📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US launched its permissionless personal-finance surface in 2026, but Europe’s strict licensing and regulatory regime makes it impossible to replicate the same model. This creates a different market architecture, favoring licensed firms over permissionless aggregators.
OpenAI’s personal-finance surface launched in the United States on May 15, 2026, operating permissionlessly through API access without regulatory approval. In contrast, Europe’s regulatory environment mandates licensing, consent, and compliance for any similar service, preventing a direct replication of the US model. This fundamental difference in architecture means the US approach cannot simply be transposed across the Atlantic.
In the US, the launch of OpenAI’s finance surface relied on a permissionless, API-driven model, where firms could connect accounts without prior regulatory approval, leveraging private infrastructure like Plaid. This approach prioritized speed, innovation, and permissionless access, with compliance becoming an afterthought.
Europe’s regulatory landscape, however, treats account access as a mandated, licensed activity under the open-banking regime established by PSD2 in 2018. The upcoming PSD3 and FIDA regulations will expand this mandate to include investments, pensions, and other financial data, requiring firms to obtain licenses and adhere to strict consent and AI classification rules under the EU AI Act. These rules are enforced by regulators like BaFin and involve comprehensive conformity assessments.
Consequently, a service that reads bank data in Europe must be built as a licensed, consent-driven product, not a permissionless API layer. The architecture shifts from a permissionless product to a licensing project, with compliance embedded at every level, fundamentally changing who can build and operate such services.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Implications of Regulatory Architecture on Market Entry
This regulatory divergence fundamentally alters market dynamics. In the US, permissionless access favors agile, permissionless aggregators and tech firms, enabling rapid innovation. In Europe, licensing and compliance requirements create higher barriers to entry, favoring incumbents and licensed specialists. This could lead to slower adoption, increased concentration, and different consumer outcomes, with the architecture itself shaping the competitive landscape.
European open banking API compliance tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Financial Data Regulation and AI Rules
European open banking began with PSD2 in 2018, establishing a regulated framework for third-party access to payment accounts. The upcoming PSD3 and FIDA regulations will extend this logic to broader financial data, creating a licensing regime for open finance. Simultaneously, the EU AI Act classifies high-risk AI systems used in credit and financial decision-making, imposing strict obligations and supervision by authorities like BaFin. These layered regulations form an architecture that mandates licensing, consent, and AI classification, contrasting sharply with the US’s permissionless approach.
“The European regulatory regime treats account access as a mandated, licensed activity, fundamentally changing how services are built and operated.”
— Thorsten Meyer
PSD2 licensed account access solutions
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unclear Impact on Consumer Experience and Competition
It remains uncertain whether Europe’s licensing and compliance-heavy approach will lead to better consumer protection and data security or result in slower innovation and increased market concentration. The long-term effects of this architectural divergence are still developing, and empirical evidence is limited at this stage.

Infrastructure, Sovereignty & Reality-Aware Systems (THE BFSI AI GOVERNANCE OPERATING SYSTEM)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Future Regulatory Developments and Market Adaptation
European regulators are expected to finalize PSD3 and FIDA regulations in 2026-2027, clarifying licensing and compliance requirements. Meanwhile, firms are adapting to these rules, with licensed players expected to dominate the open finance landscape. The impact on consumer choice, innovation speed, and market competition will become clearer as these regulations take effect and new services emerge.
regulated financial data aggregator
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why can’t the US permissionless finance surface be directly implemented in Europe?
Because European regulations treat account access as a mandated, licensed activity, requiring firms to obtain licenses, adhere to consent and conformity requirements, and comply with AI rules, unlike the permissionless approach used in the US.
How does the EU AI Act influence financial data services?
The AI Act classifies high-risk AI systems used in credit scoring and financial decision-making as high-risk, imposing strict obligations and supervision, which shape how AI is integrated into licensed financial services.
Who is positioned to build the European version of the US finance surface?
Licensed, consent-driven firms that can navigate the complex regulatory environment are better positioned, whereas permissionless aggregators face structural barriers under European law.
Will the European approach lead to better consumer protection?
It is still uncertain; the regulatory architecture aims to enhance security and consent management, but it may also slow innovation and favor incumbents, impacting consumer choice.
Source: ThorstenMeyerAI.com