UOBAM Invest API integration services (Robo-Adviser & OpenFinance)

Core (Robo-Adviser) portfolio API

Reads each user's Core goal-based portfolio: investor profile score, target asset allocation, recommended monthly contribution and the underlying basket of UOBAM Unit Trusts and US-listed ETFs (NYSE / NASDAQ / Cboe BZX). Used for unified wealth dashboards and goal-tracking widgets.

Satellite themes & sectors

Themes, sector tilts and managed funds that sit alongside the Core. Surfaces fund codes, ISINs where available, weights and recent performance so back-office systems can reconcile thematic exposure across multiple wealth accounts.

Cash+ Xtra & Gold+ feeds

Holdings, daily yield and underlying composition for the curated Cash+ Xtra and the Gold+ portfolio (SPDR Gold MiniShares Trust GLDM + United Gold & General Fund UGGF + 2% cash buffer). Useful for treasury reporting and gold-allocation analytics.

Megatrends & Fund Direct

Curated Megatrends portfolios and the Fund Direct catalogue, including the new Regular Savings Plan (RSP) for Fund Direct added in 2024 — read scheduled contribution rules, eligible funds and execution status.

Cash Account & in-app messaging

The Cash Account released in the 2024 update can be wired to your treasury system for balance, top-up and withdrawal events, while in-app message metadata can be relayed into a customer-comms CRM.

Statements & tax reports

Period statements (monthly / quarterly / annual) with subscription, redemption, dividend, rebalance, fee and capital-gain lines. Output is normalised so the same fields flow into Xero, NetSuite, SAP or a private wealth back office.

1. Unified wealth dashboard

A multi-bank wealth aggregator wants to show a UOBAM Invest customer their UOBAM goals next to bank deposits and CPF balances, in line with the SGFinDex consolidated-view pattern. We deliver a portfolio + holdings endpoint that returns goal_id, target_amount, current_value, allocation[] and projected_outcome_band, ready to render alongside Singpass-retrieved bank data.

2. Accounting and tax reconciliation

For high-net-worth users and family offices, raw subscribe / redeem / dividend lines from UOBAM Invest are mapped to ledger entries and pushed to Xero, NetSuite or a custom GL. A nightly job consumes the statement endpoint and posts tax lots so the operator can produce SGD year-end reports without manual entry.

3. Risk & suitability monitoring

An IFA platform pulls each client's risk profile and Core target allocation, then compares them with the live holdings drift. A webhook fires when drift exceeds a threshold, surfacing rebalance candidates and producing a MAS-style suitability audit trail.

4. Goal-based marketing automation

A bank uses goal metadata (e.g. "education in 8 years", "retirement in 22 years") to trigger in-app and email journeys for top-ups, RSP enrolment in Fund Direct, or Gold+ allocation suggestions. The integration flows event payloads into the CDP without exporting personally identifiable data beyond the agreed scope.

5. Compliance & AML evidence pack

For periodic MAS reviews, the integration assembles signed PDF statements, structured JSON of transactions, and immutable audit logs of every API call. The result is a traceable evidence pack mapped against MAS Notice 626 obligations.

1. Authorization handshake (pseudocode)

POST /api/v1/uobam/auth/login
Content-Type: application/json

{
  "principal": "user@example.sg",
  "credential": "<OTP_OR_TOKEN>",
  "device_id": "ios-7c3f...",
  "consent_scope": ["portfolios.read", "transactions.read", "statements.read"]
}

200 OK
{
  "access_token": "eyJhbGciOi...",
  "refresh_token": "rt_8f2...",
  "expires_in": 1800,
  "consent_id": "cns_2025_04_29_001"
}

2. Portfolio & holdings query

GET /api/v1/uobam/portfolios?include=holdings,allocations
Authorization: Bearer <ACCESS_TOKEN>

