ACH Annual Certification

Certification Year*

Company Name*

ACH Cumulative Limits

By checking the box you indicate your agreement.

I certify that I know my limits regarding ACH origination which may be restricted by my company, file, and/or user rights and If I have questions I can always contact Highland Bank Customer Service at 952-858-4888.

ACH Authentication and Access Controls

Please check each box to indicate your agreement or explain when not applicable or if there are other mitigating controls.

ACH access privileges are audited regularly.

A process is in place to remove system access if an employee leaves or is transferred to a new function.

A segregation of duties is in place to submit and approve ACH transactions.

Appropriate steps are taken to ensure that all User ID's, Passwords, Authentication Methods and any other applicable security procedure issued to your employees are protected and kept confidential.

Company will notify the Bank immediately of any suspicious activity.

Examples include but are not limited to: unknown transactions, suspected user credential compromise, suspected embezzlement or other security incident that might compromise your Company's computer or network security.

Please explain any items NOT checked above:

ACH Transaction Requirements

Please check each box to indicate your agreement or explain when not applicable or if there are other mitigating controls.

I understand that I am responsible to ensure adequate funds are in place to cover all related ACH transactions prior to its Effective Entry Date.

I understand that all ACH transmissions should be received by 2:00 pm CST and between one to five days before the Effective Entry Date.

NOTE: ACH transmissions will not be processed on Federal Holidays, weekends or after 2:00 PM CST.

All customers, vendors, or employees that are receiving ACH transactions from our company (either debits or credits) have signed ACH authorization forms on file and all ACH data/record retention is kept in secure location.

NOTE: Credits for consumers (PPD) can be made via an oral request, however formal authorization forms are recommended by Highland Bank for quality control.

If pre-note authorizations are sent, our company understands that they must be initiated at least 3 (three) banking days before sending the first live dollar entry.

No ACH transactions originated by my company are being forwarded on to a foreign financial institution.

NOTE: Transactions that have a final destination in a foreign country (IAT) cannot be processed through Highland Banks’ ACH system. Alternative payment methods will need to be discussed.

Please explain any items NOT checked above:

ACH Risk Management Controls

Please check box to indicate your agreement or explain when not applicable or if there are other mitigating controls.

I have adequate internet business insurance that covers loss by fraudulent, unauthorized, or illegal activity.

Please explain if NOT checked above:

ACH Data Security Controls

Please check each box to indicate your agreement or explain when not applicable or if there are other mitigating controls.

All ACH data/record retention is kept in secure location.

Access to physical ACH data/record retention is restricted.

Access to digital ACH data/record retention is restricted.

Physical ACH data/records are properly destroyed after a minimum retention of two years after closure.

Digital ACH data/records are properly destroyed after a minimum retention of 60 calendar days.

Please explain any items NOT checked above:

ACH Personnel Security Controls

Please check each box to indicate your agreement or explain when not applicable or if there are other mitigating controls.

I have an acceptable use for using a computer policy for employees.

My staff is adequately trained on ACH and information security awareness.

The computer utilized for ACH functionality is not used for other functions.

Please explain any items NOT checked above:

Authorized Signature

Must be an authorized signer or be designated by an authorized signer on Highland Bank account(s).

Your Name*

First Last

Signature*

Title*

Date*

Email*

Comments

This field is for validation purposes and should be left unchanged.

Hyperlink Disclaimer

WHAT YOU SHOULD KNOW BEFORE YOU GO

ACH Annual Certification