Three Routes to One Destination: Comparing Open Finance in Chile, Colombia and Peru
An Ozone API & Finerio Connect Article
Ask three regulators to build the same thing, in the same region, in the same decade, and you get three different roads. Chile, Colombia, and Peru are all building toward Open Finance. None of them are doing it the same way, and none of them are on the same clock. And that is understandable as we have seen around the world that there is not one perfect blueprint. Each country may have different objectives, different market conditions and different political and cultural considerations.
Ozone API and Finerio Connect have been building alongside regulators and institutions across all three markets, plus live ecosystems already running in Guatemala. This article provides you with a comparison of where each one actually stands today from businesses on the ground.
Chile: the framework is confirmed and dated. Every piece of the Sistema de Finanzas Abiertas is defined: the law, the operating rules, the technical annex. What’s left is implementation, not interpretation.
Colombia: the how came before the what and when. The security and technical profile has been public since February 2024, and the obligation itself has been binding law since April 2026. But the SFC still hasn’t set a deadline for issuing the data standards that would make an actual exchange possible.
Peru: still in design, and still open to influence. The SFA guidelines are being created, following public consultation which closed on 7th August 2026.
| Chile | Colombia | Peru | |
| Legal status | Framework confirmed and dated, in force from 3 July 2027 | Binding since 10 April 2026, but not operational | In design; regulation expected end of 2026 |
| Technical specification | Complete: profiles, SLAs, traffic limits, formats, reporting | Partial: security and transport defined, no data dictionary or endpoints yet | Outstanding: two data annexes exist, the expected FAPI profile is yet to be published |
| Real data sharing | Dated: first APIs Dec 2027, retail data Apr 2028 | No date; clock starts per data standard, none issued yet | Projected H1 2028, with 6 months of history |
| Mandated universe (estimate) | 82 entities (42 Group 1, 40 Group 2) | 175 to 185 entities, 12 license types | 94 to 128 entities, 4 waves |
| Phasing | Two groups: 5 to 18 months / 20 to 30 months | None by entity; phasing is by data category | Four waves, H1 2028 to H2 2030 |
| Simplified regime for small players | Yes, for Group 2 firms under 100,000 customers | None; the only market with no relief for smaller entities | Not a formal regime yet; door left open in the diagnosis |
| Monetisation | Not addressed in the rules reviewed | Yes, already in force, cost-recovery basis | Contemplated in draft guidelines, not yet in force |
| Nearest milestone | Sandbox and directory, ~October 2026 | ~7 August 2026: technical-profile transition ends | 7 August 2026: SFA guideline comments close |
Chile rewards early certification, not early guessing. With the rulebook already fixed, the work is entirely operational: securing the two mandatory third-party certifications, meeting the transaction-latency requirements (4 sec for Data APIs and 0.8 sec for Payment APIs, after the implementation phase, and hitting the service levels the CMF has already published. The real decision point isn’t the July 2027 effective date. It’s the 2027 budget cycle, running September to November 2026, because the certification path has to close before Group 1’s roster deadline around September 2027.
Colombia rewards contractual discipline. Because so much of the operational detail, consent duration, revocation mechanics, service levels, dispute resolution, is left unwritten by design, institutions have to close those gaps themselves through bilateral agreements and platform architecture. Colombia is also the only market already charging for data access today, on a cost-recovery basis, which changes the commercial conversation entities need to have with counterparties right now, not in 2028.
Following the closing of the comment window on 7 August 2026, Peru will start converging toward the same kind of fixed specification Chile and Colombia already have. We await to see what the final regulations will look like and expect to hear more in the coming months.
Different laws, different timelines, different monetisation models, but every regulator here is solving the same underlying problem: how to move account and transaction data safely between institutions, at scale, with enforceable consent. Security profiles converge on FAPI 2.0 in all three markets, even where the surrounding detail (Message Signing, PKCE, token binding) differs. Consent design in all three explicitly bans pre-ticked boxes and manipulative patterns. And in all three, the institutions that treat this as a compliance checkbox will be behind the ones that treat it as infrastructure, which will in turn be behind the ones that treat it as a business strategy.
That’s the point Nick Grassi, Co-CEO of Finerio Connect, makes about the region as a whole:
“Our alliance with Ozone API has been a game-changer for the region. We realized early on that waiting for regulation was a missed opportunity. Together, we are proving that Open Finance is a business model, not just a compliance checkbox. By launching live ecosystems in Colombia, Chile, and Guatemala ahead of the regulators, we aren’t just preparing our clients for the future; we are helping them build it today.”
The three-market comparison isn’t an academic exercise for us. It’s the map we work from. Ozone API brings the standards-compliant technical platform, built by the people who helped write the original UK Open Banking standard, and Finerio Connect brings the regional deployment experience of running live ecosystems ahead of regulatory deadlines rather than after them.
That combination matters differently in each market. In Chile, it means having a platform already built to the FAPI 2.0 and Message Signing spec the CMF has locked in, with certification support ready before the 2027 budget cycle closes. In Colombia, it means infrastructure that can operate correctly under a binding law today while the data standards it will eventually connect to are still being written. In Peru, it means bringing the operational lessons from three other markets into the current consultation process.
Three regulatory paths, three different clocks, one underlying shift. Open Finance in Latin America isn’t a future event anymore. In Colombia it’s already law. In Chile the countdown has a fixed end date. In Peru the regulations are currently in design. Whichever market an institution operates in, the decision it’s actually facing is the same one: build now, on infrastructure that already understands where each of these regulations is headed, or wait and close the gap under pressure later.
Get in touch with the Ozone API team to start building for the future.
An Ozone API & Finerio Connect Article The shift in Colombia’s regulatory framework from an optional model to a mandatory requirement was paramount in setting clear, unified expectations across the entire financial ecosystem. With Open Finance officially backed by law since April 2026, the market’s focus has now turned to the critical transition from legal...
An Ozone API & Finerio Connect Article Most Open Finance debates in Latin America still centre on what the rules will say, but not Chile. The Sistema de Finanzas Abiertas (SFA) is defined in law, its technical annex is published, and every deadline that matters is already counting down. What’s left isn’t interpretation, it’s execution....
An Ozone API & Finerio Connect Article Peru is a market in the region where the final rulebook hasn’t been shared yet, and that’s precisely what makes it different. Ozone API and Finerio Connect track Chile, Colombia, and Peru as three distinct paths to the same destination, and Peru has only recently finished allowing market...