1.   The management body of a crowdfunding service provider shall establish, and oversee the implementation of, adequate policies and procedures to ensure effective and prudent management, including the segregation of duties, business continuity and the prevention of conflicts of interest, in a manner that promotes the integrity of the market and the interests of its clients.

2.   The management body of a crowdfunding service provider shall establish, and oversee the implementation of, appropriate systems and controls to assess the risks related to the loans intermediated on the crowdfunding platform.

A crowdfunding service provider that provides individual portfolio management of loans shall ensure that it has in place adequate systems and controls for the management of risk and financial modelling for that provision of services and that it complies with the requirements set out in Article 6(1) to (3).

3.   The management body of a crowdfunding service provider shall review, at least once every two years, taking into account the nature, scale and complexity of the crowdfunding services provided, the prudential safeguards referred to in point (h) of Article 12(2) and the business continuity plan referred to in point (j) of Article 12(2).

4.   Where a crowdfunding service provider determines the price of a crowdfunding offer, it shall:

(a)

undertake a reasonable assessment of the credit risk of the crowdfunding project or project owner before the crowdfunding offer is made, including by considering the risk that the project owner will not make, in the case of a loan, bond or other form of securitised debt, one or more repayments by the due date;

(b)

base the credit risk assessment referred to in point (a) on sufficient information, including the following: (i) where available, audited accounts covering the two latest financial years; (ii) information of which it is aware at the time the credit risk assessment is carried out; (iii) information which has been obtained, where appropriate, from the project owner; and (iv) information which enables the crowdfunding service provider to carry out a reasonable credit risk assessment;

(c)	establish, implement and maintain clear and effective policies and procedures to enable it to carry out credit risk assessments, and publish those policies and procedures;

(d)	ensure that the price is fair and appropriate, including in situations where a crowdfunding service provider that determines the price of loans is facilitating an exit for a lender before the maturity date of a loan;

(e)

conduct a valuation of each loan in at least the following circumstances: (i) at the moment when the loan is originated; (ii) where the crowdfunding service provider considers that the project owner is unlikely to fulfil its obligations to repay the loan in full, without the crowdfunding service provider enforcing any relevant security interest or taking other steps with analogous effect; (iii) following a default; and (iv) where the crowdfunding service provider is facilitating an exit for a lender before the maturity date of the loan;

(f)	have and use a risk-management framework that is designed to achieve compliance with the requirements set out in points (a) to (e) of this paragraph;

(g)

maintain a record of each facilitated crowdfunding offer sufficient to demonstrate that: (i) a credit risk assessment was carried out when required and in compliance with points (a) and (b) of this paragraph; and (ii) the price of the crowdfunding offer was fair and appropriate in line with the risk-management framework.