Cut the integration tax on open banking — without cutting compliance corners.
Open vs commercial
What ships open-source
Open under Apache 2.0
- PSD2/PSD3-aligned connector schemas open under Apache 2.0
- FAPI 2.0 auth pipeline reference implementation
- OpenAPI 3.1 spec for every public endpoint
- TypeScript, Python, Go, and Java / Kotlin SDK skeletons
- Berlin Group NextGenPSD2 conformance fixtures
- Open Banking UK v3.1 schema parity files
What we charge for
Commercial platform
- Multi-tenant SaaS hosting (api.openbanqing.com)
- Managed FAPI 2.0 authorisation server + consent store
- Core-banking connector runtime (Temenos, Finastra, Mambu, FIS)
- Real-time payment routing: SEPA Instant, FedNow, RTP, SWIFT gpi
- BYOC / on-prem deployment + Helm charts + Terraform modules
- Named CSM + 24×7 SLA + SOC 2 evidence packs
Before vs. after
What integration looks like on legacy stacks today — and what it looks like on OpenBanqing.
Fragmented core connectors
Every core integration is bespoke, six to twelve months, brittle on every release.
One API contract that abstracts Temenos, Finastra, Mambu, FIS, Fiserv, and Thought Machine behind a contract-typed connector boundary.
Compliance bolted on late
PSD2 / FAPI / FDX retrofitted in the final quarter, auditor surprises, late-stage re-architecture.
A single authorisation and audit pipeline gates every request. SCA, DPoP, PAR, and consent are part of the path — not a per-endpoint reimplementation.
The payments-rail zoo
SEPA, SWIFT, FedNow, RTP, FPS — five SDKs, five schemas, five operational rotas.
One ISO 20022 abstraction. Pick the rail at call time, not at build time. Errors and webhooks share one envelope.
Auditor evidence gaps
Manual evidence collection before every SOC 2 or ISO audit — weeks of engineering time spent on screenshots and spreadsheets.
Evidence is structured JSON written by the platform itself. Export on demand for SOC 2, ISO 27001, PSD2, and DORA reviews.
One pipeline for every rail
Every request flows through one authorisation and audit pipeline. SCA, DPoP, PAR, MTLS, consent lookup, ISO 20022 validation, sanctions screening, and audit logging are part of the same predictable path. No per-rail forks. No per-region special cases.
- ✓ ABAC authorisation per resource and per action
- ✓ FAPI 2.0 with DPoP, PAR, and MTLS
- ✓ ISO 20022 native across payments and settlement
- ✓ Structured evidence exportable for audit