On: How ACH works: A developer perspective (2014)

[zie]

For us and our bank it's gpg encrypted and then transferred over SFTP.

Sure, the ACH file format is sort of sucky, but it's not like it's difficult. The lack of an ACK is super awful tho. Payroll has to call in 20m after sending to verify.