New Business banking with a second signature
OxaBank: The banking platform under your brand
Everything a digital bank runs on, under your brand. Retail and business banking, live in a quarter.
Ready for
PCI DSS v4.0PSD2 SCA3-D Secure 2Isolated CDETokenised cardsOIDCOAuth 2.0 PKCEDevice-bound keysOpenAPI 3.1ISO 20022 CAMT.053MT940ACHFedwireSWIFTSEPAIBANOFACEU sanctionsUN sanctionsUK HMTLEIMaker-checkerHash-chained auditEvent replayMulti-tenantKubernetesOpenShiftAir-gappedPCI DSS v4.0PSD2 SCA3-D Secure 2Isolated CDETokenised cardsOIDCOAuth 2.0 PKCEDevice-bound keysOpenAPI 3.1ISO 20022 CAMT.053MT940ACHFedwireSWIFTSEPAIBANOFACEU sanctionsUN sanctionsUK HMTLEIMaker-checkerHash-chained auditEvent replayMulti-tenantKubernetesOpenShiftAir-gapped
// In the product
One bank, three ways in.
// The problem
A bank is more than an app. Most of it is the back end.
Ledger, approvals, screening, rails and audits are where launches stall. OxaBank ships them built and tested.
Approvals
Payment of $12,400 waits for a second signature
Pellucid Star Exports · company payment
Screening
Possible match 0.71 on a new customer
name similarity · date of birth discounted
Fraud
Transfer of $6,000 held for a person
release or refuse from the fraud queue
Reconciliation
Bank statement matched, 2 lines left open
CAMT.053 against the ledger
End of day
The day closed, statements ready
each rail’s cut-off, bank holidays applied
// The platform
One record of the bank. Every channel, every provider, one ledger.
Your apps call one API. The platform decides, records and posts. Your providers sit behind ports.
Your channels
iOS and Android Oxagileour white-label appWeb Oxagileour white-label web appBack office Oxagilefor your operatorsYour own channelsthrough the open API
signs in · taps · approves
OxaBank platform
- Ledger and posting
- Approvals · maker-checker
- Audit trail · hash-chained
- Events · replay
- Screening and fraud
- Day close · cut-offs
Your providers
Core banking Oxagilethe one you run, or oursRails and issuingACH · wire · SEPA · SPEI · cardsKYC and screeningbehind replaceable ports
moves money · checks people
Oxagile ships with OxaBank: the platform, the apps, the back office and a core, if you have none
// Capabilities
Every module a bank runs. In one app and one back office.
customer-lifecycleoxabank
Opening an account, signing in, hearing from the bank
- Onboarding & KYC
- Ten-step journey on the phone and the web, resumable
- Document & liveness
- Passport or ID read on the device, check digits verified twice
- Identity & SCA
- Sign-up, sign-in and password reset on the bank’s own page
- Sessions & devices
- Every signed-in device listed by name
- Notifications
- A feed of everything that happens to the money
- Support
- Written chat and callback requests
business-bankingoxabank
Companies, their people and a second signature
- Business accounts
- A company applies by its LEI, looked up in a registry
- Beneficial owners named, sealed and screened
- People & roles
- People join by a one-time code
- Admin, payer, approver or viewer
- Second signature
- A threshold set by the company
- Above it, a second person signs from their own phone
paymentsoxabank
Payees, rails, currencies and disputes
- Payees & transfers
- Payees with a first-payment warning
- Linked accounts & pulls
- The customer’s accounts at other banks linked
- US rails
- ACH, Fedwire and SWIFT in dollars
- EUR & SEPA
- The customer’s own euro account with an IBAN
- FX & wires abroad
- Rates from the central bank or the bank’s own board
- Disputes
- A case opened from the payment, with its deadline
cardsoxabank
Issuing, controls and real-time authorisation
- Card issuing
- Virtual cards issued from the app
- Card design per brand
- Card controls
- Limits, freeze and payment channels set by the customer
- Each change made at the issuer first
- Authorisation & settlement
- Every card payment decided by the platform in real time
- Holds placed, released and posted
credit-riskoxabank
Lending decisions, loans, fraud and screening
- Credit decisioning
