FAQ

Joining the cooperative solution of CBI S.c.p.a. is to be intended as optional and therefore not mandatory.

The on-boarding activities relate to the connection of the "core" IT systems of the individual Intermediaries/Service Centers to CBI Globe. Over the next few weeks the technical documentation containing the technical-infrastructural aspects that the Intermediaries will have to make available to connect to CBI Globe will be published. 

CBI S.c.p.a. will provide a technical-operational team to support integration activities according to the identified standard. Further details will be present in the technical documentation containing the technical-infrastructural aspects that the Intermediaries will have to make available to connect to CBI Globe.

CBI Globe allows Intermediaries to join directly (connecting their IT systems to the service), or indirectly through their IT providers/service centers. In this case, the base annual fee envisaged by CBI's funding model will be paid for a single core information system (e.g. a Service Center corresponds to a single base annual fee if all the banks it establishes are certified on the same information system and therefore they share the same interfaces).

Yes, the basic solution includes a Sandbox module dedicated to TPPs' tests in relation to services developed both in the competitive and cooperative sphere.

CBI Globe provides both possibilities. The first tests performed on the platform will see the use of testing data. The second modality that involves the direct involvement of the ASPSPs is bound to the availability of one or more Banks to make available for this purpose the interfaces present in their test environments.test.

Yes, CBI Globe provides a module dedicated to the Transaction Risk Analysis whose data will be possible to be used by the ASPSP also for internal analysis.

SCA Redirect/OAuth: SCA management mode based on user redirection from the TPP front end to a bank web application on which to perform credential verification and additional authentication factor. After the SCA the bank redirects the control on the TPP front-end, using the appropriate URL provided by the latter.The sharing with the Gateway of the outcome of the verification is managed directly by the Bank, through a dedicated channel that does not involve the TPP;

SCA Embedded: SCA management mode based on the acquisition of the parameters required for the SCA directly through the front-end of the TPP, which provides for the transmission of these parameters to the Bank's systems, through dedicated APIs. This case requires that the outcome be immediately available to the Gateway through the content of the API responses;
 
SCA Decoupled: SCA management mode based on the activation of a Bank's proprietary channel (e.g. Mobile App via push notification), through which the SCA can be carried out. The Bank's systems therefore directly detect the client's will to receive the transaction through their channel, proceeding with the sharing of this outcome directly with the Gateway that can proceed with the transaction.

The SCA and TRA modules provided by CBI Globe are exploitable only within the solution of CBI S.c.p.a. (both for the "core" PSD2 services and for the future VAS services). However, the data provided by the TRA may be used by the participating ASPSP to enrich its internal information.

Yes, CBI Globe provides a module dedicated to monitoring the operations performed. Intermediaries will be able to use, with a periodicity to be defined at a collaborative level, details on their operations through CBI Globe.

The solution provides the mentioned modules (API Portal and Sandbox). It is also envisaged the possibilty to develop value added services (VAS) in both cooperative and competitive areas.

Yes, the basic solution includes a Sandbox module dedicated to TPP tests in relation to services developed both in the competitive and collaborative sphere.

Yes, CBI Globe allows individual direct members to decide whether or not to use some modules offered by the platform (e.g. TRA, anti-fraud, SCA). The TRA will always be performed by the Gateway, with the possibility of the Bank to override the result.

CBI Globe provides a centralized monitoring module that will allow the ASPSPs to receive periodically - with a cadence to be defined - the statistics relating to the operations related to them. The ASPSPs will also receive a timely report of the individual AIS / PIS calls assigned to them by CBI Globe.

Yes, CBI Globe offers the possibility (not included in the basic solution and characterized by ad hoc pricing) to adopt a tool for converting the standards used by the service into the proprietary specifications used by the ASPSP IT systems. It will be possible to address this aspect with the solution provider during the on-boarding phase by the interested PSPs.

The ASPSPs that offer to their customers online payment accounts must provide at least an access interface that allows secure and open communication with third parties (TPPs). In this regard, the service model identified will facilitate the interconnection between ASPSP and TPP, necessary for the use of the "core" functions envisaged by the PSD2 (eg available balance, initialisation of a payment, information on account movements ...).

Yes, the governance of the solution will be entrusted to CBI S.c.p.a. The CBI will set up an ad hoc Working Group with the aim of identifying any evolutions/new services to be exhibited through CBI Globe.

Yes, with the exception of the consent related to the sole Fund Check functionality related to the interaction with the CISPs. In detail, in accordance with the PSD2 regulation (Article 65 "Confirmation of availability of funds") on "request of a Card Information Service Provider (CISP), the Account Servicing Payment Service Provider (ASPSP) must immediately confirm whether the amount requested is available on the payer's account, provided [...] the payer (PSU) has given explicit consent to the ASPSP". CBI S.c.p.a. specifies that the above consent collected by the ASPSP must be sent to CBI Globe through the "CreateConsentForPisp" API. During the meeting, the "RetrieveTPP" API must be called by the ASPSP to acquire the list of TPPs authorized by CBI Globe.

According to current legislation, the Third Parties will be able to obtain in response from the ASPSPs only the information promptly requested by the PSUs. CBI Globe will respond to the API invocations of the TPPs with the data promptly requested by the PSUs to the ASPSP through the TPPs.

CBI Globe provides a module dedicated to the recognition of TPPs. CBI Globe will therefore check the presence of TPPs in the list of certified TPPs prepared by the EBA, as well as validating the certificate submitted by the TPPs according to their role (PISP / AISP / CISP).

The API interfaces exposed to the TPPs will be related - in a first phase - to the "core" features required by the PSD2. In a second planning phase, additional value-added services will be activated, identified and developed at a collaborative or competitive level. The solution also provides for the availability of a tool for counting of API accesses by the TPPs to support the monetization activities that each Bank will be able to manage independently. There is no centralized billing system of CBI Globe. The management of any agreements between TPPs and ASPSPs regarding VAS services offered through CBI Globe will be left to the competitive scope.