What I want to get across in this guide is what a loan looks like from the bank's side of the desk. Once that picture is clear, the documents, the business plan, the interview and the waiting all start to make sense as parts of one thing, and you can prepare for them as one thing instead of as a pile of separate forms.
So let's start with a definition.
What a loan is, seen from the bank
When a bank lends you LKR 3 million, it is buying a share of your business's future cash. You get the money now. The bank gets a slice of what your business earns over the next three or five years, plus interest for waiting and for the risk that the slice never arrives.
That means every question a loan officer asks is a version of two questions.
The first is about capacity: will this business produce enough spare cash, month after month, to make the repayments?
The second is about security: if it doesn't, how does the bank get its money back?
These are two different questions, and owners often mix them up. Collateral, a property deed, a vehicle, a fixed deposit, a personal guarantee, answers the second question. It is the bank's second way out. Cash flow answers the first question, and it is the bank's first way out. A bank that has to sell your house to recover a loan has had a bad outcome too: it is slow, expensive and public. So even when you can offer strong collateral, the bank still wants to believe the loan will be repaid from the business.
Here is the chain that follows from that. The bank's decision is a result of how risky your loan looks. How risky it looks is a result of the evidence in front of the officer. And the evidence is a result of records your business has been keeping, or not keeping, for the last one to three years.
Which means loan readiness gets built long before the application. By the time you sit down with the bank, most of the answer is already written in your bank statements and your accounts.
Does that make sense? It's worth checking, because almost everything else in this guide follows from it. Think of it the way you'd think about lending money to a friend. Before you handed it over, you'd want to know two things: will they be able to pay me back, and if something goes wrong, is there anything to fall back on? A bank asks exactly those two questions. It just asks them more formally, with a file of evidence in place of a friendship.
The business the bank can see
Imagine two bakeries in Kandy. Both sell about LKR 2.5 million a month. Both are run by careful owners with good products.
The first bakery deposits its takings into a business account every day, keeps a simple monthly profit and loss statement (the record of sales, costs and profit over a period), and its bank statements match its books within a few thousand rupees.
The second bakery runs a lot of cash through the owner's pocket, pays some suppliers from a personal account, and has accounts that show half the sales the business actually makes.
In the real world these are the same business. On paper, the second one is a business with half the revenue, unclear profits and owner finances tangled into company finances. A loan officer can only lend against the business they can see. So the first owner walks in with a strong case, and the second walks in having to explain away their own records.
If your books show less than the business earns, for whatever reason, the bank will size the loan to the books.
What Sri Lankan banks ask for
Each bank has its own list, and schemes differ, but the core is consistent. Expect to provide:
1. Proof the business exists. A Business Registration Certificate, or company registration documents, plus the owner's NIC. If registration is still in progress, the Ministry of Finance notes that some schemes accept evidence that the application has been accepted by the Registrar of Companies or the local authority.
2. A business plan or loan proposal. What the money is for, how it will produce the cash to repay it, and your projections. More on this below, because it is where most applications are won or lost.
3. Financial statements. Audited accounts if you have them; certified or management accounts if you don't. Usually for the last two or three years where the business is that old.
4. Bank statements. Commonly six to twelve months for your main business account. These are how the bank checks that the numbers in your accounts are real.
5. Quotations or invoices for whatever the loan will buy: the machine, the vehicle, the renovation, the stock.
6. Licences and approvals where your industry needs them, such as environmental protection licences for some manufacturing.
7. Your credit history. Banks check the Credit Information Bureau of Sri Lanka (CRIB) for your record and the business's record. You can request your own report before you apply, through CRIB's self-inquiry service, MyReport, at crib.lk. Do this first. If there is a mistake on your record, such as a closed facility still showing as open, it is far better to find it and dispute it now than to have the bank find it during your application.
Eligibility bands also vary. Some lenders define their SME range by annual turnover (People's Bank, for example, lists SME customers with annual turnover between LKR 20 million and LKR 1,000 million), and many prefer at least a year of trading history. Ask the bank which band your business falls into before you prepare anything, because it decides which loan products and schemes are open to you.
Collateral, and what to do if you don't have much
Most bank SME loans ask for some security: a mortgage over land or a building, equipment, a fixed deposit, or personal guarantees.
If that is the barrier for you, there is one development worth knowing about. The National Credit Guarantee Institution (NCGI) was set up in 2023 as a partnership between the government and a group of banks and finance companies, with funding from the Asian Development Bank, and it began issuing guarantees in January 2025. A credit guarantee works like this: the NCGI promises to cover part of the bank's loss if a loan goes bad. That lowers the bank's risk enough that it can lend based on the business's cash flow, with less collateral than it would normally ask for. By July 2026 it had issued more than 2,000 guarantees, covering more than LKR 14 billion in loans.
Applications go through a participating bank or finance company: you apply for the loan, and the lender applies to the NCGI for the guarantee. So the practical step is to ask your bank: do you participate in the NCGI scheme, and would my loan qualify?
Development-bank credit lines and government schemes come and go, and their collateral rules differ. Ask each bank which special lines it is running at the moment.
Notice which of the bank's two questions the guarantee scheme changes. It shrinks the security question and leaves the capacity question exactly where it was. A guaranteed loan still needs a business that can show it will produce the cash. Which brings us to the business plan.
