AA Framework: What Data You Can Share

What Is the Account Aggregator Framework

India’s Account Aggregator (AA) framework is one of RBI’s most important digital public infrastructure projects — designed to give users full control over their financial data. Instead of sharing PDFs or passwords, you can now authorize data sharing securely through regulated entities called AAs.

As explained in Rbi Account Aggregator Framework, the AA system connects three parties — Financial Information Providers (FIPs) like banks, Financial Information Users (FIUs) like lenders or insurers, and you, the customer. When you grant consent, your financial data moves digitally from the provider to the user — encrypted, verified, and time-bound.

For example, if you apply for a loan on a fintech app, it can request access to your savings account statement through your AA. Once you approve the consent request, the app receives the data — but not your login credentials. It’s secure, auditable, and completely under your control.

Insight: With the AA system, your financial data doesn’t travel freely — it moves only with your digital consent.

Types of Data You Can Share via AA

The AA ecosystem currently supports multiple types of financial data from regulated institutions. These categories are standardized by RBI and Sahamati — the industry alliance governing interoperability among AAs.

According to Financial Data Sharing Consent, you can securely share the following data types through your chosen Account Aggregator:

• Banking Data: Savings, current, and deposit account statements from banks and co-operatives.
• Investment Data: Mutual fund holdings, SIP details, portfolio valuations, and demat account summaries.
• Insurance Data: Policy types, premium schedules, claim history, and active coverage details.
• Pension Data: NPS account balances, contribution history, and nominee information.
• Loan Data: Active loan accounts, EMI status, repayment records, and credit utilization.
• Credit Card Data: Monthly statements, total dues, and transaction history from banks or NBFCs.

This list will expand as new financial sectors join the AA network — including tax, telecom, and health insurance data under controlled consent frameworks. The ecosystem is being built for Open Finance, where every regulated institution can share verified user data safely and digitally.

Tip: You decide who sees your data, how long they see it, and for what purpose — all in one consent screen.

What You Cannot Share Under AA

Even though AA makes data sharing easier, it doesn’t mean “share everything.” RBI’s framework draws strict lines on what can’t be transmitted through AAs — especially personal or unverified data sources.

As per Aa Data Privacy Controls, the following types of information are not shared through the AA system:

1. Raw credentials: Login IDs, passwords, or OTPs for any financial platform.
2. Unverified documents: PDFs, screenshots, or manually uploaded statements.
3. Behavioral data: Location, device ID, or browsing history.
4. Non-financial data: Social media accounts or telecom usage unless linked to a verified financial institution.
5. Third-party insights: Any analytics or risk scores generated outside regulated FIPs.

This ensures that the AA framework remains strictly financial and regulated. Even fintechs connected to AAs must comply with RBI and Data Protection Act standards when requesting data — every access must serve a clear, consented purpose.

Insight: In the AA network, your data can’t be seen — it can only be used, and only with permission.

Why the AA System Matters for Data Privacy

India’s AA framework isn’t just about convenience — it’s a privacy milestone. With Future Of Open Banking India, RBI has built a consent-based infrastructure that aligns with Digital Personal Data Protection (DPDP) Act principles. Every data request must be granular, purpose-driven, and reversible.

Key user safeguards built into the AA model:

• End-to-end encryption: Data travels securely between FIPs and FIUs without being stored by the AA.
• Limited-time consent: Access expires automatically after the approved duration.
• Revocable permissions: Users can withdraw data access anytime through their AA app.
• Transparency logs: Every data transaction is recorded and auditable.
• No data monetization: AAs are prohibited from selling or analyzing user data.

The AA system flips data ownership — for the first time, users own and control their financial information. Whether applying for loans, managing portfolios, or verifying income, data sharing is now safer, faster, and entirely transparent.

Tip: The AA framework is India’s digital handshake — secure, auditable, and built on consent.

In 2025 and beyond, as more financial institutions join the network, India’s open banking vision will depend on one principle — data shared by choice, not by default.

Frequently Asked Questions

1. What is the Account Aggregator (AA) system?

It’s an RBI-regulated network that allows users to share their financial data securely between banks, insurers, and lenders with digital consent.

2. What data can I share using AA?

You can share bank statements, insurance, investment, pension, and loan-related data from regulated institutions.

3. Is my data stored by the Account Aggregator?

No. AAs only facilitate encrypted data transfer and do not store any user information.

4. Can I stop sharing my data later?

Yes. You can revoke consent anytime directly through your AA app or financial institution.

5. Is the AA framework safe?

Yes. It’s fully regulated by RBI and built with end-to-end encryption, purpose-based access, and strict audit trails.