NBFC Account Aggregator License in Mumbai

Mumbai, India's financial capital and home to RBI's central office and SEBI's headquarters, has the country's densest concentration of NBFCs, fintechs, and regulated financial businesses, with a professional services ecosystem — CAs, company secretaries, compliance consultants — built specifically around this kind of regulatory work. For applicants in Mumbai, having documentation reviewed by someone who already knows the local process — not just the rules on paper — is often what separates a clean first submission from one that comes back with queries.

For Mumbai-based applicants, StartRight4U handles NBFC Account Aggregator License from document preparation through to the final certificate.

What Is an NBFC Account Aggregator (AA) License?

An Account Aggregator is a special category of Non-Banking Financial Company, registered with the Reserve Bank of India under a dedicated NBFC-AA license, whose only business is moving a customer's financial data — bank statements, tax records, investment holdings, insurance policies — between the institutions that hold it (Financial Information Providers) and the institutions that request it (Financial Information Users), strictly with the customer's explicit, revocable consent. An AA never stores the data itself and never sees it in readable form; it only passes encrypted data through, acting as a secure consent pipe.

The framework sits on India's Data Empowerment and Protection Architecture (DEPA) and is operated in practice through the Sahamati collective, the industry body that runs the technical and governance standards every licensed AA must comply with. Once live, an AA can plug a lender, wealth platform, or insurer into instant, verified financial data — replacing slow manual document collection with a consent-based digital pull.

Why Businesses Apply for an Account Aggregator License

Banks, NBFCs, fintech lenders, and wealth-management platforms all depend on verified financial data to underwrite loans, assess risk, or personalise advice — work that traditionally meant customers manually uploading bank statements or Form 16s that are slow to collect and easy to falsify. An AA license lets a company build that data-sharing layer itself, monetising it as a B2B utility across the lending and wealth ecosystem instead of relying on a third party's rails.

Eligibility Criteria for NBFC-AA Registration

• Registered as a company under the Companies Act, 2013, with "Account Aggregator" reflected in its objects clause
• Minimum Net Owned Funds (NOF) of ₹2 crore, maintained on an ongoing basis
• A board and promoters who satisfy RBI's "fit and proper" criteria — clean credit history, no history of financial default or economic offence
• No business activity outside account aggregation — an AA cannot lend, invest, or otherwise use the data it moves
• A technology stack built to Sahamati's API and consent-artefact specifications, with demonstrable data security and encryption controls

Documents Required for Account Aggregator License

• Certificate of incorporation and Memorandum & Articles of Association
• Net worth certificate from a practicing Chartered Accountant, backed by audited financials
• Detailed technology architecture and data security policy, including consent-flow and encryption design
• Board resolution authorising the AA license application
• KYC, PAN, and educational/professional background of all directors and key managerial personnel
• Business plan covering the AA's operating model, target FIPs/FIUs, and revenue plan

Step-by-Step AA License Registration Process

1. Incorporate (or amend the objects clause of) a company with "Account Aggregator" as its core business
2. Build or contract the technology stack to Sahamati's consent-architecture and API specifications
3. Prepare the NOF certificate, technology documentation, and business plan
4. File the application with RBI through the prescribed COSMOS portal process for NBFC-AA
5. Respond to RBI's queries during technical and financial scrutiny — this stage examines the consent architecture closely
6. Receive in-principle approval, complete any pending technology certification, then receive the final Certificate of Registration

Why Choose StartRight4U

StartRight4U combines regulatory experience with an end-to-end execution team — documentation, compliance review, and direct liaison on your application — so you're not navigating the process alone.

1. Dedicated specialists, not a generic filing service
2. Clear, upfront documentation checklist — no last-minute surprises
3. Direct support through queries and clarifications during review
4. Transparent pricing with no hidden charges