Lending for SaaS platforms: three ways to offer credit

Lending for SaaS platforms takes three shapes. A platform can embed a white-label capital program such as Stripe Capital, Parafin or Pipe; refer customers to an outside lender; or run its own program with a bank partner. In the first two, the partner underwrites and funds while the platform shares payment data and markets offers. In the third, the platform takes credit risk and more compliance work.

Three ways to add lending to a SaaS product

The paths differ in what the platform builds, who funds the credit, and which duties land on the platform. The product models themselves and the question of who is the lender of record are set out in our guide to embedded lending; this page is the platform’s decision guide and does not repeat them. For the wider setting, see b2b embedded finance and the lending software and embedded lending section.

The order of the rows below carries no meaning.

Option 1: a white-label capital program

In a white-label program the provider runs the credit and the platform runs the surface. Stripe Capital for platforms lets a Stripe Connect platform offer financing to its connected accounts, and Stripe’s documentation says that “Stripe and its financial partners manage eligibility, underwriting, pricing, funding, servicing, and collections.” It is available in AU, DE, FR, GB and the US. Parafin describes the same division: “We manage the full program,” its capital page says, listing underwriting, compliance and risk, servicing and support.

The data. Stripe prequalifies connected accounts daily from their payment activity with the platform, with no action required from the platform; eligibility needs at least three months of payments on Stripe with that platform, annual volume of at least 5,000 and a monthly average of at least 1,000 in local currency. A platform whose customers take money elsewhere can import non-Stripe payment data, including other processors, cash and checks: Stripe requests “a one-time upload of 24 months of historical data,” then daily uploads through an Amazon S3 connector or the Files API. In the US, the fixed-term loan is available to accounts whose outside payment data has been imported. Parafin’s no-code path runs on shared Stripe or Plaid data; Pipe asks partners to “share anonymized payment data via cloud warehouse sync or simple API calls.”

The engineering. Stripe publishes three integration types: no-code (minutes to hours, US and AU), embedded components (hours to days) and API (days to weeks). With the API, the platform sends the offer emails and handles marketing. Parafin offers a self-serve dashboard, an embedded offer component, or its APIs and webhooks; its public demo repository shows the platform creating a Business, a Person and a Bank Account, then exchanging client credentials server-side for a short-lived bearer token so that “credentials never touch the browser.” YouLend’s partner docs put partner-hosted onboarding at up to one screen and up to four API calls, and a fully embedded build at “5+ screens, 10-20 API endpoints and 5+ webhooks to consume.” Pipe says it can launch partners in two to four weeks; its press release gives a hosted launch in as little as a week and a full API build in as little as four.

What the platform still owns. Stripe’s marketing rules require that all new or updated customer-facing material be reviewed and approved by Stripe and its financial partners before publication, for the life of the program, with a standard turnaround of five to seven business days. The platform “must notify all eligible connected accounts about available offers,” and materials must name Celtic Bank, Lead Bank and YouLend as relevant and carry a set disclaimer. Stripe’s compliance page tells platforms to keep marketing materials, customer data and disclosures “for at least 5 years,” and to follow the CAN-SPAM Act and UDAP rules in the US.

Who carries the loss. Stripe’s platforms page promises a revenue share on all loans or merchant cash advances “with zero credit loss liability.” YouLend says its cash advance lets partners offer financing “without any liability,” while also allowing a partner that wants to provide its own capital and make its own credit decisions. Parafin says it manages risk but does not publish more than that.

The rate is not published. Stripe, Parafin and Pipe all say a revenue share or a share of the capital fee exists; none publishes the rate. Stripe’s API docs note only that a “Paid out” status is used “for platform origination volume and revenue share reporting.” Pipe’s partner portal lets partners “track revenue share” without stating it. Nor is every funder published: Lightspeed Capital is described as a merchant cash advance built into the point of sale, and its funding provider does not appear on that page.

Onboarding can be thin. Parafin’s case study says Mindbody needed “a single data integration,” after which Parafin handled sourcing funds, the product flow, servicing and risk; Parafin reports funding over $100M to Mindbody merchants since the 2022 launch, a company figure. Mindbody’s own pages show Parafin in the US and Stripe Capital in the UK and AU. DoorDash Capital from Parafin is a cash advance rather than a loan, and merchants must “Opt in to data sharing.”

Option 2: referral or a lender marketplace

A referral needs no capital program and little code. Pipe describes a referral model that lets partners refer clients “without the need for direct integration,” alongside a hosted model with one data integration and a deep SDK build. ServiceTitan’s marketplace lists Bluevine for business capital, with lines of credit from $5,000 to $250,000.

The disclosures are where a referral shows up. Housecall Pro states that Pipe Capital in the US is offered by Pipe Advance LLC, that Housecall Pro is an embedded partner of Pipe, and that it “may be paid a referral fee in connection with any approval.” On consumer-side financing, ServiceTitan says all financing comes from third-party partners and that “ServiceTitan is not responsible for any credit decisions.” That consumer product, financing offered on a quote or invoice, is a different build; see pos financing platform.

A referral is not automatically outside the rules. Several state commercial financing laws define a “broker” or “provider” by the act of obtaining or presenting offers, not by holding the paper. See the compliance section below.

Option 3: your own program with a bank partner

Two public filings show what this path means in practice.

