The Groupe BPCE developer portal is a platform intended for consumers who wish to discover our development tools (mainly APIs), learn how to use them, request access to them and try them out.
The portal contains all information about an API product, including documentation, specifications, security, pricing, and legal terms of use.
This portal serves as a showcase to promote and monetize our APIs and may also integrate other products.
The Groupe BPCE developer portal is aimed at SMEs, large groups, Fintechs or TPPs who wish to integrate banking data or services into their processes and applications.
PSD2
The Payment Services Directive (PSD2) aims to foster innovation, competition and efficiency. In particular, it establishes stricter security standards for online payments. And this in order to strengthen consumer confidence in online shopping.
This directive applies to all online payment services, as well as service providers, throughout the European Union (EU) as well as the European Economic Area (EEA).
For banks, PSD2 presents significant challenges. In particular, it requires them to implement strong multi-factor authentication and open up to third-party payment service providers (PSPs). From now on, banks are no longer the only intermediaries between the merchant and his customer.
Third-party service providers are fintechs that use their technology to offer new services to consumers.
Before the directive, these entities did not have access to bank data. In order to perform their services, they “requested” bank access codes from users and connected through robots to their bank account in order to retrieve the information necessary to perform their services.
This “web scraping” technique prevents banks from differentiating whether it is the current customer or the third-party service provider (information / payment).
The technical standards provided for in the PSD2 directive make strong authentication the basic condition. And this so that the customer can access his payment account or make payments online. This implies that, to prove his identity, the user must meet at least two of the following three conditions:
A password or code that only the user knows
A device (mobile phone, smart card, etc.) that only the user has
A personal characteristic of the customer (fingerprint, voice recognition, or face).