규정 준수, 한눈에 이해하기
규제를 받는 오픈뱅킹 체계에서 BankSync가 운영되는 방식. 누가 라이선스를 보유하는지, 어떤 데이터가 어디로 흐르는지, 어떻게 직접 관리할 수 있는지 설명해요.
Penny의 제공업체 지도
BankSync가 금융 데이터에 접근하는 방식
BankSync는 규제를 받는 오픈뱅킹 체계에서 본인의 금융 데이터를 다루는 데 쓰는 앱이에요. BankSync는 은행업 라이선스나 데이터 접근 인증을 직접 보유하지 않아요. 대신 각 지역의 인가 제공업체를 이용하며, 각 제공업체는 사용자를 대신해 금융 데이터에 접근할 수 있는 적절한 인가를 보유하고 있어요.
중요한 점은, BankSync가 기본적으로 패스스루 처리를 사용한다는 거예요. 전체 은행 데이터 세트는 향후 제공될 BankSync Tables 기능이나 다른 관리형 연동 대상처럼 고객이 활성화한 기능에 저장이 필요한 경우, 또는 지원, 보안, 규정 준수, 백업, 법적 요구 사항에 필요한 경우에만 보관돼요.
적용 중인 규제 체계
6개 활성Consumer Data Right (CDR)
호주 · CDR Open Banking (ACCC)
인가 제공업체
Fiskil Pty Ltd
ACCC CDR Accreditation: ADRBNK000246
Australia
데이터 유형
규제 공시
- 1BankSync accesses Australian CDR data as a CDR Representative of Fiskil Pty Ltd (CDR Registration ADRBNK000246) under CDR Rule 1.10AA. BankSync holds no CDR accreditation of its own; Fiskil acts as our CDR Principal and collects and discloses CDR data on our behalf under Fiskil's CDR Policy, which BankSync adopts.
- 2Fiskil Pty Ltd is listed on the ACCC's public CDR Register as an Accredited Data Recipient (ADRBNK000246). CDR Representatives are disclosed under their Principal's accreditation rather than holding a separate register entry.
- 3Consent is collected through Fiskil's hosted consent screen. Maximum consent duration is 12 months (CDR Rule 4.14). You receive advance notice before expiry.
- 4CDR data is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell CDR data, use it for advertising or data brokerage, disclose identifiable CDR data for another party's independent commercial exploitation, or use customer CDR data to train AI or machine-learning models.
- 5Financial data obtained under CDR is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
- 6Upon account deletion or consent revocation, all active CDR consents are immediately withdrawn and connection data is queued for deletion.
- 7CDR complaints can be directed to Fiskil Pty Ltd or to the Australian Financial Complaints Authority (AFCA) and the Office of the Australian Information Commissioner (OAIC). Applicable laws include the Privacy Act 1988 (Cth), Competition and Consumer Act 2010 (Cth), and the Consumer Data Right Rules.
Open Banking (UK)
영국 · FCA Open Banking / PSD2
인가 제공업체
Salt Edge Limited
FCA Financial Reference Number (FRN): 822499
71–75 Shelton Street, London WC2H 9JQ
데이터 유형
규제 공시
- 1BankSync does not hold its own FCA authorisation or registration. UK Open Banking access is provided through Salt Edge Limited, a Registered Account Information Service Provider (RAISP) authorised by the Financial Conduct Authority (FCA FRN 822499, Companies House 11178811, 71–75 Shelton Street, London WC2H 9JQ).
- 2BankSync accesses UK bank data under a data-sharing arrangement with Salt Edge Limited. Salt Edge Limited bears regulatory responsibility to the FCA for UK Open Banking data access.
- 3Data accessed via Salt Edge is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models.
- 4Financial data obtained via UK Open Banking is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
- 5Salt Edge Limited and BankSync act as joint data controllers at the point of data sharing under UK GDPR. BankSync becomes the sole data controller once data has been received and forwarded to your connected destination.
- 6You may revoke Open Banking consent at any time through your bank's consent dashboard or by contacting BankSync support.
Open Banking (US)
미국 및 캐나다 · CFPB Section 1033 / Plaid Exchange
인가 제공업체
Plaid Technologies, Inc.
CFPB: CFPB-registered data aggregator
San Francisco, CA, USA
데이터 유형
규제 공시
- 1US and Canadian bank connections are facilitated through Plaid Technologies, Inc., a CFPB-registered financial data aggregator operating under CFPB Section 1033 rules and bilateral data-sharing agreements with financial institutions.
- 2BankSync does not store banking credentials. Authentication is handled directly between Plaid and your financial institution using tokenised connections.
- 3Data accessed via Plaid is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models.
- 4Financial data obtained via Plaid is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
- 5You may revoke Plaid access at any time via the Plaid Portal (my.plaid.com) or by disconnecting the bank from within BankSync.
