This is a static sample report — no API calls, no setup required. Its findings cite real clauses from the same regulatory corpus the live assessment flow uses. A live example of AI-powered RegTech: retrieval-augmented findings, citation verification, and an explainable evidence trail on every line. Try the real flow →

Retrieval-Augmented Generation
Citation Verification
Explainable AI
Executive Reporting
Replay This AssessmentHow this report actually got produced, step by step
1Structured Inputs
Industry
FinTech
Product Categories
Digital Lending
Operating Geographies
India
Target Customers
Retail Consumers
Regulated Entities
Partner NBFC
Capabilities
Video KYC
EMI
Loan Disbursement
2Product Description

“QuickCredit offers instant personal loans up to ₹2L via a mobile app. Customers complete video KYC, receive a loan offer, and repay in EMIs. The app displays the Key Fact Statement, including APR and total cost, before the borrower confirms the loan. Disbursals are routed through a partner NBFC's pooled settlement account before reaching the borrower, and the app requests full contact list and SMS access at signup to help build a credit score.”

3Mirror Understanding
What You Told UsQuickCredit — Digital Lending, serving retail consumers via partner nbfc.
What RegImpact Inferred
✓ Video KYC onboarding✓ Key Fact Statement shown before loan confirmation✓ Disbursal via partner NBFC's pooled settlement account✓ Contact list and SMS access requested at signup— Cooling-off / look-up period
4Adaptive Discovery
Does the partner NBFC's pooled settlement account ever hold borrower funds before they reach the borrower's own bank account?Yes — funds settle into the NBFC's pooled account first, then are disbursed to the borrower.
What is the primary purpose of requesting contact list and SMS access at signup?To build an alternate credit score using SMS-based transaction signals and contact network analysis.
Are borrowers segmented into risk tiers after KYC verification?Not currently — all borrowers go through the same underwriting flow regardless of profile.
Is the Key Fact Statement shown before or after the borrower confirms the loan?Before — the borrower sees the KFS with APR and total cost and must actively confirm to proceed.
What loan tenure range does QuickCredit typically offer?Most loans range from 30 to 180 days, with occasional shorter bridge loans under 7 days.
5Assessment Engine
Regulations Considered2
Clauses in Scope19
Finding Breakdown (this sample)
Compliant1
Non-Compliant2
Potential Gap1
Info Required1

This static demo curates one finding per classification to show the full system — a live assessment classifies every clause in scope, not just a sample of them.

6Executive Summary

Compliance score, risk level, and launch recommendation, computed deterministically from every finding above — scroll down to see the full report.

Regulatory Impact Assessment

QuickCredit

QuickCredit offers instant personal loans up to ₹2L via a mobile app. Customers complete video KYC, receive a loan offer, and repay in EMIs. The app displays the Key Fact Statement, including APR and total cost, before the borrower confirms the loan. Disbursals are routed through a partner NBFC's pooled settlement account before reaching the borrower, and the app requests full contact list and SMS access at signup to help build a credit score.

Assessment demo-sample-assessment · 6/18/2026

Executive Summary
Overall Risk🔴 High
Launch Recommendation❌ Not ready for production
Compliance Score
20%of tested clauses confirmed compliant
1 compliant · 2 non-compliant · 1 potential gap · 1 unconfirmed
Estimated Remediation Effort1–2 weeksRough sizing from blocking-issue count, not a detailed estimate
Blocking Issues (2)
  • Disbursal routed through the partner NBFC's pooled settlement account
  • Broad contact and SMS access requested at onboarding
What Discovery Changed
5 questions asked5 answered1 assumption remain unconfirmed
This is why the wizard asks targeted follow-up questions instead of a generic intake form — the answers directly narrow what the assessment has to guess at.
Regulatory Coverage

5 of 5 clauses considered produced a classified verdict below.

Every clause in scope for this product is tested directly and accounted for in this report — none are filtered out by a relevance step before reaching a conclusion. See /architecture for how the regulatory corpus is scoped.

Findings requiring attention

❌ Non-CompliantcriticalDigital Lending Guidelines

Disbursal routed through the partner NBFC's pooled settlement account

High confidence

Loan disbursal is described as passing through the partner NBFC's pooled settlement account before reaching the borrower, rather than moving directly from the RE to the borrower's bank account.

