NBFC Account Aggregator License

The introduction of the NBFC Account Aggregator License has become one of the most transformative developments in this journey. With increasing digitization in banking, lending, insurance, wealth management, and fintech operations, businesses now require a regulated mechanism to access customer financial data in a secure and standardized manner. This is where the Account Aggregator framework comes into play. The Reserve Bank of India introduced the Account Aggregator ecosystem to empower consumers with complete control over their financial information while enabling seamless data sharing between regulated entities. Organizations willing to operate in this ecosystem must obtain an NBFC Account Aggregator License from RBI under the provisions of the Non-Banking Financial Company – Account Aggregator (Reserve Bank) Directions, 2016.

An NBFC Account Aggregator functions as a consent-based intermediary that facilitates the transfer of financial information from Financial Information Providers (FIPs) to Financial Information Users (FIUs). Unlike traditional NBFCs, these entities are not permitted to undertake lending or investment activities. Their primary responsibility is to securely collect, organize, and transfer financial data after obtaining explicit customer consent.

What is an NBFC Account Aggregator?

An NBFC Account Aggregator is a special category of Non-Banking Financial Company regulated by the Reserve Bank of India for the purpose of facilitating consent-driven financial data sharing among regulated financial institutions. The entity acts as a bridge between institutions holding customer financial data and institutions requiring that information for delivering services such as lending, investment advisory, insurance underwriting, and financial planning.

The core purpose of an Account Aggregator is to provide customers with the ability to access and share their financial information securely across multiple financial institutions through a single digital platform. Instead of manually submitting bank statements, tax returns, investment details, and insurance records to different entities repeatedly, customers can authorize an Account Aggregator to securely transfer the information on their behalf.

The Account Aggregator does not store or analyze the customer’s financial information permanently. Instead, it acts as a data-blind consent manager using encrypted APIs to facilitate the transfer of information. The model ensures higher standards of privacy, transparency, and operational efficiency within the financial services industry. The RBI has clearly specified that NBFC Account Aggregators cannot undertake any fund-based activities such as lending, accepting deposits, or making investments. Their role is limited exclusively to consent management and data sharing.

Purpose of the NBFC Account Aggregator Framework

1. The Account Aggregator ecosystem was introduced to create a digitally connected financial architecture where users maintain complete control over their data. Before this framework, financial information remained scattered across banks, NBFCs, insurance companies, mutual funds, pension authorities, and tax systems, making it difficult for customers to share information efficiently.
2. The framework enables seamless and secure exchange of financial information between institutions after obtaining customer consent. This has significantly improved credit access, especially for individuals and businesses with limited formal credit history. Through the NBFC Account Aggregator License framework, lenders can now evaluate borrowers using verified financial information instead of relying solely on traditional credit scores.
3. The model also promotes financial inclusion, reduces operational costs, enhances customer convenience, and improves transparency within the financial sector. Fintech companies, digital lenders, wealth management platforms, and insurance service providers benefit immensely from the streamlined data-sharing infrastructure.

Features of NBFC Account Aggregator License

1. The most significant aspect of the NBFC Account Aggregator License is that it operates on a consent-driven mechanism where customers decide what information can be shared, with whom, and for what duration. The entire process is governed through encrypted APIs and strict regulatory standards prescribed by RBI.
2. The framework ensures interoperability between financial institutions and creates a standardized method for exchanging information. It eliminates the need for physical documentation and manual verification processes. Since the system functions digitally, it accelerates loan approvals, investment analysis, and customer onboarding procedures.
3. Another important feature is that Account Aggregators are data-neutral entities. They are prohibited from storing, mining, or exploiting customer financial information for commercial purposes. The information merely flows through the aggregator after obtaining authorization from the customer.
4. The RBI has also emphasized cybersecurity, grievance redressal mechanisms, and transparency standards for all entities operating under the NBFC Account Aggregator License framework.

