, categorised and enriched, delivered alongside the bureau file rather than in place of it.

What Mifundo sells, and who supervises it

Mifundo sells a report rather than a decision. The flow, as the company describes it, has three steps.

• The lender enters the applicant's email address, the country the data should come from and the package it wants.
• The applicant receives a link, gives consent, and the data is collected from the relevant credit bureaus, bank accounts and registers. The applicant cannot alter what comes back.
• The lender receives a standardised report with income, liabilities, credit history and a credit score, and can download the raw bureau data to run its own model.

Mifundo OÜ is supervised by Finantsinspektsioon, the Estonian financial supervision and resolution authority, and says it holds ISO 27001 certification. It has been funded through the European Innovation Council's Accelerator, with a grant of just under 2.5 million euros and 6.3 million euros of equity, on top of earlier Enterprise Estonia grants.

The market numbers are the company's own

The company's home page carries the figures it sells with. None comes with a published method, and each should be read as what a vendor says about its own market.

• 45 million people in Europe with financial histories in more than one country, which the company puts at about 10 per cent of the EU population.
• A cross-border consumer lending market worth 719 billion euros.
• A 15 per cent lift in business volume from serving foreign applicants.
• A reduction in credit risk on foreign customers of up to seven times.
• A claim that foreign customers make up 10 to 25 per cent of a partner bank's portfolio, described as confirmed by partner banks but attributed to none of them.

The direction is consistent with the problem the directive is meant to address. A bank with no route into a foreign credit bureau has had less to work with than it would like, and has often resolved the uncertainty by declining. The precision is not evidence, and the coverage claim rests on contracts Mifundo has not published.

What the directive does not do

The directive settles less than the announcement implies.

• It does not require a bank to lend across borders, or to open in a market it has stayed out of.
• It does not create the data. Coverage is only as good as the agreements behind it, and a claim of 70 per cent of the European population describes an average rather than a country by country position.
• It does not remove risk assessment. A bank can still decline an applicant whose record is genuinely poor, and can still charge more where the risk is objectively different.
• It covers consumer credit, which is the market Mifundo's figures describe.

One limit is ours. Mifundo is not in our directory, and this article rests on the company's own pages and on ArcticStartup's report rather than on a directory profile.

What to watch

• Whether any supervisor publishes guidance on how Article 6 will be assessed before 20 November, rather than after the first complaint.
• Whether Mifundo names the bureaus behind its coverage claim. A list would make the 70 per cent figure checkable, and the home page currently shows partner logos rather than contracts.
• Whether the first complaint or enforcement action under Article 6 concerns place of residence or something narrower.
• Whether a lender publishes how many applicants it declines for having no domestic credit file. That number would size the gap the directive is meant to close.
• Whether the smaller markets are where the model is first tested. Estonian, Latvian and Lithuanian bureaus hold less history than the large western ones, and a pan-European score has to work there before the coverage claim means much.

The directive changes what a bank may say, not what it can see. Connecting national credit files is slower work than legislating about them, and it will be done one bureau contract at a time by companies with a commercial interest in the result. What Article 6 amounts to will be visible in lending decisions rather than in directives, and probably a year after 20 November rather than on it.