DLG Para 5(i) requires all disbursals and repayments to be executed directly in the bank account of the borrower, with no pass-through or pool account for the LSP or any third party. A pooled settlement account is exactly the structure this clause was written to prohibit.

Why this confidence: The description explicitly states disbursal is routed through a pooled settlement account — direct, unambiguous evidence of the exact structure this clause prohibits, not an inference.

Evidence → Citation trail
Detected
  • Description explicitly states disbursal is routed through the partner NBFC's pooled settlement account before reaching the borrower.
↳ Traced to source clause
Source·DLG Para 5 (i)

“All loan disbursals and repayments shall be executed directly in the bank account of the borrower, without any pass-through or pool account of the Lending Service Provider (LSP) or any third party.”

RBI Digital Lending Guidelines, September 2022

Reserve Bank of India· Version 1· Published September 2022

ProductDisbursal flow needs a redesign so funds move directly from the RE to the borrower's account, removing the pooled intermediary step.
EngineeringPayment rails need a direct RE-to-borrower disbursal integration instead of routing through the NBFC's pooled settlement account.
BusinessContinuing pooled disbursal exposes the RE to regulatory action and puts the NBFC partnership at risk.
Recommendations:
  • Route disbursal directly from the RE's account to the borrower's bank account, eliminating the pooled account step.
  • Confirm with the partner NBFC whether their settlement architecture can support direct-to-borrower transfers.
❌ Non-ComplianthighDigital Lending Guidelines

Broad contact and SMS access requested at onboarding

High confidence

The app requests full contact list and SMS access during signup, ahead of and unrelated to any specific loan-servicing need.

DLG Para 7 prohibits blanket permission to access phone resources such as contact lists, call logs, and SMS at onboarding — access must be need-based, tied to a specific purpose, and taken with explicit consent at the time of use.

Why this confidence: The description explicitly states the app requests full contact list and SMS access at signup for credit scoring — direct evidence of blanket permission collection at onboarding, exactly what this clause prohibits.

Evidence → Citation trail
Detected
  • Description explicitly states the app requests full contact list and SMS access at signup.
  • Stated purpose is credit scoring, not a specific, need-based loan-servicing function.
↳ Traced to source clause
Source·DLG Para 7 — Device Access

“Blanket permission to access mobile phone resources including files and media, contact lists, call logs, telephony functions, etc., shall not be taken at the time of onboarding / app installation. Such access shall be based on need and purpose for each permission.”

RBI Digital Lending Guidelines, September 2022

Reserve Bank of India· Version 1· Published September 2022

EngineeringMove contact/SMS permission requests out of the onboarding flow and gate them behind the specific feature that needs them.
UIAdd a just-in-time consent screen explaining why a specific permission is being requested.
BusinessBlanket data collection at onboarding is one of the most cited DLG violations in RBI enforcement actions against digital lenders.
Recommendations:
  • Request contact/SMS access only at the point of specific need, not at signup.
  • Add per-permission purpose disclosure and consent capture before each request.
⚠️ Potential GapmediumKYC / AML

Risk categorisation likely missing for onboarded customers

Moderate confidence

The product performs video KYC, which typically triggers a risk-categorisation obligation, but the description gives no indication that customers are subsequently tiered by risk — this reads as a likely gap, not a confirmed one.

Risk-based customer categorisation is a foundational KYC/AML control: it determines how often a customer's KYC is refreshed and whether enhanced due diligence applies. Skipping it flattens every customer to the same due-diligence level regardless of actual risk.

Why this confidence: Video KYC confirms a formal identification process exists, which usually implies a risk-categorisation step should follow — but nothing in the description confirms tiers are actually assigned, so this is inferred as likely rather than certain.

Evidence → Citation trail
Detected
  • Description confirms the product performs video KYC on customers, indicating a formal onboarding/identification process is in place.
Not detected / unconfirmed
  • Whether customers are categorised into risk tiers (low/medium/high) after KYC.
  • Whether enhanced due diligence applies to any higher-risk customer segment.
Inferred (and why)

Inferred that risk categorisation is a live obligation here because the product performs formal KYC and extends credit — both conditions under which risk-based due diligence is expected.

