📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.

TL;DR

The US introduced a permissionless, API-driven personal finance surface in May 2026, while Europe’s regulatory framework mandates licensed, consent-based systems. This fundamental difference alters market entry, product design, and competitive advantage.

OpenAI’s personal-finance surface launched in the US on May 15, 2026, operating permissionlessly via API access, without regulatory licensing. In contrast, Europe’s regulatory framework mandates licensed, consent-based access, preventing a direct US-style launch. This fundamental difference in architecture significantly impacts market entry, product design, and competitive advantage.

In the US, the launch of OpenAI’s finance surface relied on a permissionless model: developers could connect user accounts through Plaid without needing licenses or regulatory approval. This approach is rooted in the American open-banking environment, where private companies built the necessary infrastructure, and compliance was secondary.

Europe’s regulatory landscape is markedly different. Since 2018, PSD2 established a regulated environment for account access, requiring third-party providers to operate under licenses, consent, and API standards. The subsequent FIDA regulation extends open banking to broader financial data, including investments and loans, creating a new licensing category for financial information services. These frameworks mean that any European version of the US surface must be built as a licensed, consent-driven product, not a permissionless API.

Furthermore, the EU AI Act classifies AI systems used for credit scoring as high-risk, with strict obligations starting August 2, 2026, supervised by financial regulators like BaFin. These layered regulations mean European firms must navigate a complex compliance architecture, which influences the design and deployment of conversational finance systems.

The Mandate — Thorsten Meyer AI
MANDATE
● DISPATCH / MAY 2026
THORSTEN MEYER AI · AGENTIC COMMERCE · § 03
AGENTIC COMMERCE · 03
EUROPE / MANDATE
Essay · Regulatory-Architecture Reading · 2026-05-26

The mandate.
Why the US conversational-
finance surface does not
translate to Europe.