Benefits of Obtaining an NBFC Account Aggregator License

The following are the benefits of obtaining an NBFC Aggregator License:

Enhanced Access to Credit

One of the biggest advantages of the NBFC Account Aggregator ecosystem is the improved accessibility to credit facilities. Traditional lending systems often depend heavily on credit scores and limited banking records. Through the Account Aggregator framework, lenders can access broader financial information such as GST returns, bank transactions, investment holdings, and insurance details after customer consent. This enables better credit assessment and allows underserved borrowers to access loans more efficiently.

Operational Risk Management

The NBFC Account Aggregator License framework supports robust operational risk management by introducing secure and standardized financial data-sharing protocols. Financial institutions no longer need to rely on manual document verification or fragmented data sources. This reduces the possibility of fraud, inconsistencies, and operational inefficiencies while ensuring continuity in business processes.

Cost-Efficient Financial Infrastructure

The ecosystem significantly lowers operational costs for banks, NBFCs, fintech platforms, and other financial service providers. Institutions can obtain verified financial data directly from regulated entities without investing heavily in physical documentation and verification procedures. This makes the entire financial system more cost-efficient and scalable.

Improved Customer Experience

The framework provides customers with seamless access to financial services through consent-based data sharing. Instead of repeatedly uploading statements and documents, customers can authorize data transfer digitally. This results in faster loan approvals, easier onboarding, and better user convenience.

Strong Data Privacy and Security

The RBI has implemented strict standards for data encryption, customer authentication, and cybersecurity. Account Aggregators are required to adopt advanced technology systems that prevent unauthorized access, misuse, or disclosure of customer information. The consent architecture ensures complete transparency regarding how customer data is utilized.

Access to New-Age Financial Services

The Account Aggregator framework supports innovation in the fintech sector by enabling personalized financial products, digital lending solutions, investment advisory services, and real-time financial analysis. It creates opportunities for businesses to build customer-centric financial services using consent-based information exchange.

Eligibility Criteria for NBFC Account Aggregator License

Entities seeking an NBFC Account Aggregator License must comply with the eligibility requirements prescribed under the RBI Master Directions. The regulatory conditions ensure that only financially stable and professionally managed organizations are permitted to operate within the ecosystem.

Eligibility Requirement	Description
Company Registration	The applicant must be incorporated under the Companies Act, 2013
Net Owned Fund	Minimum Net Owned Fund of ₹2 Crores or higher amount prescribed by RBI
Company Name	The business name must include “Account Aggregator” or “AA”
Business Plan	Applicant must submit a detailed strategic business and technology plan
Fit and Proper Criteria	Promoters and directors must satisfy RBI fit and proper conditions
Covenant Deed	Directors and key management personnel must execute covenant deeds
Regulatory Declarations	Necessary declarations and undertakings must be furnished

Who Can Apply for an NBFC Account Aggregator License?

The RBI allows multiple categories of organizations to apply for an NBFC Account Aggregator License, provided they satisfy the prescribed regulatory conditions.

Eligible Entities

• Fintech Companies
• NBFCs Registered in India
• Banks and Financial Institutions
• Insurance Companies
• Credit Rating Agencies
• Investment Platforms
• Loan Providers
• Wealth Management Firms
• Regulatory Technology Companies

The increasing demand for digital financial infrastructure has encouraged several fintech startups and financial service providers to explore the Account Aggregator model as a scalable business opportunity.

Documents Required for NBFC Account Aggregator License

The RBI requires widespread documentation to assess the credibility, financial strength, and operational readiness of the applicant entity. Proper documentation plays a critical role in obtaining the NBFC Account Aggregator License successfully.

Required Documents	Purpose
Certificate of Incorporation	Proof of company registration
Memorandum & Articles of Association	Business objectives and governance structure
PAN and GST Details	Tax registration verification
KYC of Directors and Promoters	Identity and address verification
Net Worth Certificates	Financial capability assessment
Banker’s Report	Banking conduct verification
Audited Financial Statements	Financial performance evaluation
Business Plan	Operational and technology roadmap
Fit and Proper Declaration	Regulatory compliance confirmation
IT Infrastructure Details	Technology and cybersecurity evaluation

The RBI may also request additional documents depending on the complexity and nature of the applicant’s proposed business model.

