Open Banking is not just about APIs
Open Banking and embedded finance are reshaping the competitive boundary of banking. The technical layer — APIs, data, identity, consent — is necessary but increasingly commoditized. Differentiation has moved to product design, partner ecosystem depth, data monetization and the operating model that sustains commercial relationships at scale.
Context
Most institutions delivered PSD2-style compliance. APIs were published, sandboxes opened and consent management implemented. Few converted that capability into a growth proposition. The compliance investment became sunk cost — regulatory infrastructure that satisfies the regulator and is largely invisible to the partner ecosystem it was meant to enable.
Why compliance APIs do not produce ecosystems
APIs built for regulatory compliance are designed against specification requirements — not against partner needs. Onboarding is manual. Documentation is technical, not commercial. Pricing logic does not exist. Partner economics is undefined. The result is an API estate that is technically open and commercially closed — partners can connect, but the value exchange is unclear.
Ecosystem value comes from partner economics and commercial model design — not from the API specification.
APIs as products — with roadmaps and commercial logic
Each API treated as a product: defined target consumer, articulated value proposition, pricing logic, SLA and development roadmap. Without that discipline, the API estate is a backlog of endpoints — technically available and commercially irrelevant.
Aligned incentives or no partnership at scale
Commercial models — revenue share, fee-per-call, white-label, referral — designed so that partner success and bank success move together. Misaligned models look like growth during the announcement period and reveal their dysfunction at the first significant transaction volume.
Third-party flows as a strategic asset
Aggregated, consented partner-driven flows are a strategic data asset for the bank — provided governance, analytics capability and consent architecture are in place to use them. Data monetization is a program outcome, not a future option.
Built in — not bolted on
Consent flows, data minimization, AML/KYC handoffs and cross-border data governance embedded in the API product by design. As the partner ecosystem scales, the regulatory exposure scales with it — compliance must be structural, not a launch gate.
"Open Banking is not just about APIs. It is about ecosystems. Compliance built the rails — ecosystem strategy is what monetizes them."
— RSV Consult perspective
The choice institutions face now
Either treat the compliance investment as the floor and build an ecosystem strategy on top of it — or accept that the API estate is regulatory infrastructure generating ongoing run cost without revenue. The middle path produces cost without value and strategic drift without a growth alternative.
The API is a product — not an integration point. Commercial design is the differentiator. Compliance built the rails. Ecosystem strategy is what monetizes them.