India Account Aggregator Framework (RBI)
The Reserve Bank of India (RBI) Account Aggregator (AA) framework enables consent-based sharing of financial data between Financial Information Providers (FIPs) and Financial Information Users (FIUs) through licensed Account Aggregators. Operationalised through the RBI Master Direction on NBFC-Account Aggregator (2016, updated 2021). Uses the Data Empowerment and Protection Architecture (DEPA) for consent management. Covers banking, insurance, securities, pension, and tax data.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (8)
RBI AA Audit + Logging + Authentication
| Code | Title |
|---|---|
| RBI-AA-Audit-Logging-IT-System-Audit-Consent-Lifecycle-Authentication | RBI AA Audit + Logging - IT System Audit + Consent Lifecycle Logging + Customer Authentication + Bi-Annual Audit + RBI Inspection + Sahamati Compliance Reporting |
RBI AA Consent Architecture
| Code | Title |
|---|---|
| RBI-AA-ConsentArchitecture-ConsentArtefact-ExplicitConsent-PurposeLimitation-CustomerDashboard-ORS-CMP | RBI AA Consent Architecture - Consent Artefact + Explicit Customer Consent + Purpose Limitation + Customer Consent Dashboard + Online Revocation Service + Consent Management Provider |
RBI AA Customer Protection
| Code | Title |
|---|---|
| RBI-AA-CustomerProtection-Grievance-Redressal-Fees-Transparency-RBI-Ombudsman | RBI AA Customer Protection - Grievance Redressal Mechanism + Fee Transparency + RBI Integrated Ombudsman + Customer Awareness + Internal Grievance Officer + Sahamati Dispute Resolution |
RBI AA Ecosystem
| Code | Title |
|---|---|
| RBI-AA-Ecosystem-FIPs-FIUs-Interoperability-Onboarding-Sahamati-DPI-IndiaStack | RBI AA Ecosystem - Financial Information Providers (FIPs) + Financial Information Users (FIUs) + Interoperability + Sahamati SRO Onboarding + DPI India Stack + Cross-Sector Regulators |
RBI AA IT + Data Protection
| Code | Title |
|---|---|
| RBI-AA-IT-DataProtection-Transience-NoStorage-E2EE-DataLocalisation-IS-PolicyFramework | RBI AA IT + Data Protection - Data Transience + No Storage at AA + End-to-End Encryption + Data Localisation in India + Information Security Policy + RBI IT Framework for NBFC-AA |
RBI AA Incident Response + Resilience
| Code | Title |
|---|---|
| RBI-AA-IncidentResponse-Resilience-RBI-CERT-In-BCP-DR-Continuity | RBI AA Incident Response + Resilience - Cyber Incident Reporting to RBI + CERT-In + Business Continuity + Disaster Recovery + Resilience + Customer Communication + Forensics |
RBI AA Industry Standards + Coordination
| Code | Title |
|---|---|
| RBI-AA-Sahamati-SRO-IndustryStandards-DPDPAct-RBI-CSF-Coord-DPI-IndiaStack | RBI AA Sahamati SRO + Industry Standards + DPDP Act 2023 + RBI Cyber Security Framework + Coordination with DPI India Stack + Cross-Sector + International AA Equivalents |
RBI AA Registration + Licensing
| Code | Title |
|---|---|
| RBI-AA-Registration-Licensing-NBFC-AA-NetOwnedFunds-FitAndProper-MD2016 | RBI AA Registration + Licensing - NBFC-Account Aggregator (NBFC-AA) Category + Net Owned Funds + Fit and Proper Criteria + RBI Master Direction 2016 + Governance |
Your Compliance Coverage
If you comply with India Account Aggregator Framework (RBI), you already cover:
Family Educational Rights and Privacy Act (FERPA)
25%
2 controls mapped
Compare →ISO/IEC 27557:2022 - Organisational Privacy Risk Management
25%
2 controls mapped
Compare →ISO/IEC 23837 - Security Requirements for Quantum Key Distribution
25%
2 controls mapped
Compare →+ 49 more: ISO/IEC 29100:2024 (25%), ISO/IEC 38500:2024 - Governance of IT (25%)
See all 52 mapped frameworks ↓Maps to 52 other frameworks
Frequently Asked Questions
What is India Account Aggregator Framework (RBI)?
India Account Aggregator Framework (RBI) is a compliance framework from India (RBI) with 8 domains and 8 controls. The Reserve Bank of India (RBI) Account Aggregator (AA) framework enables consent-based sharing of financial data between Financial Information Providers (FIPs) and Financial Information Users (FIUs) through licensed Account Aggregators. Operationalised through the RBI Master Direction on NBFC-Account Aggregator (2016, updated 2021). Uses the Data Empowerment and Protection Architecture (DEPA) for consent management. Covers banking, insurance, securities, pension, and tax data. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
How many controls does India Account Aggregator Framework (RBI) have?
India Account Aggregator Framework (RBI) has 8 controls organised across 8 domains. The largest domains are RBI AA Audit + Logging + Authentication (1 controls), RBI AA Consent Architecture (1 controls), RBI AA Customer Protection (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
What frameworks does India Account Aggregator Framework (RBI) map to?
India Account Aggregator Framework (RBI) maps to 52 other compliance frameworks. The top mapping partners are Family Educational Rights and Privacy Act (FERPA) (25% coverage), ISO/IEC 27557:2022 - Organisational Privacy Risk Management (25% coverage), ISO/IEC 23837 - Security Requirements for Quantum Key Distribution (25% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I get started with India Account Aggregator Framework (RBI) compliance?
Start your India Account Aggregator Framework (RBI) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about India Account Aggregator Framework (RBI) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 8 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.
Get Started Free →Free forever — no credit card required