Consent management platforms help regulated financial services businesses capture, record, and manage customer consents for data processing, marketing communications, and third-party data sharing. Under GDPR and open banking regulations, consent must be specific, informed, freely given, and easily withdrawable. Consent management technology ensures that data processing activities are backed by valid, auditable consent records and that customers can exercise their rights efficiently.
Notable consent management companies include Enable Banking, TrueLayer, Yapily, Salt Edge and Neonomics.

Most open banking aggregators want your data. That is the business model: connect to the banks, pull the transactions, store them, enrich them, and sell the enriched product back. Enable Banking built the opposite. The company describes itself as the postman of your data — it moves financial information from the bank to the customer's application and does not retain, process, or build models on what passes through. For a fintech that considers its transaction data a competitive asset, or a customer with strict data residency requirements, that neutrality is the entire pitch. Joonas Tomperi and Fedor Tyurin founded the company in Espoo in 2019, at the point where PSD2 had legally opened European bank APIs but had not made them usable. Each bank interpreted the standard differently, each shipped its own authentication quirks, and each updated on its own schedule. The regulation created the right; someone still had to build the plumbing. Enable Banking started with Finland and the Nordics and expanded outward, and now connects to more than 2,700 banks across 30 European countries through a single PSD2-compliant API — account information from all of them, and payment initiation from over 1,500. What makes the company genuinely unusual is its scale relative to that coverage. Enable Banking has raised roughly €600,000 in total, in a single seed round in 2022 led by Wellstreet and Forward VC, and employs somewhere between fourteen and seventeen people distributed across seven countries. Tink sold to Visa for €1.8 billion with 500 employees. TrueLayer has raised hundreds of millions. Enable Banking is covering comparable European ground with a team that would fit around one table, which says something about how much of open banking infrastructure is disciplined engineering rather than capital. The company holds its own Account Information Service Provider registration, supervised by Finland's FIN-FSA — which means other companies can build on top of its licence rather than obtaining their own. That is the model behind open-banking.io, the Danish developer tool that resells Enable Banking access at €3 per month without customers needing eIDAS certificates. It is also why Enable Banking's no-data-retention architecture matters structurally: because the platform never holds readable customer data, the companies building on it can make stronger privacy guarantees than they otherwise could. Two smaller details are revealing about who this is built for. Enable Banking runs a balanced split between business and consumer accounts — roughly half of its ten million monthly API calls come from each, where most early open banking providers targeted consumer accounts only and treated corporate banking as an afterthought. And it offers a live production environment for testing without requiring a contract, which is a small thing that tells you the company expects developers to evaluate it by using it rather than by booking a call. Tomperi now chairs the board of Fintech Finland, the national industry association.

TrueLayer is a payments and open banking infrastructure platform that lets fintech companies, payment processors, and traditional banks access real-time financial data and initiate payments directly from consumer bank accounts across Europe. Rather than building APIs from scratch or waiting months for bank integrations, developers plug into TrueLayer's unified network and immediately get access to payment initiation, account aggregation, and transaction data from thousands of financial institutions. The company operates as a critical middleware layer in European fintech. While most payment infrastructure still relies on cards or legacy rails, TrueLayer routes transactions through bank-grade open banking rails, making transfers faster, cheaper, and less friction-heavy. Its API-first approach means a startup launching in five countries gets the same clean integration experience as an enterprise player. In the competitive open banking space, TrueLayer stands out through breadth of coverage and developer experience. The platform supports payments in 17+ European countries and has built integrations with hundreds of banks—not through partnerships alone, but through technical depth in handling regional quirks and regulatory complexity. Its customer base spans neobanks like Wise and Revolut, major payment processors, and traditional banks replatforming their operations. TrueLayer essentially democratized access to Europe's banking infrastructure at a moment when open banking regulations made that access possible but still technically demanding. For any fintech building on the continent, it's become a foundational piece of modern payment architecture.

Yapily sits at the intersection of open banking and embedded finance, building the plumbing that lets fintech companies and enterprises tap into banking data and payments without reinventing the wheel. Founded in 2016, the London-based company operates as an API infrastructure layer—connecting to banks across Europe and beyond to unlock account information, payment initiation, and consent management at scale. What makes Yapily different is how it abstracts away the complexity of working with hundreds of banks and their inconsistent technical standards. Rather than forcing developers to build individual integrations for each bank's API, Yapily provides a unified interface that normalizes everything. It's the translator between your app and the messy reality of legacy banking infrastructure. The company operates in the B2B2C space, partnering with fintechs, neobanks, and enterprise software providers who need banking connectivity but lack the resources to build it themselves. Their customer base spans lending platforms, wealth apps, accounting software, and payment orchestration layers—essentially anyone whose product benefits from real-time access to customer bank accounts or the ability to initiate payments. Yapily's positioning is deliberately unsexy: they're infrastructure, not consumer-facing. But that's precisely the point. In a landscape crowded with consumer fintechs chasing headlines, Yapily has built a quiet, profitable business serving the builders themselves. They're to open banking what Stripe is to payments—the backbone that lets innovation happen faster.

