(8)Sound governance structures enhance investor protection. To that end, crowdfunding service providers should have in place governance arrangements that are proportionate to their complexity, together with policies specifying the elements of a disclosure that ensure that the information provided to investors is accurately and sufficiently in detail representing the crowdfunding project. Moreover, a due diligence should be carried out on the crowdfunding projects and on project owners. The risk-management framework referred to in Article 4(4), point (f), of Regulation (EU) 2020/1503 should therefore identify the main roles and functions that are responsible for the credit risk assessment and for the assignment of loans to the respective risk categories. Such framework should match the complexity of the business model of the crowdfunding providers and the type of lending facilitated, and reflect the safeguards established in the Regulation (EU) 2020/1503 to manage money laundering and terrorist financing risks.