Skip to main content

03 — Bank Integration Plan — PSD2 / Tok / QWAC

Bilko HR — Bank Integration Plan — PSD2 / Tok / QWAC

MC Task: #102423
Owner: Finverge (Markos Zachariadis)
Status: OPEN — drafting in progress
Expected: 50917 bytes, 49368 chars, 31 sources cited

Placeholder Notice

This page is a placeholder for the Finverge banking memo commissioned on 2026-05-28. The memo will cover:

Scope

  1. PSD2 NextGenPSD2 (Berlin Group) endpoint readiness status for top HR banks:
    • Privredna banka Zagreb (PBZ)
    • Zagrebačka banka (Zaba)
    • Erste banka
    • OTP banka
    • Addiko Bank
    • Raiffeisenbank Austria (RBA)
    • Hrvatska poštanska banka (HPB)
  2. eIDAS QWAC/QSeal certificate requirements:
    • Procurement via DigiCert (or other QTSP)
    • Can ALAI Holding AS (NO) obtain QWAC without HR entity?
    • Timeline (8–12 weeks typical)
    • Cost estimate
  3. SEPA Instant support:
    • Which HR banks support SEPA Instant Credit Transfer (SCT Inst)?
    • Bilko bank feed real-time reconciliation feasibility
  4. ISO 20022 integration plan:
    • CAMT.053 (bank statement format) availability
    • pain.001 (payment initiation format) acceptance
    • Bilko backend parsing/generation readiness
  5. Tok platform coverage for HR:
    • What does Tok (~/ALAI/products/Tok/) already support for Croatian banks?
    • Gap analysis: what must be built for Bilko HR launch?
    • Can Tok be extended for HR, or must Bilko implement separate bank integration?
  6. TPP (Third-Party Provider) regulatory registration:
    • Option A: EEA passporting from NO via Finanstilsynet → HANFA (Croatian regulator)
    • Option B: Separate HR AISP/PISP authorization via HANFA
    • Timeline and cost comparison
    • Recommended path
  7. Critical path timeline:
    • Expected: 28–33 week critical path (QWAC + TPP + per-bank integration)

Per-Bank Readiness Matrix (TBD)

Once the Finverge memo is delivered, this section will contain a matrix with:

Bank PSD2 API Status Berlin Group Version SEPA Instant CAMT.053 pain.001 Sandbox Available Notes
PBZ TBD TBD TBD TBD TBD TBD TBD
Zaba TBD TBD TBD TBD TBD TBD TBD
Erste TBD TBD TBD TBD TBD TBD TBD
OTP TBD TBD TBD TBD TBD TBD TBD
Addiko TBD TBD TBD TBD TBD TBD TBD
RBA TBD TBD TBD TBD TBD TBD TBD
HPB TBD TBD TBD TBD TBD TBD TBD

Tok Gap Analysis (TBD)

Tok is ALAI’s independent Open Banking platform. Expected analysis:

  • Current Tok coverage: Which HR banks are already integrated in Tok?
  • Tok API availability: Can Bilko consume Tok API for HR bank feeds?
  • Missing features: What must be added to Tok for HR launch?
  • Bilko-specific integration: Does Bilko need separate QWAC/TPP, or can Tok act as proxy?

TPP Regulatory Decision (TBD)

Expected decision matrix:

Option A: EEA Passporting from NO

  • Process: Register with Finanstilsynet (NO) → passport to HANFA (HR)
  • Timeline: 4–6 weeks (assuming NO registration already exists or fast-tracked)
  • Cost: Lower (one-time passporting fee)
  • Risk: Regulatory uncertainty for non-EU EEA passporting post-Brexit precedent

Option B: Direct HR AISP/PISP Authorization

  • Process: Apply directly to HANFA (Croatian Financial Services Supervisory Agency)
  • Timeline: 8–12 weeks
  • Cost: Higher (separate application + local legal counsel)
  • Risk: Lower regulatory risk, but slower and more expensive

QWAC/QSeal Procurement Timeline (TBD)

Expected steps:

  1. Select QTSP (Qualified Trust Service Provider): DigiCert, GlobalSign, or other
  2. Submit application: Company registration documents + authorized signer identity verification
  3. eIDAS validation: QTSP validates legal entity with national registry
  4. Certificate issuance: QWAC (for API calls) + QSeal (for payment signing)
  5. Integration: Load certificates into Bilko backend / Tok platform
  6. Testing: Per-bank sandbox testing with QWAC

Timeline: 8–12 weeks (if no HR entity required) or 12–16 weeks (if d.o.o. formation first)

Critical Path Summary (TBD)

Expected phases:

  1. QWAC procurement: 8–12 weeks
  2. TPP regulatory: 4–12 weeks (depends on passporting vs direct)
  3. Tok extension (if applicable): 4–6 weeks
  4. Per-bank integration: 2–4 weeks per bank (7 banks = 14–28 weeks if sequential, 4–6 weeks if parallel with Tok)
  5. Bilko backend integration: 2–3 weeks
  6. E2E testing: 1–2 weeks

Critical path: 28–33 weeks (optimistic with EEA passporting and Tok extension)

Open Questions for Finverge

  1. Can ALAI Holding AS obtain QWAC without HR entity?
  2. Which HR banks have stable production PSD2 APIs (not just sandbox)?
  3. Does Tok already cover any HR banks?
  4. EEA passporting feasibility for NO → HR (post-Brexit regulatory precedent)?
  5. Can Bilko act as PISP (payment initiation) or only AISP (account information)?
  6. SEPA Instant adoption rate among HR SMBs (is it default, or must customers opt in)?

Next Steps

  1. Finverge: Deliver memo to /Users/makinja/business/ALAI-Holding-AS/products/Bilko/docs/integrations/hr-bank-integration-plan.md
  2. Skillforge: Update this BookStack page with full Finverge memo content (replace placeholder)
  3. CEO: Review critical path timeline and decide if HR launch is feasible within 6-month target
  4. John: Create MC tasks for QWAC procurement + TPP registration (after Finverge recommendation)

Local Source (Expected)

/Users/makinja/business/ALAI-Holding-AS/products/Bilko/docs/integrations/hr-bank-integration-plan.md

Status: NOT YET CREATED — MC #102423 is open.

BookStack Canonical URL: https://docs.alai.no/books/bilko-hr-market-entry/page/03-bank-integration

Back to top