FAQ

Questions we hear on every scoping call.

Straight answers on scope, access, timing, and what you receive. If yours isn’t here, ask us.

What does Eviqly actually deliver?

A signed Nacha rules compliance audit report and completion statement, an evidence index linking every answer to its source report, policy citation, and pull date, and a confirmation and gap log showing who did what and when. All of it is retained for six years.

Is this software or a service?

A service, built on our own audit-first workflow. You are not buying a tool to run the audit yourself; you are engaging Eviqly to perform it, with an accredited professional reviewing and signing the result.

Who signs the report?

A U.S.-based Accredited ACH Professional (AAP) who has reviewed the evidence behind each confirmed answer. Reviewers are separate from the drafting workflow.

Do we have to connect our systems?

No. You can upload documents and exports, or answer a structured questionnaire, instead of or alongside integrations. When you do connect, access is read-only, scoped to the engagement, logged, and revocable at any time.

What happens when the data can’t answer a requirement?

The response is marked as unsupported with a stated reason, and it becomes a gap routed to the internal owner who can resolve it. Eviqly never fills a blank with a guess.

How long does an engagement take?

A first engagement typically runs around four weeks, depending on how quickly evidence is provided and how many gaps are open. Subsequent annual cycles start from the previous year’s confirmed baseline and are usually faster.

Which participant types and SEC codes are covered?

Originators, Third-Party Senders, Third-Party Service Providers, ODFIs, and RDFIs, with requirements specific to the SEC codes you use such as WEB, PPD, CCD, TEL, and IAT. See the coverage page for details.

Is Eviqly SOC 2 compliant?

Eviqly aligns with SOC 2 Type I security expectations. The report is available under NDA as part of vendor due diligence.

How long are records retained?

Signed reports, completion certificates, and their evidence trails are retained for six years and can be produced on request during that period.

Can our sponsor bank accept the report?

The report and completion statement are designed to be accepted by ODFIs and sponsor banks as evidence of the annual audit. Banks that sponsor multiple fintechs can also use Eviqly to standardize the format across their program.

Where is Eviqly based?

Eviqly is headquartered in France and was founded in 2025. Audit review and signing is performed by U.S.-based AAP-accredited professionals.

How do we get started?

Request a scoping call. We confirm your participant type, SEC codes, and audit due date, agree how you will provide inputs, and show you what a first draft looks like.

Still have questions?

Book a thirty-minute scoping call and ask everything.

Request a scoping call