Raidiam builds trust infrastructure for ecosystems in which many organisations share data and services through APIs, such as national open banking, open finance and digital identity schemes. Its platform registers every participant, lets them find and verify each other, issues the credentials and tokens they use to connect, and checks that their APIs follow the scheme’s rules.
Scheme operators, regulators and financial institutions use it to run these ecosystems, and the same model now extends to AI agents, which can join an ecosystem’s trusted network through an MCP connector.
At A Glance
| Vendor | Raidiam |
|---|---|
| Category | Ecosystem trust infrastructure, API authorisation, participant registry |
| Identities covered | Organisations, applications, APIs, AI agents and their certificates and tokens |
| Agentic AI | AI agent governance through an MCP connector |
| Certifications | ISO 27001, SOC 2 Type II, PCI DSS 4.0, FAPI 2.0 Certified, Cyber Essentials |
| Customers | Open Finance Brasil (Banco Central do Brasil), UK Open Banking |
| Founded | 2016, London |
| Market classification | Authorisation; also Digital Identity & Trust Frameworks |
What Raidiam Does
The company’s mission is “To sit at the centre of every trusted digital ecosystem.” In a shared data scheme, hundreds of banks, fintechs and other parties must be able to trust one another without bilateral agreements. Raidiam handles that centrally: participants are registered in one directory, discover each other’s authorisation servers and API resources, prove who they are with certificates and signed metadata, and receive tokens to reach services. The scheme operator sets the rules once, and every participant is held to the same standard.
Products
Raidiam Connect
Connect is the control plane and central directory for an ecosystem, holding every participant, identity and access rule. Scheme operators use it to run the participant registry and discovery service, manage PKI and credentials through certificate issuance, rotation and revocation, and define governance policy. Raidiam reports 99.99% production uptime for Connect.
Raidiam Auth
Auth is an authorisation server that authenticates participants and issues standards-based tokens for API access. It is FAPI 2.0 Certified, and can stand in for participants that do not run an authorisation server of their own.
Raidiam Assure
Assure gives scheme operators and participants a way to prove that APIs meet the ecosystem’s rules, both before launch and after go-live. The same tests apply to every participant, so conformance is measured against one standard.
ORCA
ORCA writes access rules from a customer’s API specifications. The rules are enforced at runtime in the gateways and APIs the customer already runs, so no new enforcement layer is needed.
Raidiam Advise
Raidiam Advise offers consultancy for open banking and smart data ecosystems in any market or sector.
- Market education and training
- Strategy formulation
- National ecosystem design
How It Works
Access follows a seven step sequence: discovery, trust, selecting resources, requesting authorisation, verifying trust and permissions, issuing access credentials and accessing services. The directory sits at the centre: participants look each other up there, and each side checks the other’s registered certificates and metadata before any token is issued.
| Component | What it does |
|---|---|
| Discovery | A client application queries the federation controller for available authorisation servers and API resources. |
| Trust | Participants are verified through signed metadata, verifiable credentials and certificate-bound tokens. |
| Tokens | Once trust is verified, the participant’s own authorisation server, or Raidiam Auth, issues the access credentials. |
Identities And Systems Covered
| Organisations and participants | Every participant in an ecosystem, held in the Connect directory with its access rules. |
|---|---|
| Applications and APIs | Client applications and the APIs they reach with standards-based tokens. |
| Certificates | Participant certificates managed through Connect’s PKI. |
| AI agents | Each installed copy of an agent connector, identified by its own key. |
| Tokens | Certificate-bound and DPoP-bound tokens issued by a bank’s own authorisation server or Raidiam Auth. |
Agentic AI Capabilities
Agents In The Trusted Network
The MCP connector brings AI agents into Connect’s trusted network, so MCP services can verify an agent the same way they verify any other participant. Every customer’s copy of the connector has its own key, held on their own device.
Trust Resolution And Tokens
Agents are not enrolled by hand; trust is “Resolved, not registered.” On first contact, the bank’s authorisation server checks Raidiam’s signed statements and issues a read only, DPoP-bound token that only that copy of the connector can use.
Company Background
| Founded | 2016 in London, by Ralph Bragg and Barry O’Donohoe, who designed the UK’s Open Banking trust framework. |
|---|---|
| Headquarters | London, United Kingdom. |
| Leadership | Charlotte Crosswell OBE (Executive Chair), Barry O’Donohoe (CEO), Ralph Bragg (CTO). |
| Operations | Profitable trust infrastructure across five countries since 2016. |
| Ecosystems | Open Finance Brasil for the Banco Central do Brasil, with 740 institutions; a national Confirmation of Payee service in New Zealand, starting with fraud data sharing; a national digital identity scheme in Australia connecting the Big Four banks; and Open Insurance Brazil. |
Note: This overview is compiled from Raidiam’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.