For years, the tension between open banking mandates and commercial banking interests played out in regulatory proceedings and industry working groups. In March 2026, Truist Financial and Plaid resolved that tension into a product: a data-access agreement that replaces credential-sharing with an FDX-aligned API, giving Truist’s consumer and small business clients tokenized, revocable control over their financial data.
From Screen Scraping to Cooperative Infrastructure
The old model of open banking connectivity relied on consumers handing their banking credentials to third-party applications. Those applications would then log in as the user, scraping account data. The approach worked but created security liabilities for banks and opacity for customers who could not easily see or revoke what they had shared.
The Truist and Plaid agreement eliminates this pattern entirely. Under the new architecture, data flows through an FDX-aligned API that Truist controls, with Plaid acting as the connectivity layer between the bank and the fintech applications consumers choose to authorize. Consumers can view, manage, or revoke connections at any time through their Truist accounts.
Shared Intelligence as the Security Model
What distinguishes this partnership from earlier open banking implementations is the bidirectional flow of risk data. Truist and Plaid share risk indicators sourced from each company’s existing networks to improve fraud detection. Plaid’s data network spans over 12,000 institutions across the U.S., Canada, the U.K., and Europe, providing pattern recognition across a broad transaction surface. Truist contributes behavioral data from its base as a top-10 commercial bank with $548 billion in total assets.
Sherry Graziano, Head of Digital, Client Experience and Marketing at Truist, positioned the agreement as part of the bank’s broader technology strategy: the partnership delivers increased financial control and insights while maintaining institutional-grade security standards.
The Returning User Problem
One operational detail deserves attention. The partnership introduces a simplified returning user experience through a streamlined login flow. This addresses a persistent drop-off point in open banking: users who connect an account once but abandon the process when asked to re-authenticate months later.
By sharing session context between Truist and Plaid, the returning user experience reduces friction without compromising security. The technical implementation relies on shared risk signals to establish confidence in the returning session, avoiding the need for full credential re-entry.
Implications for the Open Banking Ecosystem
Truist joins a growing list of major U.S. banks that have moved from adversarial to cooperative postures with data aggregators. The shift matters because it establishes API-first connectivity as the default rather than the exception. When a $548 billion institution commits to this architecture, smaller banks and credit unions face increasing pressure to follow.
Christy Sunquist, Head of Open Finance at Plaid, framed the deal as one that “combines Truist’s commitment to client-centric innovation with Plaid’s leading data network to deliver industry-defining experiences.” Beyond the partnership language, the structural outcome is clear: credential-sharing is ending, and cooperative data infrastructure is replacing it.
For fintechs that depend on bank data access, the Truist agreement signals stability. API-based connections carry lower risk of disruption than screen-scraping methods, which banks can block unilaterally. The trade-off is that fintechs must now operate within the data governance frameworks that banks and aggregators jointly define.
Source: PR Newswire, March 12, 2026
Related coverage: Visa Embeds Payment Infrastructure Inside OpenAI | FIS Launches First Agentic Commerce Platform for Banks
