Our APIs follow the NextGen PSD2 Berlin Group standard for PSD2 XS2A.
The Berlin Group-standard covers:
- Services (AIS, PIS and PIIS)
- Technical specifications such as transport- and applicative protocols
- Authorization protocols and data formats
- Security features such as TPP identification with eIDAS certificates, data encryption etc
Read more about Berlin Group at https://www.berlin-group.org/
Exposure of APIs is performed using RESTful services.
The Developer Portal is open for anyone to register. Signing up is free and is easily done. Go to the “Sign up” page in the Developer Portal and create an account by providing name, e-mail, organization and a password. We will send an activation link for you to complete your registration. Note that the Developer Portal currently only handle the production environment.
The best ways to stay informed about our Open Banking solutions is to register in the Portal, when it is open, as well as reading the information on this site and checking back here periodically. The Portal for the production environment will also be open later this year.
The upcoming test-portal will also contain a sandbox making it possible for consumers to get to know and test our APIs. The content of the sandbox will grow over time and potentially also change from the early versions which may result in breaking backward compatibility.
The AIS offers the following services:
- A list of available accounts for a given customer ID
- Transaction list for a given account
- Balances of a given account
- Account detail
- Transaction detail
The PIS currently offer Swedish domestic transfers with same date.
In the Portal you can register your client application, which is needed to call our APIs. You can name it and later get statistics when using it. To call an API, you will need the client id and client secret which is provided by us upon registration. Keep the secret in a safe place.
Open Banking vs PSD2
Open Banking is a term used when a bank is exposing its data and functionality via APIs for others to build new services and customer experiences. PSD2 is an EU-regulation and a subset of Open Banking where payment accounts are exposed via API. TPPs can, with customer consent, fetch account statements and balances, as well as initiate payments – this is often referred to as Account Information Services (AIS) and Payment Inititiation Services (PIS). TPPs must apply and receive a permit at a local NCA (Finansinspektionen in Sweden) as an AISP or PISP to act as a TPP. A TPP must always have a customer consent before acting on behalf of the customer, signed with an SCA. SCA in Skandiabanken is the Swedish Bank ID. Banks are generally allowed to act as a TPP themselves as they are already regulated.
PSD2 is regulated and free of charge for TPPs while Open Banking is a business deal between the bank and an external partner.
If you, as an external partner TPP, are interested in Open Banking, please contact us.
Access to production environments
To access the APIs in the production environment, a TPP will need an eIDAS certificate which is issued by Qualified Trust Service Providers (QTSPs). Production environments will be available in June 2019.