- A trade credit check involves two different files with two different legal regimes, and most small suppliers use them as if they were one thing.
- The Fair Credit Reporting Act defines a consumer as an individual, so the statutory dispute and access machinery attaches to a person, not to a company file.
- If you pull a personal report on the owner, you need a permissible purpose, and extension of credit and review or collection of an account are among those listed.
- Once a personal report informs a refusal, an adverse action notice is owed, including the credit score if a score was used.
- In the EU, enterprises must pay within 60 days unless a longer term is expressly agreed and not grossly unfair, and statutory interest runs at the reference rate plus at least 8 points.
- Late payment also carries a minimum of 40 euro in recovery cost compensation, which is automatic rather than something you negotiate.
A shop you have never dealt with wants twelve units on thirty day terms. The order is worth more than a fortnight of your usual revenue, which means the date the money actually lands decides your month. You have a name, a company number, a website that looks fine, and an email from somebody who signs off as the buyer.
Plenty of tools will now score this for you in a few seconds. The useful question is not whether the score is accurate. It is which file that score came from, because two files exist, they are governed differently, and treating them as interchangeable is how a small supplier ends up either badly exposed or inadvertently on the wrong side of a statute.
Which file is the check actually reading?
Either the company's file or the owner's personal file, and the difference is not cosmetic. The company file describes a legal entity. The personal file describes a human being, and humans come with rights that companies do not have.
The statutory line is drawn in one short sentence. The definitions section of the Fair Credit Reporting Act states that the term consumer means an individual, and builds the definition of a consumer report around information bearing on a consumer's credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics or mode of living. Every protection downstream of that definition follows the individual.
So a report on a limited company sits outside that machinery. It is a commercial data product, sold under contract, with whatever correction process its publisher chooses to offer. The bureaus do run dispute processes and they generally work, because a data product nobody trusts is worth less. They are just not the same thing as a statutory right with a deadline attached.
This cuts both ways, which is what makes it worth a supplier's attention. When you are the one being assessed, an error on your company file has no statutory clock forcing anybody to investigate it. When you are the one assessing, an error on somebody else's company file is a commercial risk you carry rather than a protected process you can lean on.
When does checking a customer create an obligation for you?
The moment you pull a report on a person rather than on a company. That is a step many suppliers take without registering it, usually because the owner is the only credible source of reassurance about a young business.
Once you do, you need a lawful reason. The National Association of Credit Management's guidance on permissible purposes for obtaining a consumer report walks through the statutory list, which includes extension of credit and the review or collection of an account. It recommends including the authority to obtain an individual report in the body of the credit application or as a separate signed document.
Its point about personal guarantees deserves attention on its own. The guidance calls for a clear delineation showing where the credit application ends and the personal guaranty begins, with the guarantee signed separately and without a job title next to the signature. A signature given as Director commits the company. A signature intended to bind the individual has to look like one.
A one page credit application that quietly bundles a personal guarantee and a consent to pull a personal report is the document most likely to be unenforceable when you need it. Separate the three things visually and get separate signatures.
What do you owe a customer you turn down?
If the refusal rested even partly on a consumer report, you owe a notice. This is the part that surprises suppliers who think of themselves as sellers rather than as creditors, and extending terms makes you a creditor.
The FTC's guidance for businesses using consumer reports sets out the contents. The name, address and phone number of the reporting agency, including a toll free number for the nationwide agencies. A statement that the agency did not make the decision and cannot explain it. Notice of the right to a free copy of the report within 60 days. Notice of the right to dispute inaccurate or incomplete information. And the credit score, if a score was used. The notice may be oral, written or electronic.
Read as a supplier, that list is a reason to design the decision deliberately. If you decline on your own judgement about order size and sector, you are in commercial territory. If you decline because a personal score came back low, you have created a paperwork obligation. Knowing which one you are doing before you do it is cheaper than discovering it afterwards.
What does the law already give you on late payment?
More than most suppliers use, and it is automatic rather than negotiated. In the EU this comes from the late payment regime rather than from anything you write into your own terms, and the same statutes set the limits on how often you may chase an unpaid invoice.
The European Commission's page on late payment sets the shape. Public authorities have to pay within 30 days, or 60 in exceptional circumstances. Enterprises have to pay within 60 days, and may agree a longer term only if it is expressly agreed and not grossly unfair to the creditor. Statutory interest for late payment runs at at least 8 percentage points above the European Central Bank's reference rate. And creditors are automatically entitled to a minimum of 40 euro as compensation for recovery costs.
| Question | Company file | Owner personal file | Why it matters to you |
|---|---|---|---|
| Who it describes | A legal entity | An individual, per the statutory definition | Only the second carries consumer protections |
| Dispute route | The publisher's own process | Statutory rights to dispute | Errors on a company file can persist |
| Before you pull it | A commercial subscription | A permissible purpose and written authority | The second creates duties for you |
| If you decline | Commercial decision, no notice | Adverse action notice with score if used | Design which basis you decide on |
| Signature that binds | Signed with a title, binds the company | Signed separately, binds the person | A titled signature is not a guarantee |
Where does AI genuinely help here?
In reading documents and spotting inconsistency, not in predicting whether a stranger will pay. That distinction saves money in both directions.
