Accessibility of the OP API Admin website of OP API solutions for Corporate Banking

This statement concerns the accessibility of the OP API Admin website of OP API solutions for Corporate Banking.

The user can access the OP API Admin site at https://admin.corporate-api.op.fi/corporate-api-admin/. OP Corporate Banking APIs and the OP API Admin site are provided by OP cooperative banks and OP Corporate Bank. Digital accessibility is regulated by the Finnish Act on the Provision of Digital Services.

This Accessibility Statement was created on 22 December 2020 and last updated on 12 March 2025.

Accessibility of the digital service

OP API Admin meets the digital accessibility criteria in part. A professional assessment of the service’s accessibility on 20 January 2025 found shortcomings in 31 of the Level AA criteria of the WCAG standard. The observations related to digital accessibility are listed below.

Inaccessible content

The most crucial accessibility issues were related to the usability of the service on a mobile device, attachment files used in the service, text scaling, contrasts, and the general navigability of the site. In addition, the site does not fully support assistive technologies, such as screen readers. The accessibility requirements specified in the WCAG (Web Content Accessibility Guidelines) which the websites do not yet fully meet are listed below by theme.

General observations

  • WCAG 4.1.2, 1.3.1 Labels and instructions – A label is missing for some form fields and at least a programmatic label is missing for checkbox and button groups
  • WCAG 1.4.10, 2.4.11, 2.4.3 Mobile menu – The page cannot be scrolled while the mobile menu is open
  • WCAG 2.4.3 Focus shifts in dialogues – The focus does not always shift to the right place
  • WCAG 4.1.3, 1.3.1, 2.4.6 Error messages – Error messages are not read as they appear. Error messages are not programmatically linked in all button groups, and when creating a new agreement the error message “Select at least one product” has been linked to every group
  • WCAG 2.1.1 Keyboard use in notifications – The links in the notification boxes cannot be used on a keyboard
  • WCAG 2.1.1 Contrasts – Issues were found in the contrast ratios between text and background, user interface components and graphic elements
  • WCAG 2.4.2, 4.1.3 One page app – All pages of the app are technically parts of the same page
  • WCAG 2.4.3, 4.1.3 Feedback from operations – Feedback texts are not read automatically with a screen reader
  • WCAG 2.4.6 Text alternatives – The text alternative for the mobile menu and the text alternatives for calendar buttons are in English regardless of the language of the service
  • WCAG 1.4.4 Text magnification – Text magnification to 200% hides some of the content
  • WCAG 3.1.2 Language menu – Language options are missing lang- attributes
  • WCAG 2.4.3 Menu button – Bypassing the menu button requires pressing the tabulator twice

Agreements

  • WCAG 1.3.1 Presentation of API products – The headings in the pricing section of API products are headings only visually, not programmatically
  • WCAG 1.3.1, 2.4.4 Agreement information – Heading elements are used insufficiently in agreement information and lists have not been presented programmatically
  • WCAG 2.4.6 Editor pen – The text alternative “Edit” for the editor pen is misleading
  • WCAG 2.4.4 PDF links – PDF links are implemented incoherently
  • WCAG 3.2.2 Changing the agreement status – Changing the agreement status opens a modal dialogue which shifts the focus to the top of the page

New agreement

  • WCAG 1.3.1 Product menus – The titles of product menus are not HTML headings
  • WCAG 1.3.2 Process path – The process path of a new agreement is difficult to understand with the screen reader
  • WCAG 1.3.1 Summary information – Lists and heading–value pairs have not been presented programmatically in the summary

Credential generation

  • WCAG 1.3.2 Reading order – The body text is difficult to find with the screen reader
  • WCAG 1.3.1, 2.4.3 Credentials view – “Credentials were created successfully” is a heading visually, but not programmatically, and the page focus does not work as the view changes
  • WCAG 2.4.4 The meaning of buttons – Copy buttons are not programmatically linked to related targets
  • WCAG 4.1.3, 1.3.1 Copying credentials – A screen reader does not get clear feedback when pressing the Copy button

MTLS certificate generation

  • WCAG 2.4.3, 4.1.3 Attachment files – Deleting an attachment file causes the focus to shift incorrectly and does not result in feedback with the screen reader

Users

  • WCAG 2.4.6 Calendar widgets – Calendar widgets are in English regardless of the language of the service
  • WCAG 3.3.3, 3.2.1, 4.1.3 Incorrect date – The notification of an incorrect date does not say why the date is incorrect, and the date is updated to its previous value without a notification when exiting the field
  • WCAG 4.1.3 Selecting the period of validity – When a user selects “Valid until further notice”, the other excluded selections shown on the site are still available
  • WCAG 1.3.1 “Permission roles” headers – Lower choice headers are the same level as the main header
  • WCAG 1.3.1 Heading–value pairs – Heading–value pairs are not programmatically presented

The issues are currently being fixed and the statement will be updated as the fixes are completed.

Accessibility feedback

Did you find accessibility issues in our digital services? If you didn’t find an answer in our accessibility statement, please send us feedback. 

Feedback and processing of personal data

If you haven’t logged in and you don’t enter your contact details, your feedback will be anonymous. A non-logged-in customer may provide their name and email address or phone number if they request us to contact them. We will store information about logged-in customers in our feedback system, including the name and personal identity code of the customer or company representative and the name of the OP cooperative bank whose customer the person providing feedback is. For corporate customers, we also store the company’s name and business ID. If a logged-in customer requests us to contact them, we will also store their phone number or email address. Other details that we will store in our feedback system include the customer’s feedback and the details provided by the customer about the auxiliary program or device they are using.

We will use the stored personal data only in feedback processing, to improve customer experience and OP Financial Group’s services. The personal data is processed in OP Financial Group financial institutions’ customer data files.

Supervisory authority

If the website has accessibility issues that are not addressed in the accessibility statement, please send us feedback from the link above. If you give your contact information on the feedback form, we are required by law to respond to you within 14 days.  

If you are dissatisfied with our reply or if we don’t reply to your feedback at all, you can contact the supervisory authority, Finnish Transport and Communications Agency Traficom. 

Contact information of the regulator

Finnish Transport and Communications Agency Traficom
Digital Accessibility Supervision Unit
www.webaccessibility.fi
saavutettavuus@traficom.fi
telephone switchboard 029 534 5000