In the US, account access is a product you buy and consent is a button you tap. In Europe, both are mandates you are licensed and supervised to fulfill.
The US surface shipped permissionlessly — connect via Plaid, 12,000+ institutions, read-only, no license. That rollout does not translate. In Europe every layer is a mandate. The foundation: PSD2 → PSD3/PSR (provisional agreement Nov 27 2025) makes account access a licensed, API-quality-supervised activity under a directly-applicable rulebook. The expansion: FIDA extends mandated access to investments, pensions, insurance, mortgages under a new FISP license — operational ~2029-2030, with a contested data-access fee at its core. The overlay: the EU AI Act classifies credit-scoring AI as high-risk (full obligations Aug 2 2026), supervised not by a tech regulator but by financial supervisors like BaFin. The structural argument: the US surface is built on a permissionless private substrate, and Europe has no permissionless substrate — it has a mandate at every layer. In the US compliance is an afterthought. In Europe, compliance is the architecture, and the conversational experience is the thin layer on top.
3
Overlapping mandates — payments,
data, AI — vs zero in the US build
7%
Of global turnover · the EU AI Act
maximum penalty
2029-30
When FIDA — the full-picture data
mandate — is likely operational
0
Permissionless routes to a European’s
bank data · it is a licensed activity
THE MANDATE· US SHIPPED PERMISSIONLESSLY · PLAID· EUROPE HAS A MANDATE AT EVERY LAYER· PSD2 MADE ACCESS A LICENSED ACTIVITY· PSD3/PSR · PROVISIONAL AGREEMENT NOV 27 2025· PSR DIRECTLY APPLICABLE ACROSS 27 STATES· MANDATORY API QUALITY · NO SCREEN-SCRAPING· FIDA · NEW FISP LICENSE· OPEN FINANCE · INVESTMENTS PENSIONS INSURANCE· DATA-ACCESS FEE THE CONTESTED CORE· EU AI ACT · CREDIT SCORING HIGH-RISK· FULL OBLIGATIONS AUG 2 2026· SUPERVISED BY BAFIN, NOT A TECH REGULATOR· CONSENT IS A DASHBOARD, NOT A BUTTON· COMPLIANCE IS THE ARCHITECTURE· THE MANDATE FAVORS THE LICENSED INCUMBENT· IN EUROPE YOU LICENSE A FINANCE SURFACE· THE MANDATE· US SHIPPED PERMISSIONLESSLY · PLAID· EUROPE HAS A MANDATE AT EVERY LAYER· PSD2 MADE ACCESS A LICENSED ACTIVITY· PSD3/PSR · PROVISIONAL AGREEMENT NOV 27 2025· PSR DIRECTLY APPLICABLE ACROSS 27 STATES· MANDATORY API QUALITY · NO SCREEN-SCRAPING· FIDA · NEW FISP LICENSE· OPEN FINANCE · INVESTMENTS PENSIONS INSURANCE· DATA-ACCESS FEE THE CONTESTED CORE· EU AI ACT · CREDIT SCORING HIGH-RISK· FULL OBLIGATIONS AUG 2 2026· SUPERVISED BY BAFIN, NOT A TECH REGULATOR· CONSENT IS A DASHBOARD, NOT A BUTTON· COMPLIANCE IS THE ARCHITECTURE· THE MANDATE FAVORS THE LICENSED INCUMBENT· IN EUROPE YOU LICENSE A FINANCE SURFACE·
FIG. 01 — THE SUBSTRATE · PRIVATE PRODUCT VS PUBLIC MANDATE
The US built account access privately and permissionlessly · Europe built it as public mandate
One architectural difference at the foundation propagates through the entire stack
United States
A product you buy
  • Access built by private aggregators — Plaid, Yodlee, MX, Finicity
  • No banking license required to read bank data
  • Read-only design sidesteps money-transmission rules
  • No single federal open-banking statute · the surface ships as a product
European Union
A mandate you fulfill
  • Access is a licensed activity — AISP / PISP under PSD2
  • Regulator authorization required; no permissionless route
  • Explicit, revocable, SCA-governed consent regime
  • A directly-applicable rulebook (PSR) · the surface must be licensed
The US surface shipped because the account-access layer it needed was already built, privately and permissionlessly, by Plaid — and because a read-only design kept it clear of the activities that trigger heavy regulation. That is the precise feature Europe does not share. Reading a European’s bank data without the right license is not a product — it is an unauthorized activity. The very first layer of the US build, the permissionless connect, is in Europe a regulatory authorization.
FIG. 02 — THE THREE-MANDATE STACK · WHAT THE SURFACE MUST SATISFY IN EUROPE
Payments, data, and AI — three overlapping regimes, all enforced by financial regulators
The US surface faced none of these at launch; the European surface faces all three at once
PSD3 / PSRPayments mandate
Account access is a licensed activity (AISP/PISP). PSR directly applicable across 27 states. Mandatory API quality, screen-scraping eliminated, IBAN-name checks, expanded fraud liability.
FIDAData mandate
Extends mandated access to investments, pensions, insurance, mortgages, loans under a new FISP license. Standardized APIs + consent dashboards. A contested data-access fee may make aggregation cost money.
EU AI ActAI mandate
Credit scoring + creditworthiness = high-risk (Annex III). Conformity assessment, documentation, human oversight. Supervised by financial regulators (BaFin, CSSF). Fines up to 7% of global turnover.
A finance surface in Europe must be licensed for payment-data access (or partner with someone who is), prepare for a FISP license to aggregate the full financial picture, and classify itself under the AI Act — where the most commercially attractive features (“what loan can I get?”) sit closest to the high-risk line. The AI that is “just a chatbot” in the US is, in Europe, a regulated system whose classification depends on exactly how useful it tries to be.
FIG. 03 — THE STAGGERED TIMELINE · A MOVING REGULATORY TARGET
The mandate is not one event but a sequence — and the staggering is a filter
The firms that win architect for the end-state mandate, not the current one
Aug 2025
EU AI Act · GPAI obligations live · the frontier models that power a finance surface already carry systemic-risk obligations
Live
Nov 27 2025
PSD3/PSR provisional agreement · Parliament and Council reach political agreement; final texts expected in the Official Journal in 2026
Agreed
Aug 2 2026
EU AI Act · high-risk obligations land · credit-scoring / creditworthiness Annex III duties apply (subject to Digital Omnibus)
Operative
2027
PSD3/PSR core obligations · directly-applicable conduct rules land across the year after the transition
Landing
~2029-2030
FIDA operational · the full-picture data mandate and FISP license arrive, in staggered sector-by-sector “waves”
Forming
Building for PSD3 today while FIDA and the AI Act high-risk regime are still settling means building for a target that is still moving — which favors firms with the regulatory-intelligence capacity to track it and the patience to build for 2030 rather than ship for 2026. The staggered timeline is itself a filter: it selects for regulatory endurance over launch speed.
FIG. 04 — THE CONSENT ARCHITECTURE · WHAT REPLACES THE “CONNECT” BUTTON
The single most optimized moment of the US product is the single most regulated moment of the European one
The European surface cannot inherit the US onboarding · it must build a different, regulated core
The US default — collect broadly, use later — is the European violation. The consent dashboard, the granular permission model, the revocation flows, the purpose-binding, the audit trail are not features bolted onto the conversational experience; they are the regulated core that the experience sits on top of. The European surface is, by regulation, higher-friction at exactly the moment the US surface optimized for frictionlessness.
FIG. 05 — WHO BUILDS THE EUROPEAN SURFACE · THE REDISTRIBUTION OF ADVANTAGE
The mandate does not just slow the US surface — it changes who wins
Advantage moves from permissionless speed to licensed position
Disadvantaged
The US winners
A frontier lab + permissionless aggregator. Their core competency — permissionless speed and reach — is exactly what the mandate removes. No AISP/FISP license, no BaFin relationship. Arrive needing a license stack they don’t have.
Advantaged
Licensed EU fintechs
Already authorized AISPs/PISPs, PSD3-compliant API fleets, consent-native. “The lab + a licensed European partner” — and the partner holds more leverage than Plaid, because the license is scarcer than an API.
Advantaged
Incumbent banks
Already hold the data, licenses, consent relationships, supervisory standing. The incumbent disintermediated in the US thesis is, in Europe, structurally protected — the mandate that gates the challenger does not gate the bank.
In the US, the advantage went to whoever integrated the permissionless layer fastest and built the best surface on top. In Europe, it goes to whoever holds the licenses, the supervisory relationships, and the consent architecture. The mandate redistributes the advantage from the permissionless aggregator-and-lab toward the licensed incumbent-and-specialist — and Europe’s regulation is, among other things, an incumbent-protection architecture, whether or not that is its intent.
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.
Thorsten Meyer · The Mandate · Agentic Commerce 03

