SURVEY TEMPLATE

ACH Payment Authorization Form Template

An ACH authorization form template gives businesses, nonprofits, and service providers a fast, structured way to collect payment authorization from clients, members, or customers before processing electronic bank transfers.
This free ACH authorization form template from Sogolytics comes pre-built with the required fields for NACHA compliance, customizable authorization language, and secure data handling that protects both your organization and your payers. Launch this template in minutes, by adapting the fields to your payment workflow, and start collecting authorizations that you can act on from Get-Go.

check_circle GDPR Ready
check_circle Real-time Reports
check_circle SOC 2 Type II Certified
check_circle HIPAA Compliant

assignment

SURVEY CATEGORY

Financial Services

nest_clock_farsight_analog

TIME TO COMPLETE

7 minutes (approx.)

help

NO. OF QUESTIONS

Use this Template

What is an ACH Authorization Form?

An ACH authorization form is a document that gives a business or organization written permission to initiate electronic fund transfers directly from a payer's bank account through the Automated Clearing House network. Before any ACH debit or credit transaction can be processed, the payer must authorize it, and that authorization must be documented in a way that meets NACHA's operating rules.

The form captures the bank account details needed to execute the transfer alongside a signed statement from the account holder confirming they understand and agree to the terms. It functions as both a transactional record and a legal agreement, which is why the fields, language, and storage requirements are more specific than a standard intake form.

Whether you are collecting recurring membership dues, processing invoice payments, or facilitating loan repayments, the ACH authorization form is the foundational document that makes electronic fund transfers legally permissible.

What Fields Does an ACH Form Require?

A complete ACH authorization form needs specific information to process a transfer and satisfy NACHA compliance requirements. Missing or incorrect fields can result in rejected transactions or compliance gaps.

1.Account holder's full legal name
2.Bank routing number (9-digit ABA routing number)
3.Bank account number
4.Account type (checking or savings)
5.Financial institution name
6.Authorization type (one-time debit, recurring debit, or credit)
7.Transaction amount or amount range (for recurring authorizations)
8.Payment frequency and start date (for recurring authorizations)
9.Revocation instructions and required notice period
10.Company or merchant name and contact information
11.Authorization statement with clear acceptance language
12.Account holder signature and date

Ideal Users for ACH Payment Form

ACH authorization forms are used by any organization that collects payments or transfers funds electronically through the ACH network.

.Subscription and membership businesses collecting recurring dues or fees
.Nonprofits and associations processing membership payments and donations
.Credit unions and community banks facilitating direct deposits and loan repayments
.Property managers and landlords collecting recurring rent payments
.Healthcare providers processing recurring patient billing
.Insurance companies collecting premium payments by electronic draft
.B2B service providers invoicing clients through ACH instead of check or card
.Utilities and municipalities collecting recurring service payments
.Staffing and payroll providers initiating employee direct deposit authorizations
.Educational institutions collecting tuition payments and recurring fees

Steps to Build an ACH Authorization Form

Creating a compliant, professional ACH authorization form is quick and easy with Sogolytics, most teams have one ready in under 20 minutes.

1.Start with the Sogolytics ACH authorization form template, available for free in the template library.
2.Review the required fields for your authorization type (one-time, recurring debit, or credit) and confirm your form captures all NACHA-required elements.
3.Customize the authorization statement to reflect your organization's name, the payment purpose, and the specific terms of the authorization.
4.Add or remove fields to match your workflow. If you collect payments for multiple products or services, include a selection field so payers can specify what they are authorizing.
5.Set up validation rules on routing number and account number fields to reduce data entry errors before submission.
6.Brand the form with your logo, organization name, and color scheme so it looks like a professional extension of your business.
7.Configure submission notifications, so your payments team receives an alert each time a new authorization is submitted.
8.Publish the form through a secure link, embed it in your client portal, or send it via email invite directly to payers.
9.Route submissions to your payment processor, CRM, or accounting system using Sogolytics integrations, so authorizations flow directly into your existing workflow.

Best Practices for Using an ACH Authorization Form Template

A well-designed ACH authorization form reduces errors, speeds up collection, and protects your organization if a payment dispute arises.

