NBFC Account Aggregator License in India: Complete Guide

The NBFC Account Aggregator License is an RBI authorization required for a company intending to operate as an Account Aggregator in India's consent-based financial data-sharing ecosystem. An Account Aggregator (AA) enables customers to share their financial information between regulated financial institutions through a secure, consent-driven framework.

Unlike a conventional NBFC that provides loans or other financial services, an account aggregator NBFC primarily facilitates the transfer of financial information between Financial Information Providers (FIPs) and Financial Information Users (FIUs). The RBI regulates this activity under the Master Direction – Non-Banking Financial Company – Account Aggregator (Reserve Bank) Directions, 2016, which is listed by RBI as updated on September 6, 2024.

What Is an NBFC Account Aggregator?

An NBFC Account Aggregator, commonly called an NBFC-AA, is a regulated entity that facilitates the retrieval, consolidation, organisation and presentation of a customer's financial information with the customer's explicit consent.

The AA ecosystem generally involves three important participants:

Financial Information Providers (FIPs): Entities that hold customers' financial information, such as banks and other regulated financial institutions.
Financial Information Users (FIUs): Regulated entities that request financial information for permitted purposes, such as lending, investment or insurance-related services.
Account Aggregators: Consent managers that facilitate secure transfer of information between FIPs and FIUs.

An AA is not supposed to use customer financial information for its own purposes. Its role is focused on facilitating consent-based information sharing within the regulatory framework.

Why Is an NBFC AA License Required?

Under the RBI framework, no entity other than a company can undertake the business of an Account Aggregator, and a company cannot commence or carry on the business without obtaining a Certificate of Registration from RBI.

Therefore, fintech companies planning to establish an Account Aggregator business must evaluate the RBI eligibility requirements, capital requirements, governance framework, technology architecture and regulatory obligations before applying.

NBFC Account Aggregator License Requirements

One of the key NBFC account aggregator regulations concerns the applicant's financial and operational readiness.

The important requirements include:

Minimum Net Owned Fund

An applicant seeking registration as an NBFC-AA must have a Net Owned Fund (NOF) of at least ₹2 crore, or a higher amount if specified by RBI. RBI's current regulatory material continues to identify ₹2 crore as the applicable NOF for NBFC-AA entities.

Company Structure

The applicant must be a company incorporated under the applicable Companies Act framework and must apply to RBI in the prescribed manner.

Business Plan

The applicant should have a clear business plan explaining its proposed AA activities, technology architecture, governance, human resources, financial projections and operational framework.

Technology and Security

Because an AA operates in a financial-data environment, the business requires a secure technology infrastructure capable of supporting consent management, authentication, encryption and controlled data transfer.

RBI has also prescribed technical specifications for participants in the AA ecosystem, with ReBIT developing core specifications for secure and authorised data movement.

Fit and Proper Management

Promoters and directors must satisfy applicable fit-and-proper requirements, along with other governance and regulatory conditions prescribed by RBI.

Process to Obtain an NBFC Account Aggregator License

The broad NBFC account aggregator license process can be understood through the following stages:

1. Incorporate the Company

The proposed applicant should first establish the appropriate corporate structure and define Account Aggregator activities in its constitutional documents.

2. Meet the NOF Requirement

The company should arrange and maintain the required Net Owned Fund. For an NBFC-AA, the current minimum is ₹2 crore.

3. Prepare the Application and Business Plan

The applicant needs to prepare the prescribed application and supporting documentation, including its business model, ownership details, governance structure, financial information and technology framework.

4. Submit the Application to RBI

The application is submitted to RBI with the required documents and information. RBI evaluates whether the applicant satisfies the conditions specified under the Account Aggregator Directions.

5. In-Principle Approval and Technology Readiness

Where applicable, the applicant must meet the conditions attached to the in-principle approval and establish the required operational, governance and technology framework.

6. Final Regulatory Approval

After the prescribed requirements have been fulfilled and the regulatory review is completed, RBI may grant the Certificate of Registration required to operate as an Account Aggregator.

The exact timeline can vary depending on the application's completeness, RBI's review, clarifications and technology-readiness requirements.

Documents Required for NBFC AA Registration

The exact documentation depends on the applicant and RBI's requirements. Generally, the application may require:

Certificate of Incorporation
MOA and AOA
PAN and corporate details
Details and KYC documents of directors and promoters
Shareholding pattern
Net-worth/NOF certificate
Business plan and financial projections
Board resolutions
Audited financial statements, where applicable
Fit-and-proper declarations
Details of proposed management
IT and cybersecurity framework
Consent-management framework
Relevant policies and operational documents
Other documents requested by RBI

A complete and consistent documentation set can help reduce avoidable delays during regulatory review.

