According to NACHA mandates for account security: Large, non-FL Originators, Third=Party Service Providers (TPSPs) and Third-Party Senders (TPSs) will be required to secure deposit account information when it is stored electronically. Commonly called secure data at rest.
https://www.nacha.org/rules/supplementing-data-security-requirements
Infor does not appear to be making any progress on several Enhancement Requests:
ER-51525 Enhancements to comply with new NACHA requirements for encrypting bank account number data at rest.
ER-52712 New NACHA operating rules for electronic account number storage effect June 30, 2020
Please review and vote on the enhancement request.