CIBIL Commercial Report Explained: Every Section a Credit Analyst Must Read

A CIBIL Commercial Report — formally a Commercial Credit Information Report, or commercial CIR — is TransUnion CIBIL's record of a *legal entity's* borrowing in India, filed by banks, NBFCs and HFCs. It carries the entity profile, every credit facility with its DPD history, non-funded and guaranteed exposure, enquiries and adverse flags. Almost every page written about it is written for the borrower. This one is written for the person underwriting them.

Key facts

• The CIR is filed under a mandated format, not a lender's preference. Credit institutions must report to all four RBI-registered CICs in the Uniform Credit Reporting Format (UCRF), which has separate forms for consumer, commercial and microfinance segments (RBI, Credit Information Reporting Directions, 2025, 6 January 2025). Any field the commercial form does not carry is not in the report, however material.
• YuSight has processed 1 Mn documents, and the Bureau Analyzer parses a commercial CIR into a facility-level table — lender, sanctioned, outstanding, overdue, asset classification, DPD grid, ownership type — so the analyst starts from data rather than from a 40-page PDF.
• The reporting clock is fortnightly, with a defined lag. Lenders update as at the 15th and the last day of each month, submit within 7 calendar days of the fortnight close, and CIBIL ingests within 5 calendar days (RBI, 2025 Directions). A default can be up to 27 days old before it can legitimately appear.
• The commercial book it sits on is large and currently benign. India's commercial lending portfolio was ₹67.5 lakh crore, up 16% year on year, with delinquencies at a five-year low of 1.87% and roughly 3.6 crore credit-active businesses as at December 2025 (TransUnion CIBIL–SIDBI MSME Pulse, April 2026). Benign portfolio averages are exactly when file-level reading stops happening.
• The enhanced CIR is built around related parties, not just the borrower. CIBIL describes it as covering "the Borrower, its Related Parties, Guarantors and Guaranteed parties", with a related-party network analysis linking entities that share an individual (TransUnion CIBIL, Commercial CIR asset sheet).

What is a CIBIL Commercial Report, and what does CIR stand for?

CIR stands for Credit Information Report. On the consumer side, the CIR is the document behind the CIBIL Score. On the commercial side, the CIR is the document behind the CIBIL Rank (CMR) — and unlike the consumer report, it is not something the borrower routinely pulls for themselves.

Terminology you will hear used interchangeably inside a credit department:

The distinction that matters at the desk is between the report and the rank. The rank is one field. The report is the evidence. A credit note that quotes the rank and skips the tradelines has quoted a conclusion without the working — the same failure as a credit appraisal memorandum that carries a risk grade with no ratio behind it.

What are the sections of a CIBIL Commercial Report?

CIBIL's own description of the enhanced commercial CIR lists these components (Commercial CIR asset sheet):

1. Executive Summary — "quick and easy insights on credit health of the borrower".
2. Entity & Associated Parties Profiling — the borrower, its related parties, guarantors and guaranteed parties.
3. Related Party Network Analysis — connections between multiple entities linked to the same individual.
4. Related Party Score — creditworthiness of the individuals running the business.
5. Commercial CreditVision (CCV) Algorithms — behavioural characteristics over 36 months: "Credit Activity, Payment Behaviour, Leverage, Liquidity Profile, Credit Quality".
6. CreditVision CIBIL Commercial Rank (CV CMR) — rank bands over a 36-month evaluation window.
7. Debt Analysis — credit demand trends, loan wallet distribution by lender type, credit performance, direct and indirect debt obligations, and tradeline-level adverse information.

In the report as it lands on your desk, those components are laid out roughly as: header and enquiry input, entity profile, rank, credit facility details for the borrower, credit facility details where the entity is guarantor, enquiry summary, and dispute remarks. Section headings and field names vary by product version and by how your institution consumes the file (PDF versus API), so treat any field-level list — including the one below — as a map, not a schema.

How do you read the entity profile section?

The entity profile is the section analysts skim. It is the section that decides whether the other forty pages are about your borrower.

Read and reconcile these fields against the constitution documents and the loan application:

• Entity name and former names. Name changes break history. If the borrower converted from a partnership or proprietorship, expect the pre-conversion history to sit elsewhere — often on the proprietor's consumer report, not on this one.
• Constitution. Private limited, LLP, partnership, proprietorship, trust, society. Constitution drives which reporting form the lender used, and therefore where the data went.
• CIN / LLPIN, PAN, GSTIN, Udyam Registration Number. These are the match keys. A commercial CIR built on a mistyped PAN will look thin and clean.
• Date of incorporation. The hardest sanity check available: no facility can legitimately pre-date it. One that does means two entities have been merged into one bureau record.
• Registered office and other addresses. Lenders file whichever address the application captured. Multiple addresses are normal; an address you have never seen before is worth a question.
• Class of activity / industry code. Wrong codes are common and feed into rank models.