.Write your authorization statement in plain language. Payers complete the form more accurately when the terms are clear, and the language is accessible.
.Clearly state whether the authorization covers a one-time or recurring transaction, and specify the amount, frequency, and start date for recurring payments.
.Include explicit revocation instructions. NACHA requires that payers be told how to cancel an authorization, and the required notice period must be stated clearly.
.Validate routing numbers at the point of entry. A simple format check catches most errors before submission reaches your payments team.
.Never store raw bank account data in a system that is not adequately secured. Route submissions directly to your payment processor where possible to minimize data exposure.
.Require a digital signature or checkbox acknowledgment. A completed form without a clear acceptance record does not constitute valid authorization under NACHA rules.
.Retain a record of every authorization, including the submission date, the version of the form used, and any subsequent revocation notices.
.For recurring payment programs, send payers a confirmation email immediately after submission that restates the authorized amount, frequency, and start date.

Security Components in ACH Payment Authorization Form

Because an ACH authorization form collects sensitive financial data, the security of the form itself matters as much as its content. A form that captures routing numbers and account numbers needs to be served over an encrypted connection, store submissions in a secured environment, and limit access to authorized personnel only.

Sogolytics forms run over HTTPS with TLS encryption by default, so data in transit is protected from the point of submission. At rest, submission data is stored in a secured environment with role-based access controls, meaning only the team members you designate can view or export authorization records. Audit logs track who accessed or exported data and when, which supports internal controls and simplifies compliance reviews.

For organizations with heightened requirements, Sogolytics supports SSO integration and advanced permission structures that restrict form data to specific departments or individuals. If your payment processor accepts direct webhook delivery, you can route authorization data from the form submission directly to the processor, reducing the number of systems that touch sensitive account information and narrowing your compliance scope in the process.

FAQs about ACH Authorization Form Template

When should you avoid sharing an ACH authorization form?

Do not send an ACH authorization form over an unencrypted channel, such as a plain email without a secure link, or embed it in a document that could be forwarded or printed without access controls. Avoid collecting ACH authorization data through any form that does not meet your organization's data security standards. If a payer is uncomfortable providing their bank account details electronically, offer an alternative such as a signed paper form collected in person or through a secure mail process.

Is an ACH authorization form legally required?

Yes. NACHA operating rules require that any business or organization initiating an ACH debit obtain written or verifiable authorization from the account holder before processing the transaction. The authorization must clearly describe the transaction, identify the originating company, and provide instructions for revocation. Without documented authorization, an ACH debit can be reversed, and the originating company may be subject to penalties under NACHA's rules.

What information is needed for ACH authorization?

A valid ACH authorization requires the account holder's full name, bank routing number, account number, account type (checking or savings), the name of the financial institution, the authorization type (one-time or recurring), the transaction amount, and a signed or verifiable acknowledgment of consent. For recurring authorizations, the form must also specify the payment frequency and start date and include revocation instructions with the required notice period.

How long do I need to keep ACH authorization forms on file?

NACHA requires that ACH authorization records be retained for a minimum of two years after the authorization is revoked or expires. Most organizations retain them longer as a matter of standard financial record-keeping. You should store the original authorization alongside a record of any amendments, revocations, and the transaction history.

What is the difference between ACH debit and ACH credit?

An ACH debit pulls funds from the account holder's bank account into the originator's account, which is what a business uses to collect a payment from a customer. An ACH credit pushes funds from the originator's account into the recipient's account, which is what a business uses to send money to someone, such as employee payroll or a vendor payment. The authorization form needs to specify which type of transaction is being authorized, as the rules and revocation of rights differ between debit and credit entries.

What makes an ACH authorization form NACHA-compliant?

NACHA compliance requires that the authorization form clearly identifies the company or organization initiating the transaction, states the authorization type (debit or credit), specifies whether the authorization covers a one-time or recurring transaction, includes the amount and frequency for recurring entries, provides revocation instructions with a stated notice period, and records a signed or verifiable acceptance from the account holder.
The authorization must be retained for at least two years after revocation, and any changes to a recurring authorization must be communicated to the account holder before taking effect.

Can I fill out an ACH authorization form online?

Yes. An online ACH authorization form is valid under NACHA rules as long as it meets the same requirements as a paper form. The form must clearly state the authorization terms, collect verifiable acceptance from the account holder (such as a digital signature or a checkbox acknowledgment with a recorded timestamp), and be served over a secure, encrypted connection. Sogolytics ACH authorization form templates meet these requirements by default and include a submission confirmation that can be sent to the payer as a record of their authorization.