📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US launched a permissionless conversational-finance surface, while Europe’s strict, mandate-driven regulation requires licensing and consent. This fundamental difference reshapes market entry and product design.
OpenAI’s US launch of its personal-finance surface on May 15, 2026, was permissionless, relying on API access without regulatory licensing. In contrast, Europe’s regulatory environment makes such a surface a licensed, consent-based product, fundamentally changing how these services are built and operated.
In the United States, the launch of OpenAI’s personal-finance surface was permissionless: companies could connect accounts through APIs like Plaid without needing licenses or regulatory approval. This approach allowed rapid deployment and a product-centric model where compliance was secondary.
Europe’s regulatory framework, however, treats account access as a regulated activity. Under PSD2, and its successor PSD3, access requires licensing and adherence to strict API standards. The new open-finance regime (FIDA) extends this to investments, pensions, and loans, creating a licensed category—Financial Information Service Providers—that must operate under a detailed rulebook. These layers mean that any European version of the US surface is not a simple port but a new, license-driven product.
Furthermore, the EU AI Act classifies AI systems used in credit scoring as high-risk, requiring full compliance and supervision by financial regulators like BaFin. This adds another layer of regulation, making the deployment of AI-driven finance surfaces a complex licensing and consent architecture, unlike the permissionless US approach.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Implications of Regulatory Architecture on Market Entry
This difference in architecture significantly impacts market dynamics. In Europe, the need for licenses, consent dashboards, and conformity assessments raises barriers to entry, favoring established, licensed firms over permissionless aggregators. It shifts the product focus from a simple data access layer to a compliance and consent management platform, potentially leading to slower innovation and a more concentrated market.
For consumers, this may mean more secure, regulated services but also less rapid innovation and fewer permissionless entrants. The structural shift favors incumbents and licensed players, possibly affecting competition and consumer choice.
API RP 5EX Design, Verification, and Application of Solid Expandable Systems, First Edition (2018)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Foundations for Open Finance
Europe’s approach to open banking began with PSD2 in 2018, mandating licensed access to bank data through regulated APIs. The upcoming PSD3 and Payment Services Regulation (PSR) aim to expand this framework. The FIDA regulation, still in trilogue as of April 2026, will extend open banking to other financial data, creating a new licensed category of providers. The EU AI Act, effective August 2026, further classifies AI systems in finance as high-risk, requiring strict supervision. These layered regulations create a mandate-first environment, contrasting sharply with the US’s permissionless model.
“In Europe, a service that reads your bank data is a licensed third-party provider operating under a directly-applicable rulebook — not a company that bought an API key.”
— Thorsten Meyer
European PSD2 API testing devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties Around Market Impact and Implementation
It remains unclear whether Europe’s mandated, licensed approach will lead to better consumer outcomes or simply slower, more concentrated markets. The pace of implementation for FIDA and PSD3, and how firms will adapt, is still uncertain. Additionally, the actual consumer experience and innovation rates are yet to be seen as these regulations come into force.
Machine Learning for Credit Risk with Python: A Practical Guide to Default Prediction, Credit Scoring, Model Explainability, and Portfolio Risk Analysis
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps for Regulatory Rollout and Market Entry
Regulatory bodies in Europe are expected to finalize PSD3 and FIDA regulations in 2026-2027, with operational dates around 2029-2030. Licensed firms and incumbents are positioning for compliance, while permissionless entrants face increased barriers. Observers will watch how these changes influence market structure, competition, and consumer access in the coming years.
Financial Literacy Flashcards for Kids & Teens | 108 Money & Finance Terms with Images, Definitions & Discussion Prompts | 3 Skill Levels (Beginner–Advanced) | Deluxe Set with Digital Activity Book
📘 BONUS Digital Companion Activity Book: Includes a printable 108 page companion activity book with structured exercises and…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why can’t US-style permissionless finance be implemented in Europe?
European regulations treat account access as a licensed, regulated activity, requiring firms to obtain licenses and adhere to strict standards. This transforms the surface from permissionless to mandate-driven, making direct porting impossible without re-architecting the product around licensing and consent.
How does the AI Act impact financial AI systems in Europe?
The AI Act classifies AI systems used for credit scoring as high-risk, requiring full compliance, supervision, and conformity assessments starting August 2026, adding a significant layer of regulation not present in the US.
What are the implications for firms wanting to enter Europe’s open finance market?
Firms must secure licenses, implement consent dashboards, and meet conformity standards, which raises barriers to entry but also favors established, licensed players. Permissionless aggregators face structural disadvantages under this regime.
Will Europe’s approach slow down innovation compared to the US?
Potentially, yes. The licensing and compliance requirements may slow deployment, but could also lead to more secure, consumer-protective services. The long-term impact on innovation remains uncertain.
Source: ThorstenMeyerAI.com