The business plan banks want to see
There are two kinds of business plan, and it helps to name them.
One is written to persuade. It is full of adjectives, market size figures and confident growth percentages. Its job is to make the reader feel good about the business.
The other is written to inform. Its job is to let a careful reader check your reasoning. Every number in it comes from somewhere the reader can see, and the parts agree with each other.
A loan officer has read hundreds of the first kind. What they are looking for is the second kind, because what they are really testing is internal consistency: does the story in the plan match the numbers in the projections, and do the projections match the history in the bank statements? Where those three agree, the officer can say yes with confidence. Where they disagree, the officer has to guess, and banks don't like to guess.
Here is what to put in it.
What the money is for, exactly. The amount, what it buys, and the quotations. "LKR 3,000,000 for a second deck oven, per the attached quotation" is strong. "Working capital for expansion" is weak, because the bank can't tell what the money will do.
How the money turns into cash. This is the mechanism, and it is the heart of the plan. The new oven doubles baking capacity in the morning slot. That lets you take on the two hotel contracts you are currently turning away, worth an estimated LKR 600,000 a month in sales. Each step should be something the officer can follow and question.
A sales forecast built from drivers. A driver is a thing that causes sales. Customers × orders per month × average order value is a forecast built from drivers. "Sales will grow 25% a year" is a forecast built from hope. The first can be checked against your history; the second can only be believed or disbelieved.
A monthly cash flow projection for at least the first 12 to 24 months.
Cash coming in, cash going out, the loan repayment as its own line, and the closing bank balance each month. Show the month where cash is tightest, and show that the business survives it. If you hide that month, the officer will find it anyway.
Proof that repayments fit, with room to spare. Banks look at how many times your spare cash covers the repayment. Say the business currently produces LKR 120,000 a month after all costs, and the new oven adds another LKR 90,000. That is LKR 210,000 available. If the repayment is LKR 75,000 a month, the business covers it 2.8 times. The bigger that cover, the safer the loan looks.
What happens if things go worse than planned. Run the same numbers with the new sales coming in at half the forecast. Cash available falls to LKR 165,000, and cover falls to 2.2 times. Showing this yourself does something important: it tells the officer you have already thought about the downside, which is exactly what they were about to do for you.
Your track record and your team. The last two or three years of accounts, with a sentence explaining any year that dipped. Who runs the business, and who covers when the owner is away.
(The figures above are an illustration. Your bank will quote its own rate and repayment.)
Why good businesses get turned down
When a sound business gets rejected, the rejection letter names a symptom: insufficient repayment capacity, inadequate security, incomplete documentation. It helps to trace each of those back to what produced it, because that is where the fix is.
"Insufficient repayment capacity" is often produced by books that understate profit, or by owner drawings and personal spending running through the business account, so the bank can't see what the business itself earns. The fix is separation: one account for the business, owner pay taken as a fixed monthly amount, and accounts that reflect the real business.
"Inadequate security" is sometimes produced by asking for the wrong kind of loan. A loan should have the same shape as the thing it pays for. A machine that will earn money for seven years is a good match for a five-year term loan. Stock that will sell within three months is a good match for a short-term working capital facility or an overdraft. When owners use an overdraft to buy a long-life asset, or a long loan to cover a temporary cash gap, the numbers stop making sense to the bank, and to the business.
"Incomplete documentation" is usually produced by starting the paperwork when the need arises. Which is the latest possible moment.
Before you apply: a 60-day plan
If you think you'll need a loan in the next year, these steps put you in the strongest position:
- Open a separate business account if you don't have one, and run every business rupee through it.
- Pull your CRIB report from crib.lk and dispute anything wrong.
- Reconcile your books to your bank statements, month by month, for the last 12 months.
- Produce a one-page profit and loss statement every month from now on.
- Get quotations for whatever the loan will buy.
- Build the monthly cash flow projection, including the repayment and the downside case.
- Ask two or three banks which SME band you fall into, which schemes they are running, and whether they participate in the NCGI guarantee scheme.
- Write the plan last, once the numbers exist. Then the words can describe the numbers.
Three ways owners approach borrowing
The first is hopeful: the business is sound, so the bank will see that. Often it can't, because the evidence isn't on paper.
The second, usually after a rejection, is resentful: banks only lend to people who don't need the money. There's a grain of truth in it, since banks do lean on security, and it leads owners to give up on formal finance altogether.
The third treats borrowing as something you prepare for, the way a student prepares for an exam: by building, months in advance, the records that answer the bank's two questions before they're asked.
The bigger point
Everything above is about getting a loan, and it is also about running the business. A monthly profit and loss, a cash flow projection, a sales forecast built from drivers: these are the instruments an owner uses to see where the business is going before it gets there. The bank asks for them because it can't lend safely without seeing that far ahead. You need them for the same reason.
So if you prepare for the loan properly, you end up with two things. A much better chance of a yes. And a business you can see clearly, whether or not you ever borrow.
How Gridwerk helps
This is the work our Forecasting and Financial Intelligence services cover: getting your accounts and bank records to tell the same story, building the sales forecast and cash flow projection, and stress-testing the loan before the bank does. If you want to know how ready your business is, start with the free diagnostic. It's eighteen questions, about seven minutes, and then we call you to go through the rest.
Gridwerk diagnostic