XS2A allows third parties to access the bank accounts of customers, with permission, via an API. This allows AISPs to access information about accounts and balances, and PISPs to initiate payments without going through the traditional payment networks (such as credit cards).