Give your customers their own bank connection, without becoming a payments company.
Integrate once against one clean API. BankConnector handles every bank's ISO 20022 dialect, the secure channels, the approvals, and the audit trail, under your brand.
Your product sees one clean socket. Behind the wall: certificates, schemas, dialects and approvals.
For your end customer
A live bank integration into their own accounts. Inside your product.
Payments leave from the customer's own bank, under the customer's own mandates, signed by the customer's own keys. We never touch the money. You ship the experience.
For you, the distributor
A bank-specific setup guide that actually works.
For every supported bank you get a step-by-step onboarding runbook, written from 10+ years of integrating with banks across Europe and beyond. The kind of guide that lets your team walk a customer through certificate exchange, EBICS keys and channel setup, and come out looking like the expert in the room.
The model
You build the product. We handle the banks.
You own the customer relationship and the user experience. BankConnector sits between your product and the bank networks: one API, one contract, one place to debug, used by all of your customers under your brand.
What you ship
Four capabilities, one integration.
ISO 20022 payments
pain.001 generation across every supported bank dialect. One JSON in. Valid XML out.
Three-level validation
Schema, business rules, bank-specific quirks. Catch the rejection before the bank does.
Secure channels
EBICS, SFTP, Danske Bank Webservice, Nordea CA Webservice, OP Webservice, Bank Connect. Certificate pinning, signed and encrypted end-to-end.
Audit trail
Append-only events, HMAC hash chain, maker-checker workflow. Built for the auditor before they ask.
Choose your exposure
Embed it. Or hand your customers our portal under your brand.
API-first
Your product calls our API. Your UI, your flows, your support surface. We're invisible to your customer.
White-label portal
A hosted web portal under your brand. Your customers sign in and run payments, without you building the UI.
Security & Compliance
Built fail-closed, isolated, and auditable.
Designed against OWASP ASVS, ISO 27001 Annex A, and SOC 2 trust criteria as a checklist lens. Field-level AES-256-GCM encryption with embedded key IDs, Postgres row-level security enforced on every sensitive table, an append-only journal with HMAC-SHA256 hash chain, fail-closed maker-checker approvals, SSRF guard with IP pinning, and TOTP per RFC 6238.
Not a certification claim. SOC 2 / ISO 27001 readiness in progress. External penetration testing is planned as an integral, ongoing part of delivery over time.
Full controls inventory →Offer bank integration as if you built it.
We work with a small number of distributors at a time. If your product would be stronger with a bank connection inside it, let's talk.
Become a partner