Groupe BPCE API Store

What is the Groupe BPCE API Store ?

The Groupe BPCE API Store is a platform intended for consumers who wish to discover our development tools (mainly APIs), learn how to use them, request access to them and try them out.

What products are available on the Groupe BPCE API Store ?

The Groupe BPCE API Store contains all information about an API product, including documentation, specifications, security, pricing, and legal terms of use.
This portal serves as a showcase to promote and monetize our APIs and may also integrate other products.

Who is the Groupe BPCE API Store intended for?

The Groupe BPCE API Store is aimed at SMEs, large groups, Fintechs or TPPs who wish to integrate banking data or services into their processes and applications.

PSD2

What are PSD2 regulations ?

The Payment Services Directive (PSD2) aims to foster innovation, competition and efficiency. In particular, it establishes stricter security standards for online payments. And this in order to strengthen consumer confidence in online shopping.

Who is affected by PSD2 ?

This directive applies to all online payment services, as well as service providers, throughout the European Union (EU) as well as the European Economic Area (EEA).

What is the impact of PSD2 for banks and customers ?

For banks, PSD2 presents significant challenges. In particular, it requires them to implement strong multi-factor authentication and open up to third-party payment service providers (PSPs). From now on, banks are no longer the only intermediaries between the merchant and his customer.

What are Third Party Providers ?

Third-party service providers are fintechs that use their technology to offer new services to consumers.

Before the directive, these entities did not have access to bank data. In order to perform their services, they “requested” bank access codes from users and connected through robots to their bank account in order to retrieve the information necessary to perform their services.

This “web scraping” technique prevents banks from differentiating whether it is the current customer or the third-party service provider (information / payment).

What is Strong Authentication ?

The technical standards provided for in the PSD2 directive make strong authentication the basic condition. And this so that the customer can access his payment account or make payments online. This implies that, to prove his identity, the user must meet at least two of the following three conditions:

  • A password or code that only the user knows
  • A device (mobile phone, smart card, etc.) that only the user has
  • A personal characteristic of the customer (fingerprint, voice recognition, or face).