> For the complete documentation index, see [llms.txt](https://apidocs.arionbanki.is/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://apidocs.arionbanki.is/b2b-2013-schema/getting-started/introduction-to-b2b/b2b-security.md).

# B2B Security

B2B ensures the maximum security of data sent between the Bank and the accounting system. B2B web services use Web Service Security (WSS) to send username tokens which contain a user name and password provided by Arion Bank and communications are signed using electronic ID. Information sent between the accounting system and the Bank is encrypted over HTTPS to ensure compliance with the strictest security requirements. In order to ensure the standardization and integrity of the data between the accounting system and Online Banking, payment batches which are sent from the accounting system to Online Banking for payment are locked.

It is only possible to change them in the company’s accounting system. The user submitting a receivable batch via B2B must be the same person who enters the record of the receivable batch in Online Banking.

### Electronic identification (eID)

Electronic identification is used to identify users and can be used by that user as a signature. It is comparable to showing a passport online. The company Auðkenni issues the identification certificates and further information can be obtained on the company’s website, audkenni.is. There are four types of identification:

* **Employment identification:** Suited to people linked to companies and to be used when working with accounting systems, dealing with the customs and tax authorities, logging in to websites, and signing digital documents. ID is issued to a person who is linked to a company. The ID contains the ID number of the holder of the ID and the ID number and name of the company. Employment ID is unique for each employee. This makes it possible to trace each transaction/action entered in the accounting system.
* **Device identification:** Designed for systems which communicate directly with the shared banking system of banks and savings banks. It is the under- lying means of identification in the company’s accounting system. It is not possible to trace who performs actions.
* **Debit card identification:** Suited to more secure log-ins to websites and for signing digital documents.
* **Private identification:** In addition to electronic identification in debit cards, which is available to individuals free of charge, people can also buy private identification which is suited to more secure log-ins to websites and for signing digital documents. This type of identification is similar to electronic ID in debit cards. It is issued to individuals and contains the ID number and name of the owner of the ID. For further information see audkenni.is.