Banking Platform Glossary

A reference for the product, service, security, hosting, integration, and operational terms used throughout the Bansoft website.

Consistent terminology for platform evaluation

Definitions are written for clarity and do not replace legal, regulatory, accounting, or contractual interpretation.

Account type

A configured category that defines the currency and operating properties available when an account is created.

Administrator class

A configured role that grants selected permissions and access to defined profile groups.

API key

A credential used to identify and authorize an approved external integration.

Audit trail

A chronological record of actions, changes, transactions, and security events used for accountability and review.

Available balance

The amount currently available for use after holds or pending activity are considered.

Backup retention

The period for which automated backups or snapshots are kept before deletion.

CDD

Customer Due Diligence: the process and records used to understand a customer and assess relevant risk.

Core banking platform

The operational system that maintains central customer, account, balance, transaction, control, and reporting records.

Current balance

The posted balance of an account before certain holds or pending activity are reflected in the available balance.

Dedicated hosted environment

A hosted deployment allocated for one institution rather than a shared public application instance.

Device authentication

A control that verifies or records a device before allowing account access.

Digital banking

Customer-facing web or mobile access to banking services, often connected to a core banking platform.

DDoS mitigation

Network and application controls intended to reduce disruption from distributed denial-of-service traffic.

Enhanced due diligence

Additional review and documentation applied to higher-risk customers or activities.

FATCA

The U.S. Foreign Account Tax Compliance Act and related data or reporting obligations relevant to certain institutions and customers.

Hosted banking platform

Banking software operated in a provider or cloud environment rather than on infrastructure directly operated by the institution.

KYC

Know Your Customer: identity, ownership, and related information collected and reviewed during onboarding and ongoing monitoring.

Managed banking platform

A banking platform delivered together with defined hosting, maintenance, monitoring, backup, update, and support responsibilities.

MFA

Multi-factor authentication: access verification using more than one factor, such as a password and an authenticator code.

Nostro account

An account used to record funds held by an institution with another bank, often for settlement or currency operations.

OFAC

The U.S. Office of Foreign Assets Control and its sanctions programs and lists.

One-time password (OTP)

A temporary verification code used for login, transaction, profile-change, or password-reset confirmation.

Pending request

A transaction or operational action waiting for administrator review or execution.

Profile group

A configured user segment used for permissions, fees, messaging, or administrator access boundaries.

Proof of funds

Documentation used to support the stated source or legitimacy of funds involved in a transaction.

Rate limiting

A control that restricts the number of requests or attempts within a defined period.

Recovery objective

A defined expectation for how quickly service or data should be restored after disruption or loss.

Recurring platform service fee

A recurring fee for platform access and agreed managed-service components, with the annual framework and billing schedule confirmed by agreement.

Role-based access control

A permission model that grants access according to an assigned role rather than giving every user the same privileges.

Sandbox

A non-production environment used for evaluation, training, development, or integration testing.

Security key

A secondary code or PIN used to confirm selected transactions or sensitive actions.

Session timeout

Automatic logout after a configured period of inactivity.

SOAP web service

An API style that exchanges structured XML messages according to defined operations and schemas.

System log

A record of user, administrator, security, configuration, transaction, and integration events.

TLS

Transport Layer Security: the protocol used to encrypt data transmitted over HTTPS.

Web application firewall (WAF)

A control that inspects web requests and applies rules to detect, challenge, log, or block suspicious traffic.

WebView app

A mobile application wrapper that displays a responsive web application inside an iOS or Android app container.