SAVIS Open Banking Platform

SAVIS Group is a Vietnamese technology company with more than 22 years of experience in trusted infrastructure, PKI and digital signatures for government agencies and banks. Its finance portfolio includes open banking, Smart eKYC, TrustCA digital signatures, tokenization and identity management for financial institutions.

The Open Banking solution uses hardware security modules as the root of trust. An API gateway integrated with HSM supports OAuth, JWS and TLS with rate limiting and traceability; a microservice consent module controls shared data by third party, account, scope and duration and keeps evidence of consent; an HSM-based key management system protects keys; a third-party provider module manages partners and their certificates; and a SIEM layer centralises monitoring. The design scales from small banks to large banks with high availability.

• HSM-backed API gateway: Enforces OAuth, JWS and TLS with rate limiting and request tracing.
• Consent management: Controls data sharing by party, account, scope and duration with stored evidence.
• Key management: Protects cryptographic keys and evidence integrity inside HSMs.
• Third-party management: Onboards partners and manages their digital certificates.
• Central monitoring: Feeds API and consent events into a SIEM for traceability.
• Scalable deployment: Supports both simple setups for small banks and high-availability clusters.

A commercial bank can publish account information and payment APIs to fintech partners under consent control. A mid-sized bank can meet open API circular requirements without building a security layer in house. A bank can let accounting or ERP vendors pull statements for corporate clients with full audit trails.

Banks manage API security centrally, which reduces the risk of credentials leaking from individual applications. Keys stay inside HSMs while API, payment, data sharing and consent flows follow one control model. Consent lifecycle tracking with stored evidence supports audits. The solution is positioned to help banks meet State Bank of Vietnam open API circulars and the 2025 Personal Data Protection Law.

The State Bank of Vietnam has issued circulars on open APIs in banking, and the Personal Data Protection Law takes effect alongside them, so banks must expose APIs to fintech partners while proving security and consent control. This creates demand for local providers that combine API management with PKI and HSM expertise.

Vietnamese company serving ministries, banks such as VPBank, Agribank, BIDV, Sacombank, VietinBank and Techcombank, and enterprises such as EVN and Viettel. Also offers Smart eKYC and TrustCA digital signature services. Its SAVIS MRP AI product won a Sao Khue 2026 award in May 2026.