UK Open Banking Developer Guide (2026)

May 202613 min readJames Whitmore, CTO

Direct Answer

UK Open Banking has two FCA-regulated services: AISP (read bank data with consent -- FCA registration required) and PISP (initiate payments -- FCA full authorisation required). UK Open Banking middleware providers (TrueLayer, GoCardless, Yapily, Plaid) aggregate connections to all major UK banks. ClickMasters has implemented Open Banking in 18 UK FinTech projects.

UK Open Banking Providers -- Comparison

ProviderBest ForBank CoverageFCA ComplianceClickMasters Usage
TrueLayerAISP (account data) + PISP (payments)95%+ UK banksAISP + PISP, OAuth 2.0 PKCE12 projects -- primary recommendation
GoCardlessVariable Recurring Payments (VRP) + PISPUK VRP-enabled banksPISP, Bacs + Faster Payments6 projects -- VRP specialist
YapilyAISP data richness, European expansionUK + 18 European marketsAISP + PISP3 projects -- EU expansion
PlaidUS-primary, growing UK coverage85%+ UK banksAISP2 UK projects -- US-first products

FCA AISP vs PISP Registration

Aspect

AISP Registration

PISP Authorisation

What you can do

Read account data (balance, transactions, direct debits) with customer consent

Initiate payments from customer account with consent

FCA process

Register as AISP -- 4-8 weeks

Full FCA authorisation as PISP -- 12-18 months

Capital requirement

Nominal -- no minimum

GBP50,000 minimum capital (FCA EMD/PI requirement)

Consumer Duty

FCA Consumer Duty applies -- data used fairly

Full Consumer Duty -- direct financial impact

AML/KYC

Minimal -- not moving money

Full AML MLRs 2017 -- PISP moves money

ClickMasters built

PFM apps, lending affordability, accounting software

Recurring payments, e-commerce bank transfer, salary advance

Variable Recurring Payments (VRP) -- 2026

ClickMasters VRP: 6 UK projects using GoCardless VRP (4 BNPL repayments, 1 lending repayment, 1 subscription billing). GoCardless VRP charges: 1% + 20p per transaction vs Stripe card 1.4% + 20p.

Frequently Asked Questions

Common questions about uk open banking developer guide (2026).

Timeline: (1) TrueLayer account and API key (same day), (2) sandbox integration (1-2 weeks -- OAuth 2.0 PKCE, data API, consent management), (3) production onboarding (TrueLayer review -- 1-2 weeks), (4) FCA AISP registration if needed (4-8 weeks, can run parallel). Total: 4-8 weeks typical. ClickMasters: established TrueLayer partner -- production onboarding typically faster.

UK GDPR for Open Banking: (1) lawful basis (legitimate interest for affordability, contract for PFM -- depends on use case), (2) purpose limitation (Open Banking data only for stated purpose -- not for marketing), (3) data minimisation (request only bank API scopes needed), (4) retention (delete raw transaction data after analysis -- retain derived insights only), (5) right to erasure (revoke consent to delete all data within 30 days). ClickMasters: pre-built DPIA and privacy notice addendum for Open Banking.

About the Author

James Whitmore, CTO UK Open Banking specialist -- 18 AISP/PISP integrations built TrueLayer, GoCardless, Yapily, Plaid -- all implemented. One of UK most experienced Open Banking teams.

Free Open Banking Consultation Design your...

Free Open Banking Consultation Design your Open Banking integration and FCA authorisation pathway. -> clickmasterssoftwaredevelopmentcompany.co.uk/contact/

Book a Free Consultation