Small business loan decisioning, explained.

Deciding a small business loan in plain words: one coverage division and the debts no list shows

Ellisford Mechanical's $240,000 request, application to signed decision in five steps

1. The business appliesEllisford Mechanical asks for $240,000 under SBA 7(a) Small: two vans and working capital for a school job.
2. The file is completedThe banker collects 38 documents. The last arrives Friday, October 9, 2026, at 4:40 p.m.; the clock for the notice starts here.
3. The file is analyzed and decidedReturns spread (copied line by line into the bank's template), statements read, coverage tested with every debt, credit and eligibility checked, a memo written, a decision signed. This is where the undisclosed cash advance is found, or missed.
4. The business is toldAn approval, an approval with conditions, a counter-offer or a decline, with the reasons.
5. The loan closes, or the file is keptConditions are cleared before closing. Regulation B sets how long the records are kept; SBA files are read again if the guaranty is ever claimed.

Step 3 is the subject of this guide. The people, companies and figures in this example are fictional.

Four surprises in small business loan underwriting

Four decisioning terms, from debt service coverage to 7(a) Small

Fourteen terms are defined in the one-page summary.

The five questions behind every small business credit decision, and the four answers a bank can give

In shortA credit officer has to answer five questions: can the cash pay every debt, has the business paid before, is the loan allowed, what if it goes wrong, and why this loan needs the bank (or the SBA). Each answer comes from particular documents. The decision is one of four outcomes, and each one carries its own duties.

SBA's regulation puts the standard in one sentence: "Loans must be so sound as to reasonably assure repayment." It lets a lender consider the credit history of the business, its owners and guarantors, "the earnings or cashflow of applicant", and any equity or collateral, using the same credit analysis it uses for similar loans without a guarantee.9

Bank lending policies say much the same in more words. For national banks, the examiners' current reference is the lending booklet of the Office of the Comptroller of the Currency (OCC), version 1.0 of July 2026.10

Which document answers which question

The memo is where the answers live

For SBA 7(a) Small loans, the SOP lists what the credit memo must hold beyond a description of the business, its owners and the request.1 A memo that covers each item, each with the page it came from, is the bank's answer if the SBA ever reads the file when the guaranty is claimed.

The rules a small business credit decision answers to, from SBA's rulebook to Regulation B, as of October 2026

In shortEleven dates between May 2025 and January 2028 changed how a small business loan is tested, explained and recorded. The SBA retired its score and wrote a new test. The Consumer Financial Protection Bureau (CFPB) amended Regulation B and rewrote its small business data rule, Section 1071. The banking agencies replaced their model risk guidance. Colorado passed a law on automated decisions. The duty to give specific reasons did not change.

How SBA 7(a) Small loans are tested since the FICO SBSS score was retired on March 1, 2026

In shortUntil February 2026, a 7(a) Small application began with a score from FICO's Small Business Scoring Service, and a passing score satisfied much of the credit test. Since March 1, 2026 the lender proves repayment with coverage of at least 1.10x and confirms every debt from two months of bank statements. The lender's own business score may still be used, stated in the memo with its approval range.

The SBA announced the change in Procedural Notice 5000-875701 in January 2026 and replaced its text with Notice 5000-876777, both effective March 1, 2026.6,7 SOP 50 10 8.1, in force from October 1, carries the same rules.1

The SBA's own question-and-answer notice closed the obvious gap. Asked whether anything now gives the assurance a passing score used to give, the SBA answered: "when the Lender calculates an acceptable Debt Service Coverage Ratio (at least 1.10:1 on a historical or projected basis…) and uses two months of bank activity to confirm the debts and obligations included in that calculation, the requirement to determine repayment ability is satisfied."3

Scores still have a place, inside the analysis

A lender may use a business credit scoring model if its primary federal regulator permits it, it uses the model on its similar conventional loans, and the model "does not rely solely on consumer credit scores". If a model is used, "the results (e.g., score) must be stated in the credit memorandum along with the acceptable approval range."1

What a score cannot do is stand in for the credit-elsewhere test: the SOP forbids citing an applicant's failure to meet the lender's conventional score policy "as the sole reason that credit is not available elsewhere".1

Who decides SBA loans

Under delegated processing, the SBA "does not review the Lender's analysis of the credit or structure of the loan… prior to issuing a loan number". The analysis "is subject to SBA's review and determination of adequacy when the Lender requests SBA to purchase its guaranty".1 The decision is the lender's alone at the time, and the file has to answer for it later.