200 OK
{
  "user_id": "u_3921",
  "portfolios": [
    {
      "goal_id": "g_retire_2046",
      "type": "core_robo",
      "risk_profile": "balanced",
      "target_amount_sgd": 480000,
      "current_value_sgd": 12734.55,
      "monthly_contribution_sgd": 600,
      "holdings": [
        {"fund_code": "USDIV", "name": "United SGD Fund", "units": 412.18, "nav": 1.2034, "weight": 0.34},
        {"fund_code": "GLDM",  "name": "SPDR Gold MiniShares", "units": 18.0, "nav": 51.22, "weight": 0.10}
      ]
    }
  ]
}

3. Statement export & webhook

POST /api/v1/uobam/statements/export
{
  "user_id": "u_3921",
  "from_date": "2026-01-01",
  "to_date":   "2026-03-31",
  "format":    "json"   // or "csv" | "pdf"
}

// Push notification on order settlement
POST {your_webhook}
X-UOBAM-Signature: sha256=...
{
  "event": "order.settled",
  "goal_id": "g_retire_2046",
  "order_id": "ord_881",
  "side": "subscribe",
  "amount_sgd": 600,
  "settled_at": "2026-04-15T03:14:22Z"
}

// Error envelope
{ "error": {"code": "consent_expired", "message": "Re-authorize via Singpass" } }

Compliance & privacy

Every UOBAM Invest integration we deliver is designed for the Singapore regulatory perimeter. That includes the Personal Data Protection Act (PDPA) for consent and data retention, MAS Notice 626 AML/CFT controls for capital-markets services, the Securities and Futures Act framework that governs UOBAM as a licensed fund manager, and the MAS / ABS Finance-as-a-Service API Playbook for security and interoperability patterns.

Where users want to consolidate their UOBAM Invest holdings with bank, CPF and CDP data, we align the consent model with SGFinDex, the national digital infrastructure operated by MAS and GovTech that uses Singpass-based authorization. Personal data is encrypted in transit and at rest, with consent IDs, scopes and revocation events stored for audit.

Data flow / architecture

A typical UOBAM Invest integration runs as a four-node pipeline: Client App (UOBAM Invest mobile or partner web) → Authorized API Gateway (token exchange, rate limit, consent enforcement) → Normalisation & Storage (canonical portfolio / transaction model in a PostgreSQL schema or columnar store) → Downstream APIs & Analytics (REST endpoints for partner dashboards, Kafka topics for real-time events, scheduled jobs for statement export).

• All ingress secured with mTLS + signed JWTs
• Per-user consent token threaded through every hop
• Replayable event log for reconciliation and audits

About our studio

We are an independent technical studio focused on App protocol analysis and authorized API integration for fintech and consumer apps. Our engineers come from asset management technology, payment gateways, mobile reverse engineering and cloud platform teams. We have shipped integrations across robo-advisory, banking, insurance, e-commerce and travel apps in ASEAN.

• Authorized protocol analysis (TLS pinning handling, OAuth, signed payloads)
• Production-grade Python, Node.js and Go SDKs
• Security review against MAS / OWASP Mobile Top 10
• Pipeline: scope → analysis → build → validation → compliance → handover
• Source-code delivery from $300 — receive runnable API source code and full documentation; pay after delivery upon satisfaction
• Pay-per-call API billing — access our hosted endpoints and pay only per call, no upfront cost

Contact

For quotes or to submit your target app and requirements, open our contact page:

Contact page

We respond to most enquiries within one business day. NDAs and scoped statements of work available on request.

Engagement workflow

1. Scope confirmation: integration scenarios, data classes (portfolios, holdings, transactions, statements) and target consumers.
2. Authorized protocol analysis & API design (2–5 business days).
3. Build, internal validation and replay-based regression testing (3–8 business days).
4. Documentation, sample clients and test cases (1–2 business days).
5. Typical first delivery: 5–15 business days; SGFinDex-aligned consent flows may extend the timeline.

FAQ

What do you need from me to start?

How do you handle UOBAM consent?

Can you keep up with UOBAM Invest releases?