QIS-S-116 QISTRUST.COM THE GOVERNANCE LAYER REV 2026-08-02 · BUILD 13.3
Standards register · Financial Data Exchange — industry standards body

FDX (Financial Data Exchange) API

The dominant open banking API standard in North America, currently at version 6.5. Standardizes how consumer and business financial data is shared between institutions and third parties, with a consent model specifying scope, duration and revocation, and alignment with US financial data rights rules. In April 2026 FDX launched a dedicated initiative to establish safety and data-sharing guidelines for AI agents transmitting consumer banking data.

QIS-S-116·Addresses 3 of 8 MARQUE questions

Why it matters for autonomous finance

The most underrated entry in this register, for a reason nobody has stated. FDX consent is scoped, time-bounded and revocable, granted by a principal to a named third party, and enforced at the API. That is structurally an authority grant, and it has been running at scale in North American banking for years while agentic governance treats bounded authority as an unprecedented problem. It is not unprecedented. It is solved for data access, and the pattern transfers.

What it does not cover

Consent under FDX governs access to data, not authority to act. It answers what a third party may see and for how long; it does not answer what it may commit. The April 2026 agent initiative is an acknowledgment that the gap exists, and it is an initiative rather than a published standard — do not cite it as one.

No model provenance, no drift, no conformance regime for agent behavior. Every entry in this register carries this section. A standard read past its scope is worse than no standard, because it produces confidence without coverage.

Read it