Finwiser › Account Aggregator
Account Aggregator
It is the reason Finwiser can read your accounts without ever asking for your bank password — a consent rail, licensed by the Reserve Bank of India, that moves your own financial data to whoever you point it at, and stops the moment you say stop.
Written for a salaried reader who has been asked to “connect via AA” and would like to know what that actually means before tapping approve.
Your bank holds the data. An Account Aggregator asks you whether to move it. Finwiser receives it. Nobody in that chain ever sees a password.
Your bank holds your data
Your bank, your mutual fund registrar, your insurer, your pension record. They already hold the statements. What they have never had is a safe way to hand you a copy that a third party can read.
You approve, on their screen
An RBI-licensed entity — Finvu, for example — whose only job is to carry consent. It shows you which accounts, which data, for how long, and for whom. You approve there, on its own screen, not inside Finwiser. It is not allowed to read or keep what it moves.
Finwiser receives, read-only
Only what you ticked, only for the period you agreed. Finwiser can see balances and transactions and give advice on them. It cannot place a trade, move a rupee, or change anything in your accounts — the rail does not carry those instructions.
FIP, AA and FIU are the framework’s own words for the three roles. You will see them on the consent screen, which is the only reason they are worth learning.
All data is encrypted with AES-256 at rest and TLS 1.3 in transit — the same standards your bank uses for online banking. More detail on what is used, where it lives and for how long: read the Privacy Policy.
Before the Account Aggregator existed, an app that wanted to see your accounts had two options: ask you to upload a PDF statement, or ask for your net-banking login and read the screen on your behalf. The first is stale by the time you send it. The second hands over the keys.
The framework removes the choice. Finwiser has nowhere to type a password because Finwiser is never in that part of the flow — you are verified on the Account Aggregator’s own app, and you approve there. What comes back to Finwiser is data, and only data.
Which gives you a rule worth keeping: if an app asks for your net-banking password so it can show you your accounts, it is not using the Account Aggregator. Do not give it.
Consent is something you hold, not something you gave away. You do not need to email Finwiser, and Finwiser cannot stop you.
Connecting accounts is the boring half. The point is what the arithmetic can do once every account is in one picture.
Thirty-plus account types across seven buckets — banking, investments, pensions, insurance, loans and cards, business, physical assets — sorted by a six-tier classification. One picture instead of eleven apps.
Savings rate, debt-to-income, retirement readiness, emergency-fund cover and nine more — recomputed from what actually happened, and written in plain language rather than finance-textbook English.
What is genuinely left each month once everything already spoken for has gone — including the payments that only arrive once a year.
The Account Aggregator framework is licensed and supervised by the Reserve Bank of India. An Account Aggregator holds an NBFC-AA licence, and is not permitted to store or read the data it carries. Finwiser is listed as a Financial Information User on Sahamati’s public register of participants.
To be exact about it: the RBI licenses the framework. It does not endorse, certify or approve Finwiser, and neither does anyone else on this page.
The advice Finwiser gives on top of that data is regulated separately, by SEBI. Finwiser is a SEBI Registered Investment Adviser — registration number INA000021331, held by Chandrachuda Sarma Yemmanuru (Proprietor: Finwiser). Fee-only: no commission is earned on any product recommended.
Safer than every alternative India had before it, because of what it removes. There is no password to hand over, no screen-scraping, no PDF statement sitting in somebody’s inbox, and no standing access. An Account Aggregator is licensed and regulated by the Reserve Bank of India as an NBFC-AA, it is not permitted to store or read the data it moves, and every transfer is tied to a consent you gave and can withdraw. What it cannot do is make a badly-behaved app well-behaved — so still check who you are granting consent to, and what for.
Yes, at any time, and you do not need to ask Finwiser. Open the Account Aggregator app you used to approve the connection, find the consent, and withdraw it. Finwiser loses access immediately — the data simply stops arriving, because the rail will not carry it without a live consent. Your data is deleted from Finwiser’s active systems within 72 hours.
Only the account types you ticked on the consent screen, and only for the period you agreed to. In practice that means balances and transaction records — the date, the amount, and the narration your bank already writes on your statement. Finwiser does not receive your net-banking credentials, your card PIN, your UPI PIN, or the contents of your SMS and email.
No. It is never asked for and there is nowhere to type it. You are verified on the Account Aggregator’s own screen, and the approval happens there — not inside Finwiser. If any app asks you for your net-banking password in order to show your accounts, that is not an Account Aggregator and you should not give it.
Most major Indian banks are live on the network, along with a growing set of mutual fund registrars, insurers, pension records and NBFCs. Coverage changes month to month, so rather than trust a list on a website, search for your bank inside the Account Aggregator app during the connection flow — it shows you exactly what is available to you today. If an account is not on the network yet, it simply will not appear.
Yes. Finwiser is a SEBI Registered Investment Adviser — registration number INA000021331, held by Chandrachuda Sarma Yemmanuru (Proprietor: Finwiser) — and is listed as a Financial Information User on Sahamati’s public register. To be clear about what that does and does not mean: the Account Aggregator framework is licensed by the RBI, and Finwiser participates in it as a data recipient. The RBI does not endorse, certify or approve Finwiser.
Connecting takes about three minutes, and you approve it on the Account Aggregator’s own screen. Nothing here needs your bank password.
Android, on Google Play. Free during early access.
