Skip to main content
Back to blog
Finance7 min read

Open Banking for Landlords: What It Is and Why It Matters

How Open Banking works for rent tracking and reconciliation, its security model and limits. Tendmere’s own bank feed is not live yet.

By Tendmere editorial team · Published 15 February 2026 · Reviewed 27 September 2026

No signup needed to read or print. Printing opens your browser’s dialog; save-as-PDF options vary by device.

On this page

Tendmere · Landlord Guide

tendmere.com/blog/open-banking-for-landlords

Tendmere’s automatic bank feed is not live. This guide explains how Open Banking works in general. In Tendmere today you record rent manually or import a CSV statement.

Open Banking lets you securely share your bank transaction data with authorised apps — read-only, regulated by the FCA, with cryptographic guarantees the app can never initiate a payment without your explicit consent. For UK landlords managing one to fifty properties, it removes the single most time-consuming admin job: matching rent payments back to tenants and tagging outgoings to the right tax category. This guide walks through what Open Banking actually is, how the security model works, what changes when you wire it into your landlord workflow, and the realistic limits.

What Open Banking actually is

Open Banking is a UK regulatory framework launched in 2018 under the Competition and Markets Authority (CMA) order on the nine largest UK banks (the "CMA9"). It mandated those banks to expose two categories of API to FCA-authorised third parties:

  • Account Information Services (AIS) — read-only access to account details, balances, and transaction history. This is the API that powers landlord rent matching, accounting tools, mortgage affordability checks, and budgeting apps.
  • Payment Initiation Services (PIS) — the ability to initiate a payment on the user's behalf, with explicit authorisation per transaction. This is what powers Pay-by-Bank checkouts and recurring rent collection (variable recurring payments / VRP).

Both categories require the third party to be authorised by the Financial Conduct Authority (FCA) as either an Account Information Service Provider (AISP) or Payment Initiation Service Provider (PISP), on an ongoing basis, with annual fees and regular reporting. The FCA's register at register.fca.org.uk shows every authorised firm — verify before connecting any tool to your bank.

How the security model works in practice

The second Payment Services Directive (PSD2, Directive (EU) 2015/2366) introduced Strong Customer Authentication (SCA), and Open Banking inherits it. The flow looks like this when you connect a bank account to a landlord tool:

  1. You select your bank inside the tool.
  2. You're redirected to your bank's own authentication system (banking app, web sign-in, or biometric).
  3. Your bank shows you exactly what you're authorising — typically read-access to specified accounts for a 90-day window.
  4. You confirm in the bank's UI. The third party never sees your password.
  5. Your bank issues a short-lived token to the third party. That token can only do what you authorised.
  6. Under FCA rules in force since 2022, you reconfirm your consent with the app provider at least every 90 days, rather than re-authenticating with your bank each time. The bank still applies strong authentication when you first connect.

Three things follow from this:

  • The third party never has your banking credentials. Pre-Open Banking "screen scraping" tools used to ask for your username + password and log in as you. That model is now banned for FCA-regulated work.
  • You can revoke access at any time from your bank's app — usually under "third-party access" or similar. Revocation is immediate at the bank API level; the third party loses the token.
  • The audit trail is your bank's, not the third party's. If something goes wrong (an unauthorised transaction, a misallocated payment) the bank's logs are the source of truth — not the app's.

What a working bank feed typically looks like

This is how bank feeds generally work in landlord tools that have one. Tendmere’s bank feed is not live, so none of this happens in Tendmere today.

Day 1

You connect your business / landlord bank account. The tool pulls your last 90 days of transactions (the typical AIS history window). Inflows tagged "RENT-MAY" or matching a tenant reference are auto-matched; outflows tagged "BRITISH GAS" or "AVIVA" are auto-categorised against HMRC SA105 categories. You spend 10 minutes confirming or correcting the first batch — the system learns from your corrections, so the next batch is more accurate.

