India Account Aggregator Framework (RBI)
The Reserve Bank of India (RBI) Account Aggregator (AA) framework enables consent-based sharing of financial data between Financial Information Providers (FIPs) and Financial Information Users (FIUs) through licensed Account Aggregators. Operationalised through the RBI Master Direction on NBFC-Account Aggregator (2016, updated 2021). Uses the Data Empowerment and Protection Architecture (DEPA) for consent management. Covers banking, insurance, securities, pension, and tax data.
India Account Aggregator Framework (RBI) is a compliance framework from India (RBI) with 8 domains and 8 controls that map to 48 other frameworks. The largest domains are RBI AA Audit + Logging + Authentication (1 controls), RBI AA Consent Architecture (1 controls), RBI AA Customer Protection (1 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (8)
RBI AA Audit + Logging + Authentication
| Code | Title |
|---|---|
| RBI-AA-Audit-Logging-IT-System-Audit-Consent-Lifecycle-Authentication | RBI AA Audit + Logging - IT System Audit + Consent Lifecycle Logging + Customer Authentication + Bi-Annual Audit + RBI Inspection + Sahamati Compliance Reporting |
RBI AA Consent Architecture
| Code | Title |
|---|---|
| RBI-AA-ConsentArchitecture-ConsentArtefact-ExplicitConsent-PurposeLimitation-CustomerDashboard-ORS-CMP | RBI AA Consent Architecture - Consent Artefact + Explicit Customer Consent + Purpose Limitation + Customer Consent Dashboard + Online Revocation Service + Consent Management Provider |
RBI AA Customer Protection
| Code | Title |
|---|---|
| RBI-AA-CustomerProtection-Grievance-Redressal-Fees-Transparency-RBI-Ombudsman | RBI AA Customer Protection - Grievance Redressal Mechanism + Fee Transparency + RBI Integrated Ombudsman + Customer Awareness + Internal Grievance Officer + Sahamati Dispute Resolution |
RBI AA Ecosystem
| Code | Title |
|---|---|
| RBI-AA-Ecosystem-FIPs-FIUs-Interoperability-Onboarding-Sahamati-DPI-IndiaStack | RBI AA Ecosystem - Financial Information Providers (FIPs) + Financial Information Users (FIUs) + Interoperability + Sahamati SRO Onboarding + DPI India Stack + Cross-Sector Regulators |
RBI AA IT + Data Protection
| Code | Title |
|---|---|
| RBI-AA-IT-DataProtection-Transience-NoStorage-E2EE-DataLocalisation-IS-PolicyFramework | RBI AA IT + Data Protection - Data Transience + No Storage at AA + End-to-End Encryption + Data Localisation in India + Information Security Policy + RBI IT Framework for NBFC-AA |
RBI AA Incident Response + Resilience
| Code | Title |
|---|---|
| RBI-AA-IncidentResponse-Resilience-RBI-CERT-In-BCP-DR-Continuity | RBI AA Incident Response + Resilience - Cyber Incident Reporting to RBI + CERT-In + Business Continuity + Disaster Recovery + Resilience + Customer Communication + Forensics |
RBI AA Industry Standards + Coordination
| Code | Title |
|---|---|
| RBI-AA-Sahamati-SRO-IndustryStandards-DPDPAct-RBI-CSF-Coord-DPI-IndiaStack | RBI AA Sahamati SRO + Industry Standards + DPDP Act 2023 + RBI Cyber Security Framework + Coordination with DPI India Stack + Cross-Sector + International AA Equivalents |
RBI AA Registration + Licensing
| Code | Title |
|---|---|
| RBI-AA-Registration-Licensing-NBFC-AA-NetOwnedFunds-FitAndProper-MD2016 | RBI AA Registration + Licensing - NBFC-Account Aggregator (NBFC-AA) Category + Net Owned Funds + Fit and Proper Criteria + RBI Master Direction 2016 + Governance |
Your Compliance Coverage
If you comply with India Account Aggregator Framework (RBI), you already cover:
Family Educational Rights and Privacy Act (FERPA)
25%
2 controls mapped
Compare →ISO/IEC 27557:2022 - Organisational Privacy Risk Management
25%
2 controls mapped
Compare →ISO/IEC 38500:2024 - Governance of IT
25%
2 controls mapped
Compare →+ 45 more: ISO/IEC 29100:2024 (25%), Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) (25%)
See all 48 mapped frameworks ↓Maps to 48 other frameworks
What is India Account Aggregator Framework (RBI) and who does it apply to?
India Account Aggregator Framework (RBI) is a compliance framework from India (RBI) with 8 domains and 8 controls. The Reserve Bank of India (RBI) Account Aggregator (AA) framework enables consent-based sharing of financial data between Financial Information Providers (FIPs) and Financial Information Users (FIUs) through licensed Account Aggregators. Operationalised through the RBI Master Direction on NBFC-Account Aggregator (2016, updated 2021). Uses the Data Empowerment and Protection Architecture (DEPA) for consent management. Covers banking, insurance, securities, pension, and tax data. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does India Account Aggregator Framework (RBI) actually require?
India Account Aggregator Framework (RBI) has 8 controls organised across 8 domains. The largest domains are RBI AA Audit + Logging + Authentication (1 controls), RBI AA Consent Architecture (1 controls), RBI AA Customer Protection (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of India Account Aggregator Framework (RBI) do I already cover?
India Account Aggregator Framework (RBI) maps to 48 other compliance frameworks. The top mapping partners are Family Educational Rights and Privacy Act (FERPA) (25% coverage), ISO/IEC 27557:2022 - Organisational Privacy Risk Management (25% coverage), ISO/IEC 38500:2024 - Governance of IT (25% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement India Account Aggregator Framework (RBI)?
Start your India Account Aggregator Framework (RBI) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about India Account Aggregator Framework (RBI) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 8 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.
Get Started Free →Free forever — no credit card required