The Saudi Central Bank’s open banking framework, launched in 2024, represents a transformational shift in the Kingdom’s financial services architecture. By mandating that licensed banks expose account and transaction data through standardized APIs — with customer consent — the framework has created a new layer of financial innovation that was previously impossible.
Regulatory Architecture
SAMA’s framework establishes three categories of licensed third-party providers: Account Information Service Providers (AISPs) that can read bank account data, Payment Initiation Service Providers (PISPs) that can initiate payments from bank accounts, and Combined Service Providers that can perform both functions.
All third-party providers must obtain SAMA licensure, implement strong customer authentication mechanisms, maintain minimum cybersecurity standards certified by the NCA, and demonstrate adequate capital reserves and professional indemnity insurance.
API Standards
The framework mandates a standardized API specification based on the UK Open Banking Implementation Entity model but adapted for Saudi regulatory requirements and Arabic language support. Banks must offer APIs for account balance queries, transaction history, payment initiation, and standing order management.
API performance requirements include 99.5% monthly uptime, maximum 2-second response times, and support for real-time transaction notifications. Banks that fail to meet performance standards face regulatory sanctions.
Early Market Response
Within 18 months of launch, 34 third-party providers have obtained SAMA licenses. Use cases include personal financial management applications that aggregate accounts across multiple banks, automated savings products that sweep excess balances into high-yield accounts, credit scoring alternatives that use transaction history to assess creditworthiness, and B2B payment automation platforms that streamline corporate treasury management.
Consumer Adoption
Consumer adoption of open banking services has reached 4.2 million users, representing approximately 12% of the adult banking population. Adoption is highest among the 25-35 age demographic, where 28% of bank customers have connected at least one third-party application to their bank accounts.