Moody's and the business of making trust machine-readable
Moody's and the business of making trust machine-readable
Moody's looks like a ratings company with a software/data add-on. I think the better mental model is narrower and more powerful: Moody's sells standardized trust at the moment financial markets need to convert messy credit risk into something tradable, governable, and auditable.
That sounds abstract, but the mechanism is simple. A borrower wants cheaper, broader access to capital. Investors and regulators need a common language for credit risk. Banks, insurers, corporations, and governments need workflow tools that turn entity, securities, KYC, climate, and default data into decisions. Moody's sits in that translation layer. It does not fund the loan, own the bond, or warehouse much balance-sheet risk. It sells the convention that lets other people move money with less friction.
The resulting business is unusually good: high gross economics, modest physical capital intensity, recurring data/workflow revenue in Moody's Analytics, and cyclical but very high-margin transaction revenue in Moody's Investors Service. The catch is valuation and legitimacy. At roughly $486/share from Yahoo Finance during this run, the 2025 diluted-share market-cap estimate is about $87.5B, or ~11.3x FY2025 revenue. That price already capitalizes a lot of standards-power.
Executive summary
- The bottleneck is not analysis in the generic sense; it is institutional acceptance. A Moody's rating matters because investors, issuers, investment committees, mandates, internal risk models, and regulatory habits already know what to do with it. The value is in being a recognized input to capital-market workflows.
- MIS is the sharper moat, MA is the compounding wrapper. Moody's Investors Service has the standards-power: ratings that reduce distribution friction for issuers and coordination friction for investors. Moody's Analytics turns Moody's data, models, and domain expertise into subscriptions and workflow software.
- The business has two clocks. MIS breathes with debt issuance, refinancing, M&A, securitization, and credit markets. MA grows more like a risk-data/software business: retention, cross-sell, pricing, and product expansion.
- Financial quality is obvious in the numbers. FY2025 revenue was $7.72B, operating income $3.35B, operating margin 43.4%, operating cash flow $2.90B, and estimated free cash flow after capex $2.58B. Diluted shares fell from 195.4M in 2016 to 179.9M in 2025.
- The moat is real, but not invulnerable. Regulation both protects and threatens the franchise. The same embeddedness that makes ratings sticky invites scrutiny over conflicts, pricing, methodology, liability, ESG ratings, AI, data rights, and the issuer-pays model.
- The transferrable mental model: the best standards businesses do not merely publish information; they make other institutions' decisions easier to justify. The product becomes a social API.
What the industry does
The credit-ratings and risk-intelligence industry converts heterogeneous borrower risk into standardized signals, datasets, and workflows.
On the ratings side, a credit rating is not just a prediction. It is a coordination device. Issuers use it to access broader pools of capital. Investors use it to compare securities and enforce portfolio rules. Regulators and internal risk teams use ratings and ratings-derived data as part of governance, capital, and compliance processes. A rating creates a common vocabulary for credit risk that can travel across countries, asset classes, and committees.
On the analytics side, the industry sells risk infrastructure: default data, economic research, entity data, insurance models, banking risk models, KYC and financial-crime workflows, climate and catastrophe risk, portfolio tools, and software that plugs into daily decision systems. Moody's 2025 10-K describes Moody's Analytics as curated data, intelligence, and analytical tools for financial services, corporate, and public-sector customers, including banking, insurance, and KYC workflows.
The money flows through two related but different models:
- Issuer and transaction economics. In MIS, rating fees paid by debt issuers account for most revenue. New issuance, refinancing, structured finance, and program fees drive activity. Moody's notes that annual fee arrangements, monitoring fees, commercial paper and MTN programs, bank deposit ratings, insurance company financial strength ratings, mutual fund ratings, and other areas partially mitigate dependence on new issuance volume.
- Subscription and workflow economics. In MA, customers pay for data, research, models, and software embedded in lending, underwriting, risk monitoring, compliance, insurance, and KYC workflows.
That split matters. Transaction revenue is more cyclical but can be extraordinarily profitable when debt markets are open. Recurring revenue is steadier and creates more software-like compounding.
Business model and economics
Moody's has two reportable segments:
- Moody's Analytics (MA): decision-grade data, intelligence, research, and workflow tools. The 2025 10-K breaks MA into Decision Solutions, Research & Insights, and Data & Information.
- Moody's Investors Service (MIS): credit ratings, research, and risk analysis across corporate finance, structured finance, financial institutions, and public/project/infrastructure finance.
