Account Information
Read a customer's bank data through account requests, consents, sync jobs, and optional risk reports.
Account Information Services (AIS) let your application read a customer's bank data once they authorize access. In the UAE, the flow runs through an account request, an account consent, bank authorization, a bulk sync, and optionally a risk report.
In this guide
- The five-step UAE AIS flow (request → consent → authorize → sync → report)
- How data permissions and consent expiry are declared up front
- When to poll sync jobs and risk report status
Availability
Account Information is live for the UAE tenant. See Coverage for sandbox access and subscription requirements.
What you can access
After a successful sync, your application can read the account data slices you requested, for example accounts, balances, transactions, statements, beneficiaries, and related objects. The sync job accepts boolean flags for each slice so you fetch only what your use case needs.
The five-step flow
- Account request. Declare data permissions, consent expiry, and redirect URLs (
POST /data/account-requests). - Account consent. Link the request to a bank provider and start customer authorization (
POST /consent/account). - Authorization. Send the customer to the consent redirect. They approve access at their bank. Spare completes the bank callback. Poll the consent until it is authorized.
- Sync. Queue a bulk sync for the authorized consent and poll until each requested slice completes (
POST /data/sync,GET /data/sync/{jobId}). - Risk report (optional). Generate a scored report or PDF export for underwriting and risk workflows (
POST /report/risk-reportsand related endpoints).
Consent for reading data is separate from consent for payment initiation. See Consent Lifecycle for status values that apply across both.
Key takeaways
- UAE AIS is read-only bank data access, gated by customer consent on a declared permission set.
- Integrate over REST today: request, consent, customer authorization at the bank, sync, then optional risk reporting.
- Poll sync jobs and report status until each asynchronous step completes.