/ Foreign Clients · Account Aggregator · Updated 2026-10-15

India's Account Aggregator framework, consent-based financial data for foreign fintech.

India's Account Aggregator (AA) framework is a world-first consent-based financial data sharing system. RBI regulates AAs as NBFC-AA (non-banking financial company - Account Aggregator). Lets a user instantly consent to share their bank statements, mutual fund holdings, insurance, GST, Income Tax, pension records across institutions. For foreign fintech building Indian products (lending, insurance, wealth, PFM), AA integration is foundational. Here's the practitioner's framework.

Get a firm quote → WhatsApp instead

Written by CA Durgesh Chavda

Chartered Accountant (ICAI) · Founder, Bharat Quantum Prospera · US incorporation, India-US DTAA, FEMA ODI, NRI taxation, cross-border structuring · LinkedIn

/ What AA actually does

Consent-based data pipes.

User-initiated consent: user authorises AA to pull specified financial data for specified purpose for specified time.
Data standardisation: AAs expose standardised APIs; FIU (Financial Information User) requests data; AA retrieves from FIP (Financial Information Provider).
No data storage at AA: AA is pure consent manager; data flows FIP → AA → FIU without AA storing.
DEPA framework: Data Empowerment and Protection Architecture — user controls who sees what for how long. Fully revocable consent.
Interoperability: any AA can serve any FIP + FIU in the network.

Think of it as 'Open Banking' but broader (not just banks — also MF, insurance, pension, tax) and consent-centric (not just FIU-driven).

/ Participants in AA ecosystem

FIP, FIU, AA, TSP.

AA (Account Aggregator): NBFC-AA licensed by RBI. Technology-neutral consent manager. Does not store user data or make lending/investment decisions. Earns small fee per consent transaction.
FIP (Financial Information Provider): entities holding user's financial data — banks, NBFCs, mutual fund AMCs, insurance companies, pension funds, GSTN, Income Tax Department. Required to onboard with AAs and share data upon consent.
FIU (Financial Information User): entities that consume data via AA for their products — lenders doing credit assessment, financial planners, PFM apps, insurers. Must register with AAs; approved by respective regulator.
TSP (Technical Service Provider): tech company providing API integration, consent flow UI, data standardisation services to AAs / FIPs / FIUs. Many foreign fintech participate as TSP.

Current state (2026): ~15 licensed AAs; 150+ FIPs onboarded; 500+ FIUs active; several billion consent transactions processed annually. India's open-finance stack is among the most mature globally.

/ How foreign fintech participates

Four pathways.

As FIU (financial information user): foreign fintech with Indian subsidiary + relevant Indian regulatory licence (lending via NBFC, mutual fund AMC via SEBI, insurance via IRDAI, broker-dealer) can register as FIU with AAs. Standard use cases: credit assessment, income verification, PFM aggregation, portfolio planning.
As AA (account aggregator): NBFC-AA licence from RBI. Net worth INR 2 crore. Pure consent manager role. Several foreign-backed AAs exist (Perfios, Finvu, OneMoney, CAMS Finserv).
As TSP (technical service provider): no licence; provide tech stack to Indian AAs / FIPs / FIUs. Many foreign SaaS participate here.
Via Indian partner: foreign fintech partners with Indian FIU to serve Indian users. Simpler + faster than own Indian regulatory setup.

/ Common use cases + planning

Where AA adds value.

Lending (SME / consumer): 30-second bank statement + GST analysis replaces 2-3 week manual underwriting. Materially faster + cheaper credit decisions.
Personal Finance Management: holistic view of user's bank + MF + insurance + pension across institutions.
Insurance underwriting: income + liability verification for term life + health insurance.
Wealth management / robo-advisory: portfolio aggregation + rebalancing recommendations.
Credit scoring enhancement: traditional CIBIL plus AA-sourced actual bank behaviour.
SME lending (invoice financing): GST data + bank cash flow + Udyam MSME verification via AA.
Tax / financial planning tools: comprehensive data for better recommendations.

For foreign fintech, AA integration is often the critical path to launching India products that compete with Indian incumbents.

/ Compliance + consent architecture

The DEPA guardrails.

Consent artifact (ReBIT standard): machine-readable consent object specifying FIU, purpose, data categories, retention period, revocation terms.
Granular consent: user can approve only specific data categories (e.g., savings bank statements but not MF).
Time-bound: consent has specific validity period; auto-expires.
Revocable: user can revoke anytime; subsequent data flows blocked.
DPDP Act interaction: AA framework complies with DPDP consent principles; FIU/AA must comply with DPDP in addition to RBI AA rules.
Breach notification: AA / FIU must notify DPDP Board of personal data breach.
Audit trail: all consent + data transactions logged, immutable.

Last updated: 2026-10-15.

/ Ready when you are

Foreign fintech building Indian products? AA integration is the foundation.

Four pathways: FIU, AA licence, TSP, or Indian partner. BQP structures the right route + regulatory licensing + ongoing compliance. Scope-based engagement.

Get a firm quote → WhatsApp Durgesh

FAQ

Common questions, answered.

What is India's Account Aggregator (AA) framework?

RBI-regulated consent-based financial data sharing system. User consents to share bank / MF / insurance / pension / GST / tax data instantly across institutions via licensed Account Aggregator (NBFC-AA). FIP (Financial Information Provider - banks, MF AMCs, etc.) share data with AA upon consent; FIU (Financial Information User - lenders, planners) consume via AA. Launched 2021; now the backbone of India's open finance stack.

How can a foreign fintech participate in India's AA framework?

Four routes: (1) Register as FIU via Indian subsidiary with relevant regulatory licence (NBFC lending, MF AMC, insurance intermediary). (2) Obtain NBFC-AA licence from RBI (net worth INR 2 crore) as a pure consent manager. (3) Act as Technical Service Provider (TSP) providing API/UI tech to Indian AAs / FIPs / FIUs - no licence required. (4) Partner with Indian FIU to serve Indian users without own licensing.

What are typical use cases for AA-based data?

Lending (30-second credit decision replacing weeks of document collection), personal finance management (unified view across institutions), insurance underwriting (income/liability verification), wealth management (portfolio aggregation + rebalancing), SME invoice financing (GST + bank cash flow), credit scoring enhancement (behaviour-based vs just CIBIL). Foreign fintech launching India products typically needs AA integration to compete.

Does AA framework comply with DPDP Act?

Yes - AA framework was designed with consent-centric principles that align with DPDP. Both apply simultaneously to AAs / FIUs. DEPA (Data Empowerment and Protection Architecture) underlying AA provides granular / time-bound / revocable consent. Foreign fintech using AA must comply with both AA framework (RBI/ReBIT standards) and DPDP Act (notice, consent, breach notification, data principal rights).

How much does NBFC-AA licence cost?

Minimum net worth INR 2 crore (vs INR 15 crore for PA). RBI application fee + ongoing compliance infrastructure. Entity must be Indian company (foreign subsidiary acceptable), promoters fit-and-proper, dedicated technology infrastructure, Compliance Officer + CEO. 6-12 month approval timeline typical. BQP coordinates applications.

Does BQP help foreign fintech enter India via AA framework?

Yes - foreign fintech advisory: route selection (FIU vs AA vs TSP vs partnership), Indian subsidiary setup, relevant regulatory licence (NBFC / MF / insurance), AA integration via API / TSP, DPDP + RBI consent compliance, ongoing operational compliance. Co-ordinated with Indian AAs + regulatory counsel. WhatsApp +91 78018 87130.