Are we legally required to provide credit references?

Answer: No. Every company has a right to decide for themselves whether or not to provide credit ratings. You may be obligated by the by-laws to provide references to other members of your industry credit group - assuming you belong to such a group.