Security of API calls made with Intesa Sanpaolo

How is the security of Intesa Sanpaolo API calls guaranteed?

API calls are based on the most modern security standards:

Https protocol
use of Oauth 2 credentials
presentation of certificates for mutual authentication