コンプライアンスをわかりやすく
規制されたオープンバンキングの枠組みのもとで、BankSyncがどのように運営されているか。誰がライセンスを持ち、どのデータがどこへ流れ、どのように管理を保てるのかを説明します
Pennyのプロバイダーマップ
BankSyncが金融データにアクセスする方法
BankSyncは、規制されたオープンバンキングの枠組みのもとで、ご自身の金融データを扱うためのアプリです。当社は銀行業のライセンスやデータアクセスの認定を直接保有していません。代わりに各地域で認可プロバイダーを利用しており、各プロバイダーがお客様に代わって金融データにアクセスするための適切な認可を保有しています。
重要な点として、BankSyncは初期設定でパススルー処理を使います。 銀行データ一式を保持するのは、今後提供予定のBankSync Tablesの機能やその他の管理型の同期先など、有効にした機能が保存を必要とする場合、またはサポート、セキュリティ、コンプライアンス、バックアップ、法的要件のために必要な場合に限られます。
有効な規制枠組み
有効 6件Consumer Data Right (CDR)
オーストラリア · CDR Open Banking (ACCC)
認可プロバイダー
Fiskil Pty Ltd
ACCC CDR Accreditation: ADRBNK000246
Australia
データの種類
規制上の開示事項
- 1BankSync accesses Australian CDR data as a CDR Representative of Fiskil Pty Ltd (CDR Registration ADRBNK000246) under CDR Rule 1.10AA. BankSync holds no CDR accreditation of its own; Fiskil acts as our CDR Principal and collects and discloses CDR data on our behalf under Fiskil's CDR Policy, which BankSync adopts.
- 2Fiskil Pty Ltd is listed on the ACCC's public CDR Register as an Accredited Data Recipient (ADRBNK000246). CDR Representatives are disclosed under their Principal's accreditation rather than holding a separate register entry.
- 3Consent is collected through Fiskil's hosted consent screen. Maximum consent duration is 12 months (CDR Rule 4.14). You receive advance notice before expiry.
- 4CDR data is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell CDR data, use it for advertising or data brokerage, disclose identifiable CDR data for another party's independent commercial exploitation, or use customer CDR data to train AI or machine-learning models.
- 5Financial data obtained under CDR is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
- 6Upon account deletion or consent revocation, all active CDR consents are immediately withdrawn and connection data is queued for deletion.
- 7CDR complaints can be directed to Fiskil Pty Ltd or to the Australian Financial Complaints Authority (AFCA) and the Office of the Australian Information Commissioner (OAIC). Applicable laws include the Privacy Act 1988 (Cth), Competition and Consumer Act 2010 (Cth), and the Consumer Data Right Rules.
Open Banking (UK)
イギリス · FCA Open Banking / PSD2
認可プロバイダー
Salt Edge Limited
FCA Financial Reference Number (FRN): 822499
71–75 Shelton Street, London WC2H 9JQ
データの種類
規制上の開示事項
- 1BankSync does not hold its own FCA authorisation or registration. UK Open Banking access is provided through Salt Edge Limited, a Registered Account Information Service Provider (RAISP) authorised by the Financial Conduct Authority (FCA FRN 822499, Companies House 11178811, 71–75 Shelton Street, London WC2H 9JQ).
- 2BankSync accesses UK bank data under a data-sharing arrangement with Salt Edge Limited. Salt Edge Limited bears regulatory responsibility to the FCA for UK Open Banking data access.
- 3Data accessed via Salt Edge is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models.
- 4Financial data obtained via UK Open Banking is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
- 5Salt Edge Limited and BankSync act as joint data controllers at the point of data sharing under UK GDPR. BankSync becomes the sole data controller once data has been received and forwarded to your connected destination.
- 6You may revoke Open Banking consent at any time through your bank's consent dashboard or by contacting BankSync support.
Open Banking (US)
アメリカとカナダ · CFPB Section 1033 / Plaid Exchange
認可プロバイダー
Plaid Technologies, Inc.
CFPB: CFPB-registered data aggregator
San Francisco, CA, USA
データの種類
規制上の開示事項
- 1US and Canadian bank connections are facilitated through Plaid Technologies, Inc., a CFPB-registered financial data aggregator operating under CFPB Section 1033 rules and bilateral data-sharing agreements with financial institutions.
- 2BankSync does not store banking credentials. Authentication is handled directly between Plaid and your financial institution using tokenised connections.
- 3Data accessed via Plaid is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models.
- 4Financial data obtained via Plaid is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
- 5You may revoke Plaid access at any time via the Plaid Portal (my.plaid.com) or by disconnecting the bank from within BankSync.