Implications for Market Entry and Competition in Europe

This regulatory divergence fundamentally reshapes the European financial technology landscape. Unlike the US, where permissionless interfaces allowed rapid innovation and broad participation, Europe’s mandated licensing, consent, and AI classification create a high barrier to entry. These requirements favor established, licensed firms and reduce the agility of permissionless aggregators, potentially leading to slower innovation and increased market concentration.

For consumers, this could mean more secure and compliant systems but also less rapid access to new financial tools. The architecture shifts the competitive advantage toward firms that are already licensed and integrated into the regulatory framework, potentially reducing the diversity of providers and innovations that can emerge.

AI Agent + API: How to Connect Your Agent to the Internet and Services

AI Agent + API: How to Connect Your Agent to the Internet and Services

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

European Regulatory Frameworks Reshape Financial Data Access

Since 2018, the EU’s PSD2 regulation has mandated licensed third-party access to bank accounts, replacing permissionless API models with regulated, consent-based interfaces. The ongoing FIDA regulation aims to expand this model to other financial data, creating a new category of licensed providers for investments, pensions, and loans. These developments are part of a broader EU strategy to ensure consumer protection, data security, and financial stability.

Simultaneously, the EU AI Act, finalized in 2025 with obligations starting in August 2026, classifies certain AI systems as high-risk, requiring rigorous compliance and supervision by financial authorities. These layered regulations mean that any European implementation of a US-style conversational finance surface must be built within a tightly regulated, licensed environment, fundamentally different from the US permissionless approach.

“The European architecture is not merely a slower or stricter version of the US; it is a different build, built mandate-first, where compliance is the product.”

— Thorsten Meyer

Amazon

European open banking compliance software

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Remaining Questions on European Market Impact

It is still unclear how quickly European firms will adapt to these regulatory requirements and whether new licensed players will emerge to challenge incumbents. The long-term consumer outcomes—whether the stricter architecture leads to better security or stifles innovation—remain to be seen. Additionally, the pace of regulatory implementation and enforcement could influence market dynamics.

Amazon

PSD2 licensed financial data services

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Future Developments in European Conversational Finance

Regulatory agencies in Europe are expected to finalize and implement FIDA and the updated AI obligations by 2027-2028. Licensed firms are likely to develop new consent-based, compliant interfaces, while US firms may face challenges in adapting permissionless models to the European framework. Monitoring regulatory enforcement and market responses over the next few years will be key to understanding the evolving landscape.

Amazon

AI credit scoring software Europe

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Key Questions

Why can’t US permissionless finance surfaces be directly used in Europe?

European regulations require licensed, consent-based access to financial data, making permissionless API models illegal without proper licensing and compliance. This fundamental legal difference prevents direct translation of US models.

How does the EU’s regulatory approach affect market competition?

The requirement for licenses and compliance favors established, regulated firms and creates high barriers for new entrants, potentially reducing innovation and increasing market concentration.

What role does the EU AI Act play in conversational finance?

The AI Act classifies certain AI systems as high-risk, imposing strict obligations that influence how AI-powered financial tools are developed and deployed in Europe, adding another layer of regulation beyond data access rules.

When will we see European firms launching compliant conversational finance surfaces?

Regulatory frameworks like FIDA and the AI Act are expected to be fully implemented around 2027-2030, with licensed firms likely to develop compliant products during this period.

Source: ThorstenMeyerAI.com

You May Also Like

SpaceX’s debut fires first salvo in new era of mega-IPOs

SpaceX’s historic IPO on Nasdaq marks the largest in history, signaling a new phase in mega-initial public offerings and market competition.

Stock market today: Dow, S&P 500, Nasdaq drop amid rising bond yields

Major indices decline today as bond yields increase, signaling investor concerns over inflation and interest rate outlook.

ABC News has taken all FiveThirtyEight articles offline

ABC News has taken down all articles from FiveThirtyEight, raising questions about content sourcing and editorial decisions. Details remain unclear.

Japan business sentiment improves sharply in April-June quarter

Japanese business sentiment among large manufacturers hits highest in nearly eight years in April-June, driven by AI boom and rising commodity prices.