NBFC Account Aggregator License
India’s financial sector is rapidly evolving, driven by digitization, fintech innovation, and the push toward financial inclusion. One of the most significant reforms in this transformation is the introduction of the NBFC Account Aggregator (NBFC-AA) framework, regulated by the Reserve Bank of India (RBI).
An NBFC-AA is a special class of Non-Banking Financial Company (NBFC) that functions as a data access fiduciary, enabling customers to securely share their financial data with regulated entities. Unlike traditional NBFCs, an NBFC-AA does not lend, accept deposits, or invest funds. Instead, its sole role is to aggregate, manage, and transfer customer-consented financial information from Financial Information Providers (FIPs) to Financial Information Users (FIUs).
FIPs include banks, NBFCs, insurance companies, mutual funds, pension funds, and other financial institutions, while FIUs are typically lenders or investment service providers who use this data to provide financial services.
This consent-based, technology-driven model is transforming credit underwriting, financial transparency, and customer empowerment. It underpins India’s Open Credit Enablement Network (OCEN) and Data Empowerment & Protection Architecture (DEPA), laying the foundation for a future-ready financial ecosystem.
At our firm, we specialize in helping companies obtain the NBFC-AA License from RBI, providing end-to-end assistance in documentation, regulatory filings, IT infrastructure compliance, and RBI coordination, ensuring our clients can seamlessly enter the next-generation financial data ecosystem.
Key Features of an NBFC Account Aggregator
An NBFC-AA is different from traditional NBFCs in terms of activities, risk exposure, and regulatory framework. Some unique features include:
Neutral Data Fiduciary Role: Acts as an intermediary for financial data exchange without bias, ensuring that financial information flows securely between institutions while maintaining neutrality.
Consent-Driven System: Data sharing occurs only with explicit customer approval, giving individuals full authority over when and how their financial information is shared.
No Credit or Deposit Function: Unlike other NBFCs, NBFC-AAs do not carry credit risk or accept deposits. Their role is limited to facilitating secure financial data sharing.
Enhanced Financial Inclusion: Provides a common data-sharing platform for individuals, MSMEs, and large enterprises, enabling easier access to financial services and credit.
High Security & Privacy Standards: Operates under the Reserve Bank of India’s strict data protection and IT security framework, ensuring confidentiality and safety of financial information.
Critical Role in OCEN & DEPA: Powers open credit networks and supports India’s digital financial architecture by enabling seamless, consent-based data sharing.
Customer Empowerment: Allows individuals to control, monitor, and revoke consent for their financial data, ensuring transparency and user control in the financial ecosystem.
Eligibility Criteria for NBFC-AA Registration
To qualify for an NBFC-AA License, companies must fulfill the following RBI-prescribed eligibility conditions:
- Company Incorporation: The entity must be incorporated as a Public or Private Company under the Companies Act, 2013, ensuring legal recognition and compliance with corporate governance norms.
- Minimum Net Owned Fund (NOF): The company must maintain a minimum Net Owned Fund of ₹2 Crores, or such amount as may be specified or revised by the Reserve Bank of India through circulars from time to time.
- Memorandum of Association (MoA): The company’s MoA must clearly authorize the business of account aggregation and related financial data management activities.
- Restricted Activities: The company must not undertake lending, deposit-taking, or any form of investment activity, as its role is limited to facilitating financial data sharing.
- Fit & Proper Management: Promoters and directors must satisfy the Reserve Bank of India’s “fit and proper” criteria, including standards related to integrity, financial soundness, and professional competence.
- IT Infrastructure: The company must establish a robust technology framework capable of handling consent management, data encryption, and secure API-based integration with financial institutions.
- Compliance Readiness: The organization must be capable of meeting ongoing regulatory obligations, including periodic IT security audits, regulatory reporting, and maintaining an effective grievance redressal mechanism.
Documents Required for NBFC-AA License
Applicants must prepare and submit the following documents to RBI for registration:
Certificate of Incorporation: Certificate issued under the Companies Act, 2013 confirming the legal registration of the company.
Memorandum & Articles of Association (MoA & AoA): These documents must contain specific provisions authorizing the company to undertake account aggregation
activities.
Board Resolution: A formal board resolution approving and authorizing the submission of the NBFC-AA license application to the Reserve Bank of India.
Net Worth Certificate: A certificate issued by a Chartered Accountant confirming that the company meets the required net worth criteria.
Bank Statement: Recent bank statement reflecting the availability of the required Net Owned Fund of ₹2 crores.
Business Plan: A detailed 5-year business projection outlining revenue model, compliance framework, technology architecture, and governance structure.
IT Infrastructure Blueprint: Documentation describing the consent management architecture, API integration plan, and cybersecurity policies.
Directors’ and Shareholders’ KYC: Identity and address proof documents such as PAN, Aadhaar, passport, and other relevant KYC records.
CIBIL & Credit Reports: Credit history reports of promoters and directors to assess financial credibility and integrity.
Audited Financial Statements & ITRs: Copies of the company’s audited financial statements and income tax returns.
Step-by-Step Process for NBFC-AA Registration
To qualify for an NBFC-AA License, companies must fulfill the following RBI-prescribed eligibility conditions:
-
1. Company Incorporation: Incorporate a Private Limited or Public Limited Company under the Companies Act, 2013. The company’s Memorandum and Articles of Association (MoA & AoA) must be amended to specifically authorize account aggregator services.
-
2. Capital Requirement: Ensure the company maintains a minimum Net Owned Fund (NOF) of ₹2 crores and deposits the required capital in a scheduled commercial bank account.
