Commercial Insights
ACH origination agreements for third-party senders

Q: How should third-party senders manage their origination agreements?

Establishing the agreement is only the first step in ongoing governance. Third-party senders should conduct regular reviews to ensure agreements remain aligned with Nacha rules and current risk conditions, update agreements when services or transaction types change, maintain organized documentation for audit readiness, and align agreements with internal controls to ensure consistency with operational practices.

Article Published July 14, 2026

What Nacha third-party senders need to know about origination agreements

Learn how to strengthen compliance, reduce risk exposure, and build a more reliable ACH framework.

Key insights

ACH origination agreements are required under Nacha Operating Rules for all third-party sender relationships with Originators
A well-structured agreement can significantly reduce the odds of fraud, manage risk exposure, and ensure compliance
Agreements must clearly define authorization standards, any permitted activity, and return thresholds
Ongoing monitoring, documentation, and updates are essential to maintain compliance
Training and education can help third-party senders identify gaps and strengthen agreement practices

Origination agreements are a critical component of a third-party sender’s responsibilities under the Nacha Operating Rules. By defining the relationship between the third-party sender and each Originator—an origination agreement will outline the expectations, obligations, and controls required to originate ACH entries.

“These agreements are central to ACH compliance,” said Noelle McKenzie, Regions Bank Treasury Management digital and shared services product manager. “When third-party senders fully understand what must be documented and enforced in these agreements, they’re better positioned to reduce risk, maintain compliance, and build stronger relationships with both their originators and their bank.”

How does training help strengthen compliance?

Ongoing education plays an essential role in maintaining compliance.

This training, conducted by Nacha and furnished by Regions Bank, provides important insight into the key components of ACH origination agreements, highlights common compliance gaps to avoid, and outlines practical steps for implementing and managing effective agreements.

View transcript

Chapter 1: Welcome to the Regions Bank Third Party sender training.

0:03: Welcome to the Regions Bank Third Party sender training.

Chapter 2: My name is Carrie Selin.

0:07: My name is Carrie Selin. In this training session, I will discuss the origination agreements between the third party sender and its originator,

Chapter 3: In this training session, I will discuss the origination agreements between the third party sender and its originator, as well as the ACH origination agreement between Regions Bank and the Third Party senders.

0:16: as well as the ACH origination agreement between Regions Bank and the Third Party senders.

Chapter 4: The ACH process operates from beginning to end through a series of legal agreements.

0:23: The ACH process operates from beginning to end through a series of legal agreements. Every ODFI and RDFI that transmits entries through the ACH network must

Chapter 5: Every ODFI and RDFI that transmits entries through the ACH network must have an agreement with an ACH operator that binds it to the Nacha operating rules.

0:33: have an agreement with an ACH operator that binds it to the Nacha operating rules. Participating depository financial institutions may apply the Nacha

Chapter 6: Participating depository financial institutions may apply the Nacha operating rules by agreement to entries that are not transmitted to an ACH operator.

0:42: operating rules by agreement to entries that are not transmitted to an ACH operator.

Chapter 7: Before any transaction is initiated, the originator and ODFI execute an agreement to use the ACH network to originate payments.

0:49: Before any transaction is initiated, the originator and ODFI execute an agreement to use the ACH network to originate payments.

0:57: When Regions Bank contracts with a third party sender, the contract includes language that requires the third party sender to enter into

Chapter 8: When Regions Bank contracts with a third party sender, the contract includes language that requires the third party senderto enter into a origination agreement with their originators that complies with the Nacha operating rules.

1:05: a origination agreement with their originators that complies with the Nacha operating rules.

Chapter 9: Before any transaction is initiated, the originator and the ODFI, or the originator and the third party sender execute an agreement to use the ACH network to originate payments.

1:14: Before any transaction is initiated, the originator and the ODFI, or the originator

1:20: and the third party sender execute an agreement to use the ACH network to originate payments.

Chapter 10: The agreement must authorize the ODFI to originate entries to the receiver's accounts.

1:27: The agreement must authorize the ODFI to originate entries to the receiver's accounts. Bind the originator to the Nacha.

Chapter 11: Bind the originator to the Nacha.

Chapter 12: Operating rules prohibit the originator from originating entries in violation of applicable US legal requirements.

1:34: Operating rules prohibit the originator from originating entries in violation of applicable US legal requirements.

Chapter 13: Identify restrictions on the type of ACH transactions that can be originated, such as Iats.

1:43: Identify restrictions on the type of ACH transactions that can be originated, such as Iats.