Debt service coverage worked through: one contractor, four listed debts, and the fifth nobody listed

In shortOn its 2025 return, Ellisford Mechanical makes $151,300 of operating cash flow. The four debts it listed plus the new loan cost $95,580 a year, so coverage is 1.58x. The bank statements show a fifth debt that costs $287,280 a year. Counted, coverage is 0.40x. No loan amount fixes that while the advance runs; paying it off does.

Step 1 · Operating cash flow from the return

Fictional example. Interim revenue for the 12 months to August 2026 is $1,968,000, so there is no decline to explain. The S corporation pays no federal income tax itself, which is why EBITDA here is net income plus interest and depreciation.

Step 2 · Debt service, as listed and as found

Step 3 · Coverage, four ways

The counter-offer a busy officer might reach for, $96,000 for the vans alone, costs about $15,380 a year and leaves coverage at 0.42x, because the advance is the problem and it is still there. The cure is to remove it. The advance funded $100,000 on May 1 and is repaid at $139,080, so $1.39 comes back for every dollar advanced. By September 30, 104 debits had paid $118,560, leaving $20,520, eighteen more debits. The business closed September with $52,300 in the account.

Step 4 · How much room is left

With the advance gone, coverage of 1.58x means operating cash flow could fall about 30% before reaching the SBA's 1.10x, and about 21% before the bank's 1.25x. A contractor whose revenue rose 9.7% in 2025 and who holds $598,800 of signed contracts has room.

The officer still has to explain one more thing: working capital is $144,000, 60% of a loan over $50,000, so the memo must say why that much is "necessary and appropriate for the subject business".1 Here the answer is a school heating job worth $412,600 that bills net 45 and needs materials bought up front.

Bank statement analysis for a business loan: reading twelve months for the debts the application leaves out

In shortBank statements show what the business actually did with its money. They confirm that deposits match reported revenue, and they show every lender that takes payments, including ones on no credit report. The SBA asks for two months on 7(a) Small loans. Two months show a running advance; twelve months show when it started, how much it brought in and whether the payments bounced.

A merchant cash advance is easy to miss on paper. The FTC has described the product as money a company provides "up front in exchange for a larger amount", repaid through daily automatic payments.2 Advances often appear on no credit report, and owners often leave them off the debt schedule because they do not think of them as loans. The SBA now asks lenders to confirm them from the statements.3

In the Federal Reserve's survey of employer firms, 8% applied for a merchant cash advance in the prior twelve months, and 7% use one as a regular source of financing.26

Five marks of a cash advance on a statement

What twelve months showed in the example

Read as a list, the example's twelve months are 2,914 transactions, and a $1,140 debit is never the largest line on a page: payroll runs over $38,000 every other Friday. Read as a pattern, it is 104 identical debits that began the Monday after a $100,000 credit.

The statements also showed $115,180 of deposits that were not revenue (the advance, a $12,000 owner loan and a $3,180 refund). Taking them out, deposits came to $1,938,800, within 1.5% of the interim revenue of $1,968,000, so the reported revenue held up. Payments to a sheet metal supplier stopped in May; an $8,740 judgment followed in July.

Fictional example. Twelve months is the lender's choice; the SBA's minimum is two.1 In the example, two months (August and September) show the daily debits but neither the $100,000 credit nor the two returned items.

Telling a business no, or yes on other terms: Regulation B's notice rules for business credit

In shortThe Equal Credit Opportunity Act covers business credit. Regulation B splits business applicants at $1 million of revenue in the last fiscal year. Smaller businesses must hear the decision within 30 days of a complete application, with specific reasons or the right to them. Larger ones must hear within a reasonable time and get written reasons if they ask within 60 days. "Below our standards" is never a reason.

What counts as adverse action

Regulation B defines adverse action to include "a refusal to grant credit in substantially the amount or on substantially the terms requested in an application unless the creditor makes a counteroffer… and the applicant uses or expressly accepts the credit offered".12 An offer of $96,000 for the vans to a business that asked for $240,000 is adverse action until the business accepts it. An approval of the full amount with closing conditions is an approval; the business still has to be told.