-
3. Application Filing with RBI: Submit the NBFC-AA license application through the RBI COSMOS portal along with supporting documents such as the business plan, IT policies, and governance framework.
-
4. Submission of Physical Copies: After online submission, send the physical copies of all required documents to the concerned RBI Regional Office for verification.
-
5. Scrutiny by RBI: The Reserve Bank of India evaluates the company’s financial strength, promoter background, business plan, IT systems, and data security framework. RBI may also request additional clarifications or modifications in the IT infrastructure.
-
6. Grant of Certificate of Registration (CoR): Upon successful verification and satisfaction of all regulatory requirements, RBI issues the Certificate of Registration (CoR), officially recognizing the company as an NBFC-AA and allowing it to commence operations.
Step-by-Step Process for NBFC-AA Registration
-
Legal Recognition & Credibility: Operates under the regulation of the Reserve Bank of India, enhancing trust and credibility among customers, financial institutions, and partners.
-
First-Mover Advantage: Early participation in India’s rapidly growing digital financial data ecosystem provides a strategic advantage in the evolving fintech landscape.
-
Customer Trust & Transparency: A consent-based data sharing framework builds strong consumer confidence and ensures transparency in financial data usage.
-
Fintech Collaboration Opportunities: Enables partnerships with banks, NBFCs, insurance companies, and fintech startups to facilitate seamless financial data exchange.
-
Revenue Generation Models: Multiple income opportunities through service fees, API integrations, and collaborations with Financial Information Users (FIUs).
-
Support for MSMEs & Individuals: Helps small businesses and individuals access formal credit with reduced documentation and faster financial assessment.
-
Data Portability & Financial Inclusion: Empowers customers to securely share their financial data across institutions, promoting broader financial inclusion.
-
Regulatory Sustainability: A well-defined regulatory framework ensures long-term operational stability and compliance within India’s financial ecosystem.
Challenges in NBFC-AA Operations
-
High Initial Capital Requirement: A minimum Net Owned Fund (NOF) of ₹2 crore is required, which may act as a financial barrier for startups and small fintech companies.
-
Stringent IT Infrastructure: Companies must maintain highly secure, RBI-compliant IT systems with strong encryption, consent management architecture, and frequent security audits.
-
Regulatory Complexity: NBFC-AAs must comply with multiple regulatory frameworks including RBI, SEBI, IRDAI, and PFRDA, making compliance management complex.
-
Low Awareness Among Customers: Many individuals are still unfamiliar with the concept of consent-based financial data sharing, which can slow adoption.
-
Revenue Model Uncertainty: Monetization largely depends on partnerships with banks, NBFCs, and fintech platforms, which may take time to establish.
-
Regular RBI Scrutiny: NBFC-AAs are subject to periodic regulatory reporting, inspections, and audits conducted by the Reserve Bank of India.
Industry Applications of NBFC-AAs
Additional Compliance Requirements for NBFC-AAs
Advantages vs. Disadvantages
Advantages vs Disadvantages
| Advantages |
Disadvantages / Challenges |
| Legal recognition under RBI |
High capital requirement (₹2 crore NOF) |
| Secure & consent-driven framework |
Complex regulatory compliance |
| Builds customer trust |
Revenue model still evolving |
| Promotes financial inclusion |
High cost of IT infrastructure |
| Collaboration with banks & fintechs |
Regular RBI inspections |
| Supports MSMEs & individuals |
Low awareness among customers |
Why Choose Us?
Expertise in RBI Regulations
- Strong experience in handling NBFC, payment systems, and remittance approvals.
End-to-End Guidance
- From eligibility checks to final RBI approval, we manage the entire process.
Error-Free Documentation
- Well-prepared, compliant applications to avoid delays or rejections.
Dedicated Support
- Ongoing advisory on compliance, governance, and inspections.
Tailored Solutions
- Customized guidance for companies based on their financial and operational structure.
With our support, you can establish yourself as a trusted Indian Agent under MTSS, offering reliable remittance services to
millions of beneficiaries across India. We handle the regulatory complexities while you focus on expanding your financial services network.
Frequently Asked Questions
Ans: A minimum Net Owned Fund (NOF) of ₹2 crores is required.
Ans: No. NBFC-AAs are prohibited from lending, deposit-taking, or investment activities.
Ans: The Reserve Bank of India (RBI) regulates NBFC-AAs under the RBI Act, 1934.
Ans: The process typically takes 6–12 months, depending on documentation and RBI scrutiny.
Ans: Yes, foreign-owned companies can apply, subject to compliance with FDI norms and RBI approval.
Ans: Traditional NBFCs are involved in lending, leasing, and investments, while NBFC-AAs only facilitate secure data sharing.
The NBFC Account Aggregator (NBFC-AA) framework is a game-changer for India’s financial sector. It creates a transparent, consent-based, and secure mechanism for data sharing, which is crucial for credit expansion, financial inclusion, and digital innovation.
Though the licensing process is rigorous—requiring ₹2 crore NOF, strong IT infrastructure, and strict RBI compliance—the benefits far outweigh the challenges. NBFC-AAs not only empower customers but also create immense opportunities for banks, NBFCs, fintechs, insurers, and wealth managers to collaborate and innovate.
With our expert advisory services, businesses can successfully navigate the RBI registration process, ensuring full compliance while tapping into India’s growing financial data ecosystem. By becoming an NBFC-AA, your company can be at the forefront of India’s digital financial revolution.
