Legal Framework of Open Banking

Open Banking was introduced in the EU under Payment Services Directive 2. In Ukraine, these regulations are to be implemented by the banks under the Law of Ukraine “On Payment Services” and the Resolution of the NBU Board No. 80 of July 25, 2025 On Approval of the Regulation on Open Banking in Ukraine.

Open Banking implementation by Pivdenny Bank

Pivdenny Bank provides equal access opportunities for all the payment service providers licenced by the National Bank of Ukraine.

As a payment service provider managing client accounts, Pivdenny Bank has developed the following specialised Open API meeting the requirements of the National Bank of Ukraine:

• account information interface, namely: a list of accounts, account balance, and account summaries;
• payment transactions interface.

The above interfaces are in compliance with AIS and PIS standards based on the classification of Berlin Group NextGenPSD2.

Open Banking is based on the three key principles:

• Client consent: Any access to accounts or payments shall only be possible with the client’s consent.
• Security: the consent is provided using the SCA procedure.
• Control: the client may:
  - give or revoke their consent at any time;
  - identify the accounts and functions to be accessed;
  - monitor the payment service providers who can access their accounts.

All the interactions within Open Banking ecosystem are only possible with the participation of authorised actors filed with Payment Infrastructure Register of the National Bank of Ukraine and using the qualified security certificates for protection and identification. This ensures transparent, controlled and safe interaction between banks, clients, and payment service providers.  

1. You open an application of a third-party payment service provider (e.g. cost accounting service, payment platform or online store), which you wish to use to view your account details in other banks or to effect payment or make purchase online.
2. The app connects to the bank to request the account details or effect payment.
3. You consent to the action via the app.
4. You are automatically redirected to the bank app (e.g. Pivdenny Online) where you:
   - pass the authentication procedure,
   - review the consent request (which accounts or actions are affected);
   - either confirm your consent using the SCA procedure or revoke the consent.
5. On confirmation, the consent is activated and the service is given access according to your permissions.
6. You may recall your confirmed consent to provision of account details both via an app of a third-party payment service provider and via a bank app.

For more details/to get help, the client may contact our Client Support Centre by:

• calling 0800 30 70 30 (toll-free for Ukrainian users)
• calling +380482307030 (for international subscribers)
• Internet calls: https://bank.com.ua/call/  
• sending a message in Viber, Telegram, Facebook Messenger and live-chat on our website (only on the bank’s official website by clicking the link https://bank.com.ua/)
• sending an email at 307030@pivdenny.ua
• visiting any branch of Pivdenny Joint Stock Bank

Contact us using the Feedback Form below, and choose the type of request “Open Banking”.

In order to ensure the interaction with TPPs through open interfaces (APIs), Pivdenny Bank uses the solution designed by the technology operator Private Joint Stock Company “Ukrainian Processing Centre” (UPC). UPC is filed with the NBU Payment Infrastructure Register as a technology operator responsible for implementing technical interaction between banks and TPPs.

The Platform operates in compliance with Berlin Group NextGenPSD2 and supports interactions through unified applied interfaces Open API, which eliminates the need for direct integration of the bank with each individual participant.

This solution was designed in compliance with the requirements of the National Bank of Ukraine for:

• personal data protection;
• information security management;
• participants’ authentication and identification;
• transparency of payment services.

Interaction occurs via RESTful API with support for JSON, OAuth2, query signing, and encryption in accordance with the NBU requirements.

All the necessary information, which serves to ensure interaction with Pivdenny Bank through specialised Open Banking API interfaces as set forth in the rules and regulations of the National Bank of Ukraine, is published on the resources of the technological operator PrJSC “Ukrainian Processing Centre” (UPC), which provides support to our implementation of the Open API.

Information sources:
- UPC developer portal: https://portal.api.upc.ua/
- API documentation website: https://docs.api.upc.ua

You can find the following publications on the above sources:

1. A list of specialised interfaces (AIS, PIS), through which the bank gives TTPs access to user accounts, and a description of the functional toolset of each interface.
2. An interaction template, examples of queries, responses, availability of Swagger documentation for each service.
3. Description of technical specifications: format, structure of queries/responses, obligatory headers, authentication, signing and encryption procedures.
4. Sandbox consisting of:
   - test accounts and users;
   - test certificates (QWAC, QSealC);
   - instructions for creating an application and executing queries;
   - OAuth2 support (Client ID/Secret).
5. How to connect to a production environment (Live API).
6. For more information on the availability of the specialised interface (success rate of queries, response time, level of availability), visit the “Service Availability” section at https://portal.api.upc.ua/status, and get this information, which is available in the form of quarterly statistics. The statistics is generated automatically and meets the requirements of the NBU Regulation on Public Transparency of Interfaces.
7. A detailed description of the specifics of the implementation of the Open Banking API by Pivdenny Bank is posted on the UPC technical documentation page:
   https://docs.api.upc.ua/ua/api-servisi/regulyatorni-api/specifika-aspsp/akcionernii-bank-pivdennii. This page contains all the critically important information for correct integration with the bank's specialized interfaces:
   – format and types of PSU identifiers;
   – supported authentication approach (decoupled);
   and other features that may differ from the basic UPC specification.
   For successful integration, it is necessary to take into account both the general requirements of UPC and the specifics of Pivdenny Bank.