Toast’s FY2025 Form 10-K describes an industrial bank partner originating Toast Capital loans, with Toast marketing and servicing them and repayment taken as a fixed percentage of each transaction on Toast. Loans reach $300,000. Toast is “obligated to purchase certain loans originated by our industrial banking partner” when payments are missing or delayed, and “Our obligation is limited to a specified percentage of the total loans originated, measured on a quarterly basis.” It accounts for that as a financial guarantee: credit loss expense of $62 million in 2025, against $45 million in 2024, and $71 million of restricted cash held as collateral with the originating bank as of December 31, 2025. Toast earns fees for underwriting and marketing loans, plus servicing fees. Its risk factors add that “State advertising, loan brokering, loan servicing, and debt collection laws may apply to the marketing and loan administration services we provide to our bank partner,” and that it may have to register to provide commercial loan facilitation services in some states. Toast’s support page names WebBank as the partner.

Intuit goes further and owns the assets. Its Form 10-Q for the quarter ended January 31, 2026 reports that in the six months ended that date it “purchased business loans from our originating bank partner with principal balances in the amount of $2.6 billion.” The net held-for-investment balance was $1.6 billion, net of a $120 million allowance for credit losses, and Intuit also sells participation interests through forward flow arrangements.

This path needs a stack the first two paths rent. That means a decision on how to choose a loan origination system and a look at the loan origination software comparison, with vendors such as nCino and MeridianLink; then a loan servicing platform for payments, statements and delinquency, with LoanPro and Canopy among the options. The bank side is its own selection: see how to choose a sponsor bank and the proposed interagency third-party risk guidance, which speaks to how banks oversee partners like these.

Using more than one provider

A platform is not limited to one funder. Jobber Capital “partners with Parafin and Stripe to assess eligibility for loan offers,” and requires at least three months on Jobber with Jobber Payments turned on. Stripe’s case study reports that Jobber’s program has seen hundreds of millions in lifetime financing originations, and that a promotional embedded component produced “a 100% increase in Capital originations within the first month” - company-published figures, undated. Housecall Pro lists Stripe Capital, Fundbox for a revolving line of credit, Pipe for revenue-based advances, and invoice funding.

More funders mean more marketing reviews, more disclosure text and more data plumbing. Stripe’s daily prequalification only sees volume processed on Stripe with that platform, which is why the outside-data import exists.

Compliance that reaches the platform

This section describes rules as published; it is not legal advice, and it does not say how any law applies to a particular platform.

Section 1071. The CFPB’s revised small business lending rule was issued May 1, 2026 and is effective June 30, 2026, with “the compliance date, which is extended to January 1, 2028.” Under Regulation B, a “financial institution” is any entity that engages in any financial activity, and a covered financial institution is one that originated at least 1,000 covered small business credit transactions in each of the two preceding calendar years. Where more than one institution must decide, section 1002.109 says “only the last covered financial institution with authority to set the material terms” reports the application, and institutions report the actions of their agents. The final rule excludes merchant cash advances, agricultural lending and small-dollar loans of $1,000 or less; trade credit remains excluded.

California. The commercial financing disclosure law’s definition of “provider” reaches a nondepository institution that agrees with a bank “to arrange for the extension of commercial financing” to a recipient “via an online lending platform administered by the nondepository institution.” It covers offers of $500,000 or less; the regulations took effect December 9, 2022. Separately, the California Financing Law defines a “broker” to include a person negotiating or performing any act as broker in connection with loans made by a finance lender, and provides that “No person shall engage in the business of a finance lender or broker without obtaining a license from the commissioner.”

New York. The Commercial Finance Disclosure Law says “provider” also includes a person who solicits and presents specific offers of commercial financing on behalf of a third party. A technology services provider to an exempt bank is exempt only if it has no interest in the financing and no agreement to buy one. The law covers financing up to $2,500,000, and compliance began August 1, 2023.

Texas. HB 700, Finance Code Chapter 398, took effect September 1, 2025. It defines a commercial sales-based financing broker as “a person who, for compensation or the expectation of compensation, obtains commercial sales-based financing” for a recipient, or offers to. It applies to online offers to Texas recipients whether or not the firm has a physical presence in the state, and requires disclosures on offers under $1 million. Banks, their subsidiaries and affiliates are exempt, as is a technology services provider to an exempt bank’s program if it has “no interest, arrangement, or agreement to purchase any interest” in the financing. The OCCC takes applications through NMLS from September 1, 2026; the adopted rules require providers and brokers already operating to register by December 31, 2026, with a $1,000 initial fee and a $1,000 annual renewal. A registrant must keep each advertisement or solicitation for one year, and each transaction file for four years from the transaction or two years from the final entry, whichever is later.

A decision checklist

• Which payment data do you control? Stripe prequalifies only from activity on Stripe with your platform; everything else has to be imported, starting with 24 months of history.
• One processor or several? If customers take money through several processors, cash and checks, plan for the outside-data upload or a provider that ingests a warehouse sync.
• How much engineering time is there? A no-code launch is measured in minutes to hours at Stripe and in weeks at Pipe; a fully embedded YouLend build is 10-20 endpoints and five or more webhooks.
• Do you want credit risk? Stripe states zero credit-loss liability and YouLend states none; Toast must buy delinquent loans up to a capped share of originations, and Intuit buys the loans outright.
• Which states are your customers in? California, New York and Texas each define “provider” or “broker” by conduct, and Texas registration is due December 31, 2026.
• Who approves your marketing? Under Stripe’s terms, Stripe and its financial partners must approve customer-facing material before publication, with five to seven business days of turnaround, and you must tell every eligible account about its offer.
• Can you keep the records? Five years of marketing material, customer data and disclosures under Stripe’s program; one year of advertisements and four years of transaction files for a Texas registrant.
• What is the economics, really? Ask for the revenue share in writing: no provider here publishes the rate.