Why Saudi Arabia
Market Entry
AI Market Entry PlannerEntry PathwaysRegulatory Overview
Services & Packages
Our ServicesPackages & PricingPartner Network
Opportunities
IndustriesGiga & Mega ProjectsEventsLife in Saudi Arabia
Resources
AI ToolsFAQsSuccess StoriesNews & Insights
← Back to News & Insights

SAMA Launches Open Banking Framework Phase 2

Riyadh, Saudi Arabia – The Saudi Central Bank (SAMA) has officially declared the launch of Phase 2 of its comprehensive Open Banking Framework. This upgrade introduces advanced Application Programming Interface (API) standards specifically designed for payment initiation services (PIS) and account information services (AIS). By expanding digital banking pipelines, the framework establishes a secure, transparent, and highly collaborative environment for international and local FinTech innovators looking to scale within the Kingdom.

Advancing the FinTech Ecosystem

Open Banking is a primary pillar of the Financial Sector Development Program under Saudi Vision 2030, which aims to position Riyadh as a global FinTech capital. The Phase 2 release provides critical operational benefits:

  • Payment Initiation Services (PIS): Enables authorized FinTech applications to initiate secure financial transactions directly from a customer's bank account with their explicit consent, bypassing traditional card networks and reducing merchant fees.
  • Account Information Services (AIS): Allows platforms to consolidate and analyze financial data across multiple bank accounts, facilitating advanced budgeting, credit scoring, and personalized financial advisory tools.
  • Standardized API Architecture: SAMA has mandated that all commercial banks in the Kingdom implement unified API technical standards, ensuring seamless integration and compatibility for software developers.

Enhanced Security & Consent Controls

Security remains paramount in SAMA’s framework. All sharing of financial data requires active, explicit customer consent, which can be managed and revoked at any time. The APIs leverage international security protocols, including OAuth 2.0 and mutual Transport Layer Security (mTLS), ensuring robust data protection and preventing unauthorized access or fraud.

What This Means for International FinTechs

By standardizing banking APIs and establishing clear licensing routes through SAMA’s regulatory sandbox, the Kingdom has drastically lowered the technical and regulatory barriers for global FinTech setups. Companies specializing in digital payments, wealth management, and enterprise financial software can now expand into the Saudi market with highly optimized integration timelines.

Source: Saudi Central Bank (SAMA), Financial Sector Development Program Publications.
Chat with us!