Learning point 1
What is agentic AI and how is it different from what most banks have deployed so far?
Agentic AI refers to AI systems that can take autonomous sequences of actions to achieve a goal - planning, executing, and adapting without requiring human input at each step. Most banks have deployed non-agentic AI: predictive models (credit scorecards, propensity models) that take inputs and produce a score, or chatbots that answer questions. Agentic AI goes further: it acts, not just advises.
The distinction matters because it changes the value proposition dramatically. A predictive credit model tells your analyst this applicant has a 72% probability of default. An agentic credit system analyzes the application, pulls the bureau report, reads the bank statement, checks policy eligibility, calculates the recommended limit, writes the credit note, and submits it to the sanctioning authority - with the analyst only reviewing and approving the final recommendation. The agent does the work; the model only provides a score.
Agentic AI also introduces new risks that predictive models do not - specifically, the risk of the agent taking wrong actions, not just making wrong predictions. This is why evaluation, guardrails, and HITL design are so much more important for agentic systems than for traditional ML models, and why the regulatory and risk governance framework must be more robust.
In the EU, agentic AI for credit decisioning is unambiguously a high-risk AI system under the AI Act - Article 14's human oversight requirement means fully autonomous credit decisions affecting natural persons are not permitted without effective human oversight. The architectural pattern of choice is therefore agent-assisted human decision-making, not autonomous decisioning.
Learning point 2
How should an NBFC think about building an internal AI capability versus buying from a vendor?
The build-versus-buy decision for AI agents in lending hinges on four factors: time to value, total cost of ownership, domain expertise depth, and strategic differentiation. For most lenders, the honest answer is: buy the platform and domain-specific agent architecture, but invest in building internal AI literacy and customization capability.
Building AI agents from scratch requires a team with expertise in LLM engineering, prompt design, agent architecture, evaluation methodology, integration engineering, and MLOps. This team costs €1.5M-€3M/year. This team must cover LLM engineering, AI Act documentation, DORA operational resilience, GDPR data governance, evaluation methodology, integration engineering, and MLOps. For a lender whose core competence is credit and collections - not AI engineering - this is a significant and slow-to-produce investment.
Buying from a specialized vertical AI vendor like LendingIQ gives you agents that have already been designed for lending workflows, calibrated against EU credit bureau data across member states, tested against AI Act conformity assessment requirements and EBA Guidelines on loan origination, with DORA-compliant operational resilience and GDPR data governance. You go to production in weeks instead of years, and the vendor's continuous improvement benefits your deployment automatically.
The strategic case for some internal capability remains: your institution's credit philosophy, risk appetite, and customer segment create nuances that no vendor can fully anticipate. The optimal model is a vendor-provided foundation with institutional customization layers - you configure the agent's credit policy parameters, escalation thresholds, and product-specific rules, while the vendor maintains the underlying engineering.
Learning point 3
What will AI agents be able to do in banking five years from now that they cannot do today?
Over the next five years, AI agents in lending will evolve across three dimensions: capability depth, integration breadth, and trust.
On capability depth, agents will develop reliable long-term reasoning - the ability to analyze a borrower's complete credit history across multiple institutions, identify multi-year patterns, and produce credit assessments that consider the economic cycle context of individual decisions. Current agents are limited to the data in a single session; future agents will operate across longitudinal data architectures.
On integration breadth, the Financial Data Access Regulation (FiDA) framework will mature - building on PSD2/PSD3, FiDA extends data sharing beyond payments to insurance, savings, investments, and mortgages, with consented agent access enabling continuous, holistic credit assessment.
On trust, as the AI Act implementation matures across 2026-2030 and codes of practice are published, the boundary between deployer oversight and operational autonomy will be clarified - but Article 14 fundamentally constrains full autonomy in high-risk lending for the foreseeable horizon.
Fluent multi-language AI across the EU's 24 official languages, with practical priority on French, German, Spanish, Italian, Polish, and Dutch, will expand credit access for cross-border applicants and underbanked language minorities.