India's largest credit bureau and the de facto first credit-data dependency for any Indian lending product — founded 2000 in Mumbai, TransUnion-majority since 2016, 600M+ individual credit records
TransUnion CIBIL is India's largest credit bureau and one of four RBI-licensed Credit Information Companies (CICs), alongside Experian, Equifax and CRIF Highmark. It was founded in 2000 as Credit Information Bureau (India) Limited, and TransUnion (the US-headquartered global credit bureau) became the majority owner in May 2014, increasing its stake to 92.1% by 2016 — at which point the company was rebranded TransUnion CIBIL. The bureau today maintains credit records on roughly 600 million individuals and 32 million businesses in India. For any Indian lending product — consumer loans, BNPL, home loans, MSME credit, credit cards — CIBIL is rarely a "choice"; it is a regulatory and commercial near-requirement. The real question is not whether you pull CIBIL but how you access it: directly (you have to be an RBI-registered Credit Institution) or via an aggregator API like Karza, Perfios or your lending partner. This page walks through that decision and the typical pricing.
📌 Important distinction. TransUnion CIBIL (the bureau) is not the same as Karza (the data-aggregator API platform owned by Perfios since 2022). The two are sometimes conflated because Karza provides API access to CIBIL data among other bureaus. CIBIL holds the underlying credit data; Karza and others provide the integration plumbing to fetch it. They are distinct vendors at different layers of the stack.
TransUnion CIBIL — full legal name TransUnion CIBIL Limited, formerly Credit Information Bureau (India) Limited — is India's largest credit bureau. It collects, stores and maintains credit information on individuals and businesses in India, supplied to it by member banks, NBFCs, housing finance companies and other regulated lenders. It then makes that credit data available — for a per-pull fee — to the same set of regulated institutions for use in loan underwriting, account-opening risk decisioning, credit-limit setting and ongoing portfolio monitoring.
The company was founded in August 2000 in Mumbai by a consortium of Indian banks (originally led by ICICI, HDFC, SBI and Bank of Baroda) along with TransUnion International and Dun & Bradstreet, in response to the RBI's push for a formal credit-information infrastructure for India. TransUnion (USA) — the global credit bureau headquartered in Chicago — increased its stake over time, becoming the majority owner in May 2014 and reaching 92.1% by 2016, at which point the company adopted the "TransUnion CIBIL" branding. The remaining stake is held by Indian banks and Asia-Pacific institutional investors.
Key milestones in the product timeline that matter for Indian fintech PMs: 2007, the CIBIL Score (India's first generic risk-scoring model for banks) was launched. 2010, CIBIL Mortgage Check launched as the first centralised mortgage database in India. 2011, the CIBIL Score was made available to individual consumers — until then it was only visible to lenders. 2016 onwards, the platform progressively opened API access (originally batch-file based) for digital-lending fintechs, which is the integration path most PG readers will care about.
Crucially, CIBIL is one of four RBI-licensed Credit Information Companies (CICs) in India under the Credit Information Companies (Regulation) Act, 2005 (CICRA). The other three are Experian Credit Information Company of India, Equifax Credit Information Services and CRIF Highmark. Most large lenders pull from multiple bureaus and "stack" them — this is called bureau stacking — because each bureau has slightly different coverage of thin-file customers, MSME records, and recent enquiries.
This is the most important section for product teams new to lending. CIBIL data access is heavily regulated; you cannot simply sign up on a website and start pulling reports. There are three real access paths:
The most common mistake we see Indian fintech PMs make is assuming an aggregator API is a regulatory shortcut. It is not. You always need a CICRA-compliant basis for the pull — either being a CI yourself, or having a CI partner that authorises and underwrites the pull on your behalf. Get this wrong and you can find yourself with a launched product that the bureau later refuses to serve.
The 300–900 generic risk score plus the underlying credit report (loan accounts, payment history, enquiries, current outstanding, defaults). The most-pulled product in Indian lending. Score is recomputed monthly as new data arrives from member lenders.
Credit reports on companies and partnerships, used for MSME and supply-chain finance underwriting. Includes the CIBIL Rank (1–10) and CIBIL MSME Rank (CMR) used by lenders to size and price MSME loans.
Centralised mortgage database — used to detect duplicate financing and verify property-loan history. Important for housing finance underwriting.
Repository of high-risk activity, suspected-fraud markers, and identity-theft signals shared across member lenders. Increasingly important post-RBI's 2024 fraud-reporting tightening.
CIBIL data can also be consumed via the AA framework for consumer-consented credit-data sharing — relevant if you're building lending products on top of the AA stack rather than via direct bureau pulls.
Periodic re-pull of existing borrowers' CIBIL data to detect deterioration in credit health, new defaults elsewhere, or rising overall leverage. Standard in NBFC and bank portfolio-risk operations.
CIBIL pricing is set per pull and is regulated by the bureau's published rate card and the RBI's CIC framework. There is no public per-call price card you can self-serve from; rates are negotiated when you sign a member agreement. Typical 2026 ranges, all subject to volume tiers and exact product mix:
For most Indian consumer-lending fintechs at moderate scale (10K–100K applications/month), the all-in CIBIL spend is in the range of ₹5L–₹50L per month depending on application volume and how aggressively you're pulling for both pre-approval and final-decisioning steps. Pull discipline (don't pull twice when you don't need to; cache for 24–48 hours where compliance allows) is one of the easier ways to bring CIBIL spend down materially.
CIBIL is the wrong call when you're not actually in the credit-extension or credit-information business — there is no use case for pulling it for general identity verification or KYC alone. For pure identity-verification needs, look at IDfy, HyperVerge, Signzy or AuthBridge instead.