Connect Pivdenny Online accounts, cards, and deposits to your stack — under user consent
Pivdenny Bank (JSC Bank Pivdenny, Odesa) is one of the first Ukrainian banks to publish AIS/PIS endpoints through the UPC Open Banking platform. We deliver protocol analysis, OAuth2-style consent flows, statement exports and card-data sync that match the bank's mobile experience while respecting the consent, security, and control principles documented at bank.com.ua/en/open-banking.
What we deliver
Deliverables checklist
- OpenAPI / Swagger specification for every endpoint we ship
- Protocol & auth flow report (token, signature, certificate-pinning notes)
- Runnable source for login, statement, card, and deposit APIs in Python and Node.js
- Postman collection plus pytest / Jest suites with sandbox fixtures
- Compliance guidance: NBU Resolution No. 80, Ukrainian data-protection law, GDPR alignment for EU clients
- Webhook templates for transaction confirmations and card events
Highlight: Diia-driven Mastercard onboarding
In 2024 Pivdenny Bank rolled out fully remote Mastercard Platinum issuance through the Ukrainian government Diia digital identity, lifting the per-transaction card top-up ceiling to UAH 50,000 in eligible scenarios. Our integration captures the post-issuance webhook fields (card token, BIN, virtual / physical flag) so onboarding pipelines can react in real time and update CRM records without polling.
This is one example of how the app surface keeps changing — recurring API refactors are a real risk, which is why every deliverable ships with a regression suite tied to UPC sandbox endpoints.
Data available for integration
The table below maps in-app screens to the data objects we typically expose, the granularity available, and the typical consumer use case. It reflects a NextGenPSD2 AIS scope plus value-added objects derived from app protocol analysis under explicit user consent.
| Data type | Source (screen / feature) | Granularity | Typical use |
|---|---|---|---|
| Account list & balances | Home / Cards & Accounts | Per-IBAN, per-currency, real-time | Liquidity dashboards, treasury sync |
| Card transactions | History of operations on card accounts | Per-transaction, MCC, merchant, FX rate | Reconciliation, expense reports, fraud signals |
| Statements | "Statement generation" PDF / CSV | Per account, custom date range | Bookkeeping, audit trails, loan applications |
| Deposit programs | Premium / Profitable Plus / Mobile Deposit | Principal, interest, term, prolongation flag | Wealth tracking, portfolio analytics |
| Card lifecycle events | Activation, block / unblock, limits, PIN | Event-level, per card | Cardholder dashboards, MDM systems |
| Currency operations | Currency exchange / deposit-linked FX | Per trade, with rate and counter-amount | FX P&L, treasury reporting |
| Mobile top-ups | Kyivstar, Vodafone, Lifecell payments | Per top-up, per MSISDN | Telco partner reconciliation |
| Transaction confirmations | Push-messages on transaction events | Real-time webhook | Risk alerts, customer notifications |
Typical integration scenarios
1. SME accounting sync
A Ukrainian SME using a local accounting platform needs nightly imports of card and current-account movements. We connect their tenant to the Pivdenny AIS endpoints, pull transactions in 90-day windows, normalise FX legs, and emit IFRS-friendly journal entries. This maps directly to the Berlin Group GET /v1/accounts/{accountId}/transactions contract.
2. Treasury cash-position dashboard
Multi-currency treasurers consolidate UAH, USD, and EUR balances across Pivdenny and other Ukrainian banks. We ship a polling worker plus webhook receiver that hydrates a unified ledger; deposit balances from Premium / Mobile Deposit programmes feed term-structure views.
3. Lending decision pipeline
Consumer-credit and BNPL providers ingest 12 months of statements through PDF / CSV exports plus structured AIS transactions. The OpenFinance angle surfaces salary credits, recurring outflows, and FX top-ups so an underwriting model can score affordability without manual statement collection.
4. Card-event automation
Corporate fleet and travel teams react to card lifecycle webhooks (block, unblock, virtual reissue, limit change). Combined with Pivdenny Soundbox-style merchant data, finance teams reconcile card spend against expense policies in near real time.
5. Cross-border remittance reporting
Diaspora-focused fintechs, especially those serving Ukrainian users in Poland and Germany, need consolidated remittance statements. We aggregate Pivdenny Online card-to-card transfers and currency exchange operations, tagged with consent identifiers, to produce regulator-ready monthly digests.
Technical implementation
Below are representative pseudocode samples. Real keys, certificates, and signing parameters are issued through the UPC developer portal at docs.api.upc.ua and provisioned per registered TPP.