What a reason has to say

The rule is blunt: reasons "must be specific and indicate the principal reason(s) for the adverse action. Statements that the adverse action was based on the creditor's internal standards or policies or that the applicant… failed to achieve a qualifying score on the creditor's credit scoring system are insufficient."4 A reason a business can act on names the test and the figure: "debt service coverage of 0.40x with all business debts counted, below the 1.10x minimum", or "a delinquent federal debt reported for a 30% owner".

The clock on the example

Fair lending in business credit after the July 21, 2026 Regulation B amendments

In shortThe CFPB's amended Regulation B, in force since July 21, 2026, states that ECOA does not authorize disparate-impact liability (liability for a neutral policy whose results fall harder on a protected group); a lawsuit challenging it is pending. The OCC and FDIC stopped examining for disparate impact in 2025. What remains is the core of the law: a lender may not treat an applicant differently because of race, sex, national origin, religion, marital status, age or the other prohibited bases, and examiners still look for it.

Why consistency is the practical test

Disparate treatment in a judgmental decision usually looks like inconsistency: one owner's undisclosed debt is waived with a phone call, another's ends in a decline; one file's working capital explanation is accepted on a sentence, another's needs a cash cycle. The defense is the same test, the same thresholds and the same documented exceptions for every file, with reasons tied to findings.

The survey data show why lenders watch outcomes. In the Fed's 2025 survey, before any adjustment for profitability or credit risk, full approval rates differed widely by the owners' race and ethnicity.26

A lender cannot ask a business applicant about race or sex for its credit decision. Section 1071 will require some lenders to ask for reporting from 2028, with the answers kept away from the people who decide, unless they need them for their job and the lender tells the applicant so.17

Section 1071 for small business lenders: the rewritten rule and the January 1, 2028 start

In shortSection 1071 of the Dodd-Frank Act requires lenders to collect data on credit applications from small, women-owned and minority-owned businesses. The CFPB's May 1, 2026 rule narrowed the 2023 rule: only lenders with 1,000 covered originations in each of two consecutive years, only businesses with $1 million or less of revenue, no cash advances, no agricultural credit and no loans of $1,000 or less. Collection begins January 1, 2028.

Two consequences for a decision desk. First, the $1 million revenue line now matches the line in Regulation B's notice rule, so one revenue figure, taken from the return, decides both which notice clock applies and whether the application is reportable. In the example, Ellisford's $1.9 million of revenue puts it outside both.

Second, denial reasons are no longer a reported data point, but they are still owed to the applicant under 1002.9, so the reasons a desk writes still have to be specific and on file.4,17 Merchant cash advances being outside the rule also means no federal dataset will count them.

Automated credit decisions and the April 2026 model risk guidance: what counts as a model

In shortThe 2026 interagency guidance defines a model as a complex quantitative method built on statistical, economic or financial theory. Spreadsheet arithmetic and fixed rules are outside it, and generative AI, along with AI that acts on its own, is outside its scope for now. A bank's business credit score is a model. A tool that reads documents and drafts a memo is governed through the bank's own risk management and its third-party guidance. Whatever the tool, the bank owns the decision and its reasons.

On April 17, 2026, the Federal Reserve, OCC and FDIC replaced the 2011 model risk guidance (SR 11-7 and OCC 2011-12).16,22,23 The new text defines a model as "a complex quantitative method, system, or approach that applies statistical, economic, or financial theories to process input data into quantitative estimates", and excludes "simple arithmetic calculations, such as those found within spreadsheets" and deterministic rule-based processes.

It calls generative AI models, and AI that takes actions on its own, "novel and rapidly evolving", and places them outside "the scope of this guidance"; the agencies plan a request for information on AI.