Open Banking (US) via MX
미국 · CFPB Section 1033 / Quiltt Connector
인가 제공업체
MX Technologies, Inc.
CFPB: Financial data aggregator operating under CFPB Section 1033
Lehi, UT, USA
데이터 유형
규제 공시
- 1US bank connections through this provider are facilitated by Quiltt, Inc., a financial data platform, with MX Technologies, Inc. connecting to your financial institution under CFPB Section 1033 rules and its own data-access agreements with financial institutions.
- 2BankSync does not store banking credentials. Authentication is handled between MX, Quiltt and your financial institution using tokenised connections.
- 3Data accessed via Quiltt is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models. Quiltt, MX and other independent providers may have their own terms and legal obligations.
- 4Financial data obtained via Quiltt is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
- 5BankSync makes its server-side calls to Quiltt from BankSync infrastructure in the United States (Google Cloud, us-central1). Quiltt requires this for CFPB Section 1033 data residency, and our production deployment refuses to start Quiltt without it.
- 6You may revoke access at any time by disconnecting the bank from within BankSync.
Open Banking (US) via Finicity
미국 · CFPB Section 1033 / Quiltt Connector
인가 제공업체
Finicity Corporation (a Mastercard company)
CFPB: Financial data aggregator operating under CFPB Section 1033
Murray, UT, USA
데이터 유형
규제 공시
- 1US bank connections through this provider are facilitated by Quiltt, Inc., a financial data platform, with Finicity Corporation (a Mastercard company) connecting to your financial institution under CFPB Section 1033 rules and its own data-access agreements with financial institutions.
- 2BankSync does not store banking credentials. Authentication is handled between Finicity, Quiltt and your financial institution using tokenised connections.
- 3Data accessed via Quiltt is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models. Quiltt, Finicity and other independent providers may have their own terms and legal obligations.
- 4Financial data obtained via Quiltt is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
- 5BankSync makes its server-side calls to Quiltt from BankSync infrastructure in the United States (Google Cloud, us-central1). Quiltt requires this for CFPB Section 1033 data residency, and our production deployment refuses to start Quiltt without it.
- 6You may revoke access at any time by disconnecting the bank from within BankSync.
Investment Data (US)
미국 및 캐나다 · SnapTrade API / brokerage partnerships
인가 제공업체
SnapTrade
N/A: Brokerage API aggregator
데이터 유형
규제 공시
- 1Investment portfolio and brokerage data is provided via SnapTrade, a financial data aggregator with direct API partnerships with US and Canadian brokerage providers.
- 2BankSync does not store brokerage credentials. Authentication is handled directly by SnapTrade and your brokerage.
- 3Investment data accessed via SnapTrade is used to provide the service you request. Within the BankSync Boundary, BankSync does not sell your investment data, use it for advertising or data brokerage, disclose identifiable investment data for another party's independent commercial exploitation, or use customer investment data to train AI or machine-learning models.
- 4Investment data is pass-through by default. It is stored only where you enable a BankSync-managed feature that requires storage, such as future BankSync Tables, or where needed for support, security, compliance, backups, or legal requirements.
데이터 흐름 아키텍처
지역에 어떤 규제 체계가 적용되든 BankSync는 동일한 패스스루 아키텍처를 사용해요.
- 1은행이 오픈뱅킹 API를 통해 고객을 직접 인증해요.
- 2인가 제공업체(Fiskil, Salt Edge, Plaid 또는 다른 지역 제공업체)가 자체 인가 또는 약관에 따라 계좌 데이터를 가져와요.
- 3패스스루 동기화에서는 BankSync가 짧게 실행되는 워커 단계에서 데이터를 받아 구성된 연동 대상으로 전달해요.
- 4향후 제공될 BankSync Tables 같은 BankSync 관리형 연동 대상의 경우, 삭제, 내보내기, 공유 또는 다른 곳으로 동기화하기 전까지 데이터가 BankSync Boundary 안에 저장될 수 있어요.
- 5직접 선택한 연동 대상(Notion, Google Sheets, Airtable, 직접 운영하는 API 클라이언트나 웹훅 엔드포인트 등)으로 보낸 데이터는 이후 계정 설정과 해당 제공업체의 약관을 따라요.
- 6BankSync는 서비스 운영, 복구, 감사, 계정 지원을 위해 피드 구성, 동기화 타임스탬프, 오류 로그 같은 운영 메타데이터를 보관해요.
규정 준수 문의
규제 체계에 따른 BankSync의 운영 방식에 대해 궁금한 점이 있거나 데이터 권리를 행사하려면 문의해 주세요.
규제를 준수하고, 투명하며, 직접 관리할 수 있어요
모든 지역, 모든 제공업체를 빠짐없이 공개해요. 누가 데이터를 다루는지 알 권리가 있으니까요.
- 인가 제공업체 경로
- Boundary 우선 데이터 처리
- 언제든지 동의 철회