Credora

Credora helps a bank lend to its own business customers before they ask. For every corporate customer of Sapphire Bank it decides whether to make a pre-approved loan offer, sets the amount, rate and tenure, and sets how far the relationship manager may negotiate. All of the analysis runs inside Exasol Personal, where the bank's data already meets.

It is live and working. Every link below is the real deployment.

Sign in with one click on the login page, or use a demo login. All data is synthetic, so the passwords are public.

• admin / Demo@123 is the bank manager, who approves models and policy.
• datasci / Demo@123 is the data scientist, who runs the analysis and publishes it.
• loanops / Demo@123 is loan operations, who assigns companies to relationship managers.
• rm / Demo@123 is Subhashree Mohanty (RM001), a relationship manager who sees only her own companies.

Submission at a glance#

The problem#

Banks already hold most of what they need to lend to their existing business customers. Transactions sit in core banking, partner and KYC details in the customer master, and each company's credit need on file in loan origination. Credit bureau, GST and Account Aggregator data can be fetched by API, with the customer's consent.

The trouble is that this data lives in separate systems. A credit team has to gather it by hand, score the risk and price each offer one customer at a time, so good customers wait weeks and some are never approached. Copying everything into yet another system adds cost, delay and data-protection risk.

Credora answers one question for every corporate customer, in one run. Should the bank offer this company a loan, how much, at what rate and for how long, and how far can the relationship manager negotiate? It answers it where the data already is, and each person sees only what their role allows.

The solution#

Sapphire Bank has a large book of corporate current-account customers and wants to approach the best of them with a pre-approved offer. Each offer has an amount, a rate and a tenure, plus a negotiation limit the relationship manager can move within. The data for that sits in the bank's Oracle, MySQL and PostgreSQL databases (including each company's credit need on file) and in 3rd party data via API from CIBIL, GSTN and the Account Aggregator. One call, EXECUTE SCRIPT CREDORA.RUN_ANALYSIS('<run>'), reads all six sources in place, scores risk with models trained in Exasol and prices and ranks the companies analysed in about 18 seconds.

Credora does all of this inside Exasol Personal, where the data already meets, so the bank can approach its best customers first with a ready offer. The data scientist runs the analysis and publishes it. Loan operations assigns the companies to relationship managers, and each manager negotiates inside the limit and logs the loan status. The admin approves model activations and policy changes. In every role, Ask Credora answers plain-English questions with Claude through the official Exasol MCP server.

Exasol features used#

Credora started on the Exasol Personal Local Starter Kit (exakit 0.2.3, with the Exasol MCP server 2.3.0, exapump 0.13.1 and pyexasol). It was then deployed on AWS with the Exasol Personal launcher 2.3.0, running Exasol 2026.1.0 on an r6i.xlarge.

Each feature, with its code and the reason for it, is in docs/WHY_EXASOL.md.

Roles, enforced by Exasol#

Every app role reads Exasol as its own database user. The backend runs each screen's queries as that user, and Ask Credora starts the MCP server logged in as the same user. When Exasol refuses a query, the screen shows 403 Exasol denied access for your role. Analysis, training and the purge run as the service user CREDORA_SVC.

The RM logs the loan status one step at a time, from Contacted to Disbursed. Loan taken needs terms agreed within the negotiation limits or sanctioned by loan operations (docs/API.md).

The V_RM_* views join CREDORA.RM_ASSIGNMENT on EXA_USER = CURRENT_USER, and R_RM has no grant on the result tables. Signed in to Exasol as CREDORA_RM, V_RM_DECISIONS returns her 25 companies and SELECT * FROM CREDORA.DECISIONS fails with "insufficient privileges". A prompt can't widen that, because the limit lives in the database.

Verify it yourself#

Every feature below can be tried on https://credora.loan and found in the code.

Setup and reproduction#

Everything runs from your own machine against your own AWS account. Nothing in the code is tied to an account or a domain.

