📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US rolled out its conversational-finance surface without regulatory hurdles, while Europe’s approach relies on licensing and consent mandates. This fundamental difference alters market structure and competitive dynamics.
OpenAI launched its personal-finance surface in the United States on May 15, 2026, without requiring licenses or regulatory approval, using a permissionless, API-based approach. In contrast, Europe’s regulatory environment treats such data access as a licensed activity, requiring compliance with multiple layered mandates, fundamentally changing the nature of the product.
In the US, the surface is built on a permissionless layer, where companies can access bank data through APIs like Plaid without needing regulatory approval. This allowed rapid deployment and a focus on user experience. Conversely, Europe’s open-banking regime, established under PSD2 and evolving through PSD3, mandates that any third-party provider accessing bank data must be licensed and operate under strict consent and conformity rules. The recent FIDA regulation extends this logic to investments, pensions, and loans, creating a new licensing category, the Financial Information Service Provider.
Furthermore, the EU AI Act classifies AI systems used in financial services as high-risk, imposing rigorous obligations that are supervised by financial regulators such as BaFin in Germany. This layered regulatory structure means that European firms must navigate complex licensing, consent, and AI compliance processes, making the European ‘surface’ a licensed, consent-driven product rather than a permissionless one.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Implications of Regulatory Architecture on Market Dynamics
This difference in architecture means that the US’s permissionless approach enables faster deployment and a more open competitive landscape, favoring new entrants and permissionless aggregators. In Europe, the licensing and consent-based model creates higher entry barriers, favors incumbent firms with existing licenses, and shifts the product focus from a simple data connection to a compliance and consent management platform. These structural differences influence who can build and succeed in each market, impacting consumer choice, innovation speed, and market concentration.
Plaid API access for banking data
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Regulatory Foundations and Market Evolution in US and Europe
The US’s open banking began as a private, permissionless API ecosystem, allowing firms like Plaid to rapidly build consumer-facing financial surfaces. This ecosystem was driven by market innovation rather than regulation. In Europe, the regulatory approach is rooted in PSD2, which mandated regulated account access from 2018, and is now evolving through PSD3 and FIDA to extend open finance. The EU’s AI Act, effective August 2026, further enforces high-risk AI obligations in financial services, adding another layer of regulation that US firms do not face.
These regulatory regimes are fundamentally different: the US’s approach emphasizes market-driven permissionless access, while Europe’s approach emphasizes licensing, consent, and compliance as core architecture elements. This divergence shapes the development, deployment, and competitive landscape of conversational finance surfaces across the Atlantic.
“The US surface is a permissionless product built on a private API layer, while Europe’s version is a licensed, consent-driven project embedded within a complex regulatory framework.”
— Thorsten Meyer
European open banking licensing solutions
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Questions on Market Outcomes and Innovation
It remains unclear whether Europe’s licensing-driven architecture will lead to slower innovation, higher consumer trust, or increased market concentration compared to the US permissionless model. The long-term consumer outcomes and competitive effects are still being observed, and the impact of high-risk AI regulations on product deployment is not yet fully understood.
PSD2 compliant API developer tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Future Developments in European Open Finance and AI Regulations
Regulatory agencies in Europe plan to finalize and implement PSD3 and FIDA regulations around 2027-2028, with licensing, consent, and AI obligations becoming more established. Simultaneously, firms are preparing to adapt their products to meet these standards, potentially reshaping the competitive landscape. Monitoring how these regulatory frameworks influence market entry, innovation pace, and consumer outcomes will be key in the coming years.

Enterprise AI Compliance: The Risk and Governance Handbook — Frameworks, Audit Controls, and Accountability Structures for Regulated Industries, EU AI Act, NIST AI RMF, and Global Mandates
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why does the US approach to conversational finance differ from Europe’s?
The US relies on a permissionless, API-based ecosystem driven by private companies, while Europe’s approach is built on regulated licensing, consent, and compliance frameworks mandated by law.
What are the main regulatory regimes affecting European conversational finance?
PSD2, PSD3, FIDA, and the AI Act are the key regulations, creating a layered, license-driven environment that emphasizes consent and AI compliance.
How might these regulatory differences impact consumers?
The European model may lead to slower product deployment but could enhance trust and security; the US model favors rapid innovation and broader access but with less regulatory oversight.
Who is positioned to build the European version of the US surface?
Licensed financial institutions, specialized consent management firms, and AI compliance providers are best positioned to develop compliant European surfaces.
Will the European approach slow down innovation?
It is possible, as licensing and compliance processes introduce additional steps, but it may also result in more secure and consumer-trusted products over time.
Source: ThorstenMeyerAI.com