It is "expected to be most relevant to banking organizations with over $30 billion in total assets", and the OCC says it does not require community banks to perform annual model validation. The OCC also rescinded its 1997 bulletin on credit scoring models.22

Three other texts apply whatever the guidance says

Federal reports point the same way. Treasury's December 2024 report notes that generative AI "can be susceptible to 'AI hallucinations,' producing confidently stated but incorrect output".29 GAO lists "potentially biased lending decisions" among the risks of AI in financial services, and found regulators overseeing AI mainly "using existing laws, regulations, guidance, and risk-based examinations".30

For federal agencies, OMB "presumes any AI model that affects a person's request for critical federal services or benefits, to include loans… is high impact".31 That presumption binds federal agencies only, but it shows how a loan decision touched by AI is viewed. Colorado's 2026 law covers automated decisions about an individual's access to lending; whether a business loan with personal guarantors is in scope is a question for counsel.18

Where small business credit decisions go wrong, from hidden debts to unsupported repayment analysis

In shortThe expensive mistakes are quiet ones: a debt left out of coverage, a working capital explanation that is one sentence long, a credit-elsewhere statement with no support, a reason that says "policy". On SBA loans they surface years later, when the lender asks the SBA to honor the guaranty and the file has to prove the analysis was done.

In August 2026 the SBA's Inspector General reviewed 32 defaulted loans where SBA staff had recommended repairing or denying the guaranty and SBA management had overturned the recommendation and paid. In 16 of the 32, OIG found the final decision lacked sufficient evidence, about $11.5 million of potential improper payments. Repayment ability was the category with the highest share: five of six loans. SBA re-examined the 16 and found 15 of the purchases appropriate; it will seek recovery on the other where the law supports it.35

Seven common errors, and why they happen

There is no public figure for how often small business files contain an undisclosed advance, or for the error rate in small business spreads. A lender can measure its own: re-read the statements on 40 decided files and count what the original analysis missed.

How many small SBA loans lenders decide: five years of growth to fiscal 2025, then a 30% fall in fiscal 2026

In shortSBA approved 53,728 7(a) loans of $350,000 or less in fiscal 2025 and 37,638 in fiscal 2026, a fall of 30%, while larger loans fell 24%. Part of the drop is a government shutdown that stopped approvals in October 2025; the rest came through a year of new rules. Most lenders make few SBA loans: 648 of 1,202 made five or fewer in fiscal 2026.

Trade press reached the same picture from SBA's weekly reports. The Coleman Report counted $21.8 billion of 7(a) approvals in the first nine months of fiscal 2026, down 21%, on 40,824 loans, down 30%, with the average loan up 12% to $535,034, and quoted a lender: "Full underwriting on a $150,000 working-capital loan doesn't pencil".37

American Banker reported the full year at 56,130 loans and $32.4 billion, both down by double digits.38 Our computation from the loan file agrees: 56,130 approvals for $32.43 billion, with the median approval rising from $166,850 in fiscal 2025 to $220,000.5

A bank that makes only a few SBA loans a year is most at risk of skipping a step: the two-month statement review, the working capital explanation and the credit-elsewhere wording are easy to forget on the fifth SBA file of the year, under a procedure that changed in March and again in October.

Why the smallest loans need the most careful decision: losses by loan size and the state of credit standards

In shortAmong 7(a) loans approved in fiscal 2021 and 2022, 7.2% of those of $150,000 or less had been charged off by September 2026, against 0.8% of loans over $1 million. The smallest loans earn least and lose most, so cutting the analysis to fit their size gets the risk backwards. Meanwhile banks have nearly stopped tightening standards for small firms.

Small loans have long been less profitable. A Harvard Business School paper put it this way: "high search costs and high transaction costs have made small dollar loans less profitable, causing a gap in small business loans under $250,000."39 A 2015 estimate in the RMA Journal put the cost to obtain, set up and monitor a business loan of $100,000 or less at $3,000 to $4,000, about $1,000 of it underwriting.40

When the loss rate is highest on exactly these loans, the economic answer is to make thorough checking cheap. Reading less to save money is how a $1,140 daily debit reaches closing.

The July 2026 survey also shows demand from small firms turning slightly positive, a net 3.6%, after mostly negative readings since late 2022 (the only other positive one was January 2025).42 Looser standards with rising demand put more marginal files on the desk, which is where the cash flow test and the statement read do the most work.

How often small business owners are approved, and why they say they were turned down

In shortIn the Federal Reserve's 2025 survey of employer firms, 52% of applicants for a loan, line of credit or cash advance were fully approved, and 42% of applicants for any financing received the full amount they sought. SBA loans had the lowest full approval rate of any product, 32%, with 40% denied. Owners who were turned down most often said lender requirements were too strict, or they already had too much debt.

