Aiia Glossary

Account Information Service Provider (AISP)	AISPs are companies that allow their end users to access information about their account upon request. Spiir is a good example of this; you can access your bank information through Spiir even though Spiir is not a bank. Aiia is also categorised as an AISP.
Account Servicing Payment Service Provider (ASPSP)	ASPSP is an institution that offers payment accounts to their users. Their users can access their accounts digitally, so a bank is an ASPSP. PSD2 requires those institutions to provide trusted third parties access to their data and to initiate payments.
Application Programming Interface (API)	An API is a set of routines, protocols and tools for building software applications. Basically, an API specifies how software components should interact. We connect to the mobile APIs and the PSD2 APIs of the banks to get access to their data. We’ve also developed our own API, so our clients are able to access the data of all banks in Northern Europe through one seamless API.
European Banking Authority (EBA)	The EBA is an independent EU authority that works to ensure effective and consistent prudential regulation and supervision across the European banking sector. Its overall objectives are to maintain financial stability in the EU and to safeguard the integrity, efficiency and orderly functioning of the banking sector. The main task of the EBA is to contribute to the creation of the European Single Rulebook in banking, whose objective is to provide a single set of harmonised, prudential rules for financial institutions throughout the EU. The EBA also plays an important role in promoting convergence of supervisory practices and is mandated to assess risks and vulnerabilities in the EU banking sector. Source: European Banking Authority
Financial Supervisory Authority (FSA)	The primary task of the FSA is the supervision of financial undertakings – banks, mortgage-credit institutions, pension and insurance companies, etc. in a given country. Open banking and PSD2 falls under the responsibility of FSA. One example is the Danish FSA.
General Data Protection Regulation (GDPR)	GDPR is a data protection regulation that applies to all European citizens. The purpose of the GDPR is to provide a set of standardised data protection laws across all the member countries. This should make it easier for EU citizens to understand how their data is being used, and also raise any complaints, even if they're not in the country where its located.
Payment Initiation Service Provider (PISP)	PISPs are companies that are able to initiate payments at the request of an end user with respect to an account held at another PISP. Companies with a PISP license can transfer money from their customers’ accounts to other accounts. This opens up a lot of possibilities. Aiia is categorised as a PISP.
Payment Service Directive, Second Edition (PSD2)	The Payment Service Directive, Second Edition (PSD2) requires banks to enable third parties to access their data through APIs. The goal with the directive was to increase competition between the banks, increase innovation in the field, protect consumers and offer them better service.
Payment Service User (PSU)	A PSU is an end user who owns the payment account and uses the service. Usually, the PSU is also referred to as just "end user".
Production Environment	The production environment gives you access to real bank data and is where you operate after you've completed testing your solution in the sandbox. To get access to the production environment, see here.
Sandbox	The sandbox is a test environment. By default, you gain access to the sandbox once you create an Aiia application in our developer portal. The sandbox contains the test bank data for you to play with.
Strong Customer Authentication (SCA)	Strong customer authentication (SCA) is an EU requirement that’s set in place to reduce fraud and to ensure a safe and secure authentication. In this way, the SCA requirement will demand that customers use at least two of the three following authentication measures: 1) Something the customer knows (password or pin); 2) Something the customer has (phone or laptop); 3) Something the customer is (fingerprint or face recognition).
Supervised Login	A supervised login consists of a series of steps that the user needs to perform. A typical example is to enter a username and password as a first step, then a one-time password as a second step.
Technical Service Provider (TSP)	A TSP is an entity that acts purely as an infrastructure provider. Aiia is an example of a TSP.
Test Provider	A test provider is like a third party provider, the institution that delivers data. This could be a bank or another financial institution. In the case of a test provider, this is just a fictional institution that we made for you to test with in the sandbox.
Third Party Provider (TPP)	Short for third party provider, a TPP is a collective term that is used for AIS and PIS providers. If your business is a licensed AIS or PIS provider, your business acts as a TPP.
Transaction Details	Transaction details are the details of a specific transaction. The transaction details usually include information, such as "id", "data", "creationDate", "text", "amount", etc.
Unattended Login	An unattended login is performed without end user interaction (e.g. To do an update of data in the background).