On June 5, 2026, the Reserve Bank of India did something that rarely generates headlines but will compound quietly across India’s financial sector for a decade: it formally recognised Sahamati Foundation as the Self-Regulatory Organisation for India’s Account Aggregator ecosystem. The recognition means that what was a voluntary, industry-built protocol for consented data sharing now has a formal regulatory anchor. It also means a certain class of fintech now has a structural moat that most investors haven’t yet priced in.

The Scale of What’s Being Formalised

India’s Account Aggregator framework — which lets individuals consent to share their financial data across institutions — is no longer early-stage infrastructure. Sahamati reports that the ecosystem has processed 450 million fulfilled consent requests, with 294 million accounts linked and 290 million monthly data shares flowing across the network. The network now includes 1,120 live regulated financial entities, 176 Financial Information Providers (FIPs), 1,020 Financial Information Users (FIUs), and 17 operational Account Aggregators.

These are not test numbers. This is production-scale data infrastructure serving hundreds of millions of Indians who have — in many cases without knowing the acronym — consented to their financial data being accessed by lenders, wealth managers, and other financial institutions.

What the SRO Status Actually Changes

Before SRO recognition, Sahamati operated as a collective for Account Aggregators — setting standards, managing disputes, and nudging compliance. After recognition, it has a different power: formal rule-making authority delegated by RBI, mandatory compliance obligations for ecosystem participants, and a governance structure that gives the RBI a single counterparty to engage with when regulating the ecosystem.

For the 17 Account Aggregators operating in the network — names like Finvu, OneMoney, Perfios AA, CAMS FinServ, and others — SRO recognition changes the cost of operating. Compliance becomes non-optional and standardised. Bad actors get a clearer exit mechanism. Licensing standards can be elevated. The ecosystem moves from “industry association trying to maintain standards” to “regulated utility with governance teeth.”

The more important implication is for the FIUs — the 1,020 entities that consume the data: lenders, insurance companies, wealth platforms, and an increasingly broad set of credit and advisory services. As the AA ecosystem matures under formal governance, the reliability of the data pipe improves. Integrations become more investable. Products built on AA rails become more defensible.

The Fintech Moat Question

India’s Account Aggregator framework is often compared to open banking in the UK and Europe. The comparison is partially accurate but misses something structurally important: India’s AA framework is consent-native at a population scale that no European open banking implementation has matched. The consent architecture was designed for 1.4 billion people, many of whom have banking relationships but limited experience with digital financial services. The 294 million linked accounts figure is the clearest indication that the consent-native design is working.

The SRO recognition formalises what Sahamati was already building: an infrastructure that converts consented data access from a feature into a standardised right. Fintechs that built their credit underwriting, personal financial management, or insurance underwriting on AA rails before this moment have a head start that is now being institutionally protected. Platforms that haven’t integrated yet are looking at a compliance overhead on top of the technical integration overhead, because the SRO now sets the standards.

The Charaka View

Manthan Intelligence’s DPI thesis — that India’s digital public infrastructure creates structural advantages for companies building on top of it — applies directly here. The pattern we track is consistent: each time a DPI layer formalises (UPI under NPCI, GST Network under NIC, AA under Sahamati/RBI), the early-build advantage crystallises and late entrants face a steeper climb. The Sahamati SRO recognition is that crystallisation moment for the AA ecosystem. The companies to watch are not the Account Aggregators themselves — they’re the FIUs who have built consent-data-native products with enough time to accumulate training data before the compliance bar rises for everyone else.


This analysis draws on RBI’s recognition of Sahamati as Account Aggregator SRO (Business Standard, June 5, 2026), Sahamati’s official statement on SRO recognition, and Inc42’s reporting on the ecosystem milestone. Human editorial oversight applied.

This analysis is informational and does not constitute investment advice, a research report, or a recommendation to buy, sell, or hold any security.

Charaka Notes by Manthan Intelligence. Subscribe