- The bank’s credit policy decides, with its reasons
- Credit bureau
- Bureau asked only with the applicant’s consent
- Loan servicing
- Apply in the app, see the answer and its reasons
- Arrears & collections
- Loans in arrears by days past due
- Fraud rules & holds
- Every payment scored before money moves
- Sanctions & PEP screening
- OFAC, EU, UN and UK HMT lists, matched locally
- AI proposals
- A model proposes a verdict with its reasons
operationsoxabank
Accounts, the day’s close and the books
- Accounts & statements
- Dollar and euro accounts
- Money in & returns
- Arrivals credited on a second approval
- End of day
- Each rail’s cut-off in its own time zone
- Reconciliation
- The bank’s statements fetched every day
- Approvals
- Every sensitive action proposed by one operator
- Audit trail
- Every decision written under both names
wealthoxabank
Portfolios and stablecoin funding
- Investments
- Suitability and a target allocation
- Drift watched, rebalancing proposed
- Crypto funding
- Stablecoin top-ups with a quoted rate
- Fees stated before signing
customer-lifecycleoxabank
Opening an account, signing in, hearing from the bank
- Onboarding & KYC
- Ten-step journey on the phone and the web, resumable
- Document & liveness
- Passport or ID read on the device, check digits verified twice
- Identity & SCA
- Sign-up, sign-in and password reset on the bank’s own page
- Sessions & devices
- Every signed-in device listed by name
- Notifications
- A feed of everything that happens to the money
- Support
- Written chat and callback requests
// Under every module
The services every module runs on. Built once, for the whole bank.
Approvals
Strong authentication
Audit trail
Events
Scheduled jobs
Data store
Platform API
Identity & tenancy
// Compliance
Ready for PCI DSS and PSD2
- Built for the audits a bank goes through
- Card data isolated from the rest of the bank
- Strong customer authentication in every payment
PCI DSS
PSD2 strong authentication
Isolated card data
// Apps
The apps your users get
- Customers: accounts, cards, payments, loans and investing
- Your bankers: the back office in the browser
- On the phone and on the web, real screens from the running apps
// White label
Your brand across the whole bank
- Colours, type and shapes
- Custom card designs
- Your product line-up
- Every screen, card and statement follows it
- Nothing of ours shows
// Ownership
Your bank, on your terms
- Your brand
- Your infrastructure
- Your providers
White label
Your infrastructure
Data residency
Your product mix
Your operations team
// Estimate
Want to price your bank? Send us a request.
- Pick the modules, where it runs and who builds it
- The calculator is coming soon
- Until then, we send you the estimate ourselves
// Integrations
Keep the providers you already use
- Your core, processor, issuer and KYC stay
- Replace any one without touching the rest of the bank
- No lock-in to us or to them
| Port | Covers | Works with |
|---|---|---|
| Core | Accounts, deposits, general ledger | FIS · Jack Henry · DXC Hogan · Mambu · Temenos, or ours |
| Payment | Payment acceptance and cards | Oxagile Payment Gateway ↗ · Adyen · Stripe · Checkout.com · Worldpay |
| BankStatement | Statements and balances | CAMT.053 · CAMT.052 · MT940 · MT942 · BAI2 |
| FraudRules | Fraud and transaction monitoring | Feedzai · SEON · Featurespace · Sardine · Unit21 |
| ScreeningListSource | Sanctions lists, matched locally | OFAC · EU · UN · UK HMT · DFAT |
| EventBus | Events and messaging | Kafka · RabbitMQ · Amazon SNS/SQS · Google Pub/Sub · NATS |
| IdentityVerification | KYC, documents, liveness | Onfido · Sumsub · Veriff · Jumio · Persona |
| Registry | KYB and company registries | Companies House · GLEIF · OpenCorporates · Dun & Bradstreet · Middesk |
| ScreeningService | Screening as a service | ComplyAdvantage · World-Check · Dow Jones · LexisNexis Bridger |
| BankRail | ACH, wire, RTP, SEPA, SPEI | Modern Treasury · Banking Circle · Column · Cross River · ClearBank |
| Issuer | Card issuing | Marqeta · Thredd · Galileo · Lithic · i2c |
