Request for information - PSD2-service provider

BACKGROUND INFORMATION This is Request for information for PSD2-service provider. With this RFI DVV is seeking information on suppliers interested in delivering the services described. The Digital and Population Data Services Agency (DVV) promotes the digitalization of society, secures the availability of data, and provides services for the life events of its customers. DVV employs approximately 1,000 professionals and serves its customers in 36 offices throughout Finland. DVV leads the way, reforms society, and supports citizens in their interaction with public administration. DVV’s aim is to further promote the smooth functioning of Finnish society. Digitalization is one important way to achieve this. In addition to its other duties, the Digital and Population Data Services Agency (DVV) acts as the guardianship authority under the Guardianship Services Act (442/1999), excluding matters related to guardianship services in the Åland Islands. Among other things, the Digital and Population Data Services Agency audits the annual and final accounts issued by the guardians. As part of the Guardianship Services, DVV plans to provide a tool for guardians with accounts or bookkeeping obligations to prepare their accounts and financial statements in accordance with the Guardianship Services Act and the Act on the Continuing Power of Attorney. As part of this service, transactions in the payment accounts of beneficiaries represented by guardians could be retrieved via interfaces directly to the accounting system. For this purpose, DVV is mapping the procurement of a so-called PSD2 service provider in order to use the account information service for retrieving transactions through them.

NOTE This is NOT a prior information notice, a procurement notice, a contract notice nor an invitation to tender. This notification and/or answering to it do not create any obligations for DVV or for those who choose to answer to it. DVV does not pay any compensation for taking part in answering to this RFI. The information provided by DVV is preliminary at this point and it is subject to change. Taking or not taking part in the RFI does not change the standing or status of a supplier in the eventual procurement process. INSTRUCTIONS ON HOW TO RESPOND TO THIS RFI AND DIALOGUE PROCESS Please, respond to this request for information by 16.15 on 10 June 2024. Responses and their appendices should be sent by email to hankinnat@dvv.fi, and the responses should be titled as ‘Response to the request for information, PSD2 service provider, [Company name]’ In the response, please provide the following information and answers: 1. Brief company presentation, contact person(s) for the information request and an overview of your solution suitable for the needs described in the background information of the procurement object 2. List of complete integrations with Finnish banks. 3. References / customer relationships corresponding to the procurement object in production (especially Finnish public administration organisations, if available). 4. The general pricing model of the service offered, considering the implementation of the service and the charges for the continuous service. 5. Preliminary estimate of the workloads and resources required to deploy the service 6. Does it affect the content and operating model of the service whether the client (DVV) has a licence from the Financial Supervisory Authority or not? 7. How has your service considered a situation in which the consent provider and the service user are not the account owner but has access rights to the account? Is there any separate action required with the bank in this case? How do the user's own accounts and those of the account holder they represent stay separate in the service? 8. When retrieving account information, is it also possible to obtain information about pending payment orders (e.g. an invoice has been paid from the account, but the due date is in the future)? 9. Please, use screenshots to describe the user's consent path (from the customer's service to the bank and back) and its customer-specific personalised parts (for example, placement of the customer organisation's logo or possible changes to the colour scheme) 10. If the end-user wants to withdraw their prior consent, how will this be managed? Do you have a sequence diagram (Information System - TPP [AIS] - Bank)? 11. Is it possible for end users to use the service in Finnish and Swedish? How is the end user's language selection made? 12. Does the service function in the same way in all respects in mainland Finland and Åland? 13. General descriptions of the data protection and information security matters of the service (The client shall specify a minimum level when the tendering process is implemented, e.g. processing data is only permitted in the EU/EEA area) PROCESSING OF INFORMATION REQUEST RESPONSES AND POSSIBLE PROCUREMENT PROGRESS The responses to the request for information will be treated as confidential and they will only be used in the preparation of the future tendering process. DVV also reserves the right to request additions to the responses received and to conduct more detailed discussions with market operators based on the responses. The aim is to make the final decisions on the implementation and method of the procurement in late 2024 so that when the tendering process is implemented, cooperation with the service provider would begin in 2025. Privacy statement for the procurement of the Digital and Population Data Services Agency: https://dvv.fi/en/privacy-statement-for-the-procurement