Getting Started / UAE Open Finance

More useful services.
Through permission.

Open Finance lets a customer choose to share financial information or authorise a service through an eligible provider. Start with what that could make possible, then check the conditions behind it.

The idea

Start with the customer benefit.

A person or business may have financial information spread across several institutions. Permission-based access can help a service bring that information together or initiate a transaction the customer has chosen.

The CBUAE describes Open Finance as a way to give customers greater control and choice through consented financial data. That is a purpose for the framework, rather than evidence that every possible service is already available. Read the CBUAE overview .

Three practical possibilities.

Illustrative journeys to make the idea concrete. Availability depends on the provider, institution, supported capability, and applicable requirements.

An SME cash view

Several bank accounts. Less switching.

A business could choose to share balances and transactions from its accounts with a service that brings the information into one view.

A question to carry forward

Which accounts are covered, how recent is the data, and what happens when access stops?

Explore the synthetic SME example

Pay by bank

A payment from an account you choose.

At a checkout, a customer could approve a payment from their bank account through an authorised provider. The payment has its own consent and status journey.

A question to carry forward

Are the amount and recipient clear, and can the service distinguish a submitted payment from a completed one?

Read the official payment journey

An insurance overview

Policy information in one place.

A consumer could give permission for a provider to retrieve information about their insurance policies and display it together.

A question to carry forward

Which policy information is requested, for what purpose, and for how long?

Read official insurance data sharing

The linked insurance v2.1 page marks its customer-experience section as out of date. Check the official consolidated errata for v2.1 and API Hub v8 alongside the published specifications before designing a journey.

Customer permission

The purpose and boundaries come first.

Before considering what to build, be clear about what the customer is agreeing to. A data-sharing permission and a payment instruction serve different purposes; one should not be treated as permission for the other.

Authentication and authorisation are also different. Authentication checks who the customer is. Authorisation records the access or action they approve. The supported journey may use the institution's channels or the Al Tareq centralised authentication and authorisation solution. Check the official integration guidance .

Who participates?

A few terms explain the roles. The official framework determines the permissions and obligations that apply.

Customer
The person or business choosing the service and authorising the relevant access or action.
Licensed Financial Institution (LFI)
An institution, such as a bank or insurer, holding the relevant customer account, policy, or financial information.
Third Party Provider (TPP)
A provider using the framework's services within its permitted role. An LFI can also act as a TPP; check the requirements for the activity.
CBUAE & the framework
The regulator and the regulated infrastructure supporting participation, secure access, and common interfaces.

For regulatory scope and participation requirements, use the CBUAE Rulebook introduction and scope, Circular 03/2025 . For terminology, browse the glossary.

The technical shape

The API Hub sits between providers and institutions.

TPP

The customer-facing service

Uses the TPP-facing Standards APIs.

API Hub

The mediation point

Manages consent and access tokens, and routes permitted requests.

LFI

The institution's services

Implements the Ozone Connect interface for the Hub to call.

This is a simplified request and response path, not the full customer authentication sequence. TPPs do not call the institution's Ozone Connect backend directly. See the official API Hub integration overview and official API specification repository .

What the specifications cover

Explore bank data sharing, payment initiation, Confirmation of Payee, product information, insurance services, and ATM information. API families, supported versions, and available services need checking for the proposition and institutions you have in mind.

Go deeper with the API Integration Guide

Choose a useful next step.

You do not need to become an API specialist to ask a better question.

Published specifications describe the contract; they do not prove that every institution supports every capability. Recheck versions, errata, and applicable official guidance before making an implementation decision.

AI-assisted drafting and source review by Codex, . Editorial contact: @michartmann .