| CryptoRamp | Crypto on and off ramp | MoonPay · Circle · Ramp · Transak |
| Crypto | Crypto custody | Fireblocks · BitGo · Anchorage · Copper |
| RateProvider | FX rates | ECB reference rates · Open Exchange Rates · Refinitiv · Bloomberg · XE |
| Decision | Credit decisioning | Oxagile FinLend ↗ · Provenir · FICO · Experian PowerCurve |
| Bureau | Credit bureau | Experian · Equifax · TransUnion · Creditsafe |
| Broker | Brokerage and custody | Alpaca · DriveWealth · Apex Fintech · Upvest |
| Conversation | Voice and chat | Oxagile Voiager ↗ · Twilio Flex · Genesys · Zendesk |
| Notification | Push, SMS, email | Twilio · SendGrid · Vonage · FCM · APNs |
| IdentityProvider | Customer authentication | Okta · Auth0 · Keycloak · Microsoft Entra ID, or any OIDC provider |
| Proposer | AI proposes, a person decides | Llama · Mistral · Azure OpenAI · Amazon Bedrock, on-prem or hosted |
| DocumentRender | Document generation | Gotenberg · DocRaptor · Carbone · PDFMonkey |
| Signature | Document signing | DocuSign · Adobe Acrobat Sign · Dropbox Sign · Yousign |
| Secrets | Secret storage and rotation | HashiCorp Vault · AWS KMS · Azure Key Vault · Google Cloud KMS · Thales HSM |
| ObjectStore | Object storage | Amazon S3 · Azure Blob · Google Cloud Storage · MinIO · Ceph |
| OpenBanking | Open banking APIs | Berlin Group · FDX · UK Open Banking · Plaid · TrueLayer |
// Networks
Connected to every network a bank needs
- Payment rails and card issuing
- Sanctions lists and credit bureaus
- Identity, brokerage and messaging
- Each through its own port
Accounting coreGeneral ledger, deposits and loans
PaymentsOxagile Payment Gateway, or your acquirer
Bank statementsCAMT.053 and MT940 files
Sanctions listsOFAC, EU, UN and UK HMT
Rails & BaaSACH, wire, RTP, SEPA, SPEI
Card issuingAny issuer-processor
Crypto rampOn and off ramp partners
KYC & KYBIdentity checks and company registries
CreditFinLend and the credit bureaus
BrokerageBrokerage and custody partners
IdentityAny identity provider over OIDC
MessagingPush, SMS and email
// Open API
Build your own products on it
- Your developers ship new products without waiting on us
- Partners and fintechs connect through the same contract
- OpenAPI 3.1, downloadable as 1 file
GET
/v1/accountsEvery account the caller holdsGET/v1/accounts/{id}/statementOne account's statement, newest firstPOST/v1/transfersPrepare a payment. Nothing moves yetPOST/v1/transfers/{id}/confirmAuthorise the paymentPOST/v1/cardsIssue a card on the caller’s accountPOST/v1/cards/{id}/limitsLower a card’s spending limitsPOST/v1/approvals/{id}/decisionApprove or rejectGET/v1/backoffice/loans/arrearsLoans in arrears, worst first// Benchmarks
Built for volume. Measured, not promised.
Benchmarked on a developer machine under synthetic load, the platform path only: no rails, no core, no providers. Production is sized with you and scales out node by node.
20M+payments a month through the platform path
35 msmedian to verify, screen and record a payment
6.5 sto reconcile a month of 1M payments, three ways
50K+customers re-screened a day against sanctions lists
Start building on OxaBank
The demo and the API reference are open. No sign-up
// FAQ
Before you talk to us
- No. It runs beside the core you have, through the Core port
- No core yet? Ours ships with it
- Yes: onboarding, payments, cards, lending or screening
- Launched against your existing core
- The same module sits inside the full bank later
- Your cloud, your data centre, or fully air-gapped
- Data stays in your network and jurisdiction
- Yes. Each connects through a port
- One adapter per provider
- Any of them replaced without touching the rest
- Every sensitive action needs a second person
- The server refuses a maker approving their own action
- Both names go into a hash-chained audit trail
- No. Operational state only
- No balances and no card numbers, by design
// Talk to us
Launch a new bank, or upgrade the one you run.
- Launch a complete digital bank
- Or replace one module in the bank you run
- Onboarding, payments, cards, lending or screening
- See it running on your stack