Tarabut Gateway Account Information vs TrueLayer Data API

Tarabut Gateway Account Information connects customer bank accounts through an Open Banking consent journey and provides account data after permission is granted. Its Connect service supplies an embeddable URL that guides customers through bank selection, permissions, bank authentication, and consent. Available information can include accounts, transactions, direct debits, and beneficiaries. Transaction responses may include category and merchant details through Insights. Documentation says one year of transaction history is fetched by default, although available history varies by bank. Consent can be one-time or long-term; long-term consent lasts up to 12 months and is required for categorisation. Refresh frequency depends on the bank, while APIs can request updated balances and transactions. Connect supports English and Arabic. Customers can withdraw access at any time, and Tarabut says credentials remain with the bank. A free Portal account provides an isolated development sandbox. Tarabut presents Connect for personal finance, spend management, and lending flows, with API and web access.

TrueLayer Data API gives applications access to identity, account, transaction and balance data for integrated banks through a single interface. Account details may include the holder’s name, account number and IBAN; card data may include the network, last four digits and name on card, with balances and transactions available at card level. Listed uses include account verification and aggregation, affordability checks, rewards and insights, and money management. TrueLayer offers a customizable user journey or a custom authentication flow for regulated customers. Non-regulated customers and agents of TrueLayer customers must use the customizable flow. Documentation lists client libraries for Node.js, Python, Java and .NET, as well as web and mobile SDKs and hosted payment-page options. The free Sandbox plan uses mock data and has no production access. Production pricing is based on volume and use case; access requires a registered business or commercial entity, a signed commercial agreement and KYB/KYC. TrueLayer requires HTTPS and says data is encrypted at rest and in transit. Identical API requests are cached for one hour, and persistently unreasonable request volumes may be throttled or blocked. The company is headquartered in London and was founded in 2016.