📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US launched its personal-finance surface without regulatory mandates, while Europe’s strict licensing and consent regimes fundamentally alter its architecture. This difference impacts market entry, product design, and who can build these services.
OpenAI’s launch of its personal-finance surface in the United States on May 15, 2026, was permissionless, relying on API access without regulatory licensing. In contrast, European regulations treat similar access as a licensed, consent-based activity, fundamentally changing how such services can be built and operated in Europe. This difference means the US model cannot simply be ported to Europe; instead, it requires a re-architecture aligned with European mandates.
In the US, the personal-finance surface was launched without requiring licenses or regulatory approval, leveraging a permissionless API approach built on private infrastructure, notably through Plaid. This allowed rapid deployment and a product-centric approach where compliance was secondary.
Europe’s regulatory environment, governed by PSD2, PSD3, and the upcoming FIDA regulation, treats account access as a licensed activity. Accessing bank data involves obtaining licenses, adhering to API standards, and operating under a consent architecture mandated by regulators such as BaFin in Germany. The FIDA regulation extends open banking to broader financial data, creating a new category of licensed providers.
Additionally, the EU AI Act classifies AI systems used in financial services, including credit scoring, as high-risk. These systems are supervised by financial regulators, not tech authorities, adding further layers of compliance. The combined effect of these regimes means that a European version of the US surface must be built as a licensed, consent-driven platform, not a permissionless product.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Implications of Regulatory Architecture on Market Entry and Innovation
This regulatory divergence fundamentally reshapes the market landscape. In Europe, building a financial surface requires obtaining licenses, establishing consent dashboards, and conforming to AI and data regulations, which raises entry costs and favors incumbent firms with existing licenses. Conversely, US firms benefited from a permissionless environment that prioritized rapid deployment and product innovation. The European approach may slow innovation and concentrate market power but aims for enhanced consumer protection and data sovereignty.
open banking API development kit
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Financial Regulations and Their Impact on Service Design
European open banking began with PSD2 in 2018, establishing a regulated framework for account access. The upcoming PSD3 and the FIDA regulation aim to expand open finance, extending licensing and consent requirements to a broader set of financial data and services. The EU AI Act, effective August 2026, introduces high-risk classifications for AI systems used in finance, requiring supervision by financial authorities rather than tech regulators. These layered regulations create a permissioned environment that contrasts sharply with the US’s permissionless model.
In the US, private companies like Plaid built infrastructure that allowed rapid, permissionless aggregation of financial data, enabling a quick launch of consumer-facing products. Europe’s model, by contrast, involves a complex licensing process, consent management, and compliance assessments, which are still under development and will likely be operational around 2029-2030.
“The fundamental difference is that the US built its open banking layer privately and permissionlessly, while Europe built it as a regulated, mandate-driven infrastructure.”
— Thorsten Meyer
European PSD2 compliant bank data access device
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in European Regulatory Implementation
While the regulatory frameworks are clear in their design, the exact timeline for full implementation of FIDA and PSD3, as well as the operationalization of AI high-risk obligations, remains uncertain. It is also unclear how quickly European firms will adapt to these mandates and whether new entrants will navigate the licensing process successfully.
AI high-risk credit scoring software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Upcoming Regulatory Milestones and Market Shifts
Regulators in Europe are expected to finalize PSD3 and FIDA regulations in 2026, with operational requirements likely coming into force by 2029-2030. Firms will need to secure licenses, develop consent dashboards, and adapt AI systems accordingly. US firms and European incumbents will continue to compete, with the regulatory environment shaping the pace and nature of innovation.
regulated financial data aggregator
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why can’t US permissionless finance models be directly used in Europe?
Because European regulations treat account access as a licensed, consent-based activity, requiring firms to obtain licenses, conform to API standards, and operate under regulatory oversight, unlike the permissionless approach in the US.
How does the EU AI Act affect financial AI systems?
The AI Act classifies certain financial AI systems as high-risk, imposing supervision, compliance, and transparency obligations that are not present in the US, affecting how AI can be used in finance.
Who is likely to build the European version of the US finance surface?
Licensed, consent-native firms that are compliant with European regulations are best positioned, contrasting with the US firms that benefited from permissionless access.
Will the European approach slow down innovation?
Potentially, as higher entry costs and regulatory compliance may limit rapid deployment, but it aims to enhance consumer protection and data security.
What are the main differences between the US and European models?
The US model is permissionless, built privately without licensing requirements, while the European model is mandate-driven, requiring licensing, consent management, and regulatory oversight at every layer.
Source: ThorstenMeyerAI.com