OAuth2 consent & SCA
POST /v1/consents
Content-Type: application/json
X-Request-ID: 7c3a5b40-1e0f-4c91-9b46-pivdenny
PSU-IP-Address: 198.51.100.7
TPP-Signature-Certificate: <base64 X.509>
Signature: keyId="upc-tpp", algorithm="rsa-sha256", ...
{
"access": { "balances": [], "transactions": [] },
"recurringIndicator": true,
"validUntil": "2026-08-01",
"frequencyPerDay": 4
}
→ 201 Created
{
"consentId": "PVDNY-CNS-9F2A",
"consentStatus": "received",
"_links": { "scaRedirect": { "href": "https://sca.pivdenny.upc.ua/..." } }
}
Statement & transaction export
GET /v1/accounts/{accountId}/transactions
?bookingStatus=booked
&dateFrom=2026-04-01
&dateTo=2026-04-30
Authorization: Bearer <ACCESS_TOKEN>
Consent-ID: PVDNY-CNS-9F2A
→ 200 OK
{
"transactions": {
"booked": [
{
"transactionId": "TX-44581",
"bookingDate": "2026-04-12",
"valueDate": "2026-04-12",
"transactionAmount": { "currency": "UAH", "amount": "-1240.55" },
"creditorName": "Kyivstar",
"remittanceInformationUnstructured": "Mobile top-up 380xx..."
}
]
},
"_links": { "next": { "href": "...&page=2" } }
}
Webhook for card & transfer events
POST https://your-app.example/webhooks/pivdenny
X-Pivdenny-Signature: t=1714742400,v1=2bbdd...
Content-Type: application/json
{
"event": "card.limit.changed",
"card_token": "ct_5f2b...",
"previous_limit": { "currency": "UAH", "amount": "20000" },
"new_limit": { "currency": "UAH", "amount": "50000" },
"occurred_at": "2026-05-03T08:14:22Z"
}
# Verify HMAC, idempotent storage, then dispatch to ERP / risk engine
Compliance & privacy
Regulatory framing
Ukraine's Open Banking regime came into force on 1 August 2025 under National Bank of Ukraine Resolution No. 80, adapting domestic rules to PSD2 and giving payment service providers a transition window into January 2026 to ship compliant APIs. Pivdenny Bank exposes its endpoints through the UPC platform and aligns with the Berlin Group NextGenPSD2 specification for AIS, PIS, and confirmation of funds.
Cross-border clients also benefit from EU GDPR alignment for any user data that flows into European data centres, plus ISO 27001-style controls for at-rest encryption and logging.
Privacy posture
- Consent-first: every endpoint call is bound to a Pivdenny
Consent-IDwith a finite validity window - Data minimisation: we request only the fields the use case actually needs (e.g. balances without PAN)
- Strong Customer Authentication via redirect / decoupled flows, never password storage
- Audit log of every TPP request, retained per the bank's published policy
- Right to revoke: webhook-based propagation when a user revokes consent in-app
Data flow & architecture
A typical Pivdenny Online integration is a four-stage pipeline. The first stage is the client app or partner portal, where the user grants consent under SCA. The second stage is our ingestion gateway, which fronts the UPC AIS / PIS endpoints, signs requests, and rotates tokens. The third stage is a storage layer — Postgres for normalised transactions, S3-compatible buckets for raw PDF / CSV statements, and Redis for short-lived consent metadata. The final stage is the downstream API or analytics output the integrator's product consumes: REST endpoints, GraphQL, scheduled CSV drops, or message-bus topics.
Two horizontal services run alongside this pipeline: an observability stack (structured logs, latency dashboards, replay tooling) and a compliance ledger that records every consent grant, refresh, and revocation event in tamper-evident form.
Market positioning & user profile
Pivdenny Online primarily serves retail clients of Pivdenny Bank inside Ukraine plus the diaspora in Poland, Germany, the Czech Republic, and the Baltics. The user base skews towards salaried professionals, SME owners, and depositors using the bank's Premium and Profitable Plus deposit programmes. Both Android and iOS are first-class targets, and the app sits next to giants like Privat24 and Monobank in Ukrainian Google Play and App Store finance charts. Integration buyers are typically B2B fintechs, accounting platforms, lenders, and treasury teams that need a Ukrainian-bank data plug-in alongside their existing PSD2 stack.
App screenshots
Click any thumbnail to view a larger preview. Screenshots illustrate the surfaces our protocol analysis covers — login, accounts, statements, card management, and deposits.
Similar apps & integration landscape
Teams integrating Pivdenny Online almost always need data from the broader Ukrainian and EU mobile-banking ecosystem. The apps below sit in the same category; we frame them as complementary so unified accounting, treasury, and lending pipelines can cover them in one rollout.