FY2025 revenue by segment was:
| Segment / line | FY2025 revenue | What it means |
|---|---|---|
| Moody's Analytics external revenue | $3.60B | Data, research, software, and workflow subscriptions |
| Decision Solutions | $1.69B | Banking, insurance, and KYC workflows |
| Research & Insights | $1.00B | Fixed-income and economic research |
| Data & Information | $0.91B | Company and securities datasets / feeds / applications |
| Moody's Investors Service external revenue | $4.12B | Ratings and ratings-adjacent revenue |
| Corporate finance | $2.13B | Investment-grade, high-yield, bank loans, and other corporate accounts |
| Structured finance | $0.56B | ABS, RMBS, CMBS, structured credit |
| Financial institutions | $0.76B | Banks, insurance, managed investments |
| Public/project/infrastructure finance | $0.64B | Sovereign/public finance and infrastructure |
MIS is the higher-margin engine. In FY2025, MA generated $1.20B of adjusted operating income on $3.61B total segment revenue, or roughly 33% adjusted operating margin. MIS generated $2.75B of adjusted operating income on $4.32B total segment revenue, or roughly 64% adjusted operating margin. That spread tells you where the pure standards-power lives.
The consolidated company is not capital intensive. In FY2025, Moody's had $7.72B of revenue, $2.90B of operating cash flow, and $0.33B of capex. That is not a factory business. The main investments are people, data, software, reputation, compliance, methodologies, and acquisitions.
Why the industry is structurally unusual
Ratings businesses invert normal supplier/customer logic. The issuer often pays, but the investor and market infrastructure create much of the demand. Issuers do not buy ratings merely because they love the report. They buy because rated debt can reach more buyers, clear internal portfolio rules, reduce friction in marketing, and sometimes satisfy structural requirements in mandates or processes.
That makes the industry a strange kind of marketplace:
- The issuer is the paying customer.
- The investor is a key user.
- The regulator and risk committee are quasi-distribution channels.
- The rating agency's brand and historical database are the trust layer.
- The product's value increases when everyone else already uses it.
This is why a new entrant can hire smart analysts and still not instantly compete. The scarce asset is not analytical talent alone. It is acceptance across the market's operating system.
Industry dynamics
Cyclicality
Moody's own 10-K is explicit that MIS depends substantially on the dollar-equivalent volume and number of ratable debt securities issued in global capital markets. Growth drivers include GDP growth, refinancing needs, constrained bank capacity, emerging-market capital-market development, private credit, cybersecurity, and sustainable/transition finance.
The cyclicality showed up clearly in 2022. Revenue fell from $6.22B in 2021 to $5.47B in 2022, operating margin compressed from 45.7% to 34.4%, and net income fell from $2.21B to $1.37B. The business did not break; debt-market activity did. By 2025, revenue recovered to $7.72B and operating margin returned to 43.4%.
Durability
The durable part is that debt markets keep needing external trust infrastructure. Refinancing does not disappear; it gets delayed. Structured products go in and out of favor, but credit risk has to be assessed. Regulations change, but regulated institutions still need auditable decision inputs. AI may change analyst productivity and product interfaces, but it can also make trusted proprietary data more valuable.
The risk is not that credit risk stops mattering. The risk is that regulators, courts, or customers change who captures the economics of standardization.
Seven Powers
1. Scale economies — strong
Scale matters in at least four ways:
- Analyst coverage and methodology breadth. A global ratings franchise can cover more issuers, sectors, geographies, and instruments, making the rating language more useful.
- Fixed compliance and methodology costs. The cost of maintaining regulated CRA infrastructure, review processes, cybersecurity, governance, and legal defenses can be spread across a large revenue base.
- Data compounding. More historical ratings, defaults, entities, and instruments improve research, models, and customer workflows.
- Distribution. Issuers and investors prefer agencies whose output is already widely consumed.
This is not commodity scale. It is scale attached to institutional memory and market convention.
2. Network economies — moderate to strong, but indirect
Moody's is not a social network, but ratings have a network-like property. A rating becomes more valuable when more issuers, investors, mandates, and risk systems recognize it. The network is not user-to-user messaging; it is shared interpretation.
This matters most for MIS. A rating that investors trust can lower issuer friction. Issuers then keep using the agency, which gives investors more comparable data and reinforces the standard.
