Memahami kepatuhan

Cara BankSync beroperasi di bawah kerangka open banking yang teregulasi. Siapa yang memegang lisensi, data apa mengalir ke mana dan bagaimana Anda tetap memegang kendali.

Peta penyedia dari Penny

BankSync dapat menjelaskan jalurnya, tetapi setiap penyedia berlisensi, bank, perusahaan sekuritas, pemegang data, tujuan dan integrasi di masa mendatang dapat memiliki ketentuan, kontrol dan kewajiban hukumnya sendiri.

Cara BankSync mengakses data keuangan Anda

BankSync adalah aplikasi yang Anda gunakan untuk mengelola data keuangan Anda sendiri, di bawah kerangka open banking yang teregulasi. Kami tidak memegang lisensi perbankan atau akreditasi akses data secara langsung. Sebagai gantinya, kami menggunakan penyedia berlisensi di setiap wilayah, yang masing-masing memegang otorisasi yang sesuai untuk mengakses data keuangan atas nama Anda.

Yang penting, BankSync secara default menggunakan pemrosesan pass-through. Dataset perbankan lengkap hanya disimpan jika fitur yang Anda aktifkan memerlukan penyimpanan, seperti fitur BankSync Tables di masa mendatang atau tujuan terkelola lainnya, atau jika diperlukan untuk dukungan, keamanan, kepatuhan, cadangan atau persyaratan hukum.

Kerangka aktif

6 aktif
🇦🇺

Consumer Data Right (CDR)

Australia · CDR Open Banking (ACCC)

Aktif

Penyedia berlisensi

Fiskil Pty Ltd

ACCC CDR Accreditation: ADRBNK000246

Australia

Jenis data

Riwayat transaksiSaldo rekeningDetail rekening

Pengungkapan regulasi

  1. 1BankSync accesses Australian CDR data as a CDR Representative of Fiskil Pty Ltd (CDR Registration ADRBNK000246) under CDR Rule 1.10AA. BankSync holds no CDR accreditation of its own; Fiskil acts as our CDR Principal and collects and discloses CDR data on our behalf under Fiskil's CDR Policy, which BankSync adopts.
  2. 2Fiskil Pty Ltd is listed on the ACCC's public CDR Register as an Accredited Data Recipient (ADRBNK000246). CDR Representatives are disclosed under their Principal's accreditation rather than holding a separate register entry.
  3. 3Consent is collected through Fiskil's hosted consent screen. Maximum consent duration is 12 months (CDR Rule 4.14). You receive advance notice before expiry.
  4. 4CDR data is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell CDR data, use it for advertising or data brokerage, disclose identifiable CDR data for another party's independent commercial exploitation, or use customer CDR data to train AI or machine-learning models.
  5. 5Financial data obtained under CDR is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
  6. 6Upon account deletion or consent revocation, all active CDR consents are immediately withdrawn and connection data is queued for deletion.
  7. 7CDR complaints can be directed to Fiskil Pty Ltd or to the Australian Financial Complaints Authority (AFCA) and the Office of the Australian Information Commissioner (OAIC). Applicable laws include the Privacy Act 1988 (Cth), Competition and Consumer Act 2010 (Cth), and the Consumer Data Right Rules.
🇬🇧

Open Banking (UK)

Inggris · FCA Open Banking / PSD2

Aktif

Penyedia berlisensi

Salt Edge Limited

FCA Financial Reference Number (FRN): 822499

71–75 Shelton Street, London WC2H 9JQ

Jenis data

Riwayat transaksiSaldo rekeningDetail rekening

Pengungkapan regulasi

  1. 1BankSync does not hold its own FCA authorisation or registration. UK Open Banking access is provided through Salt Edge Limited, a Registered Account Information Service Provider (RAISP) authorised by the Financial Conduct Authority (FCA FRN 822499, Companies House 11178811, 71–75 Shelton Street, London WC2H 9JQ).
  2. 2BankSync accesses UK bank data under a data-sharing arrangement with Salt Edge Limited. Salt Edge Limited bears regulatory responsibility to the FCA for UK Open Banking data access.
  3. 3Data accessed via Salt Edge is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models.
  4. 4Financial data obtained via UK Open Banking is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
  5. 5Salt Edge Limited and BankSync act as joint data controllers at the point of data sharing under UK GDPR. BankSync becomes the sole data controller once data has been received and forwarded to your connected destination.
  6. 6You may revoke Open Banking consent at any time through your bank's consent dashboard or by contacting BankSync support.
🇺🇸

Open Banking (US)

Amerika Serikat & Kanada · CFPB Section 1033 / Plaid Exchange

Aktif

Penyedia berlisensi

Plaid Technologies, Inc.

CFPB: CFPB-registered data aggregator

San Francisco, CA, USA

Jenis data

Riwayat transaksiSaldo rekeningDetail rekening

Pengungkapan regulasi

  1. 1US and Canadian bank connections are facilitated through Plaid Technologies, Inc., a CFPB-registered financial data aggregator operating under CFPB Section 1033 rules and bilateral data-sharing agreements with financial institutions.
  2. 2BankSync does not store banking credentials. Authentication is handled directly between Plaid and your financial institution using tokenised connections.
  3. 3Data accessed via Plaid is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models.
  4. 4Financial data obtained via Plaid is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
  5. 5You may revoke Plaid access at any time via the Plaid Portal (my.plaid.com) or by disconnecting the bank from within BankSync.
🇺🇸

Open Banking (US) via MX

Amerika Serikat · CFPB Section 1033 / Quiltt Connector

Aktif

Penyedia berlisensi

MX Technologies, Inc.