1. Install the Exasol Personal Local Starter Kit, following its README. It brings the exasol launcher from exasol/exasol-personal, uv, pyexasol, exapump and the Exasol MCP server. Check it with exakit version (Credora was built with 0.2.3) and exasol version.
2. Install the AWS CLI v2, Docker, Python 3.12, Node.js 20+ and Git.
3. Log in to AWS, and have a Route 53 hosted zone in that account. The default sizes need 6 vCPUs of on-demand EC2. bash aws configure --profile mysite aws sts get-caller-identity --profile mysite
4. Clone the repo and install the deploy tool. bash git clone https://github.com/anamika-iit-kgp/credora.git cd credora make setup # or: uv venv deploy/.venv && uv pip install -p deploy/.venv -r deploy/requirements.txt
5. Copy .env.example to .env.mysite and fill it in. The name after .env. is the deployment name.

6. Deploy, then write every URL, login and password to deployments/mysite/ACCESS.md. bash python deploy/credora.py deploy --env mysite python deploy/credora.py access --env mysite

deploy is idempotent. It installs Exasol through the launcher, creates the RDS databases, app host and DNS with OpenTofu, starts the containers, generates 1,000 companies and sets up every Exasol object. Database and API passwords are generated into AWS Secrets Manager. Other commands (status, ship, exasol, generate, destroy) and moving a deployment to another machine are in docs/PORTING.md.

To run only the tests (no AWS needed), install Python 3.12 and Node.js, then run pip install -r backend/requirements.txt -r backend/requirements-dev.txt, python -m pytest -q backend/tests and npm ci && npm run build in frontend/. The same checks run in GitHub Actions on every push.

Data sources, licences, APIs and third-party tools#

All data is synthetic and made by Credora's own generator (mocks/generator), with seed 2026 on the live site. The live data set starts at 1,000 companies, and the admin can add more with one click. Sapphire Bank, its companies, their partners, accounts, transactions, GST returns and credit reports are invented. No real person, company or bank record is used. The generator can replace the data set or add more companies with unique names, PANs, GSTINs and account numbers.

The three mock APIs are written for this project (mocks/). They follow the shape of the real services, but no real CIBIL, GSTN or Account Aggregator API is called, and no credentials for them are needed. Their contracts are in docs/API.md.

Ask Credora and the credit memos call Claude through the Anthropic API (model claude-sonnet-5-5), under Anthropic's commercial terms. Amazon Bedrock can be used instead. Without an AI key the rest of the app works.

The third-party tools and their licences are below.

Exasol, Oracle, MySQL, PostgreSQL and other names and logos belong to their owners and appear only to identify the systems used. Credora's own code is MIT licensed.

Demo video and supporting materials#

Diagrams#

The full design, with failure modes and trade-offs, is in docs/architecture.html.

Repository layout#

exasol/     SQL, Python UDFs, Lua scripts, preprocessor modules and the semantic model
backend/    FastAPI with roles, jobs, Ask Credora and the Exasol audit
frontend/   React and TypeScript, with Explain mode
mocks/      mock CIBIL, GSTN and Account Aggregator APIs and the data generator
deploy/     the one-command deploy tool, with infra/ (OpenTofu) beside it
docs/       architecture, diagrams, glossary, data model, APIs, porting

Documentation#

Built with Exasol open source, thank you#

Every project below runs in the live deployment or in CI. Thank you to the Exasol team and to everyone who contributes to them.

About, contributing and contact#

Credora is an ExaThon India 2026 project. It is a try-out of the Exasol Personal Local Starter Kit and of Exasol Personal, deployed on AWS. The live deployment runs in my own AWS account, on the domains credora.loan and credora.link, which I registered for this project.

Contributions are welcome. Fork the repo and open a pull request, or open an issue first for a larger change. To build on Credora, adapt it for your bank, or buy or license it, raise an issue and I will get in touch.

Project by Anamika, Product Manager @ Equitas Small Finance Bank. Sapphire Bank is fictional, and all data is synthetic.

License#

MIT. See LICENSE.