Tink uses both real bank APIs (aka PSD2 APIs) and non-regulated proprietary APIs (screen-scraping, reverse engineering mobile APIs). The former method does not

Tink uses both real bank APIs (aka PSD2 APIs) and non-regulated proprietary APIs (screen-scraping, reverse engineering mobile APIs). The former method does not require sharing bank credentials - authentication happens on bank's side and data is shared only with end-user's consent. The latter method requires users to share bank credentials. At Nordigen, we built a freemium alternative to Tink using only real bank APIs / PSD2 APIs.