NBFC Account Aggregator License
Honestly didn't expect it to be this hassle-free. They handle my accounts every month and I've never had to chase them for anything. Responsive, reliable, and the pricing is fair.
— Aman Gupta
Choosing StartRight4U for our NBFC needs was a game-changer. Their in-depth knowledge and personalized solutions ensured a smooth and compliant operation.
— Prince Yadav
StartRight4U's compliance services have been a lifesaver. They keep us on the right side of the law, allowing us to focus on growth with confidence.
— Deepak Malhotra
Rated 4.9 by 50,000+ Customers Globally
Free consultation — No hidden charges
The introduction of the NBFC Account Aggregator License has become one of the most transformative developments in this journey. With increasing digitization in banking, lending, insurance, wealth management, and fintech operations, businesses now require a regulated mechanism to access customer financial data in a secure and standardized manner. This is where the Account Aggregator framework comes into play. The Reserve Bank of India introduced the Account Aggregator ecosystem to empower consumers with complete control over their financial information while enabling seamless data sharing between regulated entities. Organizations willing to operate in this ecosystem must obtain an NBFC Account Aggregator License from RBI under the provisions of the Non-Banking Financial Company – Account Aggregator (Reserve Bank) Directions, 2016.
An NBFC Account Aggregator functions as a consent-based intermediary that facilitates the transfer of financial information from Financial Information Providers (FIPs) to Financial Information Users (FIUs). Unlike traditional NBFCs, these entities are not permitted to undertake lending or investment activities. Their primary responsibility is to securely collect, organize, and transfer financial data after obtaining explicit customer consent.
An NBFC Account Aggregator is a special category of Non-Banking Financial Company regulated by the Reserve Bank of India for the purpose of facilitating consent-driven financial data sharing among regulated financial institutions. The entity acts as a bridge between institutions holding customer financial data and institutions requiring that information for delivering services such as lending, investment advisory, insurance underwriting, and financial planning.
The core purpose of an Account Aggregator is to provide customers with the ability to access and share their financial information securely across multiple financial institutions through a single digital platform. Instead of manually submitting bank statements, tax returns, investment details, and insurance records to different entities repeatedly, customers can authorize an Account Aggregator to securely transfer the information on their behalf.
The Account Aggregator does not store or analyze the customer’s financial information permanently. Instead, it acts as a data-blind consent manager using encrypted APIs to facilitate the transfer of information. The model ensures higher standards of privacy, transparency, and operational efficiency within the financial services industry. The RBI has clearly specified that NBFC Account Aggregators cannot undertake any fund-based activities such as lending, accepting deposits, or making investments. Their role is limited exclusively to consent management and data sharing.
The following are the benefits of obtaining an NBFC Aggregator License:
One of the biggest advantages of the NBFC Account Aggregator ecosystem is the improved accessibility to credit facilities. Traditional lending systems often depend heavily on credit scores and limited banking records. Through the Account Aggregator framework, lenders can access broader financial information such as GST returns, bank transactions, investment holdings, and insurance details after customer consent. This enables better credit assessment and allows underserved borrowers to access loans more efficiently.
The NBFC Account Aggregator License framework supports robust operational risk management by introducing secure and standardized financial data-sharing protocols. Financial institutions no longer need to rely on manual document verification or fragmented data sources. This reduces the possibility of fraud, inconsistencies, and operational inefficiencies while ensuring continuity in business processes.
The ecosystem significantly lowers operational costs for banks, NBFCs, fintech platforms, and other financial service providers. Institutions can obtain verified financial data directly from regulated entities without investing heavily in physical documentation and verification procedures. This makes the entire financial system more cost-efficient and scalable.
The framework provides customers with seamless access to financial services through consent-based data sharing. Instead of repeatedly uploading statements and documents, customers can authorize data transfer digitally. This results in faster loan approvals, easier onboarding, and better user convenience.
The RBI has implemented strict standards for data encryption, customer authentication, and cybersecurity. Account Aggregators are required to adopt advanced technology systems that prevent unauthorized access, misuse, or disclosure of customer information. The consent architecture ensures complete transparency regarding how customer data is utilized.
The Account Aggregator framework supports innovation in the fintech sector by enabling personalized financial products, digital lending solutions, investment advisory services, and real-time financial analysis. It creates opportunities for businesses to build customer-centric financial services using consent-based information exchange.
Entities seeking an NBFC Account Aggregator License must comply with the eligibility requirements prescribed under the RBI Master Directions. The regulatory conditions ensure that only financially stable and professionally managed organizations are permitted to operate within the ecosystem.
|
Eligibility Requirement |
Description |
|
Company Registration |
The applicant must be incorporated under the Companies Act, 2013 |
|
Net Owned Fund |
Minimum Net Owned Fund of ₹2 Crores or higher amount prescribed by RBI |
|
Company Name |
The business name must include “Account Aggregator” or “AA” |
|
Business Plan |
Applicant must submit a detailed strategic business and technology plan |
|
Fit and Proper Criteria |
Promoters and directors must satisfy RBI fit and proper conditions |
|
Covenant Deed |
Directors and key management personnel must execute covenant deeds |
|
Regulatory Declarations |
Necessary declarations and undertakings must be furnished |
The RBI allows multiple categories of organizations to apply for an NBFC Account Aggregator License, provided they satisfy the prescribed regulatory conditions.
Eligible Entities
The increasing demand for digital financial infrastructure has encouraged several fintech startups and financial service providers to explore the Account Aggregator model as a scalable business opportunity.
