TD Bank Adopts Secure API for Third-Party App Access
Third-party financial app providers must prepare for new secure connection requirements starting in late 2026.
Updated on Oct. 22, 2026 in Financial Services
Live Poll
Do you trust third-party financial apps to keep your personal banking data secure?
TD Bank U.S. has partnered with the open finance network Akoya to transition from credential-based financial data access to secure, API-based connectivity. The initiative allows TD Bank clients to manage and revoke third-party application access to their data beginning in late 2026.
Why it matters
The shift aims to eliminate the risky practice of clients sharing bank login credentials with outside apps while giving users centralized control over their financial data. This move aligns with broader industry trends toward modernizing data management through secure open-finance infrastructure.
TD Bank has served as an investor in the open finance firm Akoya since 2020. The rollout of the new secure API-based data access model for applications and aggregators is scheduled to begin in the fourth quarter of 2026.
The players
TD Bank U.S.
A major retail banking institution and subsidiary of Toronto-Dominion Bank with operations across the United States.
Akoya
A financial technology firm that operates an open finance network designed to enable secure data sharing between financial institutions and third-party apps.
Jo Jagadish
An executive who joined the Akoya board of directors in 2025.
The details
The integration uses the Akoya Open Finance Solution to replace traditional screen-scraping methods that require users to provide their banking passwords to third-party services. Through this secure API hub, third-party providers register their applications to establish direct, authenticated connections with TD Bank. This structure grants clients a centralized dashboard to track and manage active permissions, allowing them to revoke access to specific applications at their discretion.
Timeline
2020: TD Bank became an investor in Akoya.
2025: Jo Jagadish joined the Akoya board of directors.
Q4 2026: Onboarding of apps and data aggregators begins.
Market Landscape
TD Bank's move to integrate with Akoya follows the broader industry shift toward the secure, standardized data sharing frameworks defined by the CFPB's Personal Financial Data Rights rule. This adoption marks a transition away from outdated, credential-based scraping methods.
Operators currently relying on third-party integrations should prepare for the Q4 2026 transition to API-based authentication to avoid service disruptions. Businesses should audit their existing data-collection methods and prepare to register with the Akoya hub to maintain connectivity with TD Bank clients.
The takeaway
Transitioning to API-based access increases security and consumer trust by removing the need for password sharing. Business operators should begin reviewing their current third-party connectivity workflows to ensure they are ready for the registry requirements arriving in late 2026.
Further reading
For broader context on current industry shifts, see Financial Services.
Live Poll
Do you trust third-party financial apps to keep your personal banking data secure?
