Business loan application portals, explained.

Applying for a small business loan, from the owner's side and the bank's

Rosa Medina's $865,000 SBA loan, from banker's link to funding

1. The owner asks and the banker sends a linkTyler Okafor, the bakery's banker, sends Rosa Medina the application for an SBA 7(a) loan of $865,000.
2. The owner applies and the processor completes the fileAnswers, 37 documents, three owners found, and two rounds of requests to close the gaps.
3. The SBA lending manager confirms eligibilityEvery owner traced to 100%, citizenship and residence confirmed, before the bank asks SBA for a loan number, SBA's acceptance of the loan for its guaranty.
4. The underwriter decidesCash flow, collateral, the credit memo and the approval.
5. Closing, funding and years of servicingIf the loan ever defaults, SBA reads the intake file again before it pays the guaranty.

Step 2 is the subject of this guide. The bank, the bakery, the people and the figures in this example are fictional.

Four surprises in an SBA 7(a) application file

SBA 7(a), direct and indirect owner, checklist, complete application

Fourteen terms are defined in the one-page summary.

What goes into an SBA 7(a) application file under SOP 50 10 8.1

In shortSBA's rulebook for its loans, Standard Operating Procedure (SOP) 50 10 8.1, lists what every 7(a) application file must hold in its Appendix 20. Each bank turns that list, plus its own credit policy, into a checklist for each loan type. The list has a fixed core and a tail that depends on what the money is for.

Appendix 20 "consolidates the contents of the lender's application for guaranty requirements applicable to all 7(a) loan programs". It opens with a sentence that gives each bank room: every file "must include the forms and information the Lender requires in order to make an informed credit decision".2 So SBA sets a floor and the bank builds on it.

How the list changes for Standard 7(a), 7(a) Small and SBA Express

The program changes the list. Standard 7(a) loans are over $350,000. 7(a) Small loans are $350,000 or less, and some purpose papers are required "only to the extent necessary" to document the uses and support the credit analysis. SBA Express loans go up to $500,000, and if the bank decides on a credit score instead of financial statements, it still orders transcripts to confirm the returns were filed.2

A bank's checklist is longer than SBA's list

A bank adds what its own credit policy needs: articles of organization and operating agreements, certificates of good standing, business licenses, a business plan, receivables and payables aging, projections, and photo ID for each owner under its customer identification program, which SOP 50 10 8.1 also requires lenders to follow.2 The bank in this guide's example uses a 36-item checklist for a Standard 7(a) loan once the third owner is found.

Eight rule changes from 2025 to 2028 that reshaped small business loan intake

In shortBetween June 2025 and October 2026 SBA handed eligibility back to lenders, replaced its rulebook twice, required every owner to be a U.S. citizen or national living in the U.S., and stopped scoring small loans with a credit score (the FICO SBSS score) in place of a full credit review. The CFPB rewrote its small business data rule for 2028. A checklist written in early 2025 is out of date on several lines.

Tracing every owner through holding companies and trusts to 100%

In shortAn indirect owner's share is the product of the shares along the chain. SBA wants every owner listed until the shares add up to exactly 100%, and every one of them must be eligible. Four different thresholds apply to the same people, which is why owner lists drift apart.

The arithmetic is simple once the papers are in hand. The bakery's 2024 return carries three K-1s, the tax forms a partnership gives each owner: Rosa Medina 40%, Marcus Hale 25%, Halecroft Holdings LLC 35%. Halecroft's operating agreement splits Halecroft 60% to Marcus and 40% to Joanna Hale-Pruitt. So Marcus owns 25% directly and 60% × 35% = 21% through Halecroft, 46% in all. Joanna owns 40% × 35% = 14%. Rosa 40 + Marcus 46 + Joanna 14 = 100.

One owner, four thresholds

The same person can be in one list and out of another, because each rule draws its own line:

What "living in the United States" means

SBA borrows the IRS definition of a principal residence from Publication 523.1 It is a facts-and-circumstances test: the main factor is where a person spends the most time; the IRS also looks at the address on mail, voter registration, tax returns and a driver's license.19 An old address in an operating agreement is a question to ask, and the answer is the owner's to give.

Joanna's 2019 address is in Ontario. She confirms she is a U.S. citizen and has lived in Ann Arbor, Michigan since March 2, 2026, and sends a Michigan driver's license.

The six-month look-back reads: the business "is ineligible if any direct or indirect owner of the business commencing 6 months prior to the date of issuance of the SBA loan number is an Ineligible Person", unless that person sells out first.1 Joanna's move happened more than six months before any loan number the bank could request after mid-October, so the look-back does not catch her. If she had moved in July, it would have.

