Finicity (Mastercard)

Overview

Finicity, a Mastercard company, operates as an open banking platform that provides developers with API access to aggregated financial data and payment initiation capabilities. Established in 2000, Finicity's services are designed to support a range of financial applications, from enhancing lending decisions to powering personal financial management (PFM) tools and facilitating secure payment processes. The platform aggregates financial account data, offering insights into transaction history, account balances, and other financial attributes that can be utilized for credit risk assessment, income verification, and fraud prevention.

The core of Finicity's offering revolves around its data access and payment initiation APIs. Developers can integrate these APIs to retrieve normalized financial data from various financial institutions, subject to consumer consent. This data can then be used to automate credit underwriting processes, provide personalized financial advice in PFM applications, or verify account ownership and funds availability for payment transactions. For instance, a mortgage lender might use Finicity's services to rapidly verify an applicant's income and assets directly from their bank accounts, streamlining the loan application process and reducing manual document collection. Similarly, a fintech application focused on budgeting could use Finicity to pull real-time transaction data and categorize spending for users.

Finicity emphasizes data security and compliance, adhering to standards such as SOC 2 Type II, GDPR, and CCPA. Its infrastructure is built to handle sensitive financial information securely, providing developers with tools to manage consumer consent and data privacy effectively. The platform's developer experience includes a sandbox environment for testing integrations and a comprehensive developer portal with API documentation, enabling technical teams to integrate Finicity's services into their applications. This focus on secure, consented data access positions Finicity as a foundational component for innovation in the fintech sector, particularly for applications requiring a deep understanding of a user's financial standing.

Key features

• Data Access (Account Aggregation): Provides APIs to securely access and aggregate financial data from various financial institutions, including transaction history, account balances, and loan details. This enables applications to gain a comprehensive view of a user's financial standing with their explicit consent.
• Payment Initiation: Facilitates direct account-to-account payments, allowing users to initiate payments directly from their bank accounts through integrated applications. This can reduce transaction fees and processing times compared to traditional card payments.
• Credit Decisioning Data: Offers enriched financial data specifically tailored for credit underwriting and risk assessment. This includes verified income, asset verification, and debt-to-income ratios, aiding lenders in making more informed and automated credit decisions.
• Account Verification: Enables real-time verification of account ownership and funds availability, crucial for preventing fraud and ensuring the legitimacy of payment transactions. This feature supports use cases in payments, lending, and onboarding processes.
• Fraud Detection: Provides data insights that can be used to identify suspicious financial activities and patterns, helping financial service providers mitigate fraud risks across various products and services.
• Developer Sandbox and Portal: Offers a dedicated sandbox environment for testing API integrations and a developer portal with comprehensive API documentation and guides, streamlining the development and deployment process for new applications.
• Compliance and Security: Operates under strict compliance frameworks including SOC 2 Type II, GDPR, and CCPA, ensuring robust data security and privacy practices for sensitive financial information.

Pricing

Finicity offers custom enterprise pricing, which typically involves tailored agreements based on usage volume, specific product features utilized, and the scale of integration. Interested parties are generally required to contact Finicity directly to discuss their specific needs and obtain a personalized quote. This model is common among enterprise-grade open banking providers, reflecting the varied and complex requirements of financial institutions and large fintech companies.

For detailed pricing information and to request a quote, prospective clients should visit the Finicity pricing page and engage with their sales team.

Common integrations

Finicity's APIs are designed for direct integration into various financial applications and platforms. While specific pre-built integrations with third-party software are not extensively advertised as packaged solutions, its core offering enables developers to build custom integrations with their existing systems.

• Lending Platforms: Integrate Finicity for automated income and asset verification, enabling faster and more accurate credit decisions within loan origination systems.
• Personal Financial Management (PFM) Apps: Connect to Finicity's data access APIs to pull real-time transaction data and account balances, powering budgeting, spending analysis, and financial planning features.
• Payment Processors: Utilize Finicity for account verification and payment initiation to facilitate direct bank transfers, enhancing payment security and reducing processing costs.
• Fraud Detection Systems: Incorporate Finicity's financial data streams to enrich existing fraud detection models, identifying unusual account activity or transaction patterns.
• Core Banking Systems: Financial institutions can integrate Finicity to enhance their customer-facing digital platforms with advanced data insights and open banking capabilities.

Alternatives

Developers seeking open banking and financial data aggregation services have several alternatives to Finicity:

• Plaid: A widely used platform offering similar services for account linking, data aggregation, and payment initiation, often favored by fintech startups for its developer-friendly APIs.
• MX Technologies: Provides data aggregation, data enhancement, and money experience tools, focusing on helping financial institutions and fintechs improve customer engagement.
• Akoya: An API-based network owned by financial institutions, offering a secure and transparent way for consumers to share their financial data with third-party apps, potentially reducing the need for screen scraping. Akoya emphasizes direct data access from financial institutions, as detailed in their data access partnership with Finicity.
• Yapily: A European open banking platform specializing in connectivity to banks across the UK and Europe, offering payment initiation and account information services.
• Adyen: While primarily known as a payment processing platform, Adyen also offers open banking payment methods that enable direct bank-to-bank transfers, competing in the payment initiation space.

Getting started

To begin integrating with Finicity, developers typically register for a developer account to access the sandbox environment and API credentials. The process involves obtaining client_id and client_secret for authentication, followed by making API calls to access financial data or initiate payments, all within the framework of explicit user consent. The primary language for interaction is usually via RESTful API calls, and many developers use libraries like axios in Node.js or requests in Python for this purpose.

Here's a basic example of how to obtain an access token using Node.js and the axios library, which is a common first step in interacting with the Finicity API. This token is then used for subsequent authenticated requests to access financial data or initiate other actions. Refer to the Finicity API documentation for specific endpoints and request formats.

const axios = require('axios');

const clientId = 'YOUR_FINICITY_CLIENT_ID';
const clientSecret = 'YOUR_FINICITY_CLIENT_SECRET';
const appKey = 'YOUR_FINICITY_APP_KEY'; // Often used for specific application identification

async function getAccessToken() {
  try {
    const response = await axios.post(
      'https://api.finicity.com/oauth/token',
      `client_id=${clientId}&client_secret=${clientSecret}&grant_type=client_credentials`,
      {
        headers: {
          'Finicity-App-Key': appKey,
          'Content-Type': 'application/x-www-form-urlencoded',
          'Accept': 'application/json'
        }
      }
    );
    console.log('Access Token:', response.data.access_token);
    return response.data.access_token;
  } catch (error) {
    console.error('Error getting access token:', error.response ? error.response.data : error.message);
    throw error;
  }
}

// Example usage:
getAccessToken();

After obtaining an access token, developers can proceed to implement workflows such as connecting customer accounts, retrieving transaction data, or setting up payment requests. The Finicity developer portal provides detailed guides and API references for each of these operations, including handling webhooks for asynchronous events and managing user consent flows. Developers should ensure they follow all security best practices and consent requirements when handling sensitive financial data.