# Account Aggregator Framework: Consent-Based Financial Data

Getting a loan in India used to mean couriering three months of stamped bank statements and hoping nobody lost the file. The Account Aggregator (AA) framework, launched by the RBI in 2021, replaced that ritual with something radical: you grant consent, your data flows digitally, encrypted end-to-end, and you can revoke it. It is quietly becoming the plumbing of Indian credit underwriting.

What Is an Account Aggregator?

An Account Aggregator is an RBI-licensed Non-Banking Financial Company (NBFC-AA) that acts as a neutral conduit for financial data. Crucially:

  • AAs cannot see, store, or read your data — information moves encrypted directly from one financial institution to another
  • They cannot share data without your explicit, purpose-bound consent
  • They charge no fee to individuals
  • Licensed examples include Sahamati ecosystem participants like Finvu, OneMoney, Anumati, CAMSfinserv, and NADL, with Setu and Perfios operating as technology service providers

Think of the AA as a courier that carries sealed envelopes it cannot open.

How the Framework Works

The four parties

  1. Financial Information Provider (FIP) — the institution holding your data (bank, NBFC, insurer, pension fund)
  2. Financial Information User (FIU) — the institution that wants the data (a lender verifying income, an advisor analysing your portfolio)
  3. Account Aggregator — the licensed intermediary routing consented data
  4. You — the data principal who approves or denies every request

    5. The consent lifecycle

    Every data request carries a machine-readable consent artefact specifying what data, from which accounts, for what purpose, for how long, and with what storage policy. You approve via OTP or app confirmation; the FIP pushes encrypted data to the FIU through the AA; consent expires automatically or can be revoked. Nothing happens without this trail.

    Why It Matters for Credit Underwriting

    From documents to data

    Before AA, lenders relied on PDFs and photocopies — easy to fake, expensive to verify. With AA, a lender pulls bank statements, GST-linked data flows, insurance policies, or mutual fund holdings directly from source systems. Verification becomes instant and tamper-evident.

    Financial inclusion

    Borrowers with thin credit bureau files but genuine cash flows — small traders, gig workers, first-generation entrepreneurs — can now prove income through actual account behaviour. This is arguably the framework's biggest social contribution.

    Speed and cost

    Underwriting cycles that took days shrink to minutes. For lenders, per-file verification costs collapse, making smaller-ticket loans economically viable.

    Regulatory Foundations

    The AA framework rests on several pillars:

    • RBI Master Directions on NBFC-Account Aggregator (2016, amended) governing licensing, capital, and conduct
    • Data minimisation: only data needed for the stated purpose may be requested
    • No data retention by the AA: the aggregator stores consents, not content
    • Interoperability through Sahamati, the industry alliance maintaining ecosystem standards
    • Alignment with the Digital Personal Data Protection Act, 2023, which codified consent-based processing into statute

    What's Live on the Network Today

    Coverage has expanded well beyond banks. Data categories now include GST filings and returns, insurance policies, pension accounts (NPS/EPFO), mutual funds, and stock portfolios. Tens of millions of consents have been processed, and major banks are both FIPs and FIUs. Use cases span lending, personal finance management, wealth tracking, and merchant onboarding.

    AA in Action: Business Credit

    For businesses, the framework changes the economics of small-ticket commercial finance. A platform can verify a company's banking flows and GST filings within minutes instead of requesting paperwork. Vendor-financing platforms show the model at its best: KredFlow combines GSTIN-based verification with instant approval so a business can pay an annual SaaS contract monthly while the vendor receives payment upfront — credit decisions grounded in verified transaction data rather than collateral or lengthy audits.

    Limitations to Know

    • Coverage depends on institutions joining as FIPs; some smaller banks lag
    • Consent UX varies across apps, and user education remains early
    • Data quality issues at source institutions propagate downstream
    • Cross-border entities cannot participate — the framework is India-specific by design

    The Bottom Line

    The Account Aggregator framework turns financial data into something borrowers control and lenders can trust. As coverage deepens, expect "share your data" to replace "submit your documents" across everything from home loans to working capital — with faster approvals and fairer pricing as the payoff.