Open Banking (US) via MX
アメリカ · CFPB Section 1033 / Quiltt Connector
認可プロバイダー
MX Technologies, Inc.
CFPB: Financial data aggregator operating under CFPB Section 1033
Lehi, UT, USA
データの種類
規制上の開示事項
- 1US bank connections through this provider are facilitated by Quiltt, Inc., a financial data platform, with MX Technologies, Inc. connecting to your financial institution under CFPB Section 1033 rules and its own data-access agreements with financial institutions.
- 2BankSync does not store banking credentials. Authentication is handled between MX, Quiltt and your financial institution using tokenised connections.
- 3Data accessed via Quiltt is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models. Quiltt, MX and other independent providers may have their own terms and legal obligations.
- 4Financial data obtained via Quiltt is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
- 5BankSync makes its server-side calls to Quiltt from BankSync infrastructure in the United States (Google Cloud, us-central1). Quiltt requires this for CFPB Section 1033 data residency, and our production deployment refuses to start Quiltt without it.
- 6You may revoke access at any time by disconnecting the bank from within BankSync.
Open Banking (US) via Finicity
アメリカ · CFPB Section 1033 / Quiltt Connector
認可プロバイダー
Finicity Corporation (a Mastercard company)
CFPB: Financial data aggregator operating under CFPB Section 1033
Murray, UT, USA
データの種類
規制上の開示事項
- 1US bank connections through this provider are facilitated by Quiltt, Inc., a financial data platform, with Finicity Corporation (a Mastercard company) connecting to your financial institution under CFPB Section 1033 rules and its own data-access agreements with financial institutions.
- 2BankSync does not store banking credentials. Authentication is handled between Finicity, Quiltt and your financial institution using tokenised connections.
- 3Data accessed via Quiltt is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models. Quiltt, Finicity and other independent providers may have their own terms and legal obligations.
- 4Financial data obtained via Quiltt is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
- 5BankSync makes its server-side calls to Quiltt from BankSync infrastructure in the United States (Google Cloud, us-central1). Quiltt requires this for CFPB Section 1033 data residency, and our production deployment refuses to start Quiltt without it.
- 6You may revoke access at any time by disconnecting the bank from within BankSync.
Investment Data (US)
アメリカとカナダ · SnapTrade API / brokerage partnerships
認可プロバイダー
SnapTrade
N/A: Brokerage API aggregator
データの種類
規制上の開示事項
- 1Investment portfolio and brokerage data is provided via SnapTrade, a financial data aggregator with direct API partnerships with US and Canadian brokerage providers.
- 2BankSync does not store brokerage credentials. Authentication is handled directly by SnapTrade and your brokerage.
- 3Investment data accessed via SnapTrade is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your investment data, use it for advertising or data brokerage, disclose identifiable investment data for another party's independent commercial exploitation, or use customer investment data to train AI or machine-learning models.
- 4Investment data is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
データフローのアーキテクチャ
お住まいの地域にどの規制枠組みが適用される場合でも、BankSyncは同じパススルー型のアーキテクチャを使います。
- 1銀行がオープンバンキングAPIを通じて直接本人認証を行います。
- 2認可プロバイダー(Fiskil, Salt Edge, Plaid、またはその他の地域プロバイダー)が、自らの認可または規約に基づいて口座データを取得します。
- 3パススルー型の同期では、BankSyncは短時間だけ動くワーカーのステップでデータを受け取り、設定された同期先に転送します。
- 4今後提供予定のBankSync TablesなどBankSyncが管理する同期先では、削除、エクスポート、共有、または別の場所へ同期するまで、データがBankSync Boundary内に保存される場合があります。
- 5お客様が選んだ同期先(Notion、Google Sheets、Airtable、ご自身のAPIクライアントやWebhookエンドポイントなど)に送ったデータは、その後、アカウント設定とそのプロバイダーの規約に従って管理されます。
- 6BankSyncは、サービスの運用、復旧、監査、アカウントのサポートのために、フィードの設定、同期のタイムスタンプ、エラーログなどの運用メタデータを保持します。
コンプライアンスに関するご質問
各規制枠組みのもとでの当社の運営方法についてご質問がある場合や、データに関する権利を行使したい場合は、お問い合わせください。
規制に準拠し、透明で、管理するのはご自身
すべての地域、すべてのプロバイダーを開示しています。誰がデータに触れるのかを知るのは当然の権利だからです
- 認可プロバイダー経由の接続
- BankSync Boundaryを起点にしたデータ管理
- 同意はいつでも取り消し可能