Our integration is secure for several key reasons.
First, most integrations work with read-only access, so they cannot initiate any transactions from your account. You will be asked to provide consent to access your account details, including balance and transactions, not older than 90 days. You can choose which accounts to link with your accounting software if you have multiple business or money accounts. You’ll also be able to see when your data-sharing permissions expire so you can renew access when necessary.
If your business is based in Germany and you connect via FinTS, your accounting software can also send SEPA transfers from your Vivid Business account. You confirm every login and every payment in the Vivid app, so nothing happens without your approval.
Second, we collaborate only with reputable providers and trusted platforms for integration. For account connections, we partner with finAPI, which is fully authorized under Sections 43 and 44 of the German Payment Services Supervision Act (ZAG) and regulated by BaFin. As an account information and payment initiation service provider, finAPI ensures compliance with stringent financial regulations.
The only exception is our integration with Lexoffice, where we use BanksAPI. Like finAPI, BanksAPI complies with PSD2 regulations and follows strict EU guidelines for payment services. It encrypts financial data and adheres to GDPR standards for privacy and security. It is also regulated by BaFin to ensure high levels of protection and compliance.
FinTS works differently: your accounting software connects directly to Vivid, with no provider in between. The FinTS server runs on Vivid’s own systems, using software from Subsembly GmbH, and Subsembly has no access to your data. Your FinTS PIN and your approval in the Vivid app protect every connection.
Third, we also strictly adhere to data privacy regulations, ensuring that your information and finances remain protected at all times.