Workday has dual-factor authentication and is tokenized. Per NACHA's Supplementing Data Security Requirements, encryption, truncation, tokenization, destruction, or having the financial institution store, host, or tokenize the account numbers are among the options for Originators and Third-Parties to consider.