What to flag: a report that is unnaturally thin for an established borrower (split record), a facility older than the entity (merged record), or a name that differs from the sanction request by more than punctuation.

Multi-entity groups multiply this problem. Six bureau reports, four sets of financials and two guarantors is a routine file, and mapping each document to the right entity before analysis begins is the whole job of a document intelligence layer.

How do you read the credit facility (tradeline) section?

This is the heart of the report. Each facility appears as a block with, typically, the reporting member, facility type, sanctioned amount, current balance, overdue amount, date opened, date of last payment, date reported, asset classification, security, and a month-by-month DPD grid.

Read each tradeline for five things:

1. Ownership type. Is the entity the borrower on this facility, or the guarantor? Guaranteed facilities appear in a separate block, and skipping that block is the most common single omission in commercial bureau reading. See the worked example below for what it costs.

2. Funded versus non-funded. Cash credit, overdraft, term loan, working capital demand loan and bill discounting are funded. Letters of credit, bank guarantees and co-acceptance are non-funded until they devolve or are invoked. Total them separately; report both in the memo.

3. Utilisation on revolving limits. Cash credit outstanding against sanctioned limit. A CC line running at 97–99% every month is a permanent working capital gap dressed as a short-term facility, and it will not show up as a DPD.

4. Asset classification and DPD. The classification field carries STD, SMA-0/1/2, SUB, DBT or LSS. SMA-0 is overdue up to 30 days, SMA-1 more than 30 and up to 60 days, SMA-2 more than 60 and up to 90 days for standard loans (RBI, Master Circular on Income Recognition, Asset Classification and Provisioning, 1 April 2023). The DPD grid alongside it shows the month-by-month path. Read the path, not just the current state.

5. Dates. Date opened tells you what is new. Date reported tells you how stale the row is. A tradeline last reported two months ago in a report pulled today is a row you cannot rely on.

The codes you will meet in the DPD grid:

Worked example: reading a commercial CIR line by line

Illustrative extract for Vaayu Auto Components Private Limited, CIR pulled 15 July 2026, data as at the fortnight ended 30 June 2026. Constructed example, not a real borrower.

Borrower tradelines

Facilities where Vaayu is guarantor

Enquiry summary: 9 commercial enquiries in the last 6 months, 2 of which converted (rows 4 and 5).

Step 1 — direct funded exposure. 3,46,20,000 + 41,50,000 + 74,10,000 + 48,90,000 = ₹5,10,70,000

Step 2 — add non-funded. 5,10,70,000 + 78,40,000 = ₹5,89,10,000 direct

Step 3 — add indirect (guaranteed). 5,89,10,000 + 1,62,00,000 = ₹7,51,10,000 total obligation

Step 4 — utilisation on the CC. 3,46,20,000 ÷ 3,50,00,000 = 98.91%

Step 5 — age the money. Total sanctioned across all six rows: 3,50,00,000 + 1,20,00,000 + 1,00,00,000 + 75,00,000 + 50,00,000 + 2,00,00,000 = ₹8,95,00,000 Sanctioned in the last 6 months (rows 4 and 5): 75,00,000 + 50,00,000 = ₹1,25,00,000 = 13.97% of the total

Step 6 — form the judgement.

On the borrower's own five tradelines, this is a clean file. Every row is STD. Overdue is zero everywhere. Worst DPD in 24 months is 000. A summary that stops at row 5 will recommend the sanction.

Four things say otherwise.

• Row 6 is the file. Vaayu has guaranteed ₹2 crore for a group LLP, ₹1.62 crore is outstanding, ₹6,40,000 is overdue, the account is SMA-1 at 47 days, and it is not on Vaayu's own balance sheet as debt. Total obligation is ₹7.51 crore, not ₹5.11 crore — a 47% understatement if you read only the borrower block.
• Row 1 is a permanent overdraft. 98.91% CC utilisation with no DPD is not discipline, it is a working capital deficit being carried at a short-term rate. Compare drawing power against the latest stock and book-debt statement before accepting the limit as adequate.
• The new money is non-bank. ₹1.25 crore raised in six months, both rows from NBFCs, while the bank limits are static. The marginal lender got more expensive.
• Row 5 is stale and unverified. Last reported 31 May in a report pulled 15 July. Its DPD grid shows XXX for June. That row is unknown, not clean.

The recommendation this file supports is not a decline. It is: pull the CIR of Vaayu Forgings LLP, get the ₹6.40 lakh overdue explained in writing, re-pull Vaayu's own CIR within seven days of the credit committee date, and compare the last six months of bank statements against these five tradelines to confirm nothing is being serviced that does not appear here. Compare the bureau tradelines with the bank statement debits and the unreported facility, if there is one, falls out immediately.

