Guide for Third Party Providers

Everything fintechs and TPPs need to know about building on UAE Open Finance.

What is a TPP?

A Third Party Provider (TPP) is an organization authorized to access customer banking data or initiate payments on their behalf. TPPs include fintechs, payment providers, and other technology companies building innovative financial services.

In the UAE Open Finance framework, TPPs connect to banks through the Al Tareq platform, using standardized APIs and security protocols.

TPP Categories

BDSP

Banking Data Service Provider

Access account information and transaction data

Common use cases:
  • Personal finance management
  • Credit scoring
  • Wealth management
BSIP

Banking Service Initiation Provider

Initiate payments on behalf of customers

Common use cases:
  • E-commerce payments
  • Bill payments
  • Money transfers
ISP

Information Service Provider

Provide account aggregation and information services

Common use cases:
  • Account aggregation
  • Financial dashboards
  • Comparison services

Registration Requirements

To register as a TPP on the Al Tareq platform, you'll need:

  • Valid UAE business license or equivalent authorization
  • Technical capability to implement FAPI-compliant security
  • Demonstrated understanding of Open Finance APIs
  • Data protection and security policies in place
  • Professional indemnity insurance (where required)

Registration Process

1

Create Account

Register on the Al Tareq portal with your organization details.

2

Submit Documentation

Upload required legal and technical documentation.

3

Technical Review

Nebras reviews your technical capabilities and security measures.

4

Sandbox Access

Upon approval, receive credentials for the sandbox environment.

5

Conformance Testing

Complete required conformance tests against API specifications.

6

Production Access

After passing tests, receive production credentials and go live.

Technical Requirements

Authentication

OAuth 2.0 with PKCE, mutual TLS for API calls

Security Profile

FAPI 1.0 Advanced or FAPI 2.0 compliant

Consent Management

Real-time consent capture and lifecycle management

Certificates

eIDAS-style qualified certificates for signing

Ready to Get Started?

Visit the Al Tareq portal to begin your TPP registration.

Start Registration → View API Guide →