The RBI requires widespread documentation to assess the credibility, financial strength, and operational readiness of the applicant entity. Proper documentation plays a critical role in obtaining the NBFC Account Aggregator License successfully.
|
Required Documents |
Purpose |
|
Certificate of Incorporation |
Proof of company registration |
|
Memorandum & Articles of Association |
Business objectives and governance structure |
|
PAN and GST Details |
Tax registration verification |
|
KYC of Directors and Promoters |
Identity and address verification |
|
Net Worth Certificates |
Financial capability assessment |
|
Banker’s Report |
Banking conduct verification |
|
Audited Financial Statements |
Financial performance evaluation |
|
Business Plan |
Operational and technology roadmap |
|
Fit and Proper Declaration |
Regulatory compliance confirmation |
|
IT Infrastructure Details |
Technology and cybersecurity evaluation |
The RBI may also request additional documents depending on the complexity and nature of the applicant’s proposed business model.
The following is the process to apply for NBFC Account Aggregator License:
The applicant must first establish a company under the Companies Act, 2013 with the objective of operating as an Account Aggregator. The business name should appropriately reflect the nature of operations.
The company must ensure the availability of the prescribed minimum Net Owned Fund requirement of ₹2 Crores. RBI may prescribe higher requirements based on the business structure and operational scale.
A comprehensive business plan must be prepared covering technology architecture, operational strategy, cybersecurity mechanisms, manpower planning, customer acquisition model, risk management policies, and financial projections.
The applicant must submit the application in the prescribed format under Annexure A of the RBI Directions through the online RBI portal along with the necessary documents and declarations.
All supporting documents including financial records, management declarations, covenant deeds, and IT system details must be submitted for regulatory review.
The RBI conducts extensive due diligence to evaluate the applicant’s compliance with legal, financial, operational, and technological requirements. The regulator may seek clarifications or additional information during this stage.
If satisfied, RBI grants in-principle approval valid for 12 months. During this period, the applicant must establish the required technological and operational infrastructure.
After fulfilling all regulatory and technical requirements, the RBI issues the Certificate of Registration allowing the company to commence operations as an NBFC Account Aggregator.
The RBI has imposed strict operational responsibilities on entities holding an NBFC Account Aggregator License to ensure customer protection and financial data security.
The RBI has clearly restricted certain activities for entities operating under the NBFC Account Aggregator License framework.
Prohibited Activities
The Account Aggregator ecosystem consists of multiple regulated participants working together within a standardized digital framework.
Financial Information Providers are institutions that hold customer financial data and provide the information after receiving authorized requests through the Account Aggregator framework. Banks, NBFCs, insurance companies, pension funds, mutual fund houses, and depositories commonly function as FIPs.
Financial Information Users are organizations that consume customer financial data to deliver services such as lending, underwriting, wealth management, and financial advisory. These entities request customer information through the Account Aggregator after obtaining consent.
Technology Service Providers support the ecosystem by developing APIs, consent architecture, cybersecurity infrastructure, and integration systems that enable seamless interaction between FIPs, FIUs, and Account Aggregators.
|
Aspect |
Financial Information Provider (FIP) |
Financial Information User (FIU) |
|
Meaning |
Institution holding customer financial data |
Institution consuming customer financial data |
|
Primary Function |
Custodian of financial information |
User of financial information |
|
Examples |
Banks, NBFCs, Insurance Companies, AMCs |
Lenders, Investment Advisors, Fintech Platforms |
|
Role in AA Framework |
Shares information after customer consent |
Requests information for service delivery |
The RBI has specified a wide range of financial information categories covered within the Account Aggregator ecosystem.
Financial Information Included:
Entities operating under the NBFC Account Aggregator License framework must comply with several ongoing regulatory obligations prescribed by RBI.
NBFC Account Aggregators must comply with disclosure obligations under RBI’s Scale Based Regulations and ensure transparent reporting of financial and operational information.
Any change in ownership, management, or shareholding structure requires prior written approval from RBI. This ensures regulatory oversight over significant organizational changes.
The RBI has prescribed eligibility conditions for declaration of dividends. Entities must satisfy the specified financial and governance criteria before distributing profits.
Account Aggregators are required to submit periodic returns and undergo external system audits conducted by certified information system auditors. These audits evaluate cybersecurity standards and data management practices.
The Board must establish Audit Committees, Nomination Committees, and Risk Management Committees to strengthen corporate governance and internal control systems.
Every Account Aggregator must establish a robust customer grievance mechanism for timely resolution of complaints and disputes.
The entities are required to adopt advanced IT systems, encryption standards, and cybersecurity measures to protect financial information from unauthorized access and cyber threats.
Companies must submit annual declarations regarding changes in management personnel including directors, CEOs, and managing directors within the prescribed timeline.
The Indian Account Aggregator ecosystem has witnessed substantial growth over the last few years due to rising fintech adoption and digital financial transformation.
Ecosystem Progress:
The growing participation of banks, NBFCs, fintech companies, and insurance providers highlights the increasing importance of the NBFC Account Aggregator License in India’s digital economy.
Although the Account Aggregator model presents significant opportunities, obtaining the license involves extensive regulatory scrutiny and operational preparedness. Companies often face challenges in establishing compliant IT infrastructure, meeting cybersecurity requirements, preparing detailed documentation, and satisfying RBI’s governance standards. The regulator places strong emphasis on data privacy, management integrity, customer protection, and technological capability. Therefore, businesses must ensure proper planning and professional guidance throughout the registration process.
