DPDP Rules status: compliance window active. Read the update

Skip to content
Finance & Fintech · Digital public infrastructure

Account Aggregator Framework

Account Aggregator is a consent-driven alternative to screen-scraping and manually shared PDFs — regulated by RBI.

Educational only · not legal adviceLast updated: 17 August 2026Written and edited by Sandesh Kokate

Account Aggregator (AA) lets you share your own money records between firms. You do not hand over a password or a file. The RBI runs the rules for it. The records can be bank statements, tax data, and the like. Nothing moves until you say yes, and you can take that yes back.

AA replaces two older habits:

  • Screen-scraping — asking users for their bank passwords.
  • Sending PDFs and screenshots by hand.

Both are risky, hard to audit, and easy to misuse.

Quick self-check

Am I a Data Fiduciary?

Using AA doesn't remove your DPDP duties — it just changes the plumbing. Run the self-check to see where you sit under DPDP as a consumer of AA data.

Run it now

The rulebook changed in November 2025

The Account Aggregator framework started with an RBI Direction dated 2 September 2016. That Direction has been repealed. It was replaced on 28 November 2025 by the Reserve Bank of India (Non-Banking Financial Companies – Account Aggregator) Directions, 2025.

The main points for anyone using or building on the network:

  • Only a company registered with the RBI may operate as an Account Aggregator.
  • It needs at least ₹2 crore of net owned funds, management who meet fit-and-proper standards, and solid IT systems.
  • It may not store your financial data, and may not misuse it.
  • It may not support transactions or run a parallel business alongside the AA service.
  • There are detailed duties on consent records, real-time data sharing, cybersecurity, audits, complaints, pricing and governance.

The technical specifications for the network are set by ReBIT, the RBI's technology arm.

We have not read the 2025 Directions in full, so treat this as the shape of the framework rather than your exact obligation.

Educational only — not legal advice

This page summarises finance and fintech expectations for orientation. For binding rulings on your product, consult qualified counsel and the primary source below.

Source

RBI (Non-Banking Financial Companies – Account Aggregator) Directions, 2025

Issued 28 November 2025. Repeals and replaces the NBFC-Account Aggregator (Reserve Bank) Directions of 2 September 2016. Cited by name and date only — no primary-source URL has been retrieved and the text has not been opened.

Status unverified — no status check recorded

← Back to Finance & Fintech hubStart from the beginning →