Solutions - CCD2 Compliance

Think CCD2
does not apply to your organization?
Think again.

Pay-later flows, subscriptions, payment plans, charging cards, telecom contracts and deferred collections may fall under CCD2 impact. From 20 November 2026, organizations must be able to show that credit-related processes are responsible, controllable and audit-ready.

20 Nov 2026
CCD2 deadline in the Netherlands
64
New providers requiring authorization
€50-70bn
Payment flows potentially affected by CCD2

Built for European compliance, Open Banking and audit-ready decisioning.

Rebillix - CCD2 Decision Flow
Customer onboarding
Consent
Open Banking data
Affordability check
Decision Engine
Audit trail
CCD2 Scope

Does CCD2 apply to your sector?

CCD2 does not only affect banks and Buy Now Pay Later providers. Many organizations unknowingly offer forms of credit or deferred payment.

Telecom

  • Possible CCD2 impact
  • Affordability checks
  • Audit trail
  • Recovery obligations

Mobility

  • Possible CCD2 impact
  • Affordability checks
  • Audit trail
  • Recovery obligations

Energy & Utilities

  • Possible CCD2 impact
  • Affordability checks
  • Audit trail
  • Recovery obligations

Subscription Businesses

  • Possible CCD2 impact
  • Affordability checks
  • Audit trail
  • Recovery obligations

BNPL & Embedded Finance

  • Possible CCD2 impact
  • Affordability checks
  • Audit trail
  • Recovery obligations

Leasing & Installments

  • Possible CCD2 impact
  • Affordability checks
  • Audit trail
  • Recovery obligations

Not sure whether your organization is affected? Use the CCD2 Impact Checker for an initial indication.

Impact checker

Check your CCD2 impact

Answer a few questions and instantly get an indication of whether CCD2 may be relevant for your organization.

1. Do you offer pay-later options?
2. Do you offer split payments or repayment plans?
3. Do you provide products or services before full payment is received?
4. Do you work with consumer subscriptions or recurring payments?
5. Are payment arrears sometimes converted into payment plans?
6. Do you use customer data, payment behavior or bank data for acceptance decisions?
7. Do you have consumer customers in the EU?

Lower likelihood

Based on your answers, CCD2 appears less directly applicable, but regulation and interpretation can differ by sector.

0
Yes answers
0/7
Completed
Regulatory trigger

Why CCD2 is becoming urgent

CCD2 is designed to better protect consumers in credit, deferred payment and financial obligation scenarios. For organizations, this means that onboarding, affordability, transparency, monitoring and auditability become far more important.

1

Old world

Lightweight checks, fragmented processes and limited auditability.

2

CCD2 transition

CCD2 expands the scope and raises expectations around decisioning.

3

New standard

Affordability checks, documented decisions, transparency, monitoring and compliant recovery.

CCD2 changes

What changes under CCD2?

Organizations need to better demonstrate that consumers can afford financial obligations before credit or deferred payment is offered.

Cost of delay

Not being ready is more expensive than becoming compliant.

Regulatory risk

Supervision, sanctions and mandatory remediation.

Operational risk

Manual processes, fragmented checks and inconsistent decision-making.

Revenue risk

Slower onboarding, higher drop-off and missed revenue due to friction.

Reputation risk

Loss of trust from customers, partners and regulators.

Common mistakes

Why leaders underestimate CCD2.

"We do not provide credit."

Often incorrect. Subscriptions, pay-later flows and payment plans may still fall under CCD2.

"We will solve that later."

Authorizations, affordability checks and audit trails require months of preparation.

"It is only a compliance project."

CCD2 affects revenue, onboarding, customer acceptance, payments and collections.

Readiness framework

Where does your organization stand today?

Level 1

Reactive

Many organizations are here without realizing it. Decisions are made manually, payment data is spread across systems and evidence is often missing. Credit risks are assessed reactively instead of monitored structurally.

Risks
No auditable decision-making
Hard to become audit-ready
High operational risk
Dependent on manual processes
High chance of inconsistent policy
Why progress?

CCD2 requires demonstrable and reproducible decision-making. Without structure, compliance becomes costly, error-prone and hard to scale.

Business value

Being CCD2-ready is more than compliance.

Organizations that implement CCD2 intelligently do not only build a compliant process, but improve acceptance, cashflow and retention.

Lower legal risk

Faster customer acceptance

Better conversion

Fully audit-ready

Compliance does not have to slow growth.

Open Banking

Why Open Banking becomes critical

Traditional credit data often looks backward. Open Banking makes it possible to include current affordability, income, expenses and behavioral patterns in onboarding and monitoring.

Always with consent, data minimization and GDPR-by-design.

Customer consent
Bank transaction data
Affordability analysis
Risk decision
Audit trail
Affected sectors

Built for sectors potentially affected by CCD2

Telecom

Post-paid contracts, devices and payment plans.

Mobility

Charging cards, leasing, shared mobility and mobility credits.

Subscriptions

Subscriptions with deferred payment or recurring collection.

Utilities

Payment arrears, repayment plans and customer care.

Leasing

Long-term obligations with onboarding and payment risk.

Consumer finance

Credit, BNPL and consumer payment solutions.

European AI. European data. European compliance.

Rebillix is built for European revenue teams that want to use AI without losing control over data, compliance and customer care.

GDPR-by-design
Open Banking-ready
Audit-ready decisioning
Responsible recovery
European data strategy
CCD2 Assessment

What do you receive during a CCD2 Assessment?

1
Intake
2
Process analysis
3
CCD2 scope assessment
4
Readiness score
5
Personal report

CCD2 Readiness Report

Scope analysis
Risk estimate
Quick wins
Gap analysis
Priority roadmap

Delivered within 48 hours.

Are you sure CCD2 does not affect your organization?

Take the CCD2 Impact Check and discover which parts of your onboarding, payment and recovery process may be affected.