Step-by-Step Process to Apply for NBFC Account Aggregator License

The following is the process to apply for NBFC Account Aggregator License:

Step 1: Company Incorporation

The applicant must first establish a company under the Companies Act, 2013 with the objective of operating as an Account Aggregator. The business name should appropriately reflect the nature of operations.

Step 2: Capital Arrangement

The company must ensure the availability of the prescribed minimum Net Owned Fund requirement of ₹2 Crores. RBI may prescribe higher requirements based on the business structure and operational scale.

Step 3: Preparation of Business Plan

A comprehensive business plan must be prepared covering technology architecture, operational strategy, cybersecurity mechanisms, manpower planning, customer acquisition model, risk management policies, and financial projections.

Step 4: Online Application Filing

The applicant must submit the application in the prescribed format under Annexure A of the RBI Directions through the online RBI portal along with the necessary documents and declarations.

Step 5: Submission of Supporting Documents

All supporting documents including financial records, management declarations, covenant deeds, and IT system details must be submitted for regulatory review.

Step 6: RBI Due Diligence

The RBI conducts extensive due diligence to evaluate the applicant’s compliance with legal, financial, operational, and technological requirements. The regulator may seek clarifications or additional information during this stage.

Step 7: Grant of In-Principle Approval

If satisfied, RBI grants in-principle approval valid for 12 months. During this period, the applicant must establish the required technological and operational infrastructure.

Step 8: Certificate of Registration

After fulfilling all regulatory and technical requirements, the RBI issues the Certificate of Registration allowing the company to commence operations as an NBFC Account Aggregator.

Responsibilities of NBFC Account Aggregators

The RBI has imposed strict operational responsibilities on entities holding an NBFC Account Aggregator License to ensure customer protection and financial data security.

1. Account Aggregators are responsible for obtaining customer consent before sharing any financial information. They must maintain complete transparency regarding the nature of data being shared, the purpose of sharing, and the duration for which access is granted.
2. The entities must establish secure mechanisms for customer identification and authentication. They are also required to implement advanced encryption and cybersecurity systems to prevent unauthorized access or misuse of financial information.
3. Another important responsibility is maintaining proper customer grievance redressal mechanisms. Customers must have access to transparent dispute resolution processes for complaints related to data sharing and consent management.
4. The Account Aggregator must also operate strictly within the regulatory framework and cannot engage in activities beyond the scope permitted by RBI.

Prohibited Activities for NBFC Account Aggregators

The RBI has clearly restricted certain activities for entities operating under the NBFC Account Aggregator License framework.

Prohibited Activities

• Undertaking lending or fund-based activities
• Supporting financial transactions directly
• Using customer data for commercial exploitation
• Accessing customer authentication credentials
• Sharing data without customer consent
• Storing financial information permanently
• Engaging in unrelated business activities
• Outsourcing core aggregation functions improperly

Participants in the Account Aggregator Ecosystem

The Account Aggregator ecosystem consists of multiple regulated participants working together within a standardized digital framework.

Financial Information Provider (FIP)

Financial Information Providers are institutions that hold customer financial data and provide the information after receiving authorized requests through the Account Aggregator framework. Banks, NBFCs, insurance companies, pension funds, mutual fund houses, and depositories commonly function as FIPs.

Financial Information User (FIU)

Financial Information Users are organizations that consume customer financial data to deliver services such as lending, underwriting, wealth management, and financial advisory. These entities request customer information through the Account Aggregator after obtaining consent.

Technology Service Provider (TSP)

Technology Service Providers support the ecosystem by developing APIs, consent architecture, cybersecurity infrastructure, and integration systems that enable seamless interaction between FIPs, FIUs, and Account Aggregators.

