OP bank connectivity for software
ISECure brings OP corporate payments into your software product as a single API. We handle the Web Services connection, certificates, and file traffic so you can focus on your own product.
OP corporate payments for software
OP offers corporate file traffic through the Web Services channel: machine-readable statements, incoming reference payments, and SEPA payment initiation. The connection is based on PKI certificates and signed messaging.
Through ISECure your software gets these services via one REST API, without building an OP-specific integration or maintaining certificates.
- Machine-readable statements in camt.053 format
- SEPA payments with pain.001 and payment feedback with pain.002
- Incoming reference payments and file retrieval
- Certificate enrollment, renewal, and storage handled by ISECure
One integration, every bank
The same ISECure API covers, besides OP, also Nordea, Danske Bank, S-Pankki, Ålandsbanken, and — via Samlink and Crosskey — Handelsbanken, Aktia, POP Bank, Savings Bank, and OmaSP. Integrate once and you get every Finnish bank.
Private keys are stored with AWS KMS encryption in a PCI DSS level environment, separate from your software team.
How to get started
You need a Web Services agreement with OP and its related services. ISECure provides a test API for development and guides certificate enrollment; moving to production uses the same interface.