Chapter 14: Address the ODF IS or third Party senders right to terminate or suspend the agreement for a breach of the rules and include the ODFI or Third Party Senders Right to audit the originator's compliance with the agreement and the Nacha operating rules.

1:50: Address the ODF IS or third Party senders right to terminate or suspend the agreement for a breach of the rules and include the ODFI or Third Party Senders Right

2:00: to audit the originator's compliance with the agreement and the Nacha operating rules. Additionally, the agreement should define the parameters

Chapter 15: Additionally, the agreement should define the parameters of the relationship between the two parties.

2:08: of the relationship between the two parties. Specify the processing requirements for the relevant applications and establish

Chapter 16: Specify the processing requirements for the relevant applications and establish liability and accountability for procedures related to specified applications.

2:17: liability and accountability for procedures related to specified applications.

Chapter 17: Remember that what makes a third party sender a third party sender is the lack of the agreement between Originator and Regions Bank.

2:26: Remember that what makes a third party sender a third party sender is the lack of the agreement between Originator and Regions Bank.

Chapter 18: However, agreements are still required between the parties that agree to process for one another.

2:34: However, agreements are still required between the parties that agree to process for one another.

Chapter 19: When a third party sender exists, Regions Bank has an origination agreement with the third party sender and the third party sender has an agreement with each originator.

2:40: When a third party sender exists, Regions Bank has an origination agreement with the third party sender and the third party sender has an agreement with each originator.

Chapter 20: Although there is no direct agreement between Regions Bank and the originator, there are still agreements that hold the parties responsible for their actions within the network.

2:51: Although there is no direct agreement between Regions Bank and the originator, there are still

2:56: agreements that hold the parties responsible for their actions within the network.

Chapter 21: Regions Bank must enter into an origination agreement with each third party sender.

3:04: Regions Bank must enter into an origination agreement with each third party sender.

Chapter 22: These are the minimum requirements that must be found in origination agreement.

3:09: These are the minimum requirements that must be found in origination agreement. The third party sender, on behalf of the originator,

Chapter 23: The third party sender, on behalf of the originator, must authorize the bank to originate entries to the receiver's account.

3:17: must authorize the bank to originate entries to the receiver's account. The agreement must bind the third party sender to the Nacha.

Chapter 24: The agreement must bind the third party sender to the Nacha. Operating rules prohibit the third party sender from originating entries in violation of applicable US legal requirements such as OFAC and BSA.

3:26: Operating rules prohibit the third party sender from originating entries in violation of applicable US legal requirements such as OFAC and BSA.

Chapter 25: AML, as examples, identify restrictions on the type of ACH transactions that can be originated.

3:37: AML, as examples, identify restrictions on the type of ACH transactions that can be originated.

Chapter 26: Address the ODFI's right to terminate or suspend the agreement for any third party sender or originator for breach of the rules.

3:45: Address the ODFI's right to terminate or suspend the agreement for any third party sender or originator for breach of the rules.

Chapter 27: Include the ODFI's right to audit the third party senders and their originator's compliance with the agreement and the Nacha operating rules.

3:55: Include the ODFI's right to audit the third party senders and their originator's compliance with the agreement and the Nacha operating rules.

Chapter 28: The third party sender must enter into an agreement with each originator before permitting origination of entries, and the third party sender must enter into an agreement with each nested third party sender before permitting origination of entries.

4:04: The third party sender must enter into an agreement with each originator before permitting origination of entries, and the third party sender must enter into an

4:14: agreement with each nested third party sender before permitting origination of entries.

Chapter 29: However, because Regions Bank doe

4:20: However, because Regions Bank does not allow nested third party sender relationships, the agreement should clearly state this.

4:29: In addition, the agreement should define the parameters of the relationship between the two parties, identify processing requirements for the specific applications,

4:38: and establish liability and accountability for procedures related to certain applications.

4:49: The Nacha Rules default the termination period to 10 banking days. However, Regions Bank may choose to shorten the termination.

4:57: In its agreement to require the third party sender to shorten it to the same time frame as in the Regions Bank agreement.

5:06: Regions Bank may audit the third party senders and their originators for compliance with the Nacha operating Rules and its origination agreement.

5:16: Alternatively, if it is in their ACH agreements, Regions Bank may hire an

5:21: organization such as a payments association to audit the third party sender or its originator,

5:27: and the third party senders would be required by agreement to pay for the audit.

5:35: The following list is not required to be found in an ACH origination agreement, but is recommended by Nacha in the guidelines.

