Terms of Access and Use for TPPs

Salt Edge Compliance Platform

Last Updated: October 21, 2026

Salt Edge Compliance Platform is the online technology platform developed by Salt Edge Inc., which supplies dedicated interfaces to account servicing payment service providers (“ASPSPs”) which, depending on the scope contracted by the respective ASPSPs, can offer access to payment accounts to third party providers’ customers (“Users”) who hold a payment account accessible online with the respective ASPSP, in order to provide them with (i) payment initiation services (“PIS”), (ii) account information services (“AIS”), or (iii) confirmation of funds (“CoF”) as such terms are defined by, and such access made available in accordance with, the EU Directive 2015/2366 on payment services in the internal market (“PSD2”) and/or the Payment Services Regulations 2017 (“PSR2017”).

These Terms of Access and Use for TPPs (the “Terms”) are made available by Salt Edge Inc. on behalf of, and based on the instructions of, the relevant ASPSP, established in the European Economic Area (EEA) or the United Kingdom of Great Britain and Northern Ireland (UK). The Salt Edge Compliance Platform is designed to not create obstacles to the provision of payment initiation and account information services. The purpose of these Terms is to ensure a safe and orderly use of the Salt Edge Compliance Platform and to lay out applicable mandatory legal requirements and other essential terms for access and use of the Salt Edge Compliance Platform.


1. SALT EDGE COMPLIANCE PLATFORM

The Salt Edge Compliance Platform provides:

  1. a unified API gateway in live environment (the “Salt Edge Compliance SaaS”) designed in compliance with PSD2/PSR2017 requirements to enable TPPs’ access to Users’ payment accounts held with the ASPSP, via a dedicated interface;
  2. dashboard for TPP with various management tools (incident reporting and monitoring of dedicated interface availability, view of User consents given in accordance with PSD2/PSR2017);
  3. a testing environment for TPP Application integration with Salt Edge Compliance SaaS, functional testing and subsequent maintenance and support (the “Sandbox”);
  4. detailed documentation for integration with Salt Edge Compliance SaaS with examples in various languages;
  5. onboarding technical support during integration of TPP Application with Salt Edge Compliance SaaS and testing;
  6. followup technical support during TPP’s use of the Salt Edge Compliance Platform.

2. CONDITIONS OF USE OF THE SALT EDGE COMPLIANCE PLATFORM BY TPPs

2.1. Purpose. Salt Edge Compliance SaaS is made available to payment initiation service providers (“PISP”), (ii) account information service providers (“AISP”), or (iii) payment service providers issuing card-based payment instruments (“PIISP”, together with PISPs and AISPs, “TPPs”) on behalf of the ASPSPs for the express purpose of providing PIS, AIS, and/or CoF to TPP’s Users. Provision by TPP of AIS, PIS or CoF from the Sandbox is prohibited.

2.2. TPP Registration/Authorisation. In order to access and use the Salt Edge Compliance Platform as set out in these Terms, TPP must hold a valid registration or authorization as AISP or PISP or PIISP by the relevant supervisory authority or regulatory body in TPP’s jurisdiction, in accordance with PSD2/PSR2017, except that the Sandbox may be also used by TPPs pending such authorization or registration.

2.3. Use via TPP Application. TPP may only access and use the Salt Edge Compliance Platform through the TPP Application. In the meaning of these Terms, a “TPP Application” means the web, desktop and/or mobile application or other platform provided, managed and controlled by or on behalf of the respective TPP for the purpose of providing PIS, AIS and/or CoF to Users.

2.4. PSD2/PSR2017 Certificates: In order to use the Salt Edge Compliance Platform, TPP requires valid, PSD2-/PSR2017-compliant, soft-token (i) qualified certificate for electronic seals (QSealC/OBSealC) and (ii) qualified web application certificate (QWAC/OBWAC), or, as may be permitted by applicable legislation, other form of identification issued by an independent third party that is not unduly burdensome for payment service providers to obtain (either of these, a “TPP Certificate”), issued as per requirements of the Regulation (EU) No. 910/2014 on electronic identification and trust services for electronic transactions in the internal market (EU eIDAS Regulation) and the Regulation (EU) 910/2014 on electronic identification and trust services for electronic transactions in the internal market as amended by the Electronic Identification and Trust Services for Electronic Transactions (Amendment etc.) (EU Exit) Regulations 2019 (UK eIDAS Regulation).

