CDR Certified Mambu-Ready Biza.io Partner Consumer data phase

CDR consumer data for Mambu.
Certified. Pre-integrated. Turnkey.

Product data is the easy part. The consumer data phase — accounts, balances, transactions flowing out of your Mambu core under consent — is where CDR programmes stall. The Moroku Mambu–Biza Connector is a certified bridge between Mambu and Australia's leading Open Banking infrastructure, delivered as a managed service.

Nov 2026
Initial providers, consumer data
May 2027
Large providers, consumer data
1
Vendor, not four
100%
CDR compliant by design
The NBL Rollout, Honestly

Two phases. Two very different problems.

The CDR NBL designation rolls out in tranches. The first phase is manageable. The second is where most programmes come unstuck — because it's the phase that actually needs your core banking system.

Phase 1 13 Jul 2026

Product reference data

Initial + Large providers. Part 2 CDR Rules.

WhatFees, rates, charges, eligibility, feature descriptions
APIPublic, unauthenticated
ConsentNot required
Core integrationNo
DifficultyLow — largely a publishing exercise
Biza's Product Manager handles this. Your product and marketing teams maintain the data; the publisher takes care of the CDR conformance. You don't need the Mambu connector for this phase — and we'll tell you so.
Phase 2 9 Nov 2026 · Initial
10 May 2027 · Large

Consumer data sharing

Initial then Large providers. Part 4 CDR Rules.

WhatAccounts, balances, transactions, direct debits, scheduled payments, account holder data
APIAuthenticated (FAPI, OAuth/PKCE)
ConsentFull lifecycle — grant, amend, revoke, expire
Core integrationYes — data lives in Mambu
DifficultyHigh — this is the real programme
This is where the connector earns its keep. Consumer data has to flow from Mambu to Biza's CDR gateway under authenticated consent, with auditable monitoring and full complex-request handling by March/September 2027.
Initial provider
> $10B

Resident loans + finance leases, current month and 11-month average. Consumer data obligations from 9 Nov 2026.

Large provider
$500M – $10B

Same loan measure, plus more than 500 customers. Consumer data obligations from 10 May 2027.

Voluntary
< $500M

Below the large-provider threshold. Participation is optional — but election means full compliance.

Scope Phase 2 now, execute over 2026.
Large providers comfortably hit the May 2027 window with scoping in H1 2026. Initial providers targeting November 2026 should be in discovery this quarter.
Book a Readiness Call
Counting down to the Initial-provider consumer data deadline — 9 November 2026, 00:00 AEDT
Days
:
Hours
:
Mins
:
Secs
Mambu + Phase 2, without the pain

Why most consumer-data builds stall.

Mambu is best-in-class for core banking. Biza.io is best-in-class for CDR infrastructure. Connecting them for the consumer data phase — in a production-ready, certified, monitored way — is where programmes lose six to twelve months.

Do it yourself

The multi-vendor build

  • You contract with Mambu, Biza, an SI, and a hosting partner independently
  • You own the integration risk — schema mismatches, auth flows, consent lifecycle
  • Certification is on your timeline, with your engineers, and your compliance team
  • CDR conformance testing and production monitoring fall to your ops team
  • Every Mambu or CDR API change becomes an unplanned engineering project
  • Your CIO answers for the gap between platforms when something breaks
Moroku connector

The pre-certified path

  • One contract, one SLA, one vendor accountable end-to-end
  • Certified connector package — tested against Mambu and Biza sandboxes
  • CDR conformance baked in, validated by Biza's certification programme
  • Documentation, test suite, and deployment templates delivered day one
  • Managed maintenance — we absorb API version changes, not your team
  • Reference deployments you can talk to before you sign
How it works

Consent in. Mambu-shaped data out.

The connector sits as a managed layer between Biza's CDR gateway and your Mambu instance. Customer consent flows in, authenticated data flows out of Mambu, through the Biza adapter and out via the CDR dashboard and APIs.

