Coverage
ACH-focused, standard-specific assurance.
Eviqly covers the Nacha Operating Rules requirements that apply to your participant type and the SEC codes you use, and closes each engagement with a signed completion statement.
Participant types
Coverage is scoped to your role in the ACH network — for example an Originator, Third-Party Sender, Third-Party Service Provider, ODFI, or RDFI — so the requirements tested are the ones that actually apply to you.
SEC codes
Requirements specific to the Standard Entry Class codes you originate or receive, such as WEB, PPD, CCD, TEL, and IAT, including authorization, validation, and data security obligations.
Annual rules compliance audit
The recurring independent testing that fintechs and banks must complete every year under the Nacha Operating Rules, ending with a signed statement of completion.
What's inside an engagement
Requirement by requirement, with evidence attached.
Risk management
Exposure limits, Originator due diligence, return-rate monitoring, and ongoing risk assessment obligations.
Authorization & records
Authorization forms, retention periods, proof-of-authorization handling, and revocation processes.
Data security
Protection of banking information in storage and transit, access controls, and account validation for first-use accounts.
Processing & returns
Timing, reversals, prenotes, notifications of change, and return handling for your SEC codes.
The completion statement
A signed close to every cycle.
Each engagement ends with a completion statement signed by a U.S.-based AAP-accredited professional, listing the participant type, the SEC codes in scope, the period reviewed, and the requirements tested. It is retained alongside the evidence trail for six years.
Not sure which requirements apply?
Tell us how you use ACH and we'll map your participant type and SEC codes to the requirements in scope.