📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US’s permissionless, API-based personal finance surface contrasts sharply with Europe’s mandated, licensed approach. This difference fundamentally alters how financial data and AI are integrated, impacting market entry, competition, and consumer outcomes.
OpenAI’s launch of its personal-finance surface in the United States on May 15, 2026, was permissionless, relying on API access without regulatory licenses. In contrast, European law mandates a licensing, consent, and compliance-based infrastructure, preventing a direct US-style rollout.
In the US, the personal-finance surface was built on a permissionless model, where companies like OpenAI can access bank data via APIs without prior regulation or licensing, enabled by private sector innovation and the open banking ecosystem. This approach allows rapid deployment and flexibility, with compliance seen as an afterthought.
Europe’s approach is fundamentally different. Since the adoption of PSD2 in 2018, account access has been a regulated activity requiring licenses and explicit customer consent. The subsequent FIDA regulation expands open banking into broader financial data, creating a new licensing category, the Financial Information Service Provider, with operational timelines around 2029-2030. AI systems used in finance are also heavily regulated under the EU AI Act, which classifies high-risk systems and enforces strict obligations.
These layered regulations mean that a product similar to the US surface cannot be simply ported to Europe. Instead, it must be re-architected around licensing, consent dashboards, conformity assessments, and AI classification, making compliance the core of the architecture rather than an afterthought. Firms that can operate within this framework are typically licensed, consent-driven, and supervised, unlike many US-based permissionless aggregators.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
European Regulatory Architecture Reshapes Market Entry
This regulatory divergence fundamentally alters market dynamics. In Europe, building a finance surface involves obtaining licenses, complying with consent and AI regulations, and integrating into a mandated architecture. This raises entry costs, favors incumbent firms with existing licenses, and shifts the competitive advantage away from permissionless aggregators prevalent in the US.
While this structure may enhance consumer protection and data security, it also results in a slower, more concentrated market environment. The European approach emphasizes compliance as the foundation of the product, contrasting sharply with the US model where the product is built first, and compliance is secondary.

AI Agent + API: How to Connect Your Agent to the Internet and Services
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulations Create a Mandate-Driven Financial Data Ecosystem
Since PSD2’s implementation in 2018, Europe has moved toward a mandate-driven open banking regime, requiring licensed third-party providers for account access. The ongoing FIDA regulation aims to extend this model to broader financial data, with operational timelines around 2029-2030. The EU AI Act further complicates the landscape by imposing high-risk classifications and obligations on AI systems used in finance, supervised by financial regulators like BaFin.
This layered regulatory environment creates a fundamentally different infrastructure compared to the US, where private firms like Plaid operate permissionlessly, without the need for licenses or regulatory approval.
“The American permissionless fintech surface is built on a private, API-driven foundation, whereas Europe’s system is a mandate-driven architecture that requires licenses, consent, and compliance at every layer.”
— Thorsten Meyer
European open banking compliance software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties Around Implementation Timelines and Market Impact
While the regulatory frameworks are clear, the precise timeline for full implementation of FIDA and the AI Act remains uncertain. It is also unclear how quickly incumbents will adapt and whether new entrants can navigate the licensing landscape effectively. The impact on consumer outcomes and market competition is still subject to ongoing debate.
fintech licensing and consent management software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps for Market Adaptation and Regulatory Enforcement
Regulators are expected to finalize the FIDA regulation in 2026, with operational requirements likely in 2029-2030. Firms interested in entering the European market will need to secure licenses, develop compliance infrastructure, and integrate AI classification systems. Observers will monitor how these regulatory changes influence innovation, competition, and consumer protection in the European financial ecosystem.
AI high-risk financial regulation tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does Europe’s licensing regime differ from the US permissionless model?
Europe requires firms to obtain licenses, adhere to consent protocols, and comply with AI regulations, making the architecture mandate-driven. In contrast, the US allows permissionless API access without prior licensing, enabling faster, less regulated product deployment.
Will the European approach slow down innovation in financial services?
Potentially, as the licensing and compliance requirements increase entry costs and complexity. However, it may also lead to more secure, consumer-protective products and a more stable market environment.
Who are the firms best positioned to build the European finance surface?
Licensed, consent-driven firms with existing regulatory approval and compliance infrastructure are best positioned. Many US-based permissionless aggregators may face barriers or need significant adaptation.
When will the full effects of FIDA and the AI Act be visible?
The regulations are expected to be operational around 2029-2030, with gradual implementation and market adaptation occurring over the next few years.
Source: ThorstenMeyerAI.com