SAMA Open Banking Technical Standards

Version 1.0

Saudi Arabia's open banking technical standards, mandated by SAMA, provide comprehensive API specifications for account information, payment initiation, and data sharing.

View Official Specification →

Key Features

✓AIS, PIS, and CAF API specifications
✓FAPI-aligned security profile
✓Open Banking Lab for testing and certification
✓Comprehensive business rules
✓Customer experience guidelines
✓Vision 2030 alignment
✓Mandatory for all banks and fintechs
✓Expansion toward open finance planned

About SAMA OB Standards

The Saudi Arabian Monetary Authority (SAMA) Open Banking Framework establishes comprehensive technical standards for open banking across the Kingdom. Launched as part of Saudi Arabia's Vision 2030 financial sector development programme, the framework mandates that all banks and fintech companies implement standardised APIs.

The technical standards cover Account Information Services (AIS), Payment Initiation Services (PIS), and Confirmation of Availability of Funds (CAF). The security profile is aligned with FAPI standards, requiring mutual TLS, signed request objects, and robust consent management.

SAMA provides the Open Banking Lab, a dedicated testing environment where banks and fintechs develop, test, and certify their implementations. The framework includes detailed business rules, customer experience guidelines, and operational requirements.

Saudi Arabia's open banking implementation is among the most comprehensive in the Middle East, benefiting from strong regulatory backing and significant investment in financial technology infrastructure. The framework continues to evolve with plans to expand toward broader open finance covering insurance and investment products.

Countries Using SAMA OB Standards

1 country currently implements this standard.

Saudi Arabia

Related Standards

Bahrain OBF→UK OB Standard→FAPI Advanced→

Frequently Asked Questions

What is the SAMA Open Banking Framework?

The SAMA Open Banking Framework is the set of technical standards governing open banking in Saudi Arabia, mandated by the Saudi Arabian Monetary Authority (SAMA). It defines standardised APIs that banks and fintechs implement, as part of the Kingdom's Vision 2030 financial sector development programme.

Which services does the SAMA framework cover?

The framework covers Account Information Services (AIS), Payment Initiation Services (PIS), and Confirmation of Availability of Funds (CAF), along with detailed business rules, customer experience guidelines, and operational requirements.

What security standards does SAMA open banking use?

The SAMA security profile is aligned with the Financial-grade API (FAPI) standard, requiring mutual TLS, signed request objects, and robust consent management to protect customer data.

Who must comply with the SAMA Open Banking Framework?

The framework mandates that banks and fintech companies operating in Saudi Arabia implement its standardised APIs. SAMA also provides the Open Banking Lab, a dedicated testing environment where participants develop, test, and certify their implementations.

Is Saudi Arabia moving toward open finance?

Yes. SAMA's framework is expected to expand beyond open banking toward broader open finance, covering products such as insurance and investments, as the Kingdom's financial data-sharing ecosystem matures.

Looking to get started with open finance?

Fiskil helps financial institutions, fintechs, and enterprises around the world deliver a successful open finance program.