Nor can a bank look owners up in a federal register. The beneficial ownership registry created by the Corporate Transparency Act no longer covers U.S. companies: an interim rule exempted them in March 2025, and FinCEN's final rule, effective August 14, 2026, made the exemption permanent.11 Ownership has to come from the company's own papers.

How old each document may be on the day the file goes to SBA

In shortEvery dated document has a shelf life, counted back from the day the bank submits the file to SBA. The bank's own policy is often stricter. A document must also be the final, signed version: an accountant's draft cannot be matched to the IRS's copy.

At the example bank, interim statements were the gap owners left most often: 41% of third-quarter applications at first upload, in its sample data. SBA allows 120 days; the bank's credit policy allows 90. The bakery's interim statements run to June 30, 2026. On October 12 they are 104 days old: inside SBA's limit and outside the bank's. The bank asks for statements through September 30.

The worked dates

Which tax year is "the latest"

A calendar-year partnership files its return by the 15th day of the third month after year-end, and an extension adds six months.20 So the 2025 bakery return was due in March 2026 and, extended, by mid-September 2026.

SBA does not require the most recent year's tax information when the fiscal year ended within six months of the date SBA received the application; when the business has filed an extension, the bank collects the extension and proof that estimated tax was paid.2 In October, the 2025 return is due and required. The bakery's accountant filed it on September 14, 2026; the owner uploaded the draft from the spring.

Signatures fail in the same quiet way. The IRS rejects a Form 4506-C with a missing signature, and an electronically signed one is accepted only from an authorized participant with the "electronically signed" box checked.17 A transcript request that bounces costs days the file does not have.

Why the debt schedule is checked against the bank statements

In shortThe debt schedule lists what the business owes, and the underwriter uses it to work out whether the business can carry one more payment. Owners forget debts, most often leases and financing repaid by automatic debit. Since March 2026 SBA makes lenders on 7(a) Small loans confirm the debts against two months of bank statements; reading twelve months catches more.

SOP 50 10 8.1 asks for a "detailed debt schedule" with the year-end and interim balance sheets, and on 7(a) Small loans, a review of the latest two months of the primary operating account to confirm the debts in the coverage calculation.2,7 A bank that reads the statements for every SBA file, at every size, finds the debts nobody mentioned before the underwriter does.

The bakery's schedule listed the bank's own line of credit and a van loan. Twelve monthly debits of $1,912.40 to Alder Creek Equipment Finance, October 2025 to September 2026, were on the statements and nowhere else. Asked, Rosa explained: the lease-to-own on the oven bought in 2023, $48,200 left, 26 payments to go. Nothing was hidden. A lease feels like rent to an owner, so it never made the list.

Two other ties belong at intake. Revenue on the returns should agree with the financial statements, year by year, which is the reconciliation SBA requires against IRS transcripts before the first disbursement.2 And the uses of funds should agree with the quotes: the bakery's three quotes total $730,000, the $512,000 of equipment plus $218,000 of leasehold work, within its $865,000 request.

What Regulation B requires when a business loan application is incomplete

In shortRegulation B, the federal rule under the Equal Credit Opportunity Act, covers business credit too. A lender has 30 days from receiving an incomplete application to either decide or send a written notice naming what is missing, giving a reasonable deadline, and saying the application will not be considered further without it. The decision clock then starts when the application is complete.

A completed application is one in which "a creditor has received all the information that the creditor regularly obtains and considers in evaluating applications for the amount and type of credit requested", including "any approvals or reports by governmental agencies" needed to guarantee the credit. The same sentence adds a duty: "The creditor shall exercise reasonable diligence in obtaining such information."5 The bank's own checklist is therefore the measure of complete, and its request record is the evidence of diligence.

The notice of incompleteness has three required parts, all in 1002.9(c)(2): the information needed, a reasonable period to provide it, and the statement that "failure to provide the information requested will result in no further consideration being given to the application". A lender "may inform the applicant orally" first, but if the application stays incomplete it must send the written notice.13

The size of the business changes the timing of the final decision notice. For a business with gross revenue of $1 million or less in its last fiscal year, the 30-day rules apply, and the decision may be given orally or in writing. Above $1 million, the bank must notify "within a reasonable time, orally or in writing".13 The rule looks at the preceding fiscal year: the bakery's 2025 revenue of $3,042,000 puts it in the second group; many banks run every business file on 30 days anyway.

