Central Asia's
fintech hub.
One gate for all.
Open API infrastructure for account information and payment initiation, built and operated as a public private partnership with the Central Bank.
Uzbekistan has set out to be the most attractive home for fintech in Central Asia by 2030. One gate into every bank gets it there: banks and fintechs connect once, and the same connection carries supervisory data and AI assisted supervision.
Open API integrator: build the rail, then run it.
We implement the Central Bank's open API standard as working infrastructure: the directory of banks and providers, consent management, a sandbox, and conformance tests that tell each bank exactly what is left to fix.
Under the partnership we operate it as the national integrator. Banks receive a ready compliance layer. Fintechs reach every bank through one API, for account information (AIS) and for payment initiation (PIS).
Strategy priority 5: open banking and open APIsPayment initiation (PIS): pay from any bank account through one API.
With the customer's consent, a licensed provider starts a payment straight from the customer's account at any bank: at the checkout, for a bill, to a supplier.
It runs on the same connection as account information: the same consent, the same authentication, the same audit log.
Strategy priority 5: payment modernisation and interoperabilitySupervisory data: one feed, every report derived from it.
Granular data is pulled from each bank automatically and validated at the source against the rules of the Bank's unified data model.
Ad hoc requests move to the same channel, where they are structured, encrypted and logged. Banks send one feed in place of many forms.
Strategy priority 2: SupTech and data based supervisionAI assisted supervision, compliance included.
Prudential, AML/CFT and consumer protection requirements are encoded as machine readable rules, each linked to its article in the regulation.
The system checks incoming data against all of them, ranks institutions and findings by risk, and drafts each finding with its evidence, in line with Law ZRU-1115.
Strategy priorities 2 and 5: AI detection of financial crime, AI pilotsFour goals, built four times
The strategy asks every bank for four things. Built as four projects, each one needs its own interface, its own security review and its own bill.
Every dot is one integration that one bank has to build and keep running.
Seen from the bank, it is the same link four times
Regroup the same dots by bank and each one shows four separate connections into the same core systems, the same customers and the same transactions.
Three of every four repeat work already done
Identity, consent, encryption, validation and logging are built again for every purpose. The ringed dots are integrations that add cost and risk and no new capability.
Four integrations per bank become one connection
Watch the columns collapse. Each bank connects once, to one secure line that carries identity and consent, standard APIs, validation at the source and a complete audit log.
Account information runs on that line
Fintechs read account data at every bank through one API, with the customer's consent. Banks receive the compliance layer ready made.
Operated under the public private partnership.
So does payment initiation
A payment starts in any licensed app and leaves straight from the customer's account, with the same consent and the same authentication.
Operated under the public private partnership.
Supervisory data arrives on the same line
Reports and requests reach the Central Bank structured, checked and on time, on the Bank's own data model.
Built for the Central Bank.
And every rule is checked across every bank
The system reads the same data against the rulebook and directs attention to where the risk is. A person makes every decision.
Built for the Central Bank.
Who does what
We build and operate the open API infrastructure. The Central Bank sets the standard, licenses and supervises. Banks and fintechs connect once and pay for what they use.
Shared infrastructure, proven elsewhere
Infrastructure of this kind is usually run as a shared utility and funded by the institutions that use it. Uzbekistan's law on public private partnership provides the route: a private initiative, reviewed by the public partner.
Open Banking Limited
The competition authority ordered the nine largest banks to set up and fund one body. It writes the standard, tests conformance and keeps the directory.
Open Finance Brasil
The central bank sets the rules. One directory and one conformance regime, funded by the institutions that take part.
BKM GEÇİT
The open banking gateway built by the Interbank Card Centre under central bank rules. Banks have offered their services through it since December 2022.
Nebras Open Finance
One API hub and one trust framework for the whole market, set up by the central bank's payments subsidiary and built by a technology consortium.
Open Banking System
Built on open APIs by the National Bank's payment corporation. A pilot with five banks ran in 2023.
KFTC open banking platform
One shared platform, run by the interbank clearing institute. A fintech connects once and reaches every participating bank.
Consolidated Audit Trail
A record of every order in the equity and options markets, required by the regulator and funded by a fee per executed share.
MitID
The national digital identity, a partnership of the state and the banks, built and operated by a private company.
AuRep
One reporting platform between the banks and the central bank, owned by the country's largest banking groups.
Aligned with the strategy's three phases
- Partnership concept submitted and agreed
- An AML/CFT supervision pilot with three banks
- The open API standard implemented in a sandbox
- Account information and payment initiation live
- Supervisory reporting by API
- Supervision checks extended to every rule area
- Payment organisations and microfinance institutions on the same line
- A working reference for the region