• 01 Foundations. Conformance tooling and standards work inside the Open Banking Implementation Entity, used across all nine CMA9 banks.
  • 02 Connection. Platform architecture for an open banking vendor and a real-time credit bureau built on consented transaction data.
  • 03 Intelligence. Machine learning that turns transaction feeds into affordability, risk and financial-health signals.

We helped build the foundations of UK Open Banking. Now we engineer what comes next.

A specialist financial-technology consultancy. Open Banking, financial data, digital identity and applied machine learning, since 2014.

  • Established2014, United Kingdom
  • Open BankingWorking with the UK programme since 2017
  • Financial intelligenceMachine learning on transaction data since 2021

01 Expertise

Four disciplines, one specialism: the infrastructure and intelligence of connected finance.

We work where Open Banking, financial data, digital identity and machine learning meet. Each discipline is delivered by senior engineers who have shipped it in production.

01

Financial intelligence

Machine learning applied to the data connected finance produces: categorisation, affordability, risk and financial health.

Learn more

02

Connected finance

Open Banking, Open Finance and payments infrastructure, from the API surface to the consent model behind it.

Learn more

03

Trust and identity

The authentication, authorisation and security profiles that make financial data sharing safe.

Learn more

04

Platform engineering

Cloud-native architecture and senior engineering leadership: the foundation the other three stand on.

Learn more

02 Heritage

We helped build UK Open Banking, from the standard to the banks.

Webovate's founder was part of the Open Banking Implementation Entity's technical team from the early years of the programme, leading the conformance product every CMA9 bank was tested against. Every platform we have built since stands on that foundation.

  1. 2014

    Founded

    Webovate Ltd is founded on fourteen years of industry experience in payments, digital identity and platform engineering: from building early online payment gateways and PCI DSS-compliant systems to cloud platforms serving millions of users for Samsung, HTC and the NHS.

  2. 2015

    Civic technology

    Technical lead on CTZN with Gencia Media: a youth social-impact platform trialled by more than 120 organisations across Greater Manchester and recognised with awards including Digital Entrepreneur of the Year.

  3. 2016

    Machine learning, early

    Consultant architect to DigitalBridge, an award-winning computer-vision and machine-learning company building room visualisation tools for retailers. Webovate was contracted as the second engineer in the business and for a period the only one, designing the API and cloud architecture through a growth phase that included a John Lewis accelerator win and NVIDIA’s most innovative machine-learning start-up award, before the company grew an engineering team of its own.

  4. 2017

    The beginning of UK Open Banking

    In 2017, within months of the Read/Write standard’s first release, Webovate built one of the first Python connectors for it. Unknown to Webovate, it was already in use by the first team helping the Open Banking Implementation Entity get started, the body set up by the banks to deliver the standard. In December 2017 the manager running that team invited Webovate to interview, and the company joined as a consultant: first in support, then quickly into the architecture team working on the Read/Write APIs, and from there to leading conformance tooling for the CMA9.

  5. 2018

    Conformance for the CMA9

    Webovate leads the OBIE conformance product for the CMA9: ownership and delivery of the tools that tested all nine mandated banks against the standard as it moved through the 3.1.x releases, with workshops every two weeks in London with Barclays, HSBC, Lloyds Banking Group, NatWest, Santander, Nationwide, Danske Bank, AIB and Bank of Ireland, plus the reference applications and certification programme.

  6. 2020

    Payments and platforms

    After the OBIE work, Webovate is contracted by Ozone API for a short full-time engagement, delivering the platform’s first payment integrations, beginning with Stripe, and the architecture for an international open banking rollout in the Middle East.

  7. 2021

    A credit bureau from the first commit

    Webovate is engaged as AperiData’s engineering partner and Open Banking specialist from the company’s foundation, before it held any permissions: the platform that supported FCA authorisation as an account information service provider and, as the business grew into a real-time credit bureau, everything underneath it: Open Banking connectivity, the categorisation engine, income and expenditure modelling and affordability analysis.

  8. 2024

    Financial intelligence at scale

    The categorisation and affordability work matures into production decisioning across the lending lifecycle. PayPoint makes a strategic investment in AperiData.

  9. 2026

    Intelligent, connected finance

    PayPoint completes its acquisition of AperiData, and the platform and categorisation engine Webovate was engaged to build now serve a listed payments group. Commercial variable recurring payments go live in the UK and the FCA sets out its Open Finance roadmap. Working with AperiData, Webovate begins applying language models to categorised financial data.

  10. Today

    What we are building now

    Continuing as AperiData’s engineering partner, now within the PayPoint Group, on categorisation and financial-health intelligence; Open Finance and Smart Data readiness for clients; and the Lab: financial health from consented data, Open Banking for accountancy, and machine learning for rider safety.

Our story and timeline

03 Work

Infrastructure that regulators, lenders and banks rely on.

Two of eight engagements that show how the disciplines combine, from national conformance to a credit bureau built on Open Banking data.

