Collecting Bank Account Information Securely

[protectourlands]

I have a client that wants to collect bank account and routing numbers from customers for auto billpay of their monthly bill. I know the SSL will encrypt the form data sent to the server, and it can go into a Mysql database, but then how do they get that data securely? Has anyone else done something like this?

[BaconFries]

I think you are going to need more than just a form/database and ssl. The server will need to be secure not a bog standard from the likes of GoDaddy or others it will need to be separate from the main site using the likes of 3SKeys or E2E encryption. It most likely use the following ACH transaction or Automated Clearing House as well to process the transaction. I haven't personally done this for more that one reason if it goes belly up and there is a data breach (hacked) then you could be held responsible for the loss of data along with the client. Just my two cents but I would look and research deeper on this as there may be a higher cost for the server other than the standard one.
Maybe the following will be a starting point from stripe and ACH
https://docs.stripe.com/payments/ach-direct-debit

[protectourlands]

Thank you BaconFries. I totally agree after looking into this more and reading through the link you provided. This requires high level security. I recommended they contact their bank for help.

Best regards