AustraliaNow Live
·Australian banks now supported via CDR.Browse AU banks
BankSync

CDR Accredited Data Recipients

Only ACCC-accredited businesses (or their CDR Representatives) can legally request your bank data via the Consumer Data Right. Here's how accreditation works, and how to verify any provider, including BankSync.

Start free trialBack to CDR explained →

  1. Data Holder

    Your bank

    Holds your data and must expose CDR APIs.

  2. Accredited Data Recipient

    Fiskil

    Accredited by the ACCC, ADRBNK000246.

  3. CDR Representative

    BankSync

    Operates under Fiskil’s accreditation.

  4. You

    Your sheet or database

    The data you consented to, read-only.

Verify any provider on the public register at cdr.gov.au/find-a-provider. Representatives appear under their ADR's entry.

An Accredited Data Recipient (ADR) is a business the ACCC has formally cleared to receive CDR data. CDR Representatives operate under an ADR's accreditation. BankSync is a CDR Representative under Fiskil (ADRBNK000246). Verify any provider at cdr.gov.au/find-a-provider.

Three roles in the CDR ecosystem.

Data Holder
The bank, energy retailer, or telco that holds the consumer data and must expose CDR APIs. All Australian Authorised Deposit-taking Institutions are required to be Data Holders.
Accredited Data Recipient (ADR)
A business the ACCC has cleared to receive CDR data. Tiers exist (unrestricted, sponsored, etc.) with different obligations.
CDR Representative
A business operating under an ADR’s accreditation through a written principal agreement. The ADR remains responsible for compliance.

What ADR accreditation requires.

  • An information-security regime aligned with ISO 27001 (or equivalent).
  • An external assurance report on the security regime.
  • Insurance arrangements covering CDR-data risks.
  • A board-approved CDR Policy published on the recipient's website.
  • Demonstrated governance and complaints-handling processes.
  • Ongoing compliance reporting to the ACCC.

How to verify any CDR provider

  1. Visit cdr.gov.au/find-a-provider.
  2. Search the provider name.
  3. Confirm accreditation status, number (e.g. ADRBNK000246), and effective dates.
  4. Check for any conditions, suspensions, or revocations on the listing.
  5. For Representatives, confirm the parent ADR is also active.

Why this matters

Tools that claim to use "open banking" or imply CDR-grade compliance without accreditation should not be allowed near your bank credentials. Screen-scraping tools fall outside this framework entirely. If you cannot find a provider on the public register, it is not accredited.

Keep reading.

CDR vs screen-scrapingConsent duration explainedCDR data scopesCDR overview

Questions, answered.

What is an Accredited Data Recipient (ADR)?

An ADR is a business that the ACCC has formally accredited under the Consumer Data Right framework to receive consumer data from data holders (banks, energy retailers, telcos). Accreditation requires demonstrating information-security maturity (ISO 27001 or equivalent), insurance, governance, and a published CDR Policy.

What is a CDR Representative?

A CDR Representative is a business that operates under the accreditation of an ADR. Reps don't hold their own accreditation but are bound by a written agreement with the parent ADR and remain subject to CDR rules. BankSync operates as a CDR Representative under Fiskil (ADRBNK000246).

How do I check if a provider is CDR-accredited?

Search the ACCC's public register at cdr.gov.au/find-a-provider. Enter the provider's name; the register shows accreditation status, accreditation number, and any conditions. CDR Representatives appear under the parent ADR's entry.

Who accredits ADRs in Australia?

The Australian Competition and Consumer Commission (ACCC) is the data-recipient accreditor. Treasury sets the rules. The OAIC (Office of the Australian Information Commissioner) supervises privacy aspects of the CDR framework.

Is BankSync a CDR Accredited Data Recipient?

BankSync operates as a CDR Representative under Fiskil, an Accredited Data Recipient with ID ADRBNK000246. Fiskil holds the accreditation; BankSync routes Australian bank-data access through Fiskil's infrastructure under the CDR Representative arrangement.

Can my data be shared with anyone outside the ADR?

Only with explicit consent and only with parties named in the ADR's CDR Policy. Outsourced service providers (e.g. cloud hosting) must meet CDR information-security standards. Disclosure to overseas parties requires further consent.

How is accreditation different from being a fintech?

Any business can call itself a fintech. CDR accreditation is a specific regulatory status granted by the ACCC after a formal process. Only accredited recipients (or their CDR Representatives) can legally request CDR data from banks.

Connect through an accredited path.

Start free trialView pricing →