Difference Between FIP and FIU

Aspect	Financial Information Provider (FIP)	Financial Information User (FIU)
Meaning	Institution holding customer financial data	Institution consuming customer financial data
Primary Function	Custodian of financial information	User of financial information
Examples	Banks, NBFCs, Insurance Companies, AMCs	Lenders, Investment Advisors, Fintech Platforms
Role in AA Framework	Shares information after customer consent	Requests information for service delivery

Types of Financial Information Covered Under the Framework

The RBI has specified a wide range of financial information categories covered within the Account Aggregator ecosystem.

Financial Information Included:

• Bank Deposits
• Mutual Funds
• Equity Shares
• Bonds and Debentures
• Insurance Policies
• GST Returns
• Pension Fund Details
• Exchange Traded Funds (ETFs)
• Alternative Investment Funds (AIFs)
• Real Estate Investment Trusts (REITs)
• Infrastructure Investment Trusts (InvITs)
• Government Securities
• National Pension System (NPS) Balances

Mandatory Compliances for NBFC Account Aggregators

Entities operating under the NBFC Account Aggregator License framework must comply with several ongoing regulatory obligations prescribed by RBI.

Disclosure Requirements

NBFC Account Aggregators must comply with disclosure obligations under RBI’s Scale Based Regulations and ensure transparent reporting of financial and operational information.

Transfer of Control Approval

Any change in ownership, management, or shareholding structure requires prior written approval from RBI. This ensures regulatory oversight over significant organizational changes.

Dividend Declaration Conditions

The RBI has prescribed eligibility conditions for declaration of dividends. Entities must satisfy the specified financial and governance criteria before distributing profits.

Filing of Returns and Audits

Account Aggregators are required to submit periodic returns and undergo external system audits conducted by certified information system auditors. These audits evaluate cybersecurity standards and data management practices.

Formation of Board Committees

The Board must establish Audit Committees, Nomination Committees, and Risk Management Committees to strengthen corporate governance and internal control systems.

Customer Grievance Redressal

Every Account Aggregator must establish a robust customer grievance mechanism for timely resolution of complaints and disputes.

Data Security Standards

The entities are required to adopt advanced IT systems, encryption standards, and cybersecurity measures to protect financial information from unauthorized access and cyber threats.

Annual Management Clarification

Companies must submit annual declarations regarding changes in management personnel including directors, CEOs, and managing directors within the prescribed timeline.

Current Growth of the Account Aggregator Ecosystem in India

The Indian Account Aggregator ecosystem has witnessed substantial growth over the last few years due to rising fintech adoption and digital financial transformation.

Ecosystem Progress:

• 94 Financial Institutions operational as FIP and FIU
• 60 Financial Institutions operational as FIP
• 353 Financial Institutions operational as FIU
• Over 2.12 Billion financial accounts enabled for data sharing
• More than 77.27 Million linked user accounts

The growing participation of banks, NBFCs, fintech companies, and insurance providers highlights the increasing importance of the NBFC Account Aggregator License in India’s digital economy.

Challenges in Obtaining an NBFC Account Aggregator License

Although the Account Aggregator model presents significant opportunities, obtaining the license involves extensive regulatory scrutiny and operational preparedness. Companies often face challenges in establishing compliant IT infrastructure, meeting cybersecurity requirements, preparing detailed documentation, and satisfying RBI’s governance standards. The regulator places strong emphasis on data privacy, management integrity, customer protection, and technological capability. Therefore, businesses must ensure proper planning and professional guidance throughout the registration process.

Why Choose StartRight4U for NBFC Account Aggregator License Services?

1. StartRight4U provides complete support for businesses seeking an NBFC Account Aggregator License in India. With extensive experience in RBI regulatory approvals and NBFC compliance management, StartRight4U assists clients throughout the registration lifecycle.
2. The team offers assistance in company structuring, preparation of documentation, business plan drafting, RBI application filing, compliance management, technology advisory, and regulatory coordination. StartRight4U also supports businesses in establishing governance frameworks, cybersecurity policies, and grievance redressal systems required under RBI regulations.
3. The firm focuses on delivering end-to-end support with strong attention to legal accuracy, operational readiness, and timely execution. From initial consultation to final approval, StartRight4U helps businesses navigate the complexities of the Account Aggregator registration process efficiently.