5:44: This is not a complete list of Nacha recommendations, and you can see Appendix C in the Nacha Operating Rules and Guidelines for the full list.

5:54: These additional requirements to be considered include the windows and

6:00: deadlines for sending ACH files or entries for processing, formatting and delivery of files,

6:08: how returns will be provided as well as NOCS and the originator's responsibility for the

6:13: NOCS exposure limits, any charges or fees for the service, any data security requirements

6:22: and any data breach notification and then accountability and liability. This concludes the training on the ACH origination agreements.

6:32: Thank you and have a great day.

Why are ACH origination agreements so important?

ACH origination agreements are not just operational documents—they are a core compliance requirement. Nacha rules require third-party senders to enter into a written agreement with each Originator before initiating ACH transactions on their behalf.

These agreements serve to:

Clearly define responsibilities between the third-party sender and the Originator
Establish expectations for authorization, compliance, and processing
Reduce operational and financial risk
Provide a framework for enforcing Nacha rules

Without a complete and enforceable agreement, a third-party sender may face increased exposure to unauthorized transactions, elevated return rates, and potential enforcement action by its ODFI (Originating Depository Financial Institution). Failure to have an agreement in place could also result in an audit finding.

What must be included in an origination agreement?

A compliant ACH origination agreement should address key requirements by Nacha. While agreements can vary based on the relationship, they typically include:

Authorization requirements
The Originator must agree to obtain and retain proper authorization for all ACH entries based on applicable SEC codes
Compliance with Nacha Operating Rules
Explicit acknowledgement that the Originator will comply with all applicable rules and updates
Exposure limits
Defined transaction limits to manage credit and fraud risk
Permitted entry types
Clearly stated transaction types (i.e., credits, debits, SEC codes)
Return rate thresholds
Expectations aligned with Nacha thresholds—and the consequences for exceeding those thresholds
Data security obligations
Requirements for safeguarding sensitive financial and consumer information
Audit and monitoring rights
The ability for the third-party sender to review Originator compliance and activity

These elements exist to ensure that agreements support both compliance and day-to-day risk management.

How should third-party senders manage their origination agreements?

Establishing the agreement is only the first step in an important process of ongoing governance. In order to maintain compliance over time, third-party senders should:

Conduct regular reviews to make sure agreements remain aligned with Nacha rules and current risk conditions
Update agreements as needed when services or types of transactions change
Maintain organized documentation for audit readiness
Align agreements with internal controls to ensure consistency with operational practices

Effective management ensures agreements remain actionable—making it more than just the documentation of requirements.

How do origination agreements support risk management?

Origination agreements serve as a key mechanism for risk control. When properly implemented, they help:

Prevent unauthorized or fraudulent transactions
Limit financial exposure through defined thresholds
Standardize operational expectations across Originators
Strengthen compliance with regulatory and Nacha requirements

These agreements also provide a contractual basis for corrective action if activity exceeds established limits or violates agreed-upon terms.

What should third-party senders look for during reviews or audits?

Origination agreements are a focal point during ACH audits and internal reviews. Third-party senders should verify that:

Agreements exist for all Originators
Required provisions are included and current
Exposure limits are clearly defined and enforced
Actual activity aligns with agreement terms
Documentation is complete and easily accessible

Proactive reviews can help identify and resolve gaps before they result in compliance issues.

Third-party senders: What to know about an annual ACH audit

For third-party senders, there are requirements for completing an annual ACH compliance audit, including what the audit must cover and what auditors typically look for. Learn more here.

Ready to help

Regions can help with Treasury Management solutions to improve cash flow, streamline payables, and mitigate unnecessary risk exposure. Learn more.

Frequently asked questions (FAQs)

What is an ACH origination agreement?
An ACH origination agreement is a written contract between a third-party sender and an Originator that defines the terms, responsibilities, and requirements for initiating ACH payments.

Are origination agreements required by Nacha?
Yes. Nacha Operating Rules require third-party senders to have a signed agreement in place with each Originator before initiating ACH transactions on their behalf.

What risks do origination agreements help mitigate?
They help reduce fraud, unauthorized transactions, excessive return rates, and credit risk by clearly defining transaction limits, authorization standards, and compliance expectations.

How often should origination agreements be reviewed?
Agreements should be reviewed regularly—at least annually or whenever there are changes to services, risk levels, or Nacha requirements.

What happens if an Originator exceeds agreed thresholds?
The agreement should outline corrective actions, which may include restricting activity, revising limits, or terminating the relationship depending on the severity of the issue.