Setting Up NACHA 2021 Data Security Rules

You can enable NACHA 2021 Data Security rules to do the following:

• Store the account number of Automated Clearing House (ACH) in encrypted form so that users cannot view the account number.

• Hide the Account Number field in view mode on the Company Bank Details and Entity Bank Details pages. The data entered in this field is stored in an encrypted form.

Note:

As per NACHA, the last date for enabling the NACHA Rules is on June 30, 2021. You can enable the rules on or before June 30, 2021 in NetSuite.

Important:

You can't update Format Details record due to NACHA 2021 data security rules. The record can be updated only from Company Bank Details page.

To enable NACHA 2021 rules:

1. Go to Payments > Setup >Electronic Payments Preferences

2. Click Edit.

3. On the General Preferences subtab, check the Apply NACHA Rules box.

   You can enable the Apply NACHA Rules box only in Administrator role.

4. Click Save.

5. Click OK in the popup window.

6. On the Encryption Details Form, enter a 16 digit secret key in the Encryption Secret Key field.

   After setting up the secret key, the system uses the key to encrypt or decrypt the ACH account numbers.

7. Click Save.

   After saving, all the ACH native templates and ACH account numbers on the Company Bank and Entity Bank Details pages will be encrypted and stored in the database.

   If you are using custom templates, make sure you check the Encrypt Account Number and Hide Account Number boxes on each ACH custom template. Next, perform a dummy edit of the company bank and entity bank details on the custom template. To do this, open the Company Bank Details page in edit mode and click Save to ensure the account numbers are encrypted for custom templates. You must follow the same procedure for entity bank details on the Entity Bank Details page.

To configure the ACH Encryption after enabling the NACHA 2021 rules, you must perform the following actions:

• You must disable the edit permission of the ACH payment encrypted files to prevent them from being edited as they are stored in the file cabinet.

  For more information about disabling the permissions, see the SuiteAnswers support article Role Able to Access Restricted Files via 'Attach File' Column or via File URL, ID 34568.

• To get the decrypted account number, first you must check the Encrypt Account Number box on the custom template. Then replace the account number in the Account Number field on the custom ACH Bank File format template. Follow the same process for all custom ACH templates.

  When you enable the Encrypt Account Number box, you must make sure you the following fields are added in their respective custom templates.

  Field Type	Field Name	Field ID	Required
  Reference Fields	Account Number	custrecord_2663_acct_num	No
  Entity Reference Fields	Bank Account Number	custrecord_2663_entity_acct_no	No

• The existing variable ebanks still holds all the values of the Entity Bank Details record. But, to get the decrypted account number, you must replace the value with ebanks_accountnums.list variable which will provide a list of account numbers in decrypted form. Replace the existing value with the new value ebankAccNum.custrecord_2663_entity_acct_no.

  Example:

                  <#assign ebank = ebanks[payment_index]>
              <#assign ebankAccNum = ebank_accountnums.list[payment_index]>
               ${setLength(ebankAccNum.custrecord_2663_entity_acct_no,17)}.    =>> Will print decrypted account number.
               ${setLength(ebank.custrecord_2663_entity_acct_no,17)}.          =>> It will print encrypted account number(as stored in DB) 
  
                

Note:

You must note the following information for ACH account number encryption:

• ACH account numbers are not displayed in saved searches or reports.

• You cannot preview a decrypted file. To view the file, download the decrypted file into your local machine by using the Download Decrypted File hyperlink on the Payment File Administration page.

  To download the decrypted file:

  1. Go to Payments > Payments Processing > Payment File Administration.

  2. Click Edit next to a PFA record.

  3. On the Payment File Administration record, click the Download hyperlink in the Download Decrypted File field.

  4. To save the decrypted file into your local machine, click Save.

• If you are using any third-party integration for file transfer, first download the file locally. Then, transfer the file again by uploading it into the file cabinet or any other location as required.

• NACHA changes does'nt apply to old PFAs unless they are recreated or reprocessed, however, the account numbers are still not encrypted.

Important:

NetSuite isn't responsible for any data breach after the files are downloaded into the local machine. The responsibility of securing the payment files depends entirely on the users or accounts.

Related Topics

• Managing Electronic Bank Payments
• Setting Up Multi-Currency Payments Processing
• Viewing Electronic Bank Payment Details
• Sending Payment Notifications
• Reversing Payments
• Rollback
• Reprocessing Payments
• Recreating a Payment File
• Verifying Issued Checks with Positive Pay
• Setting Schedules for Payment Batches
• Changing the Priority of a Queued Payment File

General Notices