The Sandbox also supports PSD2/PSR2017 test certificates. TPP must provide reasonable advance written notice to Salt Edge about any impending expiration, revocation or other cancellation of a TPP Certificate and must immediately stop any access to and use of Salt Edge Compliance SaaS as soon as the TPP Certificate expires, is revoked or otherwise canceled. Salt Edge may immediately suspend TPP’s access to, and use of, Salt Edge Compliance SaaS, if a TPP Certificate is no longer valid, which suspension shall remain in effect until TPP provides a valid replacement or renewal thereof.

2.5. User Consent. To use the Salt Edge Compliance SaaS to provide AIS and/or PIS and/or CoF, as applicable, TPP must, prior to the provision of such services, obtain Consent from relevant User as required by PSD2/PSR2017 and transmit the details of the Consent, including without limitation scope, timestamp and, if applicable, validity period, to Salt Edge. TPP shall be solely responsible for implementing the procedure by which Users shall be able to give and withdraw Consent in accordance with PSD2/PSR2017 and of verifying the authenticity of such Consent. If User withdraws Consent directly with TPP, TPP shall immediately: (i) stop any use of the Salt Edge Compliance SaaS for the purpose of accessing such User’s payment account; and (ii) notify Salt Edge of such User’s withdrawal of Consent. For the purposes of this Section, “Consent” means any freely given, specific, informed and unambiguous indication of User’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the actions to be performed by an AISP, PISP or PIISP for the purpose of providing AIS, PIS, or CoF, respectively, to User.


3. SANDBOX

Integration and Testing: TPP may, in its own discretion, test the TPP Application in the Sandbox before beginning using the Salt Edge Compliance SaaS in live mode. Provision by TPP of AIS, or PIS or CoF from the Sandbox is prohibited.


4. ACCESS TO THE SALT EDGE COMPLIANCE PLATFORM

4.1. Identification: TPP shall identify itself with the TPP Certificate towards the Salt Edge Compliance Platform for each communication session (in the case of AISP and PIISP), and/or payment order initiation (in the case of PISP).

4.2. AISP Access Terms: Without prejudice to other conditions set out in these Terms of applicable laws, AISP shall be able to access User’s payment account data from designated payment account(s) through the Salt Edge Compliance SaaS for the purpose of providing AIS to User in either of the following circumstances:

  1. whenever the User is actively requesting such information; or
  2. where the User does not actively request such information, no more than four (4) times in a twenty-four (24) hour period.

AISP shall make unambiguous references to the User requesting AIS and the corresponding communication session in order to distinguish several requests from the same User.

4.3. PISP Access Terms: Without prejudice to other conditions set out in these Terms of applicable laws, PISP shall be able to access the User’s designated payment account(s) through the Salt Edge Compliance SaaS for the purpose of providing PIS each time the User requests such a service from PISP. PISP shall make unambiguous references to the User requesting PIS and the corresponding communication session in order to distinguish several requests from the same User.

4.4. PIISP Access Terms: Without prejudice to other conditions set out in these Terms of applicable laws, PIISP issuing card-based payment instruments with the ASPSP shall be able to obtain a CoF when:

  1. the User has explicitly requested CoF;
  2. the User has initiated the card-based payment transaction for the amount in question using a card based payment instrument issued by the PIISP; and
  3. the request contains unambiguous references to the (i) User and the corresponding communication session in order to distinguish several requests from the same User, and (ii) uniquely identified request related to the amount necessary for the execution of the card-based payment transaction.

4.5. Strong Customer Authentication: Where applicable, TPP’s access to User’s payment account through the Salt Edge Compliance SaaS shall be conditional upon successful User’s authentication through the strong customer authentication mechanism implemented by the ASPSP in accordance with PSD2/PSR2017. In such cases, TPP’s access to User’s payment account through the Salt Edge Compliance SaaS shall be subject to the following restrictions:

  1. maximum five (5) minutes of User inactivity after authenticating to access its payment account, after which such access request shall no longer be valid; and
  2. maximum five (5) consecutive failed authentication attempts by User within a given period of time, following which User’s attempts to access its payment account or to initiate an electronic payment transaction shall be temporarily or permanently blocked in accordance with ASPSP’s transaction monitoring mechanisms. User shall be alerted before the block is made permanent.

4.6. Changes in Access Requirements: Salt Edge may apply from time to time changes in access requirements in order to comply with security requirements or changes in the applicable laws, with reasonable advance written notice given to TPP, where feasible.


5. AVAILABILITY, SECURITY AND STABILITY

5.1. Temporary Unavailability and Suspension: Due to technical, maintenance, security, emergency, regulatory, administrative or other objective reasons beyond the reasonable control of Salt Edge, Salt Edge may, in its sole discretion and for such periods as it will reasonably determine, suspend availability of the Salt Edge Compliance Platform or parts thereof, and/or TPP's access to, and/or use of, the Salt Edge Compliance Platform. Salt Edge will provide advance notice to TPP with respect to such suspension whenever feasible.