That is the same seven-layer discipline set out in the end-to-end guide to reading a commercial bureau report — applied to the Indian document.

What is easy to misread in a CIBIL Commercial Report?

Six specific traps, in the order they cost money.

1. Reading only the borrower block. Guaranteed facilities sit in their own section. Worked example above.

2. Treating `XXX` as clean. No data reported is not paid on time. Where the most recent months are XXX, find out whether the lender's file is late or the account moved.

3. Consortium and multiple-banking double-counting. Each member reports its own limit. Five banks showing ₹20 crore each may be one ₹100 crore multiple-banking arrangement or one ₹20 crore consortium reported five times. Only the sanction letters settle it.

4. Adding closed facilities into exposure. Closure is reported by the lender and lags actual repayment. Ask for the no-dues certificate; note the discrepancy in the memo rather than adjusting silently.

5. Reading "settled" as "closed". A settled account means the lender took a haircut. It sits one column from "closed" and is a different credit fact.

6. Assuming the adverse section is complete. Lenders report wilful defaulters at an outstanding of ₹25 lakh and above and large defaulters (suit-filed, or doubtful/loss) at ₹1 crore and above, at monthly intervals (RBI, Treatment of Wilful Defaulters and Large Defaulters Directions, 2024, 30 July 2024). A ₹90 lakh default is real and below the threshold.

How is a commercial CIR different from a consumer CIBIL report?

For a proprietorship or a small partnership, pull both. The proprietor's borrowing is frequently filed on the consumer form, which means the commercial CIR alone will understate the obligation.

FAQ

What is a CIBIL commercial report?

It is TransUnion CIBIL's credit information report on a business entity, built from data that banks, NBFCs and housing finance companies are required to file. It carries the entity profile, every reported credit facility with its repayment history, guaranteed exposure, enquiries and adverse flags.

What does CIR stand for in a CIBIL report?

Credit Information Report. On the consumer side it is the report behind the CIBIL Score; on the commercial side it is the report behind the CIBIL Rank. The rank is one field on it, not a substitute for it.

How is a commercial CIR different from a consumer CIBIL report?

The commercial CIR covers a legal entity rather than a person, adds non-funded facilities and guarantees, and reports a 1–10 rank instead of a 300–900 score. It is also markedly less complete, because entity matching is harder and some borrowing gets filed on the consumer form instead.

Who can pull a CIBIL commercial report?

Member credit institutions with a permissible purpose — typically an active credit application, a renewal or portfolio monitoring. It is not a document the general public pulls on a third party.

How current is the data in a commercial CIR?

Lenders update fortnightly, as at the 15th and the last day of the month, submit within seven calendar days and CIBIL ingests within five. So a missed payment can be up to about 27 days old before it can legitimately appear on the report.

Why does the CIR show a facility my borrower says is closed?

Because closure is reported by the lender and that file lags the repayment. Get the no-dues or closure letter from the borrower, keep the discrepancy on the record, and do not quietly remove the row from the exposure table.

What does XXX mean in the CIBIL DPD grid?

It means nothing was reported for that month. It is not a clean month. If the last two or three months are XXX, find out whether the lender is simply late or the account has been sold, transferred or written off.

Should guaranteed facilities count in the borrower's exposure?

Yes, as indirect exposure, reported separately from funded and non-funded direct exposure. A guarantee becomes a real obligation the day the primary borrower stops paying, and in group structures that is often the same day the borrower's own numbers turn.

Is CIBIL the only commercial bureau in India?

No. Four credit information companies are registered with the RBI — TransUnion CIBIL, Equifax, Experian and CRIF High Mark — and lenders are required to be members of all of them. Coverage differs at the margin, which is why a thin CIR is worth a second pull elsewhere.

What should I flag first when I open a commercial CIR?

The entity profile, before anything else. Reconcile CIN, PAN and date of incorporation against the constitution documents. If a facility pre-dates incorporation or the file looks impossibly thin, you are reading a merged or split record and every number after that is wrong.

Key takeaways

• The rank is one field; the tradeline table is the evidence. Never write a memo off the rank alone.
• Read the guarantor block. In closely-held Indian structures it routinely carries more risk than the borrower block.
• Total funded, non-funded and indirect exposure separately, and show all three in the memo.
• XXX is unknown, "settled" is not "closed", and a facility that pre-dates incorporation is a bureau matching error.
• A compliant CIR can be almost a month stale. Record the pull date and the data-as-at date separately.

Run one borrower through the analyzer — bring a real commercial CIR and see the tradelines, guarantor block and DPD grid parsed into a facility table you can check.

Related: what CIBIL Rank and CMR actually signal, the seven-layer method for any commercial bureau report, and how the bureau reading lands in a credit assessment memo.