<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2019-06-14","gaps":[],"covered":["EBA Q&A 2019_4693 — Q&A — Scope of the corporate SCA exemption. [Final Q&A] L3"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"the EBA publication"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/psd2/level-3/q-and-a/eba/eba-qa-2019-4693-scope-of-the-corporate-sca-exemption","url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-4693-scope-of-the-corporate-sca-exemption","title":"EBA Q&A 2019_4693 — Q&A — Scope of the corporate SCA exemption. [Final Q&A]","family":"l3","work_id":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2019-4693-scope-of-the-corporate-sca-exemption","status":"final q&a","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"EBA Q&A register, 14 June 2019","check":{"against":"the EBA publication","on":"2026-10-26"},"check_result":"matched","official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4693","valid_from":"0001-01-01","valid_until":null,"revision":1,"content_id":"40a62b1ecbe51180","change_date":null,"nearest_versions":["2019-06-14"],"first_text_date":null,"correction_applies":false,"versions":["2019-06-14"],"version_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-4693-scope-of-the-corporate-sca-exemption/versions/2019-06-14","revision_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-4693-scope-of-the-corporate-sca-exemption/versions/2019-06-14/rev/40a62b1ecbe51180","versions_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-4693-scope-of-the-corporate-sca-exemption/versions","relations_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-4693-scope-of-the-corporate-sca-exemption/relations","source_line":"Answer by the EBA, published in its Q&A tool · not legislation · published 14 Jun 2019 [Final Q&A]","attribution":{"prepared_by":"EBA","published_by":"EBA","published_in":"EBA Single Rulebook Q&A tool","document_type":"qa_answer","legal_nature":"not_legislation","addressees":"not stated in the document","dates":{"published_on":"2019-06-14","question_submitted_on":"2019-05-02","locators":{"published_on":"EBA Q&A register entry 2019_4693, field 'Final publishing date'","question_submitted_on":"EBA Q&A register entry 2019_4693, field 'Submission date'"}},"adoption":null}}} -->
---
title: "EBA Q&A 2019_4693 — Q&A — Scope of the corporate SCA exemption. [Final Q&A]"
shortTitle: "EBA Q&A 2019_4693 — Q&A — Scope of the corporate SCA exemption. [Final Q&A]"
answer_id: EBA_QA_2019_4693
status: "Final Q&A"
type: qa
instrument_type: qa
authority: EBA
binding: false
binding_character: non_binding
legal_status: in_force
regulation: "PSD2"
psd2_level3: true
mica_level2: false
legal_basis: "Article 98(1) PSD2"
date: 14 June 2019
source_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4693
lifecycle: "Final Q&A"
text_version: "EBA Q&A register, 14 June 2019"
source_url: "https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4693"
check_status: matched
verified: true
last_checked: 2026-10-26
checked_against: "the EBA publication"
source:
  prepared_by: "EBA"
  published_by: "EBA"
  published_in: "EBA Single Rulebook Q&A tool"
  evidence:
    prepared_by: "Answer prepared by the EBA."
    locator: "EBA Q&A register entry 2019_4693, field 'Answer prepared by'"
document_type: "qa_answer"
legal_nature: "not_legislation"
addressees: "not stated in the document"
dates:
  published_on: "2019-06-14"
  question_submitted_on: "2019-05-02"
  locators:
    published_on: "EBA Q&A register entry 2019_4693, field 'Final publishing date'"
    question_submitted_on: "EBA Q&A register entry 2019_4693, field 'Submission date'"
lifecycle_label: "Final Q&A"
---

**Answer by the EBA, published in its Q&A tool · not legislation · published 14 Jun 2019 [Final Q&A]**

*Final Q&A · EBA Q&A register, 14 June 2019 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4693)*

| | |
|---|---|
| **Full title** | EBA Q&A 2019_4693 — Q&A — Scope of the corporate SCA exemption. \[Final Q&A\] |
| **Prepared by** | EBA |
| **Published by** | EBA, in the EBA Single Rulebook Q&A tool |
| **Reference** | EBA_QA_2019_4693 |
| **Document type** | Q&A |
| **Legal nature** | Not legislation |
| **Addressees** | Not stated in the document |
| **Dates** | Published 14 June 2019; question submitted 2 May 2019 |
| **Legal basis** | Article 98(1) PSD2 |
| **Related instruments** | None recorded |
| **Text on this page** | Word for word — the full text of the EBA publication |

**Scope of the corporate SCA exemption.**

### Question

Does the corporate SCA exemption apply only if the payer initiates (and transmits) payments directly to their ASPSP and not for payments transmitted via a 3rd party service provider (i.e. a PISP)?

### Background

Prior to the application of PSD2, in the corporate banking space many Payment Initiation Service Providers (PISPs) offered multi-banking services to corporates (e.g. via a browser front end or mobile app). These PISPs connected to the AISP via 'secure corporate payment processes and protocols' such as SWIFTNet, the Electronic Internet Banking Communication Standard (EBICS) or via 'host-to-host' protocols such as Secure FTP (SFTP). Many of these PISPs may choose to retain their existing connections as opposed to migrating to a new XS2A API. The text of the PSD2 directive does not appear to distinguish between PISPs that connect to ASPSP's via a certified PSD2 dedicated interface (XS2A API's) and those that connect via other dedicated 'secure corporate payment processes and protocols'. The text of Article 17 refers to "the use of dedicated payment processes or protocols that are only made available to payers who are not consumers". There is no mention of PISP's using these 'dedicated payment processes or protocols' in this article.

***

### Answer

‘Payment initiation’ as a process in Article 17 of the Commission Delegated Regulation (EU) 2018/389 is not to be confused with payment initiation services; the latter referring to a payment that is initiated by a third party. Further, in accordance with Article 66(1) of PSD2, a payer has the right to make use of a payment initiation service provider (PISP) to initiate a payment. In the case where a payer uses a PISP to initiate a payment, as clarified in paragraph 39 of the EBA Opinion on the implementation of the RTS on strong customer authentication and secure communication (EBA-Op-2018-04), it is the responsibility of the account servicing payment service provider (ASPSP) to identify whether or not an exemption applies, including the exemption under Article 17 of the Delegated Regulation.

***

**Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4693)

## Related Level 1 articles

- [Article 98 — Regulatory technical standards on authentication and communication](../../../articles/98.md)