Area of expertise · Regulatory compliance

PSD2 was the floor. PSD3 raises it — and most teams don't yet know where they stand.

A structured assessment that reads readiness across seven dimensions — licensing, authentication, fraud, data governance and more — and shows where the real gaps sit before PSD3/PSR makes them costly.

  • 3 min
  • 7 dimensions
  • PSD2 & PSD3/PSR
Start the assessment Book a call Send a message

Built on practice, not posts

Why this isn't a generic compliance checklist

Open Banking readiness in the EU and UK isn't a single rulebook. It's licensing, strong customer authentication, fraud liability, data governance and the PSD3/PSR changes now landing — read together, the way a regulator and a partner bank actually see it. This assessment carries that reality, from practice running PSD2 programmes across multiple markets, not a template.

What it assesses

Seven weighted dimensions. The report scores each one, names the gaps, and orders what to fix first.

  1. 1

    Regulatory status

    Licensing, registration, passporting and where the business sits in the authorisation process.

  2. 2

    Technical infrastructure

    Open Banking APIs, standards conformance and the state of the test and production environments.

  3. 3

    Security & authentication

    Strong Customer Authentication, dynamic linking and how exemptions are handled.

  4. 4

    Fraud prevention & liability

    IBAN-name verification, spending limits and the new PSD3/PSR liability for fraud losses.

  5. 5

    Data governance & consent

    The GDPR–PSD2 interplay, consent lifecycle, data minimisation and consumer-dashboard readiness.

  6. 6

    Operational readiness

    Incident reporting, dispute resolution, outsourcing oversight and human customer support.

  7. 7

    Future-proofing (PSD3/PSR)

    Awareness of the trilogue agreement, an adaptation plan and FIDA preparation.

The assessment

Twelve questions across three screens. The report returns an overall score, the seven dimensions with their gaps, prioritised recommendations, how PSD3/PSR specifically affects the profile, and the timeline to watch.

The assessment loads here

The interactive questionnaire runs in the browser and calls a small serverless proxy so the API key stays server-side.

Book a call in the meantime

If PSD3 means replatforming rather than patching what's already in place, the platform migration assessment covers that.

Open the migration assessment →