3. Counter-positioning — limited
Moody's is not primarily protected by a disruptive business model that incumbents cannot copy. If anything, challengers may try counter-positioning through lower-cost analytics, AI-native research, open ratings, or investor-pays models. Moody's must respond without weakening the premium trust layer.
4. Switching costs — strong in MA, moderate in MIS
MA can have classic workflow switching costs: data feeds, model validation, regulatory processes, KYC workflows, insurance models, APIs, procurement approvals, training, and audit trails. Once embedded, replacement is not simply a software swap; it is a governance project.
MIS switching costs are subtler. Issuers can use multiple rating agencies, and they sometimes do. But the cost of not having a recognized Moody's rating may be a smaller investor audience, more questions during issuance, or less comparability. The switching cost is borne in market friction.
5. Branding — strong, but mechanism-specific
"Brand" here is not consumer affection. It is institutional credibility. Moody's has operated for more than 115 years, and the 10-K describes MIS as a leading provider of credit ratings, research, and risk analysis. The brand changes behavior because investors, committees, and issuers know what a Moody's rating means and trust that others know too.
A weak brand would require customers to explain the rating. A strong brand lets the rating travel.
6. Cornered resource — strong in data/reputation
Moody's does not own a scarce mineral or exclusive exchange license. Its cornered resource is accumulated credit history, methodologies, analyst expertise, proprietary datasets, and the trust attached to them. MA's Data & Information segment is explicitly powered by company and credit databases, while MIS ratings history feeds the analytics ecosystem.
7. Process power — strong, but fragile if credibility breaks
The ratings process is a core asset: methodologies, committees, surveillance, issuer interaction rules, conflict controls, compliance, and auditability. This process allows Moody's to produce repeatable opinions at global scale. But process power is only power if the market believes the process is independent and rigorous. Litigation or regulatory findings can damage the mechanism.
Porter's Five Forces
Rivalry among competitors
Rivalry is meaningful but structurally contained. MIS competes with other credit rating agencies and with investment banks, brokerage firms, and in-house credit research. MA competes in financial information, enterprise risk software, economic data, financial research, commercial data, and analytic solutions. But in ratings, the market is not a pure price auction. Credibility and acceptance matter more than marginal fee discounts.
Supplier power
The main suppliers are talent, data providers, cloud/technology vendors, and regulatory permission. Talent matters because credibility depends on experienced analysts and engineers. Data suppliers matter in selected markets, though Moody's states that most technology and IP is available from a variety of sources and that it does not believe it is dependent on any one data source for a material aspect of the business.
Customer power
Large issuers, banks, insurers, and asset managers have bargaining power, especially for enterprise contracts. But the most attractive part of Moody's model is that customer power is diluted by multi-sided demand. An issuer may dislike paying for a rating, but if the rating expands investor reach, the issuer still pays. A bank may negotiate hard on MA, but replacing embedded regulatory and risk workflows can be painful.
Threat of substitutes
Substitutes include in-house research, private credit underwriting, market-implied signals, alternative data, AI-generated credit analysis, investment-bank research, and regulatory moves to reduce formal reliance on ratings. The strongest substitute is not a better analyst report; it is a different coordination standard. That is much harder.
Threat of entrants
Entrants can build analytics tools. They can hire analysts. They can publish opinions. The hard part is becoming accepted by issuers, investors, regulators, and internal governance systems at the same time. Regulation can encourage competition, but it also raises fixed costs and compliance requirements. That paradox helps explain why incumbent economics remain good.
Historical change over the last decade
The past decade shows three important shifts:
- Ratings cyclicality remained, but the company layered more analytics around it. Revenue grew from $3.60B in 2016 to $7.72B in 2025, an 8.8% CAGR. Some of that is issuance cycles, some is MA growth, and some is acquisitions/product expansion.
- The 2022 rate shock was a stress test. Debt issuance slowed, MIS revenue fell, and consolidated operating margin compressed. The rebound in 2024-2025 demonstrates the delayed-not-destroyed nature of refinancing and credit-market demand.
- Risk workflows expanded beyond classic bond ratings. Moody's now talks about interconnected risks, KYC, insurance, climate, cybersecurity, private credit, AI, and agentic AI. Some of this is management narrative, but the revenue mix supports the direction: MA external revenue reached $3.60B in 2025, nearly half of consolidated external revenue.
The structural question is whether MA can become more than an adjacency. If Moody's can use its credit data and brand to become a default workflow layer for risk decisions, the company gets a second compounding engine. If not, MA is a good but more contested data/software business attached to an exceptional ratings business.
