On April 7, the National Government enacted Decree 0368 of 2026, marking the official and mandatory start of the Open Finance model in Colombia. This milestone represents one of the most significant changes for the financial sector in recent years.

More than a regulatory update, this decree redefines the rules of the game: it obliges the supervised entities to interoperate through APIs, share information securely, and significantly strengthen their authentication and data protection schemes.

In this new scenario, adaptability will not only be key to regulatory compliance, but also to maintaining competitiveness in an increasingly digital, open and demanding ecosystem.

A regulatory change that requires technological transformation

Decree 0368 introduces three major challenges for financial institutions:

• The need to enable standardized data exchange through APIs
• The implementation of robust authentication and consent management mechanisms
• The openness to new business models, such as instant payments and payment initiation services

This new framework not only increases operational complexity, but also raises the level of responsibility in terms of security, traceability, and user protection.

How to anticipate: the Intexus approach

At Intexus, we understand that these types of changes should not be approached reactively. On the contrary, they represent an opportunity to evolve and lead.

Strategic response to Decree 0368

Data Exchange and APIs (Chapter 5)
The decree mandates the implementation of APIs under standards defined by the Financial Superintendency . Our Phase 2, focused on digital expansion, is designed to strengthen the connectivity architecture, facilitating secure, scalable, and efficient integration among ecosystem stakeholders.

Strong authentication and consent management
The regulations establish the need for robust mechanisms to validate user identity and manage their authorizations. Our Identity Verification (IDV) and Verifiable Credentials solutions ensure that the owner has complete control over their data, incorporating biometrics and advanced authentication.

Payment initiation services
The new framework drives instant, frictionless payments. Through tokenization and Click to Pay, we enable secure, agile payment experiences aligned with the expectations of the Open Finance ecosystem.

Intelligence and cybersecurity
The increased flow of data between entities raises the risk of fraud. Our intelligence layer, powered by generative AI, allows us to monitor transactional behavior in real time, anticipating threats and responding to the new accountability standards required by regulations.

More than compliance: an opportunity for leadership

Decree 0368 is not only a regulatory obligation; it is an opportunity to redefine how financial entities relate to their clients and the ecosystem.

Organizations that act with a strategic vision will be able to:

• To position ourselves as leaders in the open finance environment
• To offer more agile and secure digital experiences
• Strengthen user trust. Develop new data-driven business models.

One step forward, today

At Intexus, we are prepared to support this transformation process. Our experience in digital identity, payment methods, and cybersecurity allows us to offer a comprehensive solution, aligned with the current and future challenges of the sector.

The time to act is now. Open Finance is no longer a trend: it is a reality that demands strategic decisions.