OBIE conformance · CMA9 · v3.1.x example certification run SecurityAccountsPaymentsDCRFunds ASPSP 01 ASPSP 02 ASPSP 03 ASPSP 04 ASPSP 05 ASPSP 06 ASPSP 07 ASPSP 08 ASPSP 09 ✓ conformant · ○ awaiting evidence · ■ open finding

Conformance at national scale

The problem
Nine mandated banks, a standard moving through the 3.1.x releases, and regulatory deadlines under the CMA Order and PSD2. Each bank needed to prove its implementation followed the UK security and functional specifications.
What we built
Leading the conformance product for the OBIE: product ownership and technical delivery of the tools used to test every bank’s implementation against the security and functional standards, the reference applications and the certification programme, plus workshops every two weeks in London with the engineering and compliance teams at Barclays, HSBC, Lloyds Banking Group, NatWest, Santander, Nationwide, Danske Bank, AIB and Bank of Ireland. The functional and dynamic-client-registration tools remain open source and in use.
What changed
Conformance certificates that banks used as evidence to regulators, and a shared, repeatable way of checking that the ecosystem actually interoperated.
Consented feed → categorisation → decision example record 01 Transactions SALARY ACME LTD +2,450.00 RENT J SMITH -850.00 TESCO STORES 3412 -62.40 TFL TRAVEL CH -31.20 LOAN FINCO 0092 -180.00 NETFLIX.COM -15.99 CO-OP FOOD -28.75 BRITISH GAS -96.00 CARD PAYMENT BET365 -40.00 02 Categorised Income Housing Essentials Debt Discretionary Risk signal 03 Decision Verified income £2,450 Essential spend £1,620 Disposable £830 Debt to income 7% Affordable · 1 signal Income detection · recurring payments · affordability · risk signals

A credit bureau built on Open Banking data

The problem
A new company wanted to make lending decisions from consented transaction data instead of, or alongside, traditional bureau files. It had an idea and an application for account information permissions; it did not yet have a platform or a licence.
What we built
Everything from the first commit: the platform and controls that supported FCA authorisation as an Account Information Service Provider, Open Banking connectivity, secure data handling, the transaction categorisation engine, income and expenditure modelling, affordability and risk signals, and the decisioning console lenders use. As the business grew into a real-time credit bureau serving lenders across the United Kingdom, Webovate was engaged to build the platform underneath it. Webovate has been AperiData’s engineering partner and Open Banking specialist from its foundation and remains so five years on, with AperiData now also employing developers of its own.
What changed
A production platform in daily use across the lending lifecycle, now part of a listed payments group.

All work and experience

04 Experience

Organisations we have worked with.

  • Open Banking Implementation Entity Read/Write API architecture, conformance, reference applications
  • Real-time credit bureau platform and categorisation engine
  • Model banks, payments integrations, international rollout
  • Civic technology and financial-sector platforms
  • CTZN Youth social-impact platform, Greater Manchester
  • DigitalBridge Computer-vision and machine-learning start-up: API and cloud architecture

Where that work has reached

  • Barclays, HSBC, Lloyds Banking Group, NatWest, Santander, Nationwide, Danske Bank, AIB and Bank of Ireland The CMA9, tested by the OBIE conformance product Webovate delivered
  • PayPoint PayPoint acquired AperiData in 2026; Webovate was engaged to build AperiData’s platform
  • Samsung UK, HTC, the NHS, Greater Manchester Police and SimplyBiz As clients of Gencia Media and Xlabs, on platforms Webovate architected
  • The Competition and Markets Authority and the Financial Conduct Authority Whose requirements the conformance programme and AperiData’s authorisations were built to meet

Recommendations for work delivered through Webovate

His role grew from Implementation Consultant to Product Owner delivering the conformance tools for ASPSPs’ security and functional standards required for CMA Order and PSD2 regulatory sign-off, and later to API Architect helping define the technical API standard with industry stakeholders. He is quite an Open Banking authority both in the UK and globally.

Masud Hussain Open Banking Consultant, Open Banking Implementation Entity

Glyn worked as both the Product Owner and the Technical Delivery Lead on the Reference Applications and Certifications. He proved highly capable from a business perspective, working across Open Banking with the large banks and the fintechs, and extremely technically competent in managing a team of developers.

Steve Murphy Delivery Manager, Open Banking Implementation Entity

05 Direction

From Open Banking to intelligent, connected finance.

Open Banking started as a competition remedy and became the template for consented data sharing worldwide: Open Finance, Smart Data, digital identity. The next step is intelligence. We apply machine learning and AI to that data to understand people and businesses properly, and we think that is the most useful thing a financial-technology engineer can do right now.

  • Open Finance and Smart Data

    The Data (Use and Access) Act 2025 created the framework for smart data schemes beyond banking, and the FCA has set out open finance as a priority. The patterns are familiar to anyone who implemented Open Banking: directories, consent, security profiles, conformance. We have done that work once already.

  • Machine learning on Open Banking data

    Consented transaction data describes a household or a business far more accurately than a bureau score, but only once a machine can read it. Categorisation, income and expenditure modelling and affordability analysis are where we have spent the last five years, and where we see the most value for lenders, advisers and the people they serve.

  • Commercial VRP and payments

    Commercial variable recurring payments went live in 2026. Recurring, consented account-to-account payments change the economics of collections and subscriptions, and they need careful integration with consent and risk controls.

  • AI that understands financial lives

    Language models and agents can now reason over a categorised financial history, explain it, and act on it with consent. We are building towards that carefully: analysis and evaluation first, decision support second, always with the identity, consent and audit controls that regulated use demands.

Talk to us about your project.

Tell us what your project is and where it is stuck. We will always try to help.

How to get in touch