# Frequently asked questions

> Answers to the questions consumers and developers ask most about openfeed, the Consumer Data Right, sharing, security and getting started.

- Category: faq
- Audience: all
- Updated: 2026-07-02
- Canonical: https://openfeed.au/resources/faq

---

Short answers to the things people ask most. Can't find what you're after?
Every topic below links to a deeper guide.

## About openfeed

### What is openfeed?

openfeed is a consumer data platform built on Australia's Consumer Data Right
(CDR). You connect a data holder, like a bank or energy retailer, once, then
share that data with the apps you choose, in a single tap, and revoke it any
time. Developers get one REST API for every holder instead of building a separate
integration for each one.

### Who is behind openfeed?

openfeed is built by Biza Pty Ltd, one of the largest contributors to the build
of Australia's CDR ecosystem. See [Introducing openfeed](/resources/introducing-openfeed) 
and [About](/about) for the full story.

## For consumers

### Is my data safe with openfeed?

Yes. openfeed operates within the CDR's accredited framework. Every share is limited to the
accounts you approve and revocable at any time. You decide what is shared and with whom. 
Read [How openfeed keeps your data safe](/resources/how-openfeed-keeps-your-data-safe) for the plain-English version.

### What can I share?

Today you can share banking and energy data. You choose exactly which accounts
and which data types are included in each share. See
[How onward sharing works](/resources/how-onward-sharing-works).

### How do I stop sharing?

From your openfeed dashboard you can revoke any apps access at any time. Revocation is
immediate. The app loses access straight away.

### Does it cost anything?

No. Connecting holders, managing shares and using "Login with openfeed" are free
for consumers.

## For developers

### How do I get started?

Follow the [Quickstart](/resources/quickstart): register an app, add "Login with openfeed" using a
standard OIDC client library, request disclosure consent, and fetch data. Most teams have live
data flowing the same day.

### What is the two-consent model?

Consumers grant a CDR consent to openfeed and a disclosure consent to your app.
This keeps onward sharing clean, scoped and revocable. Explained in full in
[Disclosure consent vs. CDR arrangements](/resources/onward-disclosure-explained).

### How do I get my app listed?

Register as a developer, verify your business, and publish. See
[Path to production](/resources/path-to-production).

### Is there an API reference?

Yes. The full interactive reference lives at
[/developers/api](/developers/api), and the raw spec is published at
[/openapi.yaml](/openapi.yaml).

### How does openfeed handle security?

openfeed is a **FAPI 2.0 compliant** OAuth 2.0 provider, the highest security
profile published by the OpenID Foundation. Data-pipeline controls (including data masking and
redaction) protect sensitive fields as data moves through the platform. See
[Security & data handling at openfeed](/resources/security-and-data-handling) for the technical
detail.