Innovate and comply

Security standards

Tribe's platform is ISO 27001 certified and PCI DSS Level 1 compliant, with data residency options to support your GDPR obligations. The controls protecting your card and account data are the same ones protecting open banking traffic.

Monitoring and reporting

Availability and performance of your dedicated interface are monitored continuously, with the statistics you need for your quarterly PSD2 publication provided as standard.

Controlled access

Tribe's API lets licensed third parties request payments or retrieve account information through their own app or site. We first verify each requesting TPP's eIDAS certificate, confirming they are authorised before granting access, so only registered third-party providers can reach your accounts.

Strong Customer Authentication

Under PSD2, account access has to be backed by strong authentication. Tribe's platform supports SCA, giving you a compliant basis for how customers verify themselves when granting access to their accounts.

Sandbox and testing environment

The regulation requires you to give third parties a way to test their connection before going live, along with support to do it. Tribe provides that environment as part of the product, so you're not standing one up separately or fielding the support requests yourself.

Your customers stay in control

Third parties receive only the account data their specific service requires. Access expires and must be reconfirmed at set intervals, and your customers can withdraw it at any time through your app.