Salt Edge is the open banking aggregator that sells to both sides of the same regulation. Its Open Banking Gateway is the familiar product: one API giving lenders, accounting software, personal finance apps and banks access to customer account data and — in the EU — payment initiation, with enrichment tools for transaction categorisation and merchant identification layered on top. Its second product is the mirror image: a PSD2 and open banking compliance solution sold to banks and EMIs that need to expose compliant APIs, including TPP verification, mobile SCA and consent management. That dual position is genuinely unusual and commercially clever. Every regulation that forces banks to open up creates two customers — the institution that must comply and the fintech that wants access — and Salt Edge sells to both. It also explains the distribution strategy: partnerships with core banking and engagement platforms including Finastra and Backbase, which put the compliance product inside the stack banks already run. On coverage, Salt Edge is at the broad end of the market — connections to over 5,000 financial institutions across 50-plus countries spanning Europe, APAC and the Americas, though payment initiation is EU-only. It was named a Strong Performer in Forrester's Open Banking Intermediaries Wave. The comparison worth drawing for this directory is with Enable Banking: both are aggregators, but Enable Banking is a fifteen-person Finnish company competing on a privacy-first, no-data-retention architecture with its own FIN-FSA registration, while Salt Edge competes on global breadth and the bank-side compliance product. One verification note before publishing: Salt Edge's corporate structure spans a Latvian presence and a registered entity in Ottawa, Canada, and different sources give different primary locations — worth confirming which entity you want in the country field.

Neonomics sits at the intersection of open banking and embedded finance, building the infrastructure that lets non-financial companies add financial services to their products without becoming banks themselves. The Oslo-based startup transforms how businesses access and integrate banking capabilities—turning what was once the exclusive domain of regulated institutions into a plug-and-play service layer accessible to anyone with an API. The company operates as a financial infrastructure platform, offering data aggregation, payment initiation, and account connectivity wrapped into developer-friendly APIs. Rather than forcing companies to build relationships with multiple banks or navigate regulatory complexity, Neonomics handles the heavy lifting: bank connections, consent management, and compliance orchestration across European banking networks. What sets Neonomics apart is its focus on the embedded finance opportunity—the moment when a fintech or SaaS company realizes it can offer financial services directly within its own application. Where competitors might position themselves as middleware or data brokers, Neonomics frames itself as an enabler of financial autonomy for non-banks. This positioning resonates particularly in Scandinavia and wider Europe, where fragmented banking landscapes and strong open banking regulation create both friction and opportunity. In a landscape crowded with open banking players, Neonomics represents a shift toward embedded financial services infrastructure—not just making bank data available, but embedding the entire financial service layer into the products and workflows that consumers and businesses already use.

Token.io sells the infrastructure behind "pay by bank" — the payment method that lets a customer pay a merchant directly from their bank account, authenticated in their banking app, without a card network in the middle. The company operates one layer below the checkout: banks, fintechs, payment service providers and platforms integrate Token.io and offer account-to-account payments under their own brand, with Token.io handling connectivity to the banks themselves. Its own description of the position is precise — the platform inside the platform. The connectivity is the asset. Token.io reports the ability to initiate payments to over 567 million bank accounts across the UK and Europe, which is the number that matters in this category: an A2A payment provider is only as useful as the proportion of a merchant's customers whose banks it can actually reach. That white-label, infrastructure-first model has made it a supplier to other infrastructure providers, including partnerships with OpenPayd and Contis, rather than a competitor to them. The company's strategic bet, articulated repeatedly by CEO Todd Clyde, is that variable recurring payments are what turn open banking from a niche into a mainstream payment method. VRPs let a customer grant a long-lived consent for payments of varying amounts — the account-to-account equivalent of a card on file, and the mechanism that makes bank payments viable for subscriptions, utilities and any other recurring bill. The UK regulators committed in 2025 to rolling out commercial VRP for utilities, government and financial services, and the European Payments Council's SPAA scheme is developing an analogous premium API framework for the EU. Token.io has positioned itself directly in front of both. The honest assessment is that this thesis has been perpetually two years away for most of a decade, and the reasons are structural rather than technical: A2A payments require banks to cooperate on coverage and commercial terms, checkout conversion still lags cards in many contexts, and consumers have deeply ingrained card habits reinforced by rewards and chargeback protection. Against that, the direction of European policy — the Instant Payments Regulation, the Digital Euro pilot, sustained regulatory pressure on card interchange — runs consistently in Token.io's favour, and it competes with TrueLayer, Yapily, Trustly and Brite Payments for a market that policy is actively trying to create.