Experian plc

How does this company make money?

Each time a lender pulls a credit report or score, Experian charges a per-query fee. Banks that want continuous monitoring of their customers' credit files pay a monthly subscription. Companies that call Experian's identity verification API — for example to confirm who is opening an account — pay per transaction. Businesses that license Experian's credit decisioning software pay ongoing licensing fees. And when a consumer using Experian's free credit-monitoring service clicks through to apply for a credit card or loan, Experian collects a referral commission from the financial company that wins that customer.

What makes this company hard to replace?

Banks have spent months embedding Experian's APIs and FICO score outputs directly into their underwriting software, and any change requires a new round of testing and regulatory sign-off. Mortgage lenders face an additional lock-in: Fannie Mae and Freddie Mac specify which credit bureau data formats they will accept, so lenders cannot simply swap in a different bureau's score without first getting that bureau approved at the GSE level. On top of that, the data-sharing agreements between Experian and its thousands of furnishing banks typically run for multiple years and include detailed technical specifications that make switching a significant project.

What limits this company?

The stitching software gets better the more historical examples it has learned from — decades of prior linkages teach it how to handle unusual name variations or address gaps. A new company processing the same monthly volume of updates today could not shortcut that accumulation; it simply has to be earned over time. On top of that, every new country Experian enters requires building a separate compliance operation to satisfy local consumer-data laws — those teams and processes cannot be automated, so each new market takes real time and money before Experian can legally sell scores there.

What does this company depend on?

Experian cannot operate without automated data feeds from major banks including JPMorgan Chase and Bank of America, which supply the raw credit file updates. It needs its Consumer Reporting Agency license under the FCRA to legally furnish credit reports in the US. It relies on real-time connections to core banking systems through SWIFT and other financial messaging networks, cloud computing capacity from Microsoft Azure and AWS to process that data, and access to Social Security Administration death records to verify identities.

Who depends on this company?

Mortgage lenders use Experian's scores inside automated underwriting systems — without them, approvals would require slow manual income checks. Auto dealers rely on instant credit decisions that would revert to phone-based credit checks if Experian went dark. Hospitals use Experian's identity verification to reduce medical identity fraud, and digital banks like Chime depend on real-time Experian APIs to open new accounts in seconds.

How does this company scale?

Adding more consumer records or entering new geographic markets is relatively cheap once the core software is running — the algorithms and data processing infrastructure can stretch across additional volume through cloud deployment on Azure and AWS. What does not stretch easily is the team of senior data scientists who understand both financial risk modeling and the specific consumer-protection laws of each new jurisdiction; those people take years to train and cannot be hired quickly, which slows every expansion into a new market.

What external forces can significantly affect this company?

Open banking rules in Europe and emerging US state privacy laws could allow consumers to share their own financial data directly with lenders, cutting Experian out of some transactions. Growing use of cryptocurrency reduces the traditional payment histories that credit scoring models are built on. And the shift toward gig economy work — where income arrives irregularly rather than as a regular paycheck — makes existing scoring models less accurate for a growing share of the population, which creates pressure to rebuild those models or risk selling scores lenders find less useful.

Where is this company structurally vulnerable?

If a new US privacy law — or an expansion of existing rules modelled on Europe's right to erasure — forced Experian to delete historical identity linkage records, the stitching software would lose the training data it depends on. Ambiguous cases it currently resolves correctly would start producing errors, the scores would become less reliable, and lenders would have less reason to stay rather than test a competitor.