Company positioning
Moody's has a rare combination:
- High-margin standards business: MIS adjusted operating margin was roughly 64% in 2025.
- Subscription/workflow business: MA has more recurring, embedded revenue and a broader product surface.
- Global reach: FY2025 revenue was $4.17B U.S. and $3.55B non-U.S.
- Low physical capital intensity: capex was only $0.33B against $7.72B of revenue in 2025.
- Buyback-supported per-share economics: diluted shares fell 7.9% from 2016 to 2025.
The company differs from a pure exchange like CME Group. CME monetizes transaction flow and clearing/network liquidity. Moody's monetizes the standardized interpretation of credit risk. Both are financial-infrastructure businesses, but CME's standard is the contract/venue; Moody's standard is the opinion/data layer.
Management, ownership, and incentives
Robert Fauber has been President and CEO since January 2021, joined the board in October 2020, and previously served as COO, President of MIS, SVP of Corporate & Commercial Development, and head of the MIS Commercial Group. That matters: the CEO came through the ratings and commercial core rather than being parachuted in from an unrelated software story.
The 2026 proxy shows executive ownership is not founder-like. Fauber had 45,323 shares beneficially owned, 105,926 options exercisable or exercisable within 60 days, 6,332 RSUs vesting within 60 days, and 157,581 total beneficial ownership in the proxy table. All current directors and executive officers as a group had 249,115 shares/near-term rights and 1,514 stock units, less than 1% of shares outstanding.
Major holders are more important:
- Berkshire Hathaway: 24.67M shares, 13.90%
- Vanguard: 14.16M, 7.98%
- BlackRock: 12.93M, 7.28%
- TCI Fund Management / Christopher Hohn: 12.05M, 6.79%
Compensation is heavily variable. The proxy says 94% of the CEO's 2025 target total direct compensation was at risk, with 6% salary, 13% target annual incentive, and 81% target equity. 2025 cash incentive payouts for named executives ranged from 101% to 105% of target, and the 2023-2025 performance shares were earned at 159% of target. The alignment is market-standard public-company alignment, not owner-operator alignment.
Ten-year financial review
| Year | Revenue | Op income | Op margin | Net income | OCF | Capex | FCF | Debt | Cash | Diluted shares |
|---|---|---|---|---|---|---|---|---|---|---|
| 2016 | $3.60B | $0.65B | 18.1% | $0.27B | $1.26B | $0.12B | $1.14B | $3.66B | $2.05B | 195.4M |
| 2017 | $4.20B | $1.82B | 43.3% | $1.00B | $0.76B | $0.09B | $0.66B | $5.71B | $1.07B | 194.2M |
| 2018 | $4.44B | $1.87B | 42.0% | $1.31B | $1.46B | $0.09B | $1.37B | $6.13B | $1.69B | 194.4M |
| 2019 | $4.83B | $2.00B | 41.4% | $1.42B | $1.68B | $0.07B | $1.61B | $5.58B | $1.83B | 191.6M |
| 2020 | $5.37B | $2.39B | 44.5% | $1.78B | $2.15B | $0.10B | $2.04B | $6.42B | $2.60B | 189.3M |
| 2021 | $6.22B | $2.84B | 45.7% | $2.21B | $2.00B | $0.14B | $1.87B | $7.41B | $1.81B | 187.9M |
| 2022 | $5.47B | $1.88B | 34.4% | $1.37B | $1.47B | $0.28B | $1.19B | $7.39B | $1.77B | 184.7M |
| 2023 | $5.92B | $2.14B | 36.1% | $1.61B | $2.15B | $0.27B | $1.88B | $7.00B | $2.13B | 184.0M |
| 2024 | $7.09B | $2.88B | 40.6% | $2.06B | $2.84B | $0.32B | $2.52B | $8.12B | $2.41B | 182.7M |
| 2025 | $7.72B | $3.35B | 43.4% | $2.46B | $2.90B | $0.33B | $2.58B | $6.99B | $2.38B | 179.9M |
The table makes the business quality hard to miss:
- Revenue CAGR: about 8.8% from 2016 to 2025.
- Net income CAGR: about 28.0%, flattered by the depressed 2016 base but still showing strong operating leverage and recovery.
- Share count: down 7.9% over the period.
- FCF conversion: FY2025 estimated FCF after capex was $2.58B, close to net income of $2.46B.
