NovaCredit Financial Technologies AB

This Regulatory Compliance Dossier documents the statutory baseline for LendingScore Engine, operated by NovaCredit Financial Technologies AB. Conducted pursuant to Regulation (EU) 2024/1689 (Artificial Intelligence Act), Regulation (EU) 2016/679 (GDPR), Regulation (EU) 2023/2854 (EU Data Act), and Regulation (EU) 2022/2554 (DORA), the system is classified under the EU AI Act as HIGH_RISK_ANNEX_III. The organization operates in the legal capacity of a PROVIDER under Article 3 of the EU AI Act and acts as a CONTROLLER under GDPR Article 4. Operating in an Annex III vertical (ESSENTIAL_SERVICES_CREDIT_INSURANCE), LendingScore Engine is subject to mandatory conformity requirements under Chapter III. These encompass an Article 9 Risk Management System, Article 10 Data Governance standards, Article 11 Annex IV Technical Documentation, Article 12 automatic event logging, Article 14 human oversight protocols, and Article 72 post-market monitoring. Under Chapter VI of the EU Data Act (applicable since September 12, 2025), customers are contractually guaranteed frictionless switching, standardized machine-readable data export, and zero switching fees prior to January 12, 2027. Declared sub-processors (Hetzner Online GmbH (Falkenstein, Germany), AWS Frankfurt (eu-central-1)) are governed under GDPR Article 28 data processing addenda and Standard Contractual Clauses.