Two details matter for a decision desk. Applicants at small banks were the most likely to be fully approved: 57%, against 43% at large banks and 38% at online lenders.26 And merchant cash advance applicants were fully approved more often than business loan applicants, 48% against 37%, which is part of why an owner turned down by a bank may take an advance and then apply again with it running.26

"Too much debt" is the reason an owner hears; "debt service coverage of 0.40x with all business debts counted" is the reason Regulation B expects.4

Who underwrites and decides a small business loan today, and where the hands-on hours go

In shortA business banker brings the request, a processor chases documents, an analyst spreads, reads and drafts, a credit officer decides within an authority limit, and a chief credit officer signs above it. Most of the hours go to assembling evidence; the decision itself takes about one. Most banks decide a typical loan within ten business days, but the file usually waits for an analyst before work starts.

Banker, analyst, credit officer, chief credit officer: who handles a small business file

Four hand-offs before a small business file is decided

About 16 of 17 underwriting hours go to assembling evidence

The FDIC's survey of about 1,300 banks found three in four approve their typical small business loan within ten business days, and three in ten can approve a small, simple loan within one business day.8 It also found that one bank in ten has a scoring system that can partly or fully automate underwriting of non-card loans, and that small banks lean on soft information from relationships more than large ones.8

An analyst per file, an outsourced credit service or decisioning software

Ellisford Mechanical: a cash advance the application left out, a tested cure and an approval with three conditions

In shortThis is the example from the top of the page, inside the product. Six agents read and test the 38-document file in under two minutes after the last document lands, and place it on the decision board under Needs a look. On Monday, Renee Okafor, the credit officer, opens a day-by-day picture of the borrower's bank account, sees the cash advance, checks it on the statement page, tests the cure, and signs an approval with three conditions.

1

Every complete file, in the lane its evidence puts it in

The decision board holds fifteen small business requests in four lanes: New files, Ready to decide, Needs a look and Decline likely. Each card carries the amount, the product, coverage, the business score, the eligibility result and the one or two reasons the file is where it is.

Ellisford Mechanical sits in Needs a look with two coverage figures on its card, 1.58x as the application shows it and 0.40x with every debt counted, and its reasons: a cash advance not disclosed, working capital at 60%, an $8,740 judgment open.

2

Six agents, 38 documents, 1 minute 52 seconds

When the last document arrived on Friday at 4:40 p.m., the file reader sorted the application, three Forms 1919, two Forms 413, three years of returns, transcripts and twelve statements. The cash-flow spreader put 2025 operating cash flow at $151,300. The bank statement analyst classified 2,914 transactions. The eligibility checker ran nine SBA checks. The credit and policy tester placed the file. The memo and letter writer drafted both.

Each of the three findings carries its evidence and a cure the officer can adopt or reject.

3

Twelve months of the business's bank account, drawn

Monday morning, Renee opens the file on its statement timeline: operating account ••4471 from October 2025 to September 2026 as a daily balance line, with a row of ticks for each recurring payee beneath it. Payroll every other Friday, rent on the 1st, the van loans on the 5th, the equipment loan on the 15th. And a solid red row that starts in May.

Beside it, the decision panel answers her three questions: coverage three ways, 16 of 19 tests passed, and the recommended amount with its conditions.

4

The finding opens the page it came from

Renee clicks the red row and the May statement opens at page 1. "BRSKLN CAP FUNDING · ADV 26-05112", a $100,000 credit on May 1. Then "BRSKLN CAP ACH DEBIT", $1,140, on May 4 and every business day after it, each line highlighted.

She does not have to take the finding on trust. The evidence is the bank's own statement, and the memo cites the page.

5

The cure tested, then one signature

On the cash-flow screen she switches the advance from "Count it" to "Paid off from own cash": $20,520 out of a $52,300 September balance, and coverage returns to 1.58x, above the SBA floor and the bank's 1.25x policy. She asks the assistant why working capital is 60%; it points to the $412,600 school contract that bills net 45, and she confirms the explanation in the memo.

$240,000 is within her $250,000 authority, so no second signature is needed. She signs with the meaning of her signature on the screen, and the conditional approval goes to the banker and the owners.

