Enable Banking Changelog | July 2026

This month we explain why web certificate lifetimes are shrinking, what that means for PSD2's QWACs, and the long-term path we're testing to get ahead of it. We've also expanded Polish payment initiation with four new domestic payment types, and rolled out the usual integration updates across Europe.

Significant Changes and Updates

Shorter Certificate Lifetimes for PSD2 QWACs

Major browsers providers (Google, Apple, Mozilla, Microsoft) enforce global rules on publicly trusted website certificates through the CA/Browser Forum. These rules are getting stricter. Maximum certificate validityhas already dropped to 200 days as of March 2026, falls to 100 days from March 2027, and reaches 47 days by March 2029.

That schedule is meant for ordinary web certificates, but it catches Open Banking QWACs too. Current QWAC root certificates are dual-registered in both browser trust stores (see the Chrome Root Store and Mozilla’s include CA list) and the EU Trusted List. In practice, this means re-registering certificates with every connected bank every few months, already a familiar administrative burden, and these shorter lifespans will only amplify if left unmanaged.

We're actively managing these shorter renewal cycles today so our licensed TPP partners don't feel that burden, while we validate a longer-term fix. Several Qualified Trust Service Providers, Microsec among them, are launching dedicated banking CAs whose roots live only on the EU Trusted List and are deliberately kept out of browser trust stores. These CAs remain exempt from restrictive browser policies, enabling the issuance of QWACs with a validity period of up to three years.

That path isn't fully open yet. Some banks already support the new root CAs; others haven't updated their trust stores to recognise them. Rather than force a switch before the ecosystem is ready, we're actively testing endpoint readiness bank by bank, so we can move each connection over as soon as it's safe to do so, without risking business continuity or connection failures along the way.

A Note on Certificate Key Algorithms:

We continue to recommend RSA-based certificates (3072-bit minimum) over EC-based certificates for QWACs used in PSD2 flows. We’ve observed inconsistent support for EC-based certificates across ASPSPs infrastructures, and prioritizing RSA remains the most reliable approach to ensure broad compatibility and stable service, while maintaining alignment with security standards recommended by both Enisa in the EU and Nist in the US.

Polish PIS

Poland runs several parallel domestic payment rails alongside SEPA, and applications initiating payments there need a way to target the right one. We’ve added four new payment types to the create payment endpoint to better support PIS in Poland.

Payment type	Description
DOMESTIC_PL_BLUE_CASH	Polish instant domestic credit transfers via the BlueCash system
DOMESTIC_PL_ELIXIR	Polish domestic credit transfers via the Elixir clearing system
DOMESTIC_PL_EXPRESS_ELIXIR	Polish instant domestic credit transfers via the Express Elixir system
DOMESTIC_PL_SORBNET	Polish high-value domestic credit transfers via the SORBNET system

See the payment type reference for details. It's a great complement to the wave of Payment Initiation rollouts landing across Polish banks this month (see Integration Updates below).

Integration Updates

New Integrations

We’ve added support for the following institutions:

• BNI Europa (PT)

• Caixa Guissona (ES)

• Trade Republic (DE)

• VeloBank (PL)

Extended Integrations

The following integrations have been extended:

• Alior Bank (PL) – Added payment initiation (PIS) support

• Bank Millennium (PL) – Added payment initiation (PIS) support

• Bank Pekao (PL) – Added payment initiation (PIS) support

• Bigbank (EE) – Added support for SEPA Instant payments

• BNP Paribas (PL) – Added payment initiation (PIS) support

• BPER Banca (IT) – Added a new authentication method for Digital Corporate Banking users

• Credit Agricole (PL) – Added payment initiation (PIS) support

• Erste Bank Polska (PL) – Added payment initiation (PIS) support

• ING Bank Śląski (PL) – Added payment initiation (PIS) support

• mBank (PL) – Added payment initiation (PIS) support

• Nest Bank (PL) – Added payment initiation (PIS) support

• PKO Bank Polski (PL) – Added payment initiation (PIS) support

• Santander Bank Polska (PL) – Added payment initiation (PIS) support

Fixed and Improved Integrations

We’ve rolled out reliability and performance improvements across multiple ASPSPs, including:

• Addiko Bank (SI)

• AIB (IE)

• Alior Bank (PL)

• Banca di Credito Popolare (IT)

• Banco Comercial Portugues (PT)

• Banco Desio (IT)

• BancoPosta (IT)

• Bank Of Valetta (MT)

• Bank Pekao (PL)

• Banque Populaire Alsace Lorraine Champagne (FR)

• Banque Populaire Aquitaine Centre Atlantique (FR)

• Banque Populaire Auvergne et Rhône-Alpes (FR)

• Banque Populaire Banque de Savoie (FR)

• Banque Populaire Bourgogne Franche Comté (FR)

• Banque Populaire du Nord (FR)

• Banque Populaire du Sud (FR)

• Banque Populaire Grand Ouest (FR)

• Banque Populaire Méditerranée (FR)

• Banque Populaire Occitane (FR)

• Banque Populaire Rives de Paris (FR)

• Banque Populaire Val de France (FR)

• BKS Bank (AT, SI, SK)

• BNP Paribas (PL)

• BPER Banca (IT)

• BRD (RO)

• BTG Pactual (LU)

• BTV (AT)

• C24 (DE)

• Caja Rural-supported banks (ES)

• Crédit Maritime Mutuel Grand Ouest (FR)

• Credit Agricole (PL)

• ČSOB (SK)

• Danske Bank (DK, FI, IE, NO, PL, SE)

• DBS Bank (SI)

• Delavska Hranilnica (SI)

• Deutsche Bank (IT)

• DKB (DE)

• Erste Bank Polska (PL)

• FinecoBank (IT)

• Gorenjska banka (SI)

• Handelsbanken (FI, NL, SE)

• HPB (HR)

• ICA Banken (SE)

• ING Bank Śląski (PL)

• Landsbankinn (IS)

• Länsförsäkringar Bank (SE)

• LON (SI)

• Marginalen Bank (SE)

• mBank (PL)

• N26 (EU)

• Nest Bank (PL)

• Nordea (DK, FI, NO, SE)

• Nordea Corporate (DK, FI, NO, SE)

• Nordea First Card (DK, FI, NO, SE)

• Nova KBM (SI)

• Oberbank (AT, CZ, DE, HU, SK)

• OLB (DE)

• Piraeus Bank (GR)

• Postbank (BG)

• Primorska hranilnica Vipava (SI)

• Raiffeisen (CZ, HR)

• Raiffeisen Bank (AT)

• Santander Bank Polska (PL)

• SEB (SE)

• SKB (SI)

• Sparkasse (SI)

• Sparkasse-supported banks (DE)

• Svea Bank (SE)

• Tyche Bank (IT)

• UniCredit Bulbank (BG)

• Vivid Money (DE, ES, FR, IT, LU)

Integrations Removed

The following integrations have been removed:

• Citi Handlowy (PL) – Removed as Citi Bank has sold its Polish retail operations to VeloBank

For a comprehensive list of integration changes, click here.

As always, if you have any questions, feel free to reach out to us at support.api@enablebanking.com.

---

Explore more: