The GFT Open API Framework (OAF)
As a serverless architecture running on AWS, OAF offered a fast, proven way to build, manage and share APIs safely and securely. Key components include:
- API Gateway to manage APIs systematically and automatically with integration and control through a single interface
- AWS Web Application Firewall to ensure safe accesses, avoid a wide variety of cyberattacks and to protect endpoints with mechanisms recognised by international security regulations
- AWS Kinesis Firehose to view, monitor and control API consumption in real-time, facilitating ticketing, indicators and visualisation of usage trends
- KMS and Secrets Manager ensures all credentials used by the solution are stored securely, whilst the AWS Key Management Service guarantees the creation and management of cryptographic keys
The OAF solution had been continually proven in several harsh commercial environments, so GFT was confident that Bank Leumi would be able to meet its objective of releasing new APIs frequently but in a controlled manner.
Although the initial regulatory requirement in Israel was for seven APIs to facilitate data sharing and account aggregation, Bank Leumi’s business strategy was to expose hundreds of APIs across a range of banking and cyber activities.
From the outset, both companies worked shoulder-to-shoulder, with weekly progress meetings. GFT had a dedicated team of up to 14 specialists, working in two-week sprints.
A vibrant fintech community
FinTeka, powered by Leumi, heralds a new dawn for Open Banking in Israel. The new platform was built in 8 months and so far 16 compliance certificates have been launched to individual fintechs.
Fintechs have ready access to a sandbox developer environment which is certified by Bank Leumi. They are able to consume APIs, develop new customer proposals and achieve regulatory compliance in parallel. This shortens time-to-market and simplifies evaluation and prioritisation of business proposals.
Open Banking regulation in Israel is following a similar pattern to the UK’s Open Banking initiative, which began in 2017. Whilst initial requirements in both jurisdictions were to empower customers with aggregated account data across multiple banks, the business opportunity is really to transform innovation and service delivery. Bank Leumi has already taken Open Banking to the next level, with loans and savings information and digital identification services for customers, for example with insurance disbursements.
With over 2,000 developers involved, Bank Leumi has created a digital ecosystem for extensive fintech collaboration. New APIs are added constantly, building a rich service portfolio and an expanding pool of Open Banking talent that benefits everyone.
A huge ‘congratulations’ are in order to everyone from the team at GFT for making this project such an overwhelming success. This includes the experienced UK retail banking team who made a significant contribution!