Many firms in the financial services industry have been on a path to transforming from closed systems to open, API-driven platforms that can integrate with fintech partners and third-party providers while maintaining security and compliance standards. FDX has successfully delivered a robust API standard as a designated “standard-setting” body with broad industry support. The security model presents a two-part framework using two approaches: a Green Profile and a Blue Profile. The Blue Profile shown represents the most rigorous method for securing APIs connected to highly sensitive data.
This executive brief establishes a path forward through the implementation of the FDX API v.6.4.0 standard. It is based on an analysis of the newly published update to the standard for financial-grade API implementation, review of current related legal activity, and previous Datos Insights publications.
Clients of Datos Insights’ Cybersecurity service can download this report.
This report mentions the Financial Data Exchange (FDX) and the Financial Services Information Sharing and Analysis Organization (FS-ISAC).
About the Author

Jane Ginn
Jane Ginn is a cybersecurity analyst with extensive knowledge of the cybersecurity industry and cyber threat intelligence tradecraft. She is a leader and manager with over 35 years of experience in information technology, international business, and engineering consulting. From 2014 to 2023, she served as the Secretary of the Organization for the Advancement of Structured Information Systems (OASIS) Cyber Threat...
Other Authors

Stewart Watterson
Stewart Watterson is a Strategic Advisor in the Retail Banking & Payments practice at Datos Insights. He brings a broad range of experience from 30 years of consumer banking with Chase, NationalCity, and PNC, serving as SVP, Mobile Wallet & Emerging Payments. His focus includes consumer lending within all asset classes, small-and-midsize-business unsecured lending, digital banking, credit card, card and...