Seven ways a business loan application arrives looking complete when it is not

In shortMost gaps come from documents that exist and sit in the file, yet fail a rule: the wrong version, the wrong date, a missing signature, a debt left off, an owner nobody named. A checklist that records only "received" cannot see them. The later they surface, the more they cost.

The cost rises with every step a gap survives. Found at upload, a draft return is a one-line request. Found by the underwriter, it is a stalled credit memo. Found at closing, it delays funding; SBA's transcript rule says that if a delegated lender disburses without reconciling the transcripts, "the guaranty may be subject to repair or denial".2

An ineligible owner found years later, when the bank asks SBA to buy the guaranty, can cost the guaranty itself. SBA's Inspector General recommended exactly that kind of review for the 73,302 loans whose eligibility SBA screened between August 2023 and December 2024.3

There is a second pressure in the other direction. Research on the pandemic-era Paycheck Protection Program found signs of misreporting concentrated in certain fintech lenders, whose share of the program grew over time.22 Removing checks makes an application faster and the losses larger. Running the same checks at the moment of upload keeps the speed and the checks.

What business owners report about applying for credit at banks

In shortSmall banks approve the most applicants, and large banks draw the most complaints about the application itself. Owners at banks name a difficult process, unclear criteria and long waits far more often than owners at online lenders, who complain about price. SBA loan applicants had the hardest time of any product: 32% were fully approved.

The Federal Reserve Banks' Small Business Credit Survey asked 6,525 employer firms about the year to the fall of 2025. Sixty percent had applied for financing, and 42% of applicants received all they sought.23

Banks still approve more often. Fully approved shares by source: small banks 57%, finance companies 50%, credit unions 44%, large banks 43%, online lenders 38%. Online lenders' share of applicants rose from 17% in the 2020 survey to 29% in the 2025 survey, and 61% of their applicants named high interest rates as a problem.23 Owners choose ease and pay for it.

An owner who does not know what the bank needs, or why, reads the process as unclear and slow. Both are problems of explanation as much as of software: the same list, written in the owner's words and asked one item at a time, answers the "unclear criteria" complaint before it forms. The oldest direct measure of the burden is from 2013: small businesses spent "about 25 hours" on paperwork across an average of three banks before getting credit.24 Nothing as direct has replaced it.

SBA 7(a) lending in fiscal 2026: fewer loans, larger ones, mostly decided by lenders

In shortSBA guaranteed a record dollar volume of 7(a) loans in fiscal 2025, then 28% fewer loans in fiscal 2026, a year of tighter rules. Two-thirds of the loans are $350,000 or less. Almost all are approved under the lender's own delegated authority, and most lenders make only a handful a year.

By dollars, fiscal 2026 came to $32.43 billion, down from $37.29 billion, and the average loan rose to about $578,000 from about $478,000, by our count of SBA's data.25 Trade press reports the same 56,130 loans and $32.4 billion.27

Small loans fell faster than large ones: approvals of $350,000 or less dropped 30% and larger loans 24%, by our count.25 SBA has published no cause, but the drop fits the year's changes: the score shortcut for small loans ended in March, and the citizenship rule closed the program to any business with a green-card owner.8,1

Delegation matters for intake. On a loan made under the lender's delegated authority, the bank submits the Form 1919 data and the loan terms to SBA's system and keeps the documents in its own file.2 SBA reads that file closely when the bank asks it to honor the guaranty.

Most banks that make SBA loans make few of them. A processor who handles four SBA files a year relearns the checklist each time, and between March and October 2026 the checklist changed under them twice. The borrowers are almost all companies with owners to trace: SBA's file records 53,641 of the year's borrowers as corporations, 499 as partnerships and 1,976 as individuals.25

How far banks have taken the business loan application online

In shortAbout a quarter of banks accept a small business application or its documents through an online portal, and 6% run the whole process online. The share is rising from a low base, and faster at large banks. Banks still value branches and visits far more than portals.

The FDIC asked banks how valuable each channel is: branches 94%, on-site visits 89%, remote communication such as email 77%, online portals 36%.28 Its question covered each bank's main small business product and left out government-guaranteed loans, so SBA intake is probably further behind.

The same survey found banks prize speed: three in ten can approve a small, simple loan within one business day, and fewer than one in thirty use a credit score to approve loans automatically.4 Banks decide with people, and they report deciding quickly. No survey asks how long the file took to assemble.

What software can check at upload, and what stays with a named person

In shortSoftware can read each document as it arrives, check it against the bank's written rules, fill in what the documents already answer, trace owners through entity papers, tie debts to bank statements and draft plain-language requests. Eligibility, credit and what is sent to the owner stay with people. The 2026 model risk guidance leaves rules engines and generative AI to the bank's own governance.

