📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US launched a permissionless, API-based personal-finance surface in May 2026, but Europe’s regulatory framework requires licensing and consent, preventing a direct transfer. This creates different market structures and competitive advantages.
OpenAI’s US personal-finance surface launched on May 15, 2026, operating permissionlessly with API access across thousands of institutions. In contrast, Europe’s regulatory framework requires licensing, consent, and compliance under multiple overlapping regimes, preventing a similar permissionless rollout.
In the United States, the launch was based on a permissionless model: companies could connect accounts through APIs like Plaid without needing licenses or regulatory approval. This allowed rapid deployment and a product-centric approach where compliance was secondary.
In Europe, the regulatory environment is fundamentally different. Since the PSD2 regulation in 2018, account access has been a licensed activity governed by open-banking rules. The upcoming PSD3 and Payment Services Regulation (PSR), expected in 2026-2027, will further formalize licensing requirements. Additionally, the Financial Data Access regulation (FIDA), still in trilogue as of April 2026, will extend open banking to investments, pensions, and loans, creating a new licensing category: Financial Information Service Providers.
Furthermore, the EU AI Act, effective August 2026, classifies AI systems used for credit scoring and financial assessments as high-risk, subjecting them to strict supervisory obligations by financial regulators such as BaFin in Germany. This layered regulation means that any AI-driven conversational finance system in Europe must navigate a complex compliance landscape, unlike the permissionless US model.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Implications of Regulatory Architecture on Market Entry
This regulatory divergence fundamentally alters how conversational finance products can be developed and offered in Europe. Unlike the US, where the product is built first and compliance follows, Europe requires licensing, consent dashboards, and AI classification as core components of the product architecture. This favors firms that are licensed, consent-native, and under financial supervision, potentially leading to slower deployment, higher costs, and increased market concentration.
For consumers, this could mean more secure and regulated services but also fewer innovative, permissionless offerings. The regulatory architecture acts as a moat, shaping market dynamics and competitive advantage, and may influence whether European consumers see faster innovation or more cautious, compliant products.
API-based personal finance management tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Frameworks Shaping Financial Data Access
The European open-banking regime, established by PSD2 in 2018, mandated licensed third-party providers to access bank data through regulated APIs. This was a shift from the US’s permissionless API model, where companies could connect without licenses or direct regulation.
The upcoming PSD3 and PSR are set to formalize and expand these requirements, making account access a fully licensed activity. FIDA, the open-finance regulation in progress, will extend these rules to investments, pensions, and other financial data, creating a new category of licensed providers.
Simultaneously, the EU AI Act, effective August 2026, imposes high-risk classifications on AI systems used in credit scoring and financial assessments, requiring compliance with supervision and conformity assessments. These layered regulations create a different building block for European financial tech firms compared to their US counterparts.
“The permissionless American substrate enabled rapid product deployment, while Europe’s layered licensing and consent regime fundamentally re-architects the market.”
— Thorsten Meyer
European open banking API connectors
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unclear Impact on Innovation and Competition
It remains uncertain whether Europe’s regulatory architecture will lead to more secure, consumer-protective products at the expense of innovation, or if it will slow down market entry and favor incumbents. The long-term effects on competition, market diversity, and consumer outcomes are still developing.
AI credit scoring software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps for European Financial Regulation and Market Entry
Regulators are expected to finalize PSD3 and FIDA regulations by 2026-2027, clarifying licensing requirements. Firms aiming to develop conversational finance products in Europe must adapt to these licensing and AI compliance regimes. Observers will watch how these regulatory frameworks influence market structure, innovation, and consumer choice in the coming years.
Financial data access licensing solutions
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why can’t US-style permissionless finance be directly implemented in Europe?
Because European regulations require licensing, consent management, and compliance with AI and data access rules, making permissionless API access impossible without regulatory approval.
How does the European open-banking regime differ from the US model?
Europe’s open banking is built on a licensing framework with regulated APIs, whereas the US relies on permissionless API access without requiring licenses or direct regulation.
What are the implications for companies wanting to build conversational finance in Europe?
They must obtain licenses, implement consent dashboards, and comply with AI and data regulations, which increases costs and may favor larger, licensed firms over permissionless aggregators.
Will European consumers benefit from this regulatory approach?
Potentially, through increased security and consumer protection, but possibly at the cost of slower innovation and less market diversity.
When will the new European regulations be fully implemented?
The PSD3 and FIDA regulations are expected to be finalized around 2026-2027, with full operational effects likely by 2029-2030.
Source: ThorstenMeyerAI.com