📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US launched its personal-finance surface without regulatory mandates, while Europe’s approach is built on strict licensing and consent regimes. This fundamental difference alters market dynamics and who can build these platforms.
The US launched its permissionless personal-finance surface on May 15, 2026, allowing companies to connect accounts across thousands of institutions without regulatory approval. In contrast, Europe’s equivalent cannot be launched without complying with layered mandates that require licensing, consent, and conformity assessments, making it a fundamentally different process.
In the US, the launch of OpenAI’s finance surface was permissionless: firms could connect accounts via APIs like Plaid without needing licenses or regulatory approval. This approach enabled rapid deployment and a competitive landscape dominated by tech firms and aggregators.
Europe’s regulatory environment, however, treats account access as a licensed activity under PSD2, and subsequent regulations like FIDA and the AI Act further impose licensing, consent, and compliance obligations. These rules are enforced by financial regulators such as BaFin in Germany, and the process involves building a consent-and-license architecture rather than a permissionless API layer.
This structural difference means that the European market’s entry barriers are higher, favoring incumbents and licensed providers, while the US environment favors permissionless innovation. The European approach also integrates AI classification and high-risk assessments into the compliance process, adding further complexity.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Implications of Regulatory Architecture on Market Access
This fundamental difference in regulatory architecture determines who can build and operate financial surfaces in Europe versus the US. In Europe, licensing, consent, and compliance are embedded in the product design, creating higher barriers but potentially more regulated and secure platforms. It shifts the competitive advantage toward licensed, regulated firms, possibly leading to slower innovation but enhanced consumer protection. Conversely, the US environment favors permissionless innovation, enabling faster deployment but raising questions about data security and consumer rights. Understanding this divide is crucial for firms planning cross-Atlantic expansion and for policymakers assessing the impact of regulation on innovation and competition.PSD2 compliant API for account access
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Regulatory Foundations of US and European Financial Data Access
The US’s permissionless approach stems from a private, market-driven infrastructure where firms like Plaid define account access through APIs without needing regulatory approval. This model prioritizes rapid innovation and market competition.
Europe’s framework, however, is rooted in public regulation: PSD2, enacted in 2018, established a licensing regime for third-party providers. Its successor, PSD3/PSR, and the FIDA regulation extending open banking to investments and other financial products, are still in development, with operational dates projected around 2027-2030. The AI Act, effective August 2026, classifies AI systems used in finance as high-risk, requiring supervised compliance, further embedding regulation into the architecture.
These layered regulations create a permissioned environment that fundamentally alters the design and deployment of financial surfaces, contrasting sharply with the US permissionless model.
“The American permissionless substrate enabled rapid, unregulated deployment of personal-finance surfaces, whereas Europe’s layered mandates require a licensing and consent architecture that fundamentally changes the build process.”
— Thorsten Meyer
Financial Management Core Concepts
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Impacts of Regulatory Divergence
It remains unclear how these regulatory differences will affect innovation, consumer outcomes, and market competition over the next few years. The full impact of AI classification and high-risk designations on new entrants and incumbents is still evolving, and the timeline for FIDA’s implementation is uncertain.
AI high-risk classification tools for finance
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Future Developments in European Financial Regulation
Regulators in Europe are expected to finalize PSD3/PSR and FIDA regulations by 2026-2027, with operational effects beginning around 2027-2030. These will determine how firms can build and operate licensed financial surfaces and how AI systems are regulated in finance. Meanwhile, US firms will continue to expand permissionless offerings, potentially exploring licensing strategies to enter European markets.
consent management platform for banking
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why can’t US permissionless finance surfaces be directly used in Europe?
Because European regulations treat account access as a licensed, consent-based activity, requiring firms to obtain licenses and comply with strict rules, unlike the permissionless model in the US.
What does the AI Act mean for financial platforms in Europe?
The AI Act classifies certain AI systems as high-risk, requiring compliance, supervision, and conformity assessments, which adds a regulatory layer to the development of financial AI tools.
Will European regulation slow down innovation?
Potentially, as higher entry barriers and compliance requirements may favor established firms and slow the pace of new entrants, but they could also lead to more secure and consumer-friendly platforms.
Who is best positioned to build the European financial surface?
Licensed, regulated firms with compliance infrastructure are better positioned, as the architecture favors firms that operate under licensing, consent, and conformity regimes.
When will the European open-finance regulations be fully operational?
Regulations like FIDA are expected to be operational around 2029-2030, with final implementation details still under development.
Source: ThorstenMeyerAI.com