A model is good at the work you would otherwise skip. Reading a set of filed accounts and telling you plainly whether creditor days have stretched, whether the auditor changed, whether the trading address matches the registered one. Comparing a purchase order against the credit application for mismatched names or addresses. Summarising a company's filing history so you can see whether accounts arrive on time, which is one of the few cheap honest signals a small supplier can read.
It is much weaker at the thing people want it for. A default prediction on a company with three years of accounts and no payment history with you is a base rate dressed up as a judgement about this buyer. That is the same limit we described for demand forecasting from sparse data in reordering stock when you have almost no history, and the honest response is the same: use the model on the documents and use a policy on the risk.
What policy actually protects a small supplier?
A staged one, written down before the first order rather than improvised during it. The single most effective control is not a better score, it is a smaller first order.
Start every new business customer on payment before dispatch, whatever the check says. On the second or third order, offer a modest limit, sized so that losing it entirely would be annoying rather than serious. Raise it on payment behaviour with you, which is better evidence than any file, because it is evidence about the relationship that actually exists.
Write three things into your terms alongside that. A stated credit limit, so exceeding it is a decision rather than a drift. An interest clause that refers to the statutory entitlement instead of inventing a rate. And a trigger that suspends supply at a defined point, because the most expensive trade credit losses are the ones where a supplier kept shipping to a customer who had already stopped paying.
What if the buyer is a sole trader?
Then the two files collapse into one, and the consumer regime is the one that applies. This is the case most likely to catch a supplier who has read the company rules and assumed they cover everybody.
The statutory definition does the work again: a consumer means an individual. A sole trader is an individual, so information about that person's credit standing gathered for a credit decision looks like a consumer report whether or not the trade is conducted under a business name. The practical upshot is that the lighter, purely commercial approach you might take with a limited company is not available.
Treat the sole trader case as the strict one. Get written authority to obtain a report before you obtain it, in language that says what you will pull and why. If you refuse, issue the notice. It costs you one template and it removes an entire category of exposure, and the same logic runs in the opposite direction when you are the applicant, which we covered in what a lender has to tell a small business after a decline.
How do you read a set of accounts in ten minutes?
By looking at four things and ignoring the rest, because you are not valuing the business, you are deciding whether to lend it the price of twelve units.
Creditor days first, which is how long the company takes to pay its own suppliers. If that number has stretched year on year, you are being offered a place in a queue that is already lengthening. This is the single most relevant figure on the page for your purposes, and it is one a generic credit score compresses away.
Then filing punctuality. Accounts that arrive late, repeatedly, describe an administration under strain. Then any change of auditor or accountant without an obvious reason. Then the relationship between the registered address, the trading address and the address on the purchase order, because three different answers is a question rather than a finding.
This is precisely the kind of reading a model does well and quickly. Paste the filing history and the accounts, ask specifically for creditor days across the available years, the filing dates against the deadlines, and any change in auditor. What you get back is a structured extract you can check, rather than a verdict you have to trust. The failure mode to avoid is asking the model whether to extend credit, because it will answer, and the answer will be a fluent average of everything it has read about companies of that shape.
Does any of this work across a border?
The checks do, imperfectly. The remedies get harder, and the gap between the two is where suppliers lose money on export orders.
Inside the EU the late payment rules give you a common floor, and the Commission's own framing is that the regime applies to commercial transactions across member states, with the 60 day limit for enterprises, statutory interest and the recovery cost compensation attached. That is genuinely useful: your entitlement to interest does not depend on having drafted a clever clause.
Outside a shared regime you are relying on your contract and on your willingness to enforce it in somebody else's jurisdiction, which for an order worth a few thousand is usually a theoretical remedy. So the policy for a first cross border order should be simpler than for a domestic one, not more sophisticated. Payment before dispatch, or a payment method that does not reverse easily, until a payment history exists. The customs and documentation side of that is a separate exercise, and we set it out in what AI actually helps with on cross border paperwork.
Which signals are worth more than a score?
Behavioural ones, and most of them are free. A score compresses a company into a number for a lender's purposes. You have access to things a bureau does not.
How the buyer behaves before there is any money at stake tells you a lot. Whether they answer questions about delivery addresses precisely or vaguely. Whether the email domain matches the company. Whether the person negotiating has authority or keeps referring to somebody unnamed. Whether they push for terms on the first order, which is common and fine, or push for terms on the first order while also wanting unusual volume and urgency, which is the combination worth slowing down for.
Filing punctuality is the other underrated one. A company that files accounts late, repeatedly, is telling you something about its administration that no probability of default will phrase as clearly. It is public, it is free, and it is specific to this buyer rather than to its sector.
The part nobody wants to hear
Trade credit is a loan you make without being a lender, at zero interest, to somebody whose books you cannot see. Framed that way, the question changes from how good the check is to how much you are prepared to lend, which is a decision about your own cash rather than about their creditworthiness.
A supplier who decides that number first, then uses checks and models to allocate it, is in a strong position however imperfect the data is. A supplier who checks first and lets the score decide the exposure has outsourced a cash flow decision to a file they cannot correct and a model they cannot inspect. The tooling has improved a great deal. The order of operations is what protects you.
If you are building the invoicing and terms side of this from scratch, the record you keep is what makes any of it enforceable later, and it is worth owning outright rather than renting. That is part of the case for running the commercial side on code and data you control, and the bookkeeping discipline that sits underneath it is in keeping the books of a one person business without losing the audit trail.