Arbuthnot Latham & Co., Limited

OB Standards

Implement Open Data v2.2	N/A	Not Implemented
Implement Read/Write API Specification v3.1	06 Jun 2019	Mandatory APIs for AISP and PISP
Implement Customer Experience Guidelines v1.1	06 Jun 2019
Implement App-to-App Redirection		TBC
Implement OB Security Profile Implementer's Draft v1.1.2		TBC
Implement FAPI Profile Implementers Draft 2		TBC
Implement CIBA Profile Implementers Draft 1	N/A	Not Implemented
Implement Dynamic Client Registration v1.1	N/A	Not Implemented
Implement Dynamic Client Registration v3.1		TBC
Decommission Read/Write API Specification v1.x/2.x	N/A	Not Implemented
Decommission OB Security Profile Implementer's Draft v1.x	N/A	Not Implemented

Method of Identification

Commence support for eIDAS QWAC certificates	TBC	Currently being investigated by our TSP
Commence support for eIDAS QSEAL certificates	TBC	Currently being investigated by our TSP
Commence support for OBIE QWAC-like certificates	N/A
Commence support for OBIE QSEAL-like certificates	N/A
Cease support for OBIE non eIDAS-like certificates for transport	TBC
Cease support for OBIE non eIDAS-like certificates for signing	TBC
Support for MTLS token endpoint authentication	TBC	Currently being investigated
Support for private_key_jwt token endpoint authentication	TBC	Currently being investigated
Cease support for client id and client secret token endpoint authentication	N/A

Implementation

Directory?	Open Banking
Location of Well Known Endpoints?	OB Technical Directory
API Standard Implemented?	Open Banking
Name of Account Holder Implementation Date?	TBC
Supported identification method?	TLS 1.2
Major Milestones	TBC
Security Profile?
Security Profile Certification?
CIBA	No
Using Open Banking as your eIDAS Trust Framework?	TBC	Currently being investigated by our TSP
Are you caching the Directory?	No
Transaction IDs	TBC

Customer Journey

Implementing Customer Experience Guidelines?	Yes
Implementing Bespoke User Journeys?	No
Implementing App to App?	TBC	Currently being investigated by our TSP
App to App Implementation Date?	TBC	Currently being investigated by our TSP
Options on 90 day re-authentication?	90 day Re-authentication
Support Embedded Flow?	No

PSD2

Dispute Management System?	Yes
FCA Adjustment Period - Maintaining Screen Scraping?	Yes
Seeking Fallback Exemption?	Yes
Adjusted or Fallback Interface?	No
Adjusted or Fallback URL?	N/A
Contact Email or Phone Number?	TPPsupport@arbuthnot.co.uk	Please use this contact for any queries, issues or support requests.
Dev Portal URL?	https://www.arbuthnotlatham.co.uk/developers/
Test Facility Implementation Date?	02 May 2019
Production Interface Implementation Date?	06 Jun 2019 - Currently Live Proving (Whitelisting in Place)
Contingency Measures
Article 10 - Maximum time period after authentication?
Article 10 - Endpoints exempt of SCA		Not applying Article 10 SCA Exemption
Authentication Method - Open Banking Channel (Browser)?	User Name, Password, OTP on mobile phone
Authentication Method - Open Banking Channel (APP)?	User Name, Password, OTP on mobile phone
Authentication Method - Private Channel (Browser)?	User Name, Password, Memorable word
Authentication Method - Private Channel (APP)?	Biometric or PIN and Registered device
Authentication Method Implementation Date (Open Banking Channel)?	Live
Authentication Method Implementation Date (Private Channel)?	Live	Moving to OTP in line with Adjustment Period
SCA Implementation Date?	To Align with Adjustment Period
SCA Scope? (will it inhibit non PSD2 accounts)	Yes in Online Banking but Non PSD2 accounts wil not be available for Open Banking.

Key Implementations

High Cost Credit	TBC