5.2. Blocking and Denial of Access: Salt Edge may also at any time deny, suspend or end access to the Salt Edge Compliance Platform to TPP:

  1. in the event of enforcement by competent authorities, a regulatory requirement or termination of the contractual relationship of Salt Edge with the ASPSP;
  2. if requested by the ASPSP;
  3. if TPP has been found to be in violation of these Terms or applicable mandatory laws;
  4. if either of the TPP Certificates of the relevant TPP has been cancelled, revoked, has expired or become otherwise invalid;
  5. if TPP’s license, registration or authorisation has expired or been revoked;
  6. if TPP’s use of the Salt Edge Compliance Platform is prohibited under applicable laws;
  7. if TPP’s use of the Salt Edge Compliance Platform, including any automated uses, adversely impacts the Salt Edge Compliance Platform and its use and enjoyment by other users thereof, is abusive or disruptive or places an undue burden on Salt Edge’s technical infrastructure, systems or networks.

Salt Edge shall have no responsibility or liability for any losses, lost profits, potential lost business opportunities, liabilities or damages that might arise in relation to Salt Edge’s blocking or denial or suspension of TPP’s access to the Salt Edge Compliance Platform.

5.3. Notification of Security Incident: Salt Edge and TPP shall notify each other promptly of any security breach or suspected security breach (“Security Incident”) of the TPP Application (in the case of TPP) and the Salt Edge Compliance Platform (in the case of Salt Edge), in order to allow the other to: (i) take reasonable preventive action; and/or (ii) meet any applicable regulatory requirements.

5.4. Cooperation: TPP shall:

  1. diligently and promptly correct any errors, bugs or faults in the TPP Application that cause the TPP Application to incorrectly access the Salt Edge Compliance Platform, and notify Salt Edge of the same.
  2. notify Salt Edge promptly of any significant changes TPP has identified or been made aware of with respect to Salt Edge Compliance Platform availability and/or performance;
  3. notify Salt Edge promptly of any deficiencies, errors, malfunctions or any other problems TPP has identified or been made aware of with respect to Salt Edge Compliance Platform.
  4. notify Salt Edge promptly of any suspected or actual fraudulent User’s behavior or other suspicious activity or illegal actions attributed to User in connection with the use of AIS and/or PIS, as applicable, provided by TPP via the TPP Application by means of the Salt Edge Compliance Platform.

6. TPP OBLIGATIONS

6.1. TPP shall, to the extent permitted by applicable laws, notify Salt Edge promptly of any inquiries or complaints relating to the Salt Edge Compliance Platform submitted by a supervisory authority or regulator.

6.2. Without limiting any other TPP’s obligations set forth in these Terms, TPP shall not (nor allow any third party to), either directly or indirectly:

  1. use TPP Application and/or access and use the Salt Edge Compliance Platform or any part thereof for any unlawful or fraudulent purpose or otherwise in breach of these Terms;
  2. breach or circumvent any authentication or security mechanisms or other user limits or restrictions that are built into the Salt Edge Compliance Platform or otherwise try to have or actually obtain any unauthorized access to the Salt Edge Compliance Platform;
  3. meddle with, disturb, destroy the networks, connections, systems or other Salt Edge assets or services or engage in any behavior that could disrupt, harm the technical infrastructure of the Salt Edge Compliance Platform;
  4. transmit any malware, disruptive or harmful software or data to the Salt Edge Compliance Platform;
  5. engage in any activities that would bring Salt Edge and/or the Salt Edge Compliance Platform into disrepute.

7. PERSONAL DATA PROTECTION

7.1. “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

7.2. For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), and the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation), as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (“UK GDPR”) the TPP and the ASPSP act as independent controllers of Users’ Personal Data and Salt Edge acts as processor appointed by the respective ASPSPs in respect of processing (i) Users’ Personal Data for the purpose of providing services to such ASPSP, and (ii) TPP’s Authorized Personnels’ Personal Data when accessing the Salt Edge Compliance Platform and its components.


8. PROPRIETARY RIGHTS AND RESTRICTIONS

8.1. Reservation of Rights by Salt Edge: All right, title and interest in and to the Salt Edge Compliance Platform and the underlying technology and data, including any and all intellectual property rights therein, under any applicable law, is and shall remain the property of Salt Edge. “SALT EDGE” and all other trademarks, service and product names, marks, logos and graphics used in connection with the Salt Edge Compliance Platform are trademarks of Salt Edge. Salt Edge does not grant any right or license to TPP under these Terms to reproduce or otherwise use Salt Edge’s trademarks, service and product names, marks, logos and graphics.