NBFC Account Aggregator License Fees

There is no simple fixed "market price" for obtaining an NBFC-AA authorization because the overall cost depends on the applicant's corporate setup, professional assistance, technology infrastructure, cybersecurity implementation and ongoing compliance requirements.

The ₹2 crore NOF requirement should not be confused with a government licensing fee. It represents the minimum regulatory capital requirement for an NBFC-AA under the applicable RBI framework.

Applicants should therefore budget separately for incorporation, professional advisory, technology, security audits, compliance and other operational expenses.

Benefits of Becoming an NBFC Account Aggregator

An NBFC-AA can play an important role in India's digital financial ecosystem.

Faster Financial Data Sharing

Customers can share relevant financial information digitally instead of repeatedly submitting physical documents.

Better Access to Financial Services

Consent-based data sharing can support more efficient lending, wealth management, insurance and other financial journeys.

Improved Customer Control

The AA framework is designed around customer consent, giving individuals greater control over when and with whom their financial information is shared.

Digital Financial Infrastructure

The growing ecosystem provides opportunities for regulated entities and fintech businesses to develop consent-based financial services.

List of Account Aggregators in India

The list of account aggregators in India changes as new entities become operational and participate in the ecosystem. Sahamati's current ecosystem information identifies operating NBFC-AAs such as CAMSFinServ, Finvu, Protean, NADL, Anumati, OneMoney, Saafe and other participants.

Businesses should verify the latest operating status rather than relying on an old static list because the AA ecosystem continues to evolve.

NBFC AA Compliance After Registration

Obtaining registration is only the beginning. An NBFC-AA must maintain ongoing regulatory, corporate, technology and information-security compliance.

This may include maintaining the required NOF, regulatory reporting, governance requirements, customer grievance mechanisms, consent management, cybersecurity controls, audits and compliance with applicable RBI directions.

Enterslice also provides dedicated NBFC Account Aggregator compliance support, including regulatory compliance, consent-management frameworks, data-security reviews and ongoing corporate and regulatory obligations.

Why Choose Enterslice for NBFC AA Registration?

Setting up an Account Aggregator requires coordination across corporate, regulatory, financial and technology requirements. Enterslice can assist businesses with documentation, RBI application support, regulatory guidance, business-plan preparation and post-registration compliance.

Planning to start an Account Aggregator business in India? Connect with Enterslice for professional assistance with the RBI registration process and ongoing compliance requirements.

Conclusion

The NBFC Account Aggregator License provides the regulatory foundation for businesses seeking to participate in India's consent-based financial data ecosystem. With a minimum NOF requirement of ₹2 crore, appropriate corporate structure, robust technology, governance controls and RBI approval, an eligible company can establish itself as an NBFC-AA.

Because NBFC account aggregator regulations can change through RBI directions and circulars, applicants should review the latest regulatory position before submitting an application. Professional assistance can help businesses prepare the application correctly and build the compliance framework required for sustainable operations.

Frequently Asked Questions

1. What is an NBFC Account Aggregator License?

It is the RBI authorization required for an eligible company to operate as an Account Aggregator and facilitate consent-based financial information sharing within the regulated AA ecosystem.

2. What is the minimum NOF for an NBFC-AA?

The current minimum Net Owned Fund requirement for an NBFC-AA is ₹2 crore, subject to applicable RBI directions.

3. Who regulates Account Aggregators in India?

Account Aggregators are regulated by the Reserve Bank of India (RBI) under the applicable NBFC Account Aggregator Directions.

4. Can an Account Aggregator use customer financial data?

An AA's role is to facilitate consent-based transfer of financial information within the regulatory framework. It is not intended to use customer data for its own purposes.

5. What is the difference between an FIP and an FIU?

An FIP holds financial information, while an FIU receives financial information for a permitted purpose through the AA framework, subject to customer consent and applicable regulations.

6. Is NBFC-AA registration permanent?

The Certificate of Registration is not a routine annual renewal license. However, the entity must continuously comply with RBI requirements, and regulatory action may be taken for serious or persistent non-compliance.

7. Where can I find the latest list of Account Aggregators in India?

Sahamati maintains ecosystem information on operating Account Aggregators and participating entities. Businesses should check the latest available list before relying on the status of any AA.