Финансовый сектор переходит от обмена файлами к управляемому доступу к данным через API

Jose Sobrinho is Head of U.S. Technology at Aztec Group. It is well known that private markets are becoming more complex. Managers need faster access to positions, capital activity, waterfalls, cash movements, exposure, investor data and operational status. Investors also expect the same level of transparency they receive from other digital services. They do not want to wait for a static report when the underlying information already exists inside the administrator’s ecosystem. The industry is flipping from manual processing toward automation and moving from disconnected reporting toward connected insight. The next step is client-controlled data availability, or giving clients access to trusted data through APIs, direct platform access and secure data-sharing models. The Problem With File-Based Data Exchange Many firms still exchange critical data via CSV files, spreadsheets, FTP folders and scheduled file drops. The key issue with file-based exchange is that it creates multiple points of failure: A file can arrive late; a transmission can fail; a schema can change without warning; a file can be overwritten, duplicated or partially loaded; or a downstream team may not know whether it is using the latest version. I’ve seen cases where a client receives a CSV export and transforms it into another model, creating a second version of the truth outside the administrator’s control. Traditional file-transfer approaches can also lack the visibility and status reporting that modern business operations require, as discussed in Cleo’s analysis of file-transfer protocol limitations. Today, the industry should be asking a difficult question: Why are we still trading CSV files as if they are the final answer? A modern data service model requires more than faster files. It also requires controlled access to trusted data. APIs As A Client Data Channel APIs are one of the most important building blocks in this shift. A well-designed API allows clients to retrieve data directly from approved systems using defined endpoints, security controls and entitlement rules. Instead of waiting for a file to arrive, clients can request data when they need it. In the fund services space, we use APIs to support investor balances, capital calls, distributions, NAV data and transaction history. The value of being able to pull data when it is needed is not only speed but also consistency and reliability. Clients receive data from a governed source, using a documented structure, with access controlled through authentication, authorization and monitoring. APIs also create a better starting point for automation. A client can connect fund data directly into internal dashboards, data warehouses, treasury tools or investment systems. But APIs are not a universal replacement. They are great for transactional access but not always ideal for large datasets or broad consumption across many domains. Direct Access And Controlled Replication Some clients need more than an API response. They need a structured, governed dataset they can analyze inside their own environment. For these clients, the ask is not only: “Send me a report.” It is also: “Make the data available so I can use it inside my operating model.” Direct access to fund data can take several forms. I’ve seen client portals that provide controlled views and interactive reporting. I’ve also come across some secure data products that provide access to curated datasets. In some instances, a replication model allows the client to consume approved data into its own data lake or warehouse. Open source protocols also show how this model can evolve. For instance, OpenSharing is "an open protocol for secure data sharing with other organizations regardless of the computing platforms they use," according to Microsoft's Azure documentation on the protocol. The open sharing protocol can be used to share data from a Unity Catalog-enabled workspace with users on other platforms. These types of protocols also emphasize governance, tracking and auditing of shared datasets. This matters because fund services data is not just a technical asset. It is also a controlled business asset. Access must reflect investor entitlements, fund permissions, confidentiality rules and operational governance. A modern sharing model must answer several questions clearly: Who can access the data? Which data can they access? How current is it? How is usage monitored? How are changes governed? The answer cannot be a folder full of files and a hope that everyone uses the right version. The Governance Imperative Making more data available to clients increases value, but it also increases the responsibility around who has access to the data. Poorly governed access can create confidentiality, interpretation and operational risks. In today’s world, it’s critical to have clear data ownership, client entitlement rules, auditability, lineage, quality checks, version management and incident handling. The future of fund services will be defined by firms that can make data available securely, consistently and intelligently. Right now, we have at hand three primary options that we can use to meet our governance imperative: • APIs can support real-time and transactional integration. • Client portals can support direct visibility. • Data-sharing models such as OpenSharing can support governed replication and analytical consumption. In short, while technology provides the mechanisms for data access, governance remains a leadership responsibility. Executives cannot view data governance as solely an IT or compliance function. As fund administrators make more information available through APIs, portals and data-sharing platforms, leaders must establish clear accountability for data ownership, access management, quality standards and oversight. Every dataset should have a defined business owner, every access model should reflect investor and client entitlements and every sharing mechanism should be auditable. Governance should also be designed into the solution from the beginning rather than added as a control after deployment. The most successful firms will treat governance as an enabler of data accessibility, not a barrier to it. Clients increasingly expect immediate access to trusted information, but trust is earned only when organizations can demonstrate that data is accurate, secure, traceable and being used appropriately. In the end, transparency without governance creates risk, while transparency with governance creates confidence. Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?