There is always the ability to control private enterprise when enough of a consensus is established. In this case, credit reporting is regulated by the Fair Credit Reporting Act which provides a number of guidelines as well as a dispute process, access to your report for free, etc. I would argue that is democratic control to an extent that the people’s representatives have chosen to regulate the industry to that extent, yes.
So there's also no democratic control on them?