Open Banking Financial Institutions and Consent Validation

📘

Last Updated: September 16, 2024
Note: This page is constantly evolving and is updated as needed.

As a reminder, each financial institution has their own policy for consent validation. This means that tokens they issue (which govern access) may have an expiration which requires the account holder to re-authenticate periodically to refresh their consent choices. This approach aligns with best practices for secure data access and consumer protection, providing users with control over their financial data while ensuring compliance with financial data-sharing standards.

Financial Institution (FI)FI IDSupported Access/Login TypeProvider Token Expiration Times - How often account holders will need to re-validate consent
Allianz Life112966Advisor: Yes
Delegate: Yes*
Investor: Yes
none (consent is rolling with aggregation)
Bank of America113012Advisor: No
Delegate: No
Investor: Yes
none (consent is rolling with aggregation)
Citi116252Advisor: No
Delegate: No
Investor: Yes
365 days
Charles Schwab112126Advisor: Yes **
Delegate: Yes
Investor: Yes
none (consent is rolling with aggregation)
Chase112151Advisor: Yes
Delegate: Yes ***
Investor: Yes
none (consent is rolling with aggregation)
Empower Retirement - Your Retirement Plan - Participant113078Advisor: No
Delegate: No
Investor: Yes
none
Fidelity Investments113552Advisor: Yes****
Delegate: Yes
Investor: Yes
Fidelity tokens expire after 360 days. Currently Fidelity has a known issue where consent does not restart if done in advance so accounts will fail again needing reconsent after the original 360 day date. Fidelity is working on the issue but has cautioned that users let their tokens fully expire and relink the account by going through the consent process anew after the accounts fail to aggregate due to the expired token.
KeyBank - Online Banking116648Advisor: No
Delegate: Yes
Investor: Yes
2 years
PNC Bank113721Advisor: Yes
Delegate: Yes Investor: n/a
365 days
TIAA-CREF115824Advisor: No
Delegate: No
Investor: Yes
90 days
Transamerica113658Advisor: No
Delegate: No
Investor: Yes
None
U.S. Bank112341Advisor: Yes
Delegate: Yes
Investor: Yes
none (consent is rolling with aggregation)
Voya Financial - Participant Retirement113761Advisor: No
Delegate: No
Investor: Yes
none (consent is rolling with aggregation)

*Allianz only supports aggregation for Advisors, Investors or Delegates of a Financial Professional. Delegates of clients are not supported.

**Advisors with institutional access should use "Charles Schwab Institutional - SFTP".

***Authorized Owners must select “Third Party Access” on the Chase Access Manager page in order for the Authorized User to be able to aggregate data from the API.

****Advisors with institutional access should use "Fidelity IWS - FTP Access".