CFPB: Financial data aggregator operating under CFPB Section 1033

Lehi, UT, USA

Jenis data

Riwayat transaksiSaldo rekeningDetail rekening

Pengungkapan regulasi

  1. 1US bank connections through this provider are facilitated by Quiltt, Inc., a financial data platform, with MX Technologies, Inc. connecting to your financial institution under CFPB Section 1033 rules and its own data-access agreements with financial institutions.
  2. 2BankSync does not store banking credentials. Authentication is handled between MX, Quiltt and your financial institution using tokenised connections.
  3. 3Data accessed via Quiltt is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models. Quiltt, MX and other independent providers may have their own terms and legal obligations.
  4. 4Financial data obtained via Quiltt is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
  5. 5BankSync makes its server-side calls to Quiltt from BankSync infrastructure in the United States (Google Cloud, us-central1). Quiltt requires this for CFPB Section 1033 data residency, and our production deployment refuses to start Quiltt without it.
  6. 6You may revoke access at any time by disconnecting the bank from within BankSync.
🇺🇸

Open Banking (US) via Finicity

Amerika Serikat · CFPB Section 1033 / Quiltt Connector

Aktif

Penyedia berlisensi

Finicity Corporation (a Mastercard company)

CFPB: Financial data aggregator operating under CFPB Section 1033

Murray, UT, USA

Jenis data

Riwayat transaksiSaldo rekeningDetail rekening

Pengungkapan regulasi

  1. 1US bank connections through this provider are facilitated by Quiltt, Inc., a financial data platform, with Finicity Corporation (a Mastercard company) connecting to your financial institution under CFPB Section 1033 rules and its own data-access agreements with financial institutions.
  2. 2BankSync does not store banking credentials. Authentication is handled between Finicity, Quiltt and your financial institution using tokenised connections.
  3. 3Data accessed via Quiltt is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models. Quiltt, Finicity and other independent providers may have their own terms and legal obligations.
  4. 4Financial data obtained via Quiltt is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
  5. 5BankSync makes its server-side calls to Quiltt from BankSync infrastructure in the United States (Google Cloud, us-central1). Quiltt requires this for CFPB Section 1033 data residency, and our production deployment refuses to start Quiltt without it.
  6. 6You may revoke access at any time by disconnecting the bank from within BankSync.
🇺🇸

Investment Data (US)

Amerika Serikat & Kanada · SnapTrade API / brokerage partnerships

Aktif

Penyedia berlisensi

SnapTrade

N/A: Brokerage API aggregator

Jenis data

Kepemilikan portofolioRiwayat transaksi efekSaldo rekening

Pengungkapan regulasi

  1. 1Investment portfolio and brokerage data is provided via SnapTrade, a financial data aggregator with direct API partnerships with US and Canadian brokerage providers.
  2. 2BankSync does not store brokerage credentials. Authentication is handled directly by SnapTrade and your brokerage.
  3. 3Investment data accessed via SnapTrade is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your investment data, use it for advertising or data brokerage, disclose identifiable investment data for another party's independent commercial exploitation, or use customer investment data to train AI or machine-learning models.
  4. 4Investment data is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.

Arsitektur alur data

Apa pun kerangka regulasi yang berlaku di wilayah Anda, BankSync menggunakan arsitektur pass-through yang sama:

  1. 1Bank Anda mengautentikasi Anda secara langsung melalui API open banking.
  2. 2Penyedia berlisensi (Fiskil, Salt Edge, Plaid, atau penyedia regional lain) mengambil data rekening Anda berdasarkan otorisasi atau ketentuan mereka.
  3. 3Untuk sinkronisasi pass-through, BankSync menerima data dalam langkah worker yang berumur pendek dan meneruskannya ke tujuan yang telah Anda konfigurasi.
  4. 4Untuk tujuan yang dikelola BankSync, seperti BankSync Tables di masa mendatang, data dapat disimpan di dalam BankSync Boundary hingga Anda menghapus, mengekspor, membagikan atau menyinkronkannya ke tempat lain.
  5. 5Data yang Anda kirim ke tujuan pilihan Anda (Notion, Google Sheets, Airtable, klien API atau endpoint webhook Anda sendiri dan sejenisnya) selanjutnya diatur oleh pengaturan akun Anda dan ketentuan penyedia tersebut.
  6. 6BankSync menyimpan metadata operasional seperti konfigurasi feed, stempel waktu sinkronisasi dan log galat agar layanan dapat berjalan, dipulihkan dan diaudit serta agar kami dapat mendukung akun Anda.

Pertanyaan kepatuhan

Jika Anda memiliki pertanyaan tentang cara kami beroperasi di bawah kerangka regulasi apa pun, atau ingin menggunakan hak atas data Anda, silakan hubungi kami.

Teregulasi, transparan dan sepenuhnya dalam kendali Anda

Setiap wilayah, setiap penyedia, diungkapkan sepenuhnya. Karena Anda berhak tahu siapa yang menyentuh data Anda.

  • Jalur melalui penyedia berlisensi
  • Penanganan data berbasis Boundary
  • Cabut persetujuan kapan saja