Direct Deposit Preparation: Documenting Decisions and Approvals

Standardizing Direct Deposit Documentation

In payroll operations, verbal authorization is a liability. To ensure compliance with NACHA regulations and internal audit standards, small businesses must maintain a rigorous paper trail for every direct deposit decision and modification. This guide outlines the granular steps required to document the lifecycle of a payroll transaction.

1. Employee Authorization Requirements

Every direct deposit setup must begin with a signed Direct Deposit Authorization Form. This document serves as the legal basis for transferring funds to a third-party institution. The form must include:

• Employee’s full legal name and Social Security Number (or employee ID).
• Bank name, routing number (ABA), and account number.
• Account type (Checking vs. Savings).
• Specific allocation instructions (e.g., 100% of net pay or a fixed dollar amount).
• A clear revocation clause stating how the employee can cancel the agreement.

Operational Tip: Always require a voided check or an official bank letter for account verification. Manually entered numbers from a mobile app screenshot are high-risk for transposition errors.

2. The Pre-Note Verification Process

Before the first live payroll run, perform a 'Pre-note' test. This is a zero-dollar transaction sent to the employee's bank to verify the routing and account numbers are valid. Document the success or failure of this test in your payroll software logs. If a pre-note fails, the decision to issue a physical check must be documented as a temporary override.

3. Multi-Level Approval Workflows

To prevent internal fraud, such as 'ghost employees' or unauthorized bank changes, implement a dual-control approval system. The person who enters the bank data should not be the person who approves the final payroll transmission.

• Step A: Data Entry: Payroll clerk enters the banking details from the signed form.
• Step B: Verification: A manager reviews the entered data against the physical form.
• Step C: Final Approval: The CFO or business owner signs off on the total ACH file amount before transmission.

4. Documenting Changes and Deletions

When an employee changes banks, do not overwrite the old record immediately. Archive the previous authorization and treat the new request as a fresh setup. Maintain a Change Log that records:

• The date the change request was received.
• The date the change was implemented.
• The identity of the administrator who performed the update.

5. Retention and Audit Readiness

Under federal guidelines, authorization forms should be retained for at least two years after the termination of the agreement. However, for tax and labor dispute purposes, many CPAs recommend a seven-year retention period. Digital copies are acceptable provided they are stored in an encrypted, SOC2-compliant environment.

Summary Checklist for Small Business Payroll

1. Obtain signed authorization with bank-verified account details.
2. Execute and document a pre-note test.
3. Enforce a two-person approval rule for all ACH file transmissions.
4. Maintain a timestamped audit log of all banking modifications.