PSD2 opened APIs for third-party providers

The Second Payment Services Directive is a substantial update to the regulation of payment services. Banks must offer and open APIs for serving account information, payment initiation services, and confirming funds on a card. These services are available for free, promoting innovation, competition, and the development of new kinds of financial services.

We released our PSD2 APIs in sandbox in March 2019. In June 2019, they entered production for market phase testing. As of September 2019, all OP's PSD2 APIs are available in production to licensed TPPs.

What's in PSD2 for customers?

Customers benefit greatly from increased competition and lower prices. New and innovative ways of banking will enable customers to better control their finances. Financial-grade methods of Strong Customer Authentication mean that security takes an important leap ahead.

What about developers?

PSD2 APIs allow Third-Party Providers to provide banking services to OP's customers. Developers are able to create and provide services using secure dedicated interfaces - at no additional cost.

How can my company register as an AISP and/or PISP?

Apply for an AISP/PISP license at your national financial authority. Once you have a valid license (passported to Finland if necessary), you need to obtain valid TPP certificates for production access. When you have them, contact us at tpp-support@op.fi and we will give you instructions on how start using the PSD2 APIs in production.

CountryFinancial Authority
FinlandFinancial Supervisory Authority
EstoniaEstonian Financial Supervision and Resolution Authority
LatviaFinancial and Capital Market Commission
LithuaniaBank of Lithuania

What about security?

OP sets a high standard for security. Modern Oauth-based authorization flows with highly reliable QWAC and QSEAL certificates issued by eIDAS certificate providers protect every detail. So you can rest easy - your data stays safe. You can browse certificate providers by country on European Commission's website.

Who is developing on top of PSD2 APIs?

EU Member states maintain exhaustive lists of all authorized account information and payment initiation service providers. See the website of the European Banking Authority for more information.

Where can I find information on PSD2 API Performance?

See our latest PSD2 API performance reports:

Q1 2021

The Q1 2021 statistics include data from OP’s customer channels. The report aims to show the expected performance if TPPs were to access these channels directly. The results are not entirely comparable due to different technologies being used and the way they are measured. For example, web channel statistics include the time for the user interface to load. Mobile APIs are optimized for mobile use and return less data than what is expected from PSD2 APIs.

These reports are updated regularly.