Yes, they are. ACH payments are regulated by the National Automated Clearing House Association (NACHA) and typically include encryption and fraud monitoring. Customers receive notifications when funds are withdrawn and confirmations when transactions are complete. While ACH isn’t subject to Payment Card Industry Data Security Standard (PCI DSS) like credit cards, many platforms follow PCI-compliant practices to protect customer data. It’s a good idea to review the security features your provider offers to make sure they meet your needs.