What SR 26-2 and Regulation B ask of upload checks

The evidence on automation and access

Studying the Paycheck Protection Program, Howell, Kuchler, Snitkof, Stroebel and Wong found that process automation "reduces racial disparities in credit access", by enabling smaller loans, widening banks' reach and removing human bias, and that banks which automated their processing lent more to Black-owned firms.37 The same program showed the cost of speed without checks.22 For intake software, the lesson is to automate the reading and the asking, and to keep the verification and a named person on every decision.

How banks collect SBA applications today: the people, the hand-offs and the waiting

In shortA banker brings the deal, a processor builds the checklist and chases the documents, a manager confirms eligibility and an underwriter decides. In the example bank's own estimate, most of the elapsed time is waiting for the owner's next answer. Teams run intake with email and a PDF checklist, with a document portal inside the loan system, or with an outsourced packager.

Who builds an SBA application file: owner, banker, processor, manager

Four times an SBA file changes hands before underwriting

Twenty-three days to a complete file, nine of them in requests

The waiting is uneven. A processor's work on one file may total a few hours, but each request sits until the owner reads it, finds the document or asks the accountant, and replies. Each round restarts the owner's attention and the processor's memory of where the file stood. The number of rounds drives the elapsed days more than the speed of anyone's work.

A PDF checklist by email, a loan packager or a borrower portal

Rosa Medina's bakery application: one evening online, a third owner traced, and a file marked complete

In shortRosa Medina applies in one evening sitting and sends the application at 8:06 pm, answering one plain question at a time while her uploads fill in what they can. Thirteen days later, the processor, Pooja Ranganathan, presses one button: five of the six specialist agents read the two new uploads and the whole file, trace a third owner, and find three more gaps. Three plain-words requests go out, the answers come back within the hour, and Pooja marks the file complete.

1

One plain question at a time

Tuesday, September 29, 7:40 pm. Rosa opens the link her banker sent. Twelve minutes in, she has answered 6 of the application's 20 parts: the amount, what it is for, who is applying, her contact details, 41 employees and her photo ID. The ring shows 30%.

The next question is in large type: "Do you have last year's business tax return?" On the right, the file the bank will receive fills in as she goes, each value marked "Rosa answered".

2

One tax return fills eight answers

Rosa drops the 2024 Form 1065, 41 pages, signed March 9, 2025. Eight answers fill themselves, each with the page it came from: legal name, employer ID number 82-4417093, an LLC taxed as a partnership, started April 3, 2017, retail bakery code 311811, 2024 sales of $2,611,000, the address, and the three owners on the K-1s.

Eight questions are struck off the list below. The ring jumps from 30% to 75%. Rosa confirms with one click.

3

It asks only what the return could not say

The K-1s show Halecroft Holdings LLC owns 35% of the bakery. The return cannot say who owns Halecroft, so that is the next question, with the reason in one line: "The bank needs every owner, even through another company or a family trust."

Rosa answers "Just Marcus, I think." She is not sent to hunt for paperwork: Marcus Hale gets his own link for Halecroft's operating agreement. Rosa reads the filled application once and sends it at 8:06 pm the same evening, 20 parts of 20.

4

A 69-second check finds a third owner and three papers that fall short

Monday, October 12, just after 9 am. Thirty-seven documents are in, 31 from Rosa and 6 from Marcus, who uploaded Halecroft's operating agreement and his Form 413 on Sunday night. Pooja presses Check new uploads. The check runs step by step in view and finishes in 69 seconds.

It finds a third owner, Joanna Hale-Pruitt, 14% through Halecroft, with a 2019 address in Ontario; a 2025 return marked DRAFT; interim statements 104 days old against the bank's 90-day rule; and $1,912.40 a month to Alder Creek Equipment Finance missing from the debt schedule.

5

Answered within the hour, then signed

The four findings, plus Halecroft's certificate of good standing now that Halecroft is on the list, become three messages: Rosa (three items), Marcus (Halecroft's certificate of good standing) and Joanna (citizenship, residence and a photo ID). Pooja sends them at 9:21 am. Marcus answers at 9:31, Joanna at 9:40, Rosa at 9:47 with the signed return, September statements and the oven lease: $48,200 left, 26 payments.

The file is 36 of 36, complete 13 days after the first document. An earlier round of four requests, on October 2, was answered in a day; this second round closes the rest. Pooja marks it complete and sends it to underwriting; Elise Carrow, the SBA lending manager, confirms eligibility and the ownership list: three people, one company, 100%.