8.2. License Grant: Subject to and in accordance with these Terms, solely to the extent that Salt Edge allows TPP to access and/or use the Salt Edge Compliance Platform, Salt Edge hereby grants TPP a limited, non-assignable, non-transferable, revocable, non-sublicensable, individual and non-exclusive license and right to access and use the Salt Edge Compliance Platform for the purposes set forth in Section 2.1. The license granted hereunder to the TPP shall end upon TPP’s discontinuance of the use of the Salt Edge Compliance Platform for any reason.

8.3. Restrictions: TPP shall use the Salt Edge Compliance Platform solely as contemplated in these Terms. TPP shall not (and will not allow any third party, including without limitation Users, to), either directly or indirectly:

  1. disseminate, license, sell, lease, transfer, assign, distribute the Salt Edge Compliance Platform or any element thereof or otherwise make the Salt Edge Compliance Platform available to any third party, including through application hosting service;
  2. copy, modify, translate, reverse engineer, decrypt, decompile, decode, disassemble, create derivative works based on, or copy any ideas, features, functions or graphics of, the Salt Edge Compliance Platform or the underlying technology, undertake any benchmark trials using all or any part of the Salt Edge Compliance Platform, or try to procure the human decipherable form thereof;
  3. remove or obliterate any proprietary notices or marks from the Salt Edge Compliance Platform;
  4. access the Salt Edge Compliance Platform in order to build a competitive product;
  5. include any material in the TPP Application that would suggest that the TPP Application has been reviewed or endorsed by Salt Edge.

9. CONFIDENTIALITY AND DATA OWNERSHIP

9.1. Confidential Information: All information relating to, contained in, or operated by means of the Salt Edge Compliance Platform is deemed confidential, unless it is generally known to the public, and TPP shall not disclose or use such information other than (i) for the purposes set forth in Section 2.1; (ii) where compelled by applicable law; or (iii) as otherwise expressly permitted by these Terms. In the event of any impending compelled disclosure of information, TPP shall, to the extent permitted by applicable law, promptly notify Salt Edge thereof in writing and reasonably assist Salt Edge in taking action to oppose such disclosure.

9.2. Metadata Ownership: Salt Edge retains ownership of all ancillary information, usage data, service data, relationships, trends, metrics, logs and all other information derived from the use of the Salt Edge Compliance Platform by TPP (hereinafter all such data is referred to as “Metadata”). Salt Edge shall at all times ensure that it does not use Metadata capable of identifying an individual User for any purpose other than the provision of the intended Salt Edge Compliance Platform services and related internal (support, management, audit) and regulatory compliance uses. Nothing in these Terms, including this Section, shall restrict Salt Edge from using any Metadata in anonymized and aggregated form at any time and for any purpose, including without limitation sharing such anonymous aggregate Metadata on a commercial basis. In Salt Edge’s sole discretion, TPP may be entitled to internally use Metadata solely to improve TPP’s services, provide technical assistance and for troubleshooting.

9.3. Feedback: Salt Edge may freely use any suggestions, comments, ideas, improvements, information or other feedback (collectively, “Feedback”) TPP may provide in connection with the Salt Edge Compliance Platform and its use. TPP hereby grants Salt Edge a perpetual, worldwide, fully transferable, sub-licensable, non-revocable, royalty-free right and license to use, disclose, copy, distribute, exploit and license the Feedback in any form and manner for any business purpose and at any time. Salt Edge may put TPP’s Feedback to various uses, that may include but are not limited to modifying and improving the Salt Edge Compliance Platform, Salt Edge’s other current and future services/products, service advertising and marketing materials. Salt Edge reserves the right to incorporate TPP’s Feedback into the Salt Edge Compliance Platform and if so incorporated, the Feedback shall form part thereof and shall become Salt Edge’s intellectual property.


10. NO CONTRACT. WARRANTY AND LIABILITY DISCLAIMER

10.1. In terms of PSD2/PSR2017, Salt Edge acts as a third party service provider to whom the ASPSP has outsourced the provision of certain operations and functions, in particular, the provision of access to payment accounts through a dedicated interface. The Salt Edge Compliance Platform is made available to the TPP on behalf of the ASPSP and notwithstanding any implication to the contrary herein, these Terms do not amount to a contract for services or any other kind of contract between Salt Edge and the TPP.

