Central Asia's
fintech hub.
One gate for all.
Open API integration and Banking as a Service, built and operated as a public private partnership with the Central Bank.
Uzbekistan has set out to be the most attractive home for fintech in Central Asia by 2030. One gate into every bank gets it there: banks and fintechs connect once, and the same connection carries supervisory data and AI assisted supervision.
Open API integrator: build the rail, then run it.
We implement the Central Bank's open API standard as working infrastructure: the directory of banks and providers, consent management, a sandbox, and conformance tests that tell each bank exactly what is left to fix.
Under the partnership we operate it as the national integrator. Banks receive a ready compliance layer. Fintechs reach every bank through one API.
Strategy priority 5: open banking and open APIsBanking as a Service: a licensed platform for new entrants.
A fintech opens accounts, issues cards and moves money through one API, on licensed infrastructure connected to the national payment systems.
Every programme on the platform sits inside the Central Bank's perimeter from the first day: identified customers, AML/CFT controls, and reporting on the same line as the banks.
Strategy priorities 1 and 4: bank and fintech partnership, market entrySupervisory data: one feed, every report derived from it.
Granular data is pulled from each bank automatically and validated at the source against the rules of the Bank's unified data model.
Ad hoc requests move to the same channel, where they are structured, encrypted and logged. Banks send one feed in place of many forms.
Strategy priority 2: SupTech and data based supervisionAI assisted supervision, compliance included.
Prudential, AML/CFT and consumer protection requirements are encoded as machine readable rules, each linked to its article in the regulation.
The system checks incoming data against all of them, ranks institutions and findings by risk, and drafts each finding with its evidence, in line with Law ZRU-1115.
Strategy priorities 2 and 5: AI detection of financial crime, AI pilotsFour goals, built four times
The strategy asks every bank for four things. Built as four projects, each one needs its own interface, its own security review and its own bill.
Every dot is one integration that one bank has to build and keep running.
Seen from the bank, it is the same link four times
Regroup the same dots by bank and each one shows four separate connections into the same core systems, the same customers and the same transactions.
Three of every four repeat work already done
Identity, consent, encryption, validation and logging are built again for every purpose. The red rings are integrations that add cost and risk and no new capability.
Four integrations per bank become one connection
Watch the columns collapse. Each bank connects once, to one secure line that carries identity and consent, standard APIs, validation at the source and a complete audit log.
The Open API integrator runs on that line
Fintechs reach every bank through one API, with the customer's consent. Banks receive the compliance layer ready made.
Operated under the public private partnership.
So does Banking as a Service
New entrants launch accounts, cards and payments on licensed infrastructure, inside the perimeter from the first day.
Operated under the public private partnership.
Supervisory data arrives on the same line
Reports and requests reach the Central Bank structured, checked and on time, on the Bank's own data model.
Built for the Central Bank.
And every rule is checked across every bank
The system reads the same data against the rulebook and directs attention to where the risk is. A person makes every decision.
Built for the Central Bank.
Who does what
We build and operate the two platforms. The Central Bank sets the standard, licenses and supervises. Banks and fintechs connect once and pay for what they use.
Shared infrastructure, proven elsewhere
Infrastructure of this kind is usually run as a shared utility and funded by the institutions that use it. Uzbekistan's law on public private partnership provides the route: a private initiative, reviewed by the public partner.
AuRep
One reporting platform between the banks and the central bank, owned by the country's largest banking groups.
Consolidated Audit Trail
A record of every order in the equity and options markets, required by the regulator and funded by a fee per executed share.
MitID
The national digital identity, a partnership of the state and the banks, built and operated by a private company.
Aligned with the strategy's three phases
- Partnership concept submitted and agreed
- A 90 day AML/CFT supervision pilot with three banks
- The open API standard implemented in a sandbox
- Open API integrator and Banking as a Service live
- Supervisory reporting by API
- Supervision checks extended to every rule area
- Payment organisations and microfinance institutions on the same line
- A working reference for the region