The solution's design target is 92% of files complete at first submission to underwriting, against 38% from January to June, before the portal; the fictional bank's Insights screen shows 92% in September. It is a target, to be measured on your own files.

The rest of the borrower portal: a wrong-year return caught, the ownership map, one request per person and the processor's pipeline

In shortOne application is the story. These screens show the rest: a wrong file caught before it lands, the review page the owner reads before sending, the ownership map, every document read, one request per person, the whole conversation, the pipeline of open applications, the bank's measures, its checklists and rules, and the signature that sends a file to underwriting.

Select any screen to open it larger. The bank, businesses, people and figures are fictional.

What the example bank's owners missed most

Six intake agents and their limits: the processor marks each file complete, the SBA lending manager confirms the owners

In shortEach agent has one job and limits it does not cross. None gives credit advice, decides eligibility, assumes anyone's citizenship, sends a new request without the processor, or marks a file complete. The processor marks each file complete, and the SBA lending manager confirms eligibility and the ownership list, both by name and time.

Six intake agents, from application guide to hand-off writer

The processor marks the file complete; the SBA manager confirms owners

Signatures record the name, the decision and the time. Agent steps and human decisions are kept apart on each file's audit trail, with every message, upload and change. Each owner, co-owner and accountant gets a personal link, so documents come straight from the person who holds them.

Pooja Ranganathan's twelve open files and the bakery owner who applied

What the portal collects from business owners, and the owner-traced file it hands to underwriting

In shortThe portal takes what owners already have, reads it against the bank's own checklists, and leaves behind a complete file, an ownership list that sums to 100%, one request per person for what was missing, and a one-page hand-off. The bank's systems of record stay where they are.

Origination, e-signature, IVES transcripts and E-Tran the portal feeds

For each, check whether it has an API, a file feed or only screens, and who owns it.

Your checklists, bankers and Regulation B notices keep their place

Read before asking, every owner to 100%, people send and sign

The price of chasing loan documents: processor hours, applicants who drop out, and the owner's time on paperwork

In shortThree published figures frame the cost: what a processor hour costs, how much of the approved pipeline falls away, and how long owners have said the paperwork takes. The figures that decide a purchase, your days, rounds and lost owners, come from your own files.

Logging processor minutes and counting rounds of document requests

A faster lender's offer and a guaranty you cannot collect

Processor hours saved and borrowers kept: a calculator for loan applications that arrive complete

In shortPut in your own numbers. The calculator starts from a published processor wage and asks for the rest: how many applications you take, the processor hours they need now and after, how many borrowers you keep that slow intake would lose, what a funded loan is worth to you, and what the tool and your testing cost a year.

Processor hours, one request per person and borrowers kept

Your processor hours and applicants kept with files that arrive complete

At the defaults, the two levers add to $81,000 against $60,000 of yearly cost. A bank taking 80 business applications a year with the same hours saves about $13,600 of processor time and has to rest its case on borrowers kept, faster decisions or guaranty protection, and its business case should say so.

Loan intake readiness: volume, written checklists, owner tracing, past findings and AI sign-offs

In shortPick the answer closest to your team today. Eight questions score 0 to 2; the ninth is for reflection. The meter adds up your score as you go, and each question says why it matters and what a strong answer sounds like.

Explore, pilot one loan type, or open every type

Sixteen questions for loan application software vendors: reading uploads, tracing owners, your checklists and what it sends unprompted

In shortAsk every vendor the same questions, us included. The answers show whether the software reads documents or only stores them, how it finds owners, whose rules it applies, what it sends without a person, and how you could measure it on your own files.

Pilot a borrower portal on 20 to 30 closed SBA files as owners first sent them, then on one live loan type

In shortWrite down the rules, measure 20 to 30 files you already closed, test the software on those files as the owners first sent them, then run it on one live loan type. Decide with four numbers. None of these steps commits you to a vendor.

1. Write the rules down: one checklist per loan type with age limits, signature rules, the ownership and citizenship steps, and who may send what.
2. Measure a baseline on 20 to 30 closed SBA files: days to complete, rounds of requests, and what the processors found.
3. Run the software blind on those files as the owners first sent them, and score it against the processors' findings.
4. Go live on one loan type for five weeks, with processors sending every new request and a named manager confirming eligibility.
5. Decide with four numbers: share complete at first submission, rounds per file, days to complete, and findings missed.

Files complete at first submission, rounds of requests, days to complete

SBA application documents, owner citizenship, Form 1919 and incomplete applications: common questions answered

In shortThe questions owners, processors and buyers search for most, each answered on its own.