10.2. Notwithstanding anything to the contrary herein, these Terms do not confer on the TPP any rights, entitlements, remedies or recourse, exercisable or enforceable directly against Salt Edge, and do not impose on Salt Edge obligations or liabilities owed directly to the TPP. Should any court of competent jurisdiction nevertheless establish that these Terms gave rise to such rights, entitlements, remedies or obligations, Salt Edge shall be entitled to rely on, and invoke against the TPP, all relevant disclaimers and limitations of liability set out in these Terms and in Salt Edge’s agreement with the ASPSP, whether or not TPP was aware of the terms of such agreement upon accessing and/or using the Salt Edge Compliance Platform and/or upon laying any claims against Salt Edge.

10.3. WITHOUT PREJUDICE TO THE PROVISIONS OF SECTION 10.2 AND TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAWS:

  1. SALT EDGE MAKES NO REPRESENTATIONS OR WARRANTIES WHATSOEVER TO THE TPP, WHETHER EXPRESS OR IMPLIED, IN FACT OR BY OPERATION OF LAW, BY STATUTE OR OTHERWISE, IN RESPECT OF THE FUNCTIONALITY AND USE SALT EDGE COMPLIANCE PLATFORM, ITS FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. SALT EDGE DOES NOT WARRANT THAT THE SALT EDGE COMPLIANCE PLATFORM AND ANY SERVICES AND INFORMATION DELIVERED THROUGH SALT EDGE COMPLIANCE PLATFORM WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, COMPREHENSIVE, COMPLETE, ACCURATE AND UP-TO-DATE OR THAT ALL ERRORS IN THE SALT EDGE COMPLIANCE PLATFORM AND ANY SERVICES AND INFORMATION DELIVERED IN THE SALT EDGE COMPLIANCE PLATFORM CAN BE FOUND OR CORRECTED;
  2. SALT EDGE SHALL HAVE NO RESPONSIBILITY OR LIABILITY TO THE TPP FOR ANY LIABILITIES, COSTS, EXPENSES, INCLUDING LEGAL FEES, LOSSES, LOST PROFITS, POTENTIAL LOST BUSINESS OPPORTUNITIES OR DAMAGES THAT MIGHT ARISE IN RELATION TO ACCESSING AND/OR USING THE SALT EDGE COMPLIANCE PLATFORM OR OTHERWISE BY VIRTUE OF THESE TERMS;
  3. IN NO EVENT SHALL SALT EDGE AND ITS LICENSORS AND/OR SUPPLIERS BE LIABLE TO TPP FOR ANY SPECIAL, INCIDENTAL, PUNITIVE, EXEMPLARY, INDIRECT, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF BUSINESS, LOSS OF PROFITS, BUSINESS INTERRUPTION, LOSS OF DATA, LOST SAVINGS OR OTHER SIMILAR PECUNIARY LOSS) ARISING UNDER ANY THEORY OF LIABILITY, WHICH TPP OR ITS CUSTOMERS, USERS, AFFILIATES, PARENT COMPANIES, ASSOCIATES, AGENTS, OFFICERS, DIRECTORS OR EMPLOYEES MAY INCUR OR SUFFER IN CONNECTION WITH THESE TERMS OR WITH ACCESSING AND/OR USING OR INABILITY TO ACCESS OR USE THE SALT EDGE COMPLIANCE PLATFORM, EVEN IF SUCH DAMAGES ARE FORESEEABLE OR SALT EDGE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES; AND
  4. SALT EDGE’S AGGREGATE LIABILITY TO TPP FOR ALL CLAIMS WHATSOEVER RELATING TO THESE TERMS REGARDLESS OF THE FORM OF ACTION, SHALL NOT EXCEED ONE THOUSAND (1,000) EUROS.

10.4. TPP is solely responsible for any liability arising from any act or omission of the TPP and from TPP’s provision of any products or services (including, without limitation, AIS, PIS, or CoF, as applicable) by accessing and/or making use of the Salt Edge Compliance Platform, and in particular, without limitation, for any liability arising from TPP’s processing of Personal Data acquired or accessed through the Salt Edge Compliance Platform, from any breach of security due to TPP’s fault, whether or not leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data, and from any unauthorized or fraudulent actions and operations initiated or performed through the Salt Edge Compliance Platform.


11. MISCELLANEOUS

11.1. Headings and References: The headings and captions used in these Terms are used for convenience only and are not to be considered in construing or interpreting these Terms.

11.2. Amendment: Salt Edge reserves the right to amend these Terms at any time and from time to time. In case if the modifications are material, Salt Edge shall provide thirty (30) days’ advance notice to TPP by email or Salt Edge Compliance Platform. The new Terms shall become effective once they are posted on the Salt Edge website https://priora.saltedge.com/pages/tpp_terms_of_service or otherwise in the amended Terms. The date of the last update of these Terms is set out at the top of this document.