Privat24
Ukraine's most-installed retail banking app from JSC CB PrivatBank. Holds card transactions, deposits, IBAN-based transfers, and utility payments. Customers using both Privat24 and Pivdenny Online often request a unified daily transaction export across the two banks.
Monobank — digital mobile bank
Card-first neobank built on Universal Bank licence. Rich JSON statement endpoints make it a popular pairing with Pivdenny Online for SME cashflow dashboards.
Sense SuperApp (Alfa-Bank Ukraine)
Combines retail banking, brokerage, and lifestyle services. Integration focus is multi-product balances and merchant offer redemptions alongside Pivdenny statements.
Oschadbank
State-owned bank with deep branch coverage. Statement and pension-payment data are commonly consolidated with Pivdenny Online for diaspora and senior-customer cohorts.
MyRaif (Raiffeisen Bank Ukraine)
Mid-market and corporate-leaning mobile bank. Useful when consolidating SME cashflow across Pivdenny and Raiffeisen sub-ledgers.
PUMB Mobile Banking
One of the largest private banks. Card-event and salary-credit data complements Pivdenny Online for credit-scoring pipelines.
UKRSIB online (UkrSibbank)
BNP Paribas-affiliated retail bank. Combined with Pivdenny Online, it gives EU-grade KYC alongside local Ukrainian payments visibility.
Sportbank
Lifestyle-focused neobank built on top of Oksi Bank. Often integrated alongside Pivdenny Online to reach younger customer cohorts.
LiqPay
PrivatBank's payment app and gateway. Frequently bundled with Pivdenny Online integrations for merchant reconciliation across both ecosystems.
Alliance — mobile bank
Smaller Ukrainian private bank with a growing API surface. Treasurers add it on top of a Pivdenny Online integration to widen counterparty coverage.
About our studio
Who we are
OpenFinance Lab is an independent technical studio focused on App interface integration and authorized API integration. Our engineers come from Ukrainian and EU banks, payment processors, and mobile reverse-engineering practices. We have shipped Open Banking work against UPC, BankID, and several Berlin Group implementations, and we ship in Python, Node.js, and Go.
- Banking, fintech, lending, and cross-border clearing pipelines
- Protocol analysis and security review under explicit authorisation
- Custom SDKs, webhooks, and observability tooling
- Source code delivery from $300 — runnable API source code plus full documentation; pay after delivery upon satisfaction
- Pay-per-call API billing — access our hosted endpoints and pay only per call, no upfront fee
Contact
Send us the target app name, the data you need, and any sandbox or test credentials you already hold. We respond with a scoped quote and timeline.
Engagement workflow
- Scope confirmation: target endpoints (login, statement, deposit lifecycle, payment initiation)
- Protocol analysis and OpenAPI design (2–5 business days)
- Build and internal validation against UPC sandbox or capture-based fixtures (3–8 business days)
- Documentation, sample apps, and CI tests (1–2 business days)
- Handover and post-delivery patch window; first delivery typically lands in 5–15 business days
FAQ
Is Pivdenny Online covered by Ukraine Open Banking rules?
What kinds of data can be integrated from Pivdenny Online?
How long does a Pivdenny Online integration take to deliver?
Do you operate under user consent?
📱 Original app overview (appendix)
Pivdenny Online — mobile bank is the official mobile application of JSC Bank Pivdenny (Odesa, Ukraine). It lets clients register online and open a Mastercard Platinum card via the Diia state digital identity without visiting a branch, and runs zero-fee in-bank card-to-card transfers around the clock.
Inside the app, users get full access to the bank's deposit programmes for individuals (Premium, Profitable Plus, Mobile Deposit) with top-up, partial withdrawal, auto-prolongation, and early termination. Statements can be generated in PDF and CSV; existing customers can issue new virtual cards or reissue expired or blocked plastic in virtual form.
- Transfers and payments between own cards and accounts; mobile top-ups for Kyivstar, Vodafone, Lifecell
- Foreign-currency purchase at favourable rate with placement on a deposit; ad-hoc currency exchange operations
- Optional support for the Armed Forces of Ukraine through the special NBU account
- Touch ID, Face ID, and PIN login with configurable security settings
- Card service operations: PIN setting, block / unblock, activation, limit management, CVV2/CVC2 display
- History of operations on card accounts plus push notifications for confirmation and information
- Saved cards for quick repeated operations; Google Pay tokenisation for contactless payments
- Support via Telegram, Viber, and Messenger; in-app map of branches and ATMs with route plotting
To use the app, customers need a financial phone number registered with the bank and an activated Pivdenny Bank card.