Westara

Is the bank connection safe?

In short

Yes. The bank connection is a licensed account information service (AIS): it reads balances and transactions and can't move money.

Who's involved

  • You grant access at your bank, with the same PIN and app/TAN as in your online banking.
  • Your bank keeps your login and your money.
  • finAPI, an account information service provider (AISP) supervised by BaFin (Germany's financial regulator), talks to your bank's official interface.
  • Westara isn't the AISP. After reading, Westara stores the approved account list, IBAN and holder (if the bank provides them), balances and booked rows in your workspace. No bank passwords, PINs or TANs.
  • finAPI sees the raw transactions in order to read them. The bank connection isn't hidden from a third party.

What happens

  1. You pick your bank and the account types (current and savings by default).

  2. You confirm at your bank.

  3. The bank grants time-limited consent, typically about 90 days.

  4. You match the bank products to Westara accounts.

What never happens

No payments, standing orders or limit changes. Those would need a separate payment consent, and Westara doesn't use one.

You stay in control

You can remove the bank connection at any time or revoke access in your online banking. Consent expires after about 90 days and has to be renewed.

Watch out for fraud

Only connect from the signed-in app. A genuine flow never asks for your PIN or TAN by email or text message.

File import (CSV or CAMT) is a private route: no AISP reads along.

Was this helpful?

Related articles

Still have questions?

Tell us briefly what it’s about. We reply by email.

Email support@westara.io