Your stack

Mambu-Powered Institution

Mambu coreSaaS / cloud
Customer accountsData holder
Transactions & balancesCDR in-scope
Products & entitlementsLending, deposits
The Connector

Moroku Mambu–Biza Bridge

Mambu adapter Account + transaction read-through
Moroku DSL GraphQL orchestration + monitoring
Biza adapter CDR-certified data holder + recipient
CDR Ecosystem

Australia's Open Banking Layer

Accredited recipientsOutbound
Consumer CDR appsDashboards
Other ADIs & NBLsInbound opt.
Biza.io gatewayACCC accredited
01

Consumer consent

A customer authorises an accredited recipient to access their data held at your institution, through the Biza-managed consent flow.

02

Authenticated request

The recipient's request arrives at your CDR endpoint over FAPI-conformant APIs. The connector validates consent scope and authorisation.

03

Mambu read

The Mambu adapter retrieves accounts, balances, transactions, scheduled payments, and customer data — mapped to CDR standards.

04

CDR response

Data is returned through the Biza gateway in conformant format. Full audit trail, consent lifecycle tracking, and dashboard updates.

Deliverables

What you get on day one.

Not a statement of work. A shipped, certified connector package your team can deploy, audit, and hand to your board with confidence.

Certified connector package

Versioned, signed, CDR-conformance-tested. Deployable to your cloud or hosted by Moroku.

Mambu data model mapping

Full field-level mapping between CDR standards and Mambu entities, with transformation rules documented.

Test suite & conformance evidence

Automated integration tests, CDR conformance reports, and audit-ready evidence for your compliance team.

Deployment templates

Infrastructure-as-code, runbooks, observability dashboards, and consent-lifecycle monitoring.

Managed maintenance

Ongoing support covers Mambu API versioning, CDR standards evolution, and Biza gateway updates.

Production SLA

Commercially backed service levels on consent flows, data retrieval, and write-through to Mambu.

Built for

If you run Mambu in Australia, this is for you.

The connector is purpose-built for Mambu-powered institutions subject to consumer data obligations under CDR — whether you're an existing ADI, a challenger, or a non-bank lender crossing the large- or initial-provider thresholds.

🏦

Mutual banks & credit unions

ADIs on Mambu needing full CDR data-holder and data-recipient capability.

💼

Challenger banks

Mambu-native neobanks competing on speed-to-decision and embedded finance.

📈

Large-provider NBLs

Loan books $500M–$10B and 500+ customers. Consumer data obligations from 10 May 2027.

🚀

Initial-provider NBLs

Loan books above $10B. Consumer data obligations from 9 November 2026 — the tightest window.

Why pre-certified wins

De-risked, auditable, and commercially sensible.

Pre-certified connectors aren't just faster to deploy. They fundamentally change the risk and cost profile of your CDR programme — and what your board sees when they ask how you got there.

Single throat to choke

One contracted vendor for the connector, not a four-party accountability gap when something breaks.

Audit-ready from day one

Certification evidence, CPS 234 alignment, and conformance reports packaged for your CISO and APRA.

Predictable economics

Fixed fee or annual licence — no open-ended integration timelines, no FTE drain on your engineering team.

Reference deployments

Talk to institutions already running the connector in production before you commit.

Cost comparison

Build vs. buy the connector

Typical DIY build (12–18 months) $1.2M+
Annual FTE maintenance cost $400K+
Time to certified production 12–18 mo
CDR compliance risk carried You
Moroku connector (turnkey) 6–8 wks

Estimates drawn from observed programmes across tier-3 and tier-4 Australian financial institutions. Your numbers vary with scope, but the shape of the comparison does not. Firm pricing provided after a scoping conversation.

Next step

Start a 30-minute scoping call.

We'll walk your Mambu footprint, CDR obligations, and target timeline. If the connector fits, you leave with a scoped proposal. If it doesn't, we'll say so.

Sydney-headquartered · Serving Mambu-powered institutions across AU and NZ