NBFC Account Aggregator License in Karnataka

Karnataka, anchored by Bengaluru's IT and startup ecosystem, is India's most active hub for fintech and digital lending innovation — a large share of the country's new-age NBFCs and lending platforms are headquartered here. Any business in Karnataka building underwriting, wealth, or insurance products on verified financial data will eventually need this consent-based data layer — either built in-house under an AA license or accessed through one.

StartRight4U supports Karnataka-based applicants through every stage of NBFC-AA registration, including the net worth certification, technology architecture review, and RBI application itself.

What Is an NBFC Account Aggregator (AA) License?

An Account Aggregator is a special category of Non-Banking Financial Company, registered with the Reserve Bank of India under a dedicated NBFC-AA license, whose only business is moving a customer's financial data — bank statements, tax records, investment holdings, insurance policies — between the institutions that hold it (Financial Information Providers) and the institutions that request it (Financial Information Users), strictly with the customer's explicit, revocable consent. An AA never stores the data itself and never sees it in readable form; it only passes encrypted data through, acting as a secure consent pipe.

The framework sits on India's Data Empowerment and Protection Architecture (DEPA) and is operated in practice through the Sahamati collective, the industry body that runs the technical and governance standards every licensed AA must comply with. Once live, an AA can plug a lender, wealth platform, or insurer into instant, verified financial data — replacing slow manual document collection with a consent-based digital pull.

Why Businesses Apply for an Account Aggregator License

Banks, NBFCs, fintech lenders, and wealth-management platforms all depend on verified financial data to underwrite loans, assess risk, or personalise advice — work that traditionally meant customers manually uploading bank statements or Form 16s that are slow to collect and easy to falsify. An AA license lets a company build that data-sharing layer itself, monetising it as a B2B utility across the lending and wealth ecosystem instead of relying on a third party's rails.

Eligibility Criteria for NBFC-AA Registration

• Registered as a company under the Companies Act, 2013, with "Account Aggregator" reflected in its objects clause
• Minimum Net Owned Funds (NOF) of ₹2 crore, maintained on an ongoing basis
• A board and promoters who satisfy RBI's "fit and proper" criteria — clean credit history, no history of financial default or economic offence
• No business activity outside account aggregation — an AA cannot lend, invest, or otherwise use the data it moves
• A technology stack built to Sahamati's API and consent-artefact specifications, with demonstrable data security and encryption controls

Documents Required for Account Aggregator License

• Certificate of incorporation and Memorandum & Articles of Association
• Net worth certificate from a practicing Chartered Accountant, backed by audited financials
• Detailed technology architecture and data security policy, including consent-flow and encryption design
• Board resolution authorising the AA license application
• KYC, PAN, and educational/professional background of all directors and key managerial personnel
• Business plan covering the AA's operating model, target FIPs/FIUs, and revenue plan

Step-by-Step AA License Registration Process

1. Incorporate (or amend the objects clause of) a company with "Account Aggregator" as its core business
2. Build or contract the technology stack to Sahamati's consent-architecture and API specifications
3. Prepare the NOF certificate, technology documentation, and business plan
4. File the application with RBI through the prescribed COSMOS portal process for NBFC-AA
5. Respond to RBI's queries during technical and financial scrutiny — this stage examines the consent architecture closely
6. Receive in-principle approval, complete any pending technology certification, then receive the final Certificate of Registration

Why Choose StartRight4U

StartRight4U combines RBI-facing regulatory experience with an end-to-end execution team — documentation, technology/compliance review, and direct liaison on your application — so you're not navigating the process alone.

1. Dedicated RBI-compliance specialists, not a generic filing service
2. Clear, upfront documentation checklist — no last-minute surprises
3. Direct support through queries and clarifications during RBI's review
4. Transparent pricing with no hidden charges