What is a DACA? Deposit account control agreements explained

When you apply for debt financing, such as a business line of credit or venture debt, your lender needs legal assurance that they can recover what they're owed if things go sideways.

A Deposit Account Control Agreement acts as that point of assurance in most secured lending arrangements. The account covered by this agreement may hold customer payments, loan proceeds, receivables, reserves, or operating cash.

What is a DACA (deposit account control agreement)

A deposit account control agreement is a legally binding, three-party contract between you (the borrower), your lender (the secured party), and the bank where you hold the deposit account in question.

It gives your lender legal authority over a specific bank account, not your entire business, not all your accounts, just the one named in the agreement.

Here's how the three-party relationship actually works:

[Table:1]

Under UCC Article 9, a lender's security interest in a deposit account is valid only if the lender has "control" over the account.

When do lenders need a deposit account control agreement

If you're raising debt for your business, there's a good chance a DACA is coming. The U.S. venture debt market hit a record USD $53 billion in 2024, up nearly 95% from 2023, driven in part by larger late-stage and AI infrastructure deals.

With deal sizes growing and lenders becoming more selective, collateral requirements, including DACAs, have tightened

Here are the most common scenarios where lenders will require one as a standard condition of the facility:

• Any credit facility secured against receivables, inventory, or equipment will typically require it on the account where collections flow. The lender needs to know that the collateral proceeds land somewhere they can access
  
• Many RBF providers now require a DACA or a functionally similar account control mechanism, particularly for larger business facilities
  
• Larger revolving credit facilities often include such requirement, especially when the line is secured rather than unsecured
  
• Common in project finance and construction lending, where the arrangement over a project account ensures loan proceeds are used as intended
  
• Less universal, but certain SBA 7(a) loan structures include deposit account control provisions, particularly for higher-value facilities
  

In short, any time a lender is extending secured credit and wants enforceable priority over your cash, they will look to a deposit account control agreement to establish it.

How a DACA actually works: step by step

Abstract legal agreements are easier to assess when you can see them in motion. Here's how a deposit account control agreement plays out in a real scenario.

Say you're a SaaS founder. You've raised a Series A and you're taking on USD $4M in venture debt to extend the runway without further diluting your cap table. Your lender requires a DACA on your primary operating account as a condition of the loan. The structure is passive (springing), which you've negotiated for.

The agreement is executed

All three parties sign the document: you, your lender, and your bank. Your bank is now legally bound to follow the lender's instructions regarding that specific account — if and when the lender issues them.

Business runs as normal

For the life of the loan, nothing changes operationally. You draw on the debt facility, deploy capital, and make monthly principal and interest payments. The arrangement sits in the background, perfecting the lender's security interest.

A trigger event occurs

In exceptions, like missed payments or covenant breach, your cash balance drops below the minimum the loan requires. The lender's right to act is now live.

Notice of exclusive control is sent

The lender sends a formal notice to your bank, not to you first, asserting exclusive control over the account. Under most such agreements, lenders are required to notify the borrower, typically within 48 hours, before or concurrent with issuing this notice.

This timeline is negotiable. 48 hours is standard, but some agreements allow same-day action.

The bank locks the account

Your bank is now obligated to follow the lender's instructions. You can no longer initiate transfers, pay vendors, or access the funds freely. The lender directs where the money goes, usually toward satisfying the outstanding loan balance.

Resolution

Either the default is cured (you bring the account current, the lender releases control), or the lender proceeds with recovery.

What to consider: Most businesses assume they'll have time to react. The reality is that once a trigger event occurs, the lender's legal right to act is immediate. The notice period is a courtesy, not a delay mechanism.

If you're within 30 days of a covenant breach, that is the moment to be in conversation with your lender. Build that into how you manage covenant compliance.

Active vs passive DACA Agreements and which one you're likely signing

Not all agreements are structured the same way. There are two distinct types, active and passive. The difference between them has a direct impact on how much operational control you retain over your own money.

[Table:2]

Passive (springing)

This is the most common structure in venture lending and growth-stage debt. Under a passive DACA, you keep full day-to-day control of the account. Payroll goes out, vendor invoices get paid, revenue flows in, so basically nothing changes. The lender's control only "springs" into effect when a specific trigger event occurs, typically a default or a defined covenant breach.

Your operations remain unaffected unless something goes wrong. This is the structure you want, and it's worth negotiating hard to get it.

Active (blocked)

Under an active DACA, the lender has immediate, ongoing control of the account from the moment the agreement is signed. You cannot move money without the lender's instruction or approval.

This structure is common in distressed lending situations, certain asset-based loan arrangements, or when a lender has reason to doubt cash management practices.

Your business bank account effectively operates under the lender's permission structure. Paying a vendor, covering payroll, reinvesting in growth- all of it becomes dependent on the lender's direction. This is a significant operational constraint that most early-stage founders don't fully appreciate when they sign.

Quick tip: Before you sign anything, confirm which type you're agreeing to. If your term sheet doesn't specify, ask directly. A lender who brushes off that question is a flag worth paying attention to.

DACA and control: What you actually give up and what you don't

The word "control" in a deposit account control agreement makes founders nervous. It should prompt attention, not panic. Here's an honest breakdown of what changes and what doesn't.

What you give up

• Priority over the named account in a default: If a trigger event occurs, the lender's claim on the funds in that specific account takes precedence over yours and over other creditors. This is the core trade-off of secured lending.
  
• Free movement of funds if control is activated: Under an active DACA or once a passive one is triggered, you cannot initiate transfers, make payments, or withdraw without the lender's direction. This can disrupt payroll, vendor payments, and operational cash flow
  
• Some leverage in a default scenario: Without a DACA, you'd have more options (and more time) to negotiate. With one, the lender can move quickly
  

What you don't give up

• Control over accounts not named in the agreement. It only covers the specific account listed. Founders who negotiate to have a separate, dedicated collateral account subject to the DACA, retain full operational flexibility even in a default scenario