The solution's design target is a decision-ready file in under a day from the moment the file is complete, for loans up to $350,000. It is a target, to be measured on your own files.

July day by day, recurring debits against the debt schedule, nineteen checks and the SBA-shaped memo on screen

In shortThese eleven screens show the rest of the product: July day by day, a returned debit on its statement page, every recurring debit against the debt schedule, deposits against revenue, the spread and the cure, nineteen checks, the memo in the SBA's shape, the decision options, the signed record, the results and the rules.

What the decisioning agents may not do, and the authority limits that decide who signs

In shortEach agent has one job and a written limit. None of them declines a loan, clears an eligibility hit, sends a letter or changes a borrower's figures. The credit officer decides within her authority; the chief credit officer co-signs above it or on a policy exception; the SBA lending manager clears any hit on the federal lists.

Six decisioning agents that read, spread and test the file

The credit officer signs to $250,000; the chief credit officer co-signs above

Every agent step and every person's action is on the audit trail with who and when, and every change to the lending rules is versioned. Reasons on a decline or counter-offer come from findings, and the notice of action is tracked against 30 days from a complete file, with a warning at day 20.

Renee, Martin and Jordan on the Ellisford Mechanical file

From the documents in a complete file and your credit policy to a spread, a memo, a letter and a signed decision

In shortIt reads the documents a small business file already holds and the bank's own credit policy, and leaves behind a spread, a statement analysis, nineteen cited checks, a lane with its reasons, a memo, a letter and a signed decision. The origination system, the core and the SBA's own submission channel stay where they are.

Origination, core banking, credit bureaus and IRS transcripts to connect

For each, check whether it has an API, a file feed, or only screens, and who owns it.

Your origination system and credit policy stay the record

What slow or incomplete small loan decisions cost a business bank

In shortStart from your own numbers, because nobody publishes hours per small business file or how often a debt is missed. A few published figures frame them: what an analyst hour costs, how fast other banks decide, and how often the smallest SBA loans are charged off.

Timing your own small business files and waiting days

Missed daily debits, repaired guaranties and customers lost to cash advances

Analyst hours released and small loans you now turn away: valuing a one-day credit decision

In shortPut in your own numbers. The calculator values analyst hours released, adds the small loans you now turn away and could make, and subtracts what the tool and your testing cost a year. Only the analyst wage is published; every other default is an assumption to replace.

Analyst time and files decision-ready on arrival

Your analyst hours and small loans won on a year of requests

At 300 files a year, a 14-hour saving covers the default cost twice over. At 60 files a year, the case rests on the loans you would add or the guaranty risk you would remove.

Credit desk readiness for prepared decisions: written policy, statement reading, examiner findings and notice records

In shortPick the answer closest to your desk today. Eight questions score 0 to 2; the ninth is for reflection. Each says why it matters and what a strong answer sounds like.

Credit desk scores: write policy as rules, replay 60 files, or implement

Questions that tell a file reader from a score engine: sixteen to ask any decisioning vendor

In shortAsk every vendor the same questions, us included. The answers show whether the product reads the documents or waits for typed inputs, how it finds debts the borrower did not list, who decides, where the reasons come from, and how you would measure it on your own files.

A first pilot: replay 60 decided files, plant five hidden debts, then run in parallel

In shortMeasure first, then test on files whose outcome you already know, with debts you planted, then run beside your officers on live files. Decide with four numbers. None of these steps commits you to a vendor.

1. Time five files by step, and pull last year's median days from complete file to decision. That is your baseline.
2. Choose 60 decided files up to $350,000, approvals and declines, SBA and conventional, with the statements you hold.
3. Plant five advances in copies of five files: a daily debit, a weekly one, a second advance stacked on a first, a renamed payee, and one funded just before the two-month window. Add three look-alike decoys.
4. Replay blind, then run four weeks in parallel on live files, with your officers deciding and signing every one.
5. Decide with four numbers: planted debts found, false alarms, agreement with your officers by lane, and hands-on minutes per file.

Measuring decisioning software: planted debts found, false alarms, agreement

MCAs on bank statements, DSCR for 7(a) Small, adverse action and Section 1071: decisioning questions answered

In shortThe questions credit teams, buyers and business owners search for most, each answered on its own.