Production environment

Access to production is available only for certified TPPs. Access to produc-tions data is granted automatically after providing eIDAS certificate. Once wehave validated your TPP identity and PSD2 legal permissions, you can create and use the application in a production environment.

eIDAS certificate in Production Environment

After having a license granted by a National Competent Authority, the TPP must purchase an eIDAS QSeal and QWAC certificate from one of the QTSPs listed in the EU Trusted List. This certificate will be used when onboarding to Papaya Open banking production. After the successful onboarding, the TPPs must use the same certificate in each API call. All connections in production environment targeted towards PSD2 APIs when a valid eIDAS certificate is not presented will be rejected.

eIDAS Certificate Validation and Revocation validation

When the client certificate is used, it will always be validated by Papaya system. The validation contains trust chain validations including expiration check and verification towards revocation on top of the actual signature validation. If any of the validations are not passing the connection will be rejected. Please note that the owner of the certificate must renew the certificate before its expiration. In the case of the new certificate, the enrollment step must be re-initiated.

Note:
We reserve the right to revoke TPP access to any of our endpoints if they use this for unintended purposes. Please play by PSD2 rules.

Note:
When you start working with Bank API in Live, make sure you have theNCA license (PISP, AISP, PIISP). Each country has its own guidelines on obtaining a license, please contact your local NCA.

Contact us

If you have some unique business case and you want to create a business with Papapya based on non PSD2 APIs please contact us via mail with a description of your business case and with the description of financial services you’d need.

Required License

For Account Information