Uzum Business | Kapitalbank API integration (OpenBanking for SMEs)

1. ERP & 1C accounting reconciliation

Many Uzbek SMEs run 1C, SAP B1 or local ERP suites. Our integration polls the statement endpoint nightly per corporate account, normalizes counterparty INN, MFO and purpose codes, and posts journal entries back to the ERP via its inbound API. Maps directly to OpenBanking account information services.

2. Treasury dashboard for multi-entity holdings

Holding companies that operate multiple legal entities each with their own Uzum Business profile use our APIs to roll up balances and pending payments into a single treasury cockpit. The signing step still happens inside the licensed app to preserve the user's signing key, while read-only data and payment preparation run outside.

3. Payroll automation from HRIS

An HR system computes monthly salaries and pushes a payroll batch through our API. The batch is created as a Uzum Business payment template, returned for approval inside the app, and the same-day credit confirmations are pushed back as webhooks so HR can mark salary slips as paid automatically.

4. Cross-border SWIFT & currency-contract tracking

Importers and exporters must match each SWIFT outbound or inbound to a specific currency contract. We expose the SWIFT and currency-contract views as a single OpenFinance resource so trade-finance software can check contract utilization and FX exposure in real time.

5. Compliance evidence pack for audits

For lender due diligence or KPMG/Big-4 audits, we package a date-bounded export of statements, payment requests in Card File 1 and Card File 2, and signed payments. Output is a deterministic ZIP with PDF statements, JSON ledger and a manifest hash so auditors can verify completeness.

Authorization (OAuth-style session bootstrap)

POST /api/v1/uzum-business/auth/login
Content-Type: application/json

{
  "username": "uz_corp_user",
  "password": "********",
  "device_fingerprint": "f4c1...e2",
  "second_factor": {
    "type": "access_code",
    "value": "******"
  }
}

200 OK
{
  "access_token": "eyJhbGciOi...",
  "refresh_token": "rt_8c1f...",
  "expires_in": 1800,
  "signing_capabilities": ["payment.sign", "payroll.sign", "swift.sign"]
}

Statement export by account & date range

POST /api/v1/uzum-business/statement
Authorization: Bearer <ACCESS_TOKEN>

{
  "account_id": "20208000900123456789",
  "currency": "UZS",
  "from_date": "2026-04-01",
  "to_date":   "2026-04-30",
  "format":    "json"
}

200 OK
{
  "account_id": "20208000900123456789",
  "opening_balance": 152340000,
  "closing_balance": 178902150,
  "currency": "UZS",
  "items": [
    {
      "tx_id": "TX-2026-04-12-0011",
      "posted_at": "2026-04-12T10:14:33+05:00",
      "direction": "credit",
      "amount": 12500000,
      "counterparty": {
        "name": "LLC Trade Partner",
        "inn": "302345678",
        "mfo": "00842"
      },
      "narrative": "Invoice 2026-INV-118"
    }
  ]
}

Webhook: incoming payment notification

POST https://your-app.example.com/uzum/webhook
X-Signature: hmac-sha256=...

{
  "event": "transaction.incoming",
  "account_id": "20208000900123456789",
  "tx_id": "TX-2026-04-12-0011",
  "amount": 12500000,
  "currency": "UZS",
  "counterparty_inn": "302345678",
  "received_at": "2026-04-12T10:14:33+05:00"
}

// expected response
200 OK
{ "status": "received" }

Regulatory alignment

Every Uzum Business | Kapitalbank integration we ship operates under written customer authorization or documented public APIs and follows guidance from the Central Bank of the Republic of Uzbekistan, which has set a national open-banking rollout target of September 2026. For EU- and UK-headquartered clients we layer GDPR-aligned data minimization on top, and for trade-finance scenarios we follow SWIFT message standards. Our delivery never bypasses the customer's signing key — final payment and SWIFT signatures still happen inside the licensed Uzum Business app or web Internet Bank.

Privacy & data handling

• Per-tenant token vault; no shared credentials between integrations
• PII minimization — only INN, MFO, account number and amount are stored; counterparty PII is hashed unless the use case requires it
• Audit log of every API call, signing event and webhook delivery
• Configurable data residency: Uzbekistan, EU, or hybrid
• Optional NDA, signed source-code escrow, and right-to-be-forgotten endpoint

Deliverables checklist

• OpenAPI / Swagger specification for every exposed endpoint
• Protocol & auth flow report (token lifecycle, signing surface)
• Runnable source code in Python or Node.js (FastAPI / Express)
• Docker Compose stack and integration tests against a sandbox tenant
• Webhook simulator and replay tool for incoming-payment events
• Compliance memo referencing Central Bank of Uzbekistan guidance

Engagement workflow

1. Scope confirmation: which Uzum Business modules (login, statements, payments, payroll, SWIFT)
2. Authorized protocol analysis & API design (2–5 business days)
3. Build, internal validation, and signed test runs (3–8 business days)
4. Documentation, sample code and integration tests (1–2 business days)
5. Handover, post-delivery support window, and optional managed-API mode

About OpenFinance Lab

We are an independent technical studio focused on App interface integration and authorized API integration for fintech, e-commerce and travel. Our engineers come from banks, payment gateways, mobile reverse-engineering teams and cloud platforms across Central Asia, the EU and South Asia. We have shipped corporate banking adapters, statement-export pipelines, and SWIFT bridges for clients ranging from Big-4 audit teams to mid-market ERPs.

• Two engagement models: Source-code delivery from $300 (pay-after-satisfaction) or pay-per-call hosted API (no upfront fee)
• Android and iOS coverage, both consumer and corporate banking
• Familiar with Uzbekistan, EU, GCC and South Asian regulatory profiles
• Optional NDA and source-code escrow on every engagement

Contact

To request a quote or share your Uzum Business | Kapitalbank integration scope, open our contact page below. We respond within one business day.

Contact page