Week 2

The first new rent payment arrives. The tool matches it to the right tenant in real time and updates that tenancy's "paid up to" date. You no longer wait until month-end to discover that May's rent was £50 short.

Month 3

Your matching accuracy is approaching 100% because the model has seen three months of your patterns. You stop spending Sundays reconciling. Year-end becomes a one-evening review of categories rather than a multi-day rebuild from bank statements + receipts.

Tax-year-end

Digital records can make an SA105-aligned review easier, but you still need to verify totals, categories and any accountant adjustments. Actual preparation time depends on the completeness and quality of the records.

The limits — what Open Banking can't do

Honesty matters here, because landlord tools tend to oversell this:

  • It can't see joint personal accounts where you only have a card mandate. If the property income hits an account in your spouse's sole name and you both have authority to spend, the AIS authorisation has to come from the named account holder.
  • It can't match cash payments. If your tenant pays in cash and you bank it under a generic "DEPOSIT" reference, you'll need to manually link that to the tenant.
  • Reference fields are messy. Tenants don't always use the reference you give them. The tool's matching is a best-effort fuzzy match on amount + tenant + date proximity; you'll still occasionally need to confirm an ambiguous match.
  • Some accounts aren't covered. Building society savings accounts, Cash ISAs, and some credit-union accounts aren't in scope of the CMA9 mandate. The big high-street current accounts are.
  • Standing orders look identical to one-off payments at the API level. Detecting a stopped standing order requires watching for an expected payment that didn't arrive — the tool has to know what to expect.

Open Banking vs. the alternatives

Three other ways landlords have historically tracked rent:

  • CSV statement import: Download monthly statements from online banking, parse them into the tool. Reliable but lagging (you only see month N data after month-end), and costly in admin time.
  • Manual entry: Type each transaction into a spreadsheet or app as it lands. Most accurate categorisation (you remember what each spend was for), but the slowest method and prone to gaps when life gets busy.
  • Letting agent statements: If an agent collects rent, they send a monthly remittance with all rent receipts grossed up and their fee deducted. Easy on you, but the underlying tenant-by-tenant detail is in their software, not yours — and you pay 8–12% for the service.

Open Banking can reduce reconciliation work, but timing, matching quality, bank coverage and ongoing consent depend on the provider and the account. It does not remove the need to review categories and unmatched transactions.

Which banks take part?

The CMA9 mandate covers Barclays, HSBC (including First Direct + M&S Bank), Lloyds (including Halifax + Bank of Scotland), NatWest (including RBS + Ulster Bank), Santander, Nationwide, Danske, AIB, and Bank of Ireland. Beyond the CMA9, the FCA register lists 40+ challenger banks and credit-card issuers participating voluntarily including Monzo, Starling, Revolut, Tide, Atom, Metro Bank, TSB, Co-operative Bank, Triodos, Allica, Cashplus, Mettle, and most others a UK landlord might bank with. Which banks a particular app can connect to depends on its provider. Tendmere will publish its supported banks only once its provider connection is live. Until then, enter transactions manually or upload CSV statements.

Privacy + data retention

Retention depends on the service, purpose and applicable privacy terms. Tendmere does not receive Open Banking transaction data in the current release because the provider connection is not live. Review the current privacy notice before enabling any future connection.

Cost

Open Banking AIS access is free at the bank level — there's no API charge to the third party. Landlord tools that bundle Open Banking typically include it in their plan rather than charging per connection. There's no per-transaction fee, no setup fee, no minimum balance requirement.

Getting started in Tendmere

Tendmere's automatic bank feed is not live yet. The current Bank Connections screen records interest and provides manual or CSV reconciliation while a read-only connection is prepared through an FCA-authorised provider. Tendmere is not claiming to be an authorised AISP.

Related guides

Put this into practice

Tendmere organises recorded compliance dates, reviewed tax categories and rent records. Every plan is free right now.

No card required · Every plan free for now