Setting Up Daycare Tuition Autopay the Right Way (ACH Authorization Explained)

A parent tells you at drop-off, "Just go ahead and pull it from my account every Friday, that's easier for both of us." You take down her routing and account number, set up a recurring pull through whatever app or processor you use, and move on. It feels like a favor to both of you — one less thing for her to remember, one less thing for you to chase.

It's also, technically, not a valid authorization to debit her bank account — and if that ever becomes a dispute, "she told me it was fine" won't hold up the way a signed form would.

Why this isn't the same as billing a credit card

Pulling money directly out of someone's checking or savings account (ACH — Automated Clearing House) is regulated more strictly than running a credit card, because a card charge is reversible through a dispute process the cardholder controls, while a bank debit hits available cash directly. Two overlapping sets of rules apply to recurring ACH debits from a consumer's account:

• Regulation E, the federal rule (enforced by the CFPB) governing electronic fund transfers from consumer accounts, requires that preauthorized transfers be authorized "only by a writing signed or similarly authenticated by the consumer" — and requires the person collecting payment to give the consumer a copy of that authorization.
• NACHA operating rules, the rulebook that governs the ACH network itself (the rails your bank and the parent's bank both plug into), lay out what a valid authorization has to contain and how a consumer revokes it.

Neither of these is optional because "it's just a small home business." If you're debiting a bank account on a recurring basis, both apply to you the same way they'd apply to a national company doing it.

What a compliant authorization actually needs to say

At minimum, a written ACH authorization for recurring daycare tuition should include:

• Whose account is being debited — the parent's name and enough account detail to identify it (routing and account number, collected securely, not texted in plain language)
• The amount, or exactly how it's calculated — either a fixed dollar figure ("$300 per week") or a clear formula if it varies (e.g., a base rate plus a per-day rate for extra days), so the parent isn't guessing what will come out
• The timing — how often the debit happens and on what day (e.g., "every Friday" or "the 1st and 15th of each month")
• How the parent revokes the authorization — a stated method (in writing, by a certain date before the next scheduled debit) and confirmation that revoking stops future debits, not just a promise to "let me know"
• The parent's signature or an electronic equivalent, dated before the first debit under this authorization
• A copy given to the parent at the time they sign — email, a PDF, or a printed copy, something they can point back to later

If your rate ever changes — a rate increase, a new sibling added, a schedule change that shifts the amount — federal rules require advance written notice before the new amount is pulled when it differs from what the parent previously authorized, not a heads-up at pickup the week before. Under Regulation E, that notice generally needs to go out at least 10 days before the new amount is debited, unless you and the parent agreed in advance to a specific range of amounts the parent already anticipates (for example, a schedule that already factors in occasional extra days at a stated per-day rate). When your billing amount is genuinely fixed and never varies, this doesn't come up — but the moment it does vary, silently pulling a different number than what was last agreed is the single most common way autopay turns into a dispute.

What "revoking" actually requires of you

A parent can revoke their ACH authorization at any time, and once they do, you're required to stop debiting their account before the next scheduled pull — you don't get a grace period to "process what's already in motion" unless that pull already left before the revocation reached you. This is worth building into your own habits: if a parent tells you they're stopping autopay, treat that as effective immediately, then handle billing for that period a different way (invoice, check, whatever your backup method is) rather than letting one more automatic pull go through "since it was already scheduled."

What happens if you skip the written authorization

Nothing happens — until it does. Most families never dispute an autopay debit, so plenty of providers run informal, verbal-only autopay for years without incident. The exposure shows up in the specific situations where it matters most:

• A parent disputes a debit with their bank. Without a signed authorization on file, you have no documentation to show the bank why the pull was legitimate, and the bank's default position tends to favor the consumer.
• The relationship sours. If you're ending care or already in a dispute over money owed, an undocumented autopay arrangement is one more thing a parent can contest — "I never actually agreed to that amount" is a much harder claim to counter without paper.
• You raise the rate. If the increased amount was never disclosed with proper advance notice, the extra amount pulled is exactly the kind of unauthorized transfer Regulation E exists to prevent.

None of this requires a dramatic falling-out to matter. A five-minute signed form when autopay starts is cheap insurance against a conversation you don't want to have later.

Keep the paper trail even after they sign

NACHA rules generally expect the originator (that's you) to retain proof of authorization for a couple of years after the last payment made under it — so a signed PDF sitting in an email thread from three years ago that you can't find isn't much better than never having collected it. Whatever you use to hold these — a shared drive folder, a binder, your enrollment paperwork — treat it the same way you'd treat a signed invoice or receipt: dated, filed by family, and easy to pull up on request.

If a parent would rather pay by card and split the processing cost differently, surcharging a credit card payment is a completely separate set of rules from anything in this article — ACH and card are different payment rails with different obligations, so don't assume what applies to one applies to the other.

This is general information about how ACH authorization typically works, not legal advice — for a specific dispute or an authorization form you plan to use at scale, a quick review by an attorney or your bank is worth the cost.

Where DaycareFlow fits

DaycareFlow doesn't move money — it doesn't originate ACH debits, process cards, or hold a parent's bank details. What it does is keep the number both sides agreed to in one place: each child's profile stores the billing rate and frequency, so if a parent ever asks "wait, how much is supposed to come out," you have a single source of truth to check the debit against, separate from whatever authorization form lives in your files. Combined with a simple system for tracking who's actually paid, it closes the gap between "autopay is running" and "I know for certain it's still pulling the right amount."

Free during early access, no per-child fees. Start free →

Frequently asked questions

Do I legally need a signed form to set up autopay for daycare tuition?

Yes, if you're debiting a parent's bank account (ACH) on a recurring basis. Federal Regulation E requires that preauthorized electronic fund transfers be authorized in writing, signed or similarly authenticated by the consumer, with a copy given to them — a verbal agreement isn't sufficient.

Can a parent stop autopay whenever they want?

Yes. A parent can revoke ACH authorization at any time, and once they do, you're required to stop debiting their account before the next scheduled payment. Build a habit of treating a revocation as immediate rather than waiting for a pull already in motion.

What if my tuition rate changes and I use autopay?

If the new amount differs from what the parent previously authorized, you generally need to give advance written notice — commonly at least 10 days before the new amount is pulled — unless the parent already agreed in advance to a range of amounts they could anticipate. Pulling a changed amount without that notice can count as an unauthorized transfer.

How is ACH autopay different from charging a parent's credit card automatically?

They're different payment rails with different rules. ACH pulls directly from a bank account and is governed by Regulation E and NACHA rules around written authorization and revocation. Credit card charges run through the card networks, whose own rules (including anything about surcharges) are covered separately — see credit card surcharge legality for daycare tuition.

How long do I need to keep a parent's signed autopay authorization?

Industry ACH rules generally call for keeping proof of authorization for a period of time after the last payment made under it — commonly cited as around two years — so treat it as a document to file and retain, not something to discard once autopay is up and running. Confirm the specific retention expectation with your bank or payment processor.