- Leverage: debt is meaningful at $6.99B in 2025, but cash was $2.38B and free cash flow is large.
The most important financial interpretation is that Moody's earns software-like margins without being a pure software company. Its economics come from trust standardization and data/workflow embeddedness, not just code.
Current trading snapshot
Using Yahoo Finance's live quote during this run: MCO ~$486.28/share. Applying FY2025 diluted shares of 179.9M gives an estimated market cap of ~$87.5B. Against FY2025 revenue of $7.72B, that is ~11.3x sales. Against FY2025 estimated FCF of $2.58B, that is roughly 34x FCF.
That is not obviously cheap. The market is paying for a durable, high-return standards business plus a credible analytics/workflow growth story. The underwriting question is whether MA can keep compounding and whether MIS can retain standards economics through credit cycles and regulatory scrutiny.
Key risks
- Regulatory attack on ratings economics. Moody's is subject to extensive CRA regulation in the U.S., EU, U.K., and elsewhere. The 10-K notes NRSRO oversight by the SEC, ESMA supervision in the EU, FCA regulation in the U.K., DORA, ESG rating rules, the EU AI Act, and other evolving regimes.
- Litigation and credibility shocks. Ratings opinions can become litigation targets after market losses or defaults. A credibility event does not need to destroy the business to impair pricing and political tolerance.
- Debt issuance cycles. MIS depends heavily on debt-market issuance. If rates, spreads, or risk appetite shut markets, revenue can fall quickly.
- Issuer-pays conflict. The issuer-pays model is economically powerful but politically fragile. It is always available as a reform target.
- Data and AI disruption. AI lowers the cost of generic research and may create new competitors in analytics. Moody's answer is proprietary data plus trusted workflows; if that data edge weakens, MA faces more pressure.
- Valuation. A great business at a very high multiple can produce mediocre returns if growth slows or margins normalize.
Knowledge-compounding takeaways
The useful abstraction is standards-power. Moody's is a standards business because its output is machine-readable by institutions: investment policies, risk committees, debt issuance processes, regulatory habits, data feeds, and workflows know how to consume it.
This links to several prior notes:
-
CME Group: both businesses monetize financial infrastructure, but CME's power is market liquidity and clearing; Moody's power is accepted interpretation.
-
Copart and IAA: marketplace power comes from liquidity and buyer/seller density; Moody's power comes from institutional standardization. Both show that the scarce asset is often the thing that reduces transaction friction for everyone else.
-
Old Dominion: process discipline compounds when customers need reliability, not just low price. Moody's process discipline is intellectual and regulatory rather than operational-route density.
The lollapalooza effect at Moody's is the reinforcement loop among:
- brand trust,
- regulatory embeddedness,
- issuer need for broad distribution,
- investor need for comparability,
- proprietary historical data,
- workflow switching costs in MA,
- low capital intensity that turns revenue into cash.
When those forces work together, a rating or risk dataset is more than information. It is permission to proceed.
What to study next
- S&P Global / S&P Ratings: closest apples-to-apples ratings and index/data comparison.
- MSCI: standards-power in indexes and ESG/climate data.
- FactSet and Bloomberg: workflow/data embeddedness without the same formal ratings franchise.
- Verisk: insurance data/model standardization.
- FICO: a consumer-credit analogue where a score became institutional shorthand.
Source notes
Primary source packet: /Users/hiroyoshisuzuki/Documents/Obsidian Vault/Research/Investment analysis raw/2026-07-08/source-packet.md.
Primary filings and raw artifacts used:
- Moody's FY2025 10-K: https://www.sec.gov/Archives/edgar/data/1059556/000162828026009136/mco-20251231.htm
- Moody's Q1 2026 10-Q: https://www.sec.gov/Archives/edgar/data/1059556/000162828026026848/mco-20260331.htm
- Moody's 2026 proxy: https://www.sec.gov/Archives/edgar/data/1059556/000105955626000019/mco-20260304.htm
- Local raw 10-K:
/Users/hiroyoshisuzuki/Documents/Obsidian Vault/Research/Investment analysis raw/2026-07-08/raw/latest-10k.html - Local SEC companyfacts JSON:
/Users/hiroyoshisuzuki/Documents/Obsidian Vault/Research/Investment analysis raw/2026-07-08/raw/sec-companyfacts.json
Caveat: this note was generated from the bounded cron source packet plus SEC filings/tables fetched into the local raw research folder. It is an investment-research memo, not a recommendation.