🇪🇺EuropeBeta·PSD2

PSD2, explained in plain language

What the European open banking directive actually does, who the AISPs are, how 180-day consents and SCA work, and which regulator supervises your country.

Authorize the institution, keep credentials at the bank, and start syncing.

PSD2

PSD2 / Open Banking

Regulator: European Banking Authority (EBA)

The Revised Payment Services Directive (PSD2) mandates regulated open banking access across the EU and EEA. BankSync connects through licensed AISPs authorised under PSD2 across the union.

Connections are made through licensed AISPs authorised under PSD2.

the basics

One directive, thirty markets

PSD2 turned bank data access from a scraping grey zone into a regulated right. Every bank in the EU and EEA must operate secure APIs, and only licensed providers may use them. Consent is granted on your bank's own pages under Strong Customer Authentication, scoped to account information, and revocable at any time.

the roles

Banks, AISPs, and national regulators

The directive is EU law, but supervision is national: each country's competent authority licenses and oversees the providers operating there, with the European Banking Authority keeping the central register. BankSync connects through Salt Edge, a licensed AISP, which holds the regulatory permissions so you do not have to.

the cycle

Consents of up to 180 days

Since the 2023 amendment to the SCA technical standards, banks may issue account information consents lasting up to 180 days, and most EEA banks now do. Each bank sets its own window. BankSync tracks the expiry per connection and prompts you to renew with a quick re-authentication before data flow stops.

who supervises

National competent authorities

The regulator responsible for PSD2 supervision in each country BankSync covers. Each country name links to its coverage page.

CountryCompetent authority
AustriaFMA (Austrian Financial Market Authority)
BelgiumNational Bank of Belgium (NBB)
BulgariaBulgarian National Bank (BNB)
CroatiaCroatian National Bank (Hrvatska narodna banka, HNB)
CyprusCentral Bank of Cyprus
CzechiaCzech National Bank (Česká národní banka, CNB)
DenmarkDanish Financial Supervisory Authority (Finanstilsynet)
EstoniaFinantsinspektsioon (Estonian Financial Supervision and Resolution Authority)
FinlandFinancial Supervisory Authority (Finanssivalvonta, FIN-FSA)
FranceACPR (Autorité de contrôle prudentiel et de résolution)
GermanyBaFin (Federal Financial Supervisory Authority)
GreeceBank of Greece
HungaryMagyar Nemzeti Bank (Central Bank of Hungary, MNB)
IcelandCentral Bank of Iceland (Seðlabanki Íslands)
IrelandCentral Bank of Ireland
ItalyBanca d'Italia (Bank of Italy)
LatviaLatvijas Banka (Bank of Latvia; absorbed the FCMC as PSD2 competent authority in 2023)
LiechtensteinFinancial Market Authority Liechtenstein (FMA)
LithuaniaBank of Lithuania (Lietuvos bankas)
LuxembourgCSSF (Commission de Surveillance du Secteur Financier)
MaltaMalta Financial Services Authority (MFSA)
NetherlandsDNB (De Nederlandsche Bank)
NorwayFinancial Supervisory Authority of Norway (Finanstilsynet)
PolandPolish Financial Supervision Authority (Komisja Nadzoru Finansowego, KNF)
PortugalBanco de Portugal (Bank of Portugal)
RomaniaNational Bank of Romania (Banca Națională a României, BNR)
SlovakiaNational Bank of Slovakia (Národná banka Slovenska, NBS)
SloveniaBank of Slovenia (Banka Slovenije)
SpainBanco de España (Bank of Spain)
SwedenSwedish Financial Supervisory Authority (Finansinspektionen)
good questions

Frequently asked questions

PSD2 FAQ

The revised Payment Services Directive is the EU law that requires banks across the EEA to give regulated third parties secure access to payment account data when the account holder consents. It created the legal category of Account Information Service Providers (AISPs) and mandated the APIs banks now operate.

Put PSD2 to work

Sync any European bank to Google Sheets, Notion, Excel, or your AI agent in minutes.

14-day free trial • Cancel anytime