Home  /  NBFC & Fintech / Credit Information Company (CIC) License
CERSAI Registration Services
Tier 4 Service · Critical Priority

Considering a Credit Information Company License? Understand Why Only Four Exist in Twenty Years

CICRA’s capital, ownership, and governance bar has kept India’s credit bureau market to four licensed players since the Act came into force. CS Chetna Shoor gives you a clear-eyed feasibility assessment before you commit to pursuing what is genuinely one of the hardest RBI-linked licenses to obtain.

Overview

Why a CIC License Is a Fundamentally Different Undertaking From an NBFC License

A Credit Information Company (CIC) is governed by the Credit Information Companies (Regulation) Act, 2005 (CICRA) — not the RBI Act that governs NBFCs — and was recently brought under a consolidated framework through the RBI (Credit Information Companies) Directions, 2025, effective November 28, 2025. CICs collect, maintain, and disseminate credit information — the credit reports and scores that banks and NBFCs use to assess borrower creditworthiness. Only four entities hold this license in India today: TransUnion CIBIL, Equifax, Experian, and CRIF High Mark.

CICRA sets a minimum capital structure under Section 8 well above standard NBFC thresholds, alongside strict ownership diversification rules — a single shareholder is generally capped at 10% equity, with foreign investment limits ranging from 49% to 74% depending on how diversified the ownership structure is. This page is for institutional promoters — often an established international credit bureau, or a consortium of major financial institutions — genuinely evaluating whether to pursue a CIC license, rather than a first-time fintech founder. Chetna provides an honest feasibility assessment against CICRA’s requirements before any application work begins, since the realistic route for most businesses is becoming a “Specified User” of an existing CIC rather than building a new one.

Talk to a CIC Licensing Specialist →
Service Covers

What This Service Covers

1

Feasibility assessment against CICRA's minimum capital structure and ownership diversification requirements.

2

Ownership and shareholding structuring to meet CICRA's diversification rules and applicable FDI limits.

3

Application preparation under the Credit Information Companies Regulations, 2006, including the in-principle approval process.

4

Governance framework design — board composition, data protection, and grievance redressal aligned to RBI's 2025 Directions.

5

Alternative-route advisory — Specified User registration with an existing CIC, if a full CIC license isn't the realistic fit.

6

Ongoing regulatory liaison through RBI's in-principle-to-final-registration process.

Eligibility & key criteria

4 licensed CICs

The entire Indian market today: TransUnion CIBIL, Equifax, Experian, and CRIF High Mark

Sec. 8, CICRA

A minimum capital structure requirement, substantially higher than standard NBFC thresholds

≤10% single-entity holding

General ownership diversification requirement for FII/FPI shareholders

49% / 74% FDI cap

Lower cap for concentrated ownership, higher cap for well-diversified ownership structures

3 months

Maximum period RBI typically grants to fulfill in-principle approval conditions

CICRA, 2005 + CIC Directions, 2025

Legal basis, consolidated under RBI's November 2025 framework

Why It's Complex

Three Reasons a CIC License Is Genuinely Rare

RBI rejects over 40% of NBFC applications on the first attempt. Here’s what actually causes it.

This is one of the hardest licenses in Indian financial regulation to obtain, by design

CICRA's capital and ownership bar exists specifically to keep credit bureau ownership concentrated among serious, well-capitalized, diversified institutions. This isn't a gap in the market waiting to be filled by a well-drafted application — it's a deliberately narrow gate that has produced exactly four licensees in roughly two decades.

Ownership diversification rules are easy to underestimate

The FDI cap and single-entity shareholding limits mean a promoter group's cap table typically needs restructuring well before filing, not adjusted reactively after RBI raises a concern. Getting this wrong at the planning stage can add years to a timeline that's already long.

"Specified User" and "Credit Information Company" get confused

Becoming a Specified User — an entity permitted to access credit information from an existing CIC — is a comparatively simple registration. Founders sometimes approach this page assuming they need a full CIC license when what actually fits their business is Specified User status with one of the four existing CICs.

CIC LICENSE VS. SPECIFIED USER

CIC License vs. Specified User Status

It’s worth being clear-eyed about which route actually matches your business before committing years to either.

Full CIC license

Fits genuinely large-scale promoters — often an international credit bureau or a consortium of major financial institutions — planning to build and operate an independent credit information business.

Specified User registration

Fits most fintechs and financial institutions that need to access existing CICs' credit information as a data recipient, without operating a credit bureau themselves — a materially simpler registration process.

NBFC-AA or other data-access route

Worth checking if your actual need is broader financial data access rather than credit information specifically. See our Account Aggregator License service.

Documents Required

What you'll need to hand us

Company Documents

Governance Documents

Our Process

From Feasibility Assessment to Final Registration

1

Feasibility assessment

We assess your position against CICRA's capital structure and ownership diversification requirements, honestly, before recommending a path forward.

2

Ownership structuring

Shareholding and FDI compliance planning, if the current cap table needs restructuring to meet CICRA's rules.

3

Application preparation

Application prepared under the Credit Information Companies Regulations, 2006, with the business plan RBI expects.

4

RBI review

RBI review and in-principle approval — timelines vary significantly given the scale of scrutiny applied to this license.

5

Fulfilling conditions

Completing the conditions attached to in-principle approval within the period RBI grants.

6

Governance & compliance setup

Governance framework and ongoing compliance aligned to RBI's 2025 Directions established from day one.

Get an honest feasibility assessment before you commit →
AFTER REGISTRATION

What's Due Once You're a Registered CIC

Registration comes with ongoing governance obligations under RBI’s consolidated 2025 framework.

Annual provision of a Free Full Credit Report to individuals, including credit scoring.

Half-yearly review of Search & Match matching algorithms for accuracy.

Ongoing grievance redressal and data protection compliance.

Continued ownership diversification compliance as shareholding evolves over time.

Eligibility & key criteria

CS Chetna Shoor’s team replies within 4 hours on WhatsApp.






    FAQs

    Frequently Asked Question

    What is a Credit Information Company and how is it different from an NBFC?

    A Credit Information Company (CIC) collects, maintains, and disseminates credit information — the credit reports and scores banks and NBFCs use to assess creditworthiness — and is governed by the Credit Information Companies (Regulation) Act, 2005, a separate statute from the RBI Act that governs NBFCs. A CIC does not lend or take deposits itself; its business is entirely about maintaining and sharing credit data.

    As of today, four entities hold a CIC license in India: TransUnion CIBIL, Equifax Credit Information Services, Experian Credit Information Company of India, and CRIF High Mark Credit Information Services. This number has remained stable for years, reflecting how restrictive CICRA’s capital and ownership requirements are in practice.

    A CIC operates the credit bureau itself, collecting and disseminating credit information under CICRA’s full regulatory framework. A Specified User is an entity permitted to access credit information from an existing CIC as a data recipient — a comparatively simple registration that fits most fintechs and financial institutions far better than pursuing a full CIC license.

    CICRA and RBI’s related directions cap a single FII/FPI shareholder generally at under 10% equity, and set foreign direct investment limits of 49% for concentrated ownership structures or up to 74% for well-diversified ones. These rules exist to keep credit bureau ownership broad-based rather than concentrated in a single controlling shareholder.

    It’s realistic only for genuinely large-scale promoters — typically an established international credit bureau or a consortium of major financial institutions — capable of meeting CICRA’s capital structure and ownership diversification requirements. For most businesses wanting access to credit information rather than operating a credit bureau, Specified User registration with an existing CIC is the far more practical route.

    Who Handles This

    CS Chetna Shoor — you'll be working directly with her

    CS Chetna Shoor

    CS Chetna Shoor

    Qualified Company Secretary · ICSI Member · Founder, Expertvuw Management Pvt Ltd

    Chetna has guided NBFC promoters through RBI’s COR process end to end, with particular focus on structuring the Net Owned Fund and business plan so the application survives first-round RBI scrutiny rather than coming back with a query.

    — Chetna