What is continuous access and why is it limited to 90 days?
This article might be out of date
Please note we've moved to the new Help Center, hence this article might be outdated.
Please visit our new Help Center to access the latest articles.
The Regulatory Technical Standards state that banking institutions have to ensure that Third Party Providers (TPPs) can access linked accounts 90 days post authentication without asking the end user to re-authenticate. This is critical for various applications and use cases that rely on being able to pool in new transactions as they happen, for example, budgeting apps and accounting platforms.
Access to linked accounts is valid for 90 days only because there is a requirement to apply strong customer authentication in accordance to Article 10 of Regulatory Technical Standards (read more about it here). This time-frame applies to all PSD2 APIs and all Third Party Providers that connect to these APIs.