↳ Traced to source clause
Source·KYC-MD — Risk Categorisation of CustomersUnverified — needs legal review

“A regulated entity shall categorise customers into low, medium, and high risk based on factors such as identity, occupation, source of funds, location, and nature of business, and apply due diligence measures proportionate to the assigned risk category.”

RBI Master Direction – Know Your Customer (KYC), 2016 (as amended) — reconstructed from general knowledge, NOT verified against current source text

Reserve Bank of India· Version 1· Published 2016 (as amended)

ProductOnboarding needs a risk-scoring step that assigns each customer a tier before the account is activated.
EngineeringCustomer records need a risk-tier field driving periodic KYC-refresh scheduling, not a one-time onboarding check.
BusinessRegulators expect risk categorisation as a baseline control — its absence is typically flagged early in an AML audit.
Recommendations:
  • Add a risk-categorisation step to onboarding that scores each customer low/medium/high.
  • Schedule periodic KYC refresh intervals keyed to the assigned risk tier.
❓ Info RequiredlowDigital Lending Guidelines

Cooling-off period availability not confirmed

Low confidence

The product description does not state whether a cooling-off / look-up period is offered — this cannot be confirmed as present or absent from the information given.

DLG Para 6 requires a minimum three-day cooling-off period for loans with tenure of seven days or more, during which the borrower can exit by repaying the principal and proportionate APR with no penalty. If missing, this is a real gap — but silence alone isn't evidence either way.

Why this confidence: No discovery answer addresses the cooling-off period and the product description is silent on it — there is no basis to conclude compliance or non-compliance, only that it is unconfirmed.

Evidence → Citation trail
Not detected / unconfirmed
  • Whether a minimum three-day cooling-off period is offered on loans with tenure of seven days or more.
  • Whether penalty-free early exit is available during any cooling-off window.
↳ Traced to source clause
Source·DLG Para 6 — Cooling-off Period

“The borrower shall be given an explicit option to exit the digital loan by paying back the principal and the proportionate APR without any penalty during a cooling-off / look-up period. The minimum cooling-off period shall be three days for loans with tenure of seven days or more.”

RBI Digital Lending Guidelines, September 2022

Reserve Bank of India· Version 1· Published September 2022

UIIf confirmed missing: loan offer and confirmation screens would need an explicit cooling-off disclosure and an in-app exit action.
ProductIf confirmed missing: EMI repayment logic would need to support penalty-free early full repayment during the cooling-off window.
BusinessCooling-off period presence or absence is one of the first things an RBI supervisory review checks — worth confirming early.
Recommendations:
  • Confirm directly whether a cooling-off period is implemented before treating this as a gap.
  • If not implemented, add a three-day minimum cooling-off period with penalty-free early exit.

Confirmed compliant

✅ CompliantDigital Lending Guidelines

Key Fact Statement disclosure confirmed before loan execution

High confidence

The product description confirms borrowers are shown the Key Fact Statement — including APR and total cost — before confirming the loan, satisfying the core KFS disclosure requirement.

DLG Para 6 requires REs to provide a Key Fact Statement including APR and all-in cost before the loan contract is executed, so borrowers can evaluate the true cost of credit before committing. Confirming a control is in place is as important to document as identifying gaps — a report that only ever lists problems isn't a credible assessment.

Why this confidence: The description explicitly states the KFS, including APR and total cost, is shown before the borrower confirms the loan — direct, unambiguous evidence of compliance, not an inference.

Evidence → Citation trail
Detected
  • Description explicitly states the app displays the Key Fact Statement, including APR and total cost, before the borrower confirms the loan.
↳ Traced to source clause
Source·DLG Para 6 — Key Fact Statement

“REs shall provide a Key Fact Statement (KFS) to the borrower before the execution of the loan contract. The KFS shall include the Annual Percentage Rate (APR), all-in cost including fees and charges, and the grievance redressal mechanism.”

RBI Digital Lending Guidelines, September 2022

Reserve Bank of India· Version 1· Published September 2022

ProductNo change needed — the loan confirmation flow already surfaces the KFS before commitment.
BusinessMissing KFS disclosure is one of the most frequently cited DLG gaps in practice, so having it confirmed in place is a genuine differentiator worth preserving.
Recommendations:
  • Add a regression test asserting the KFS screen (with APR and total cost) always renders before loan confirmation, so this control does not silently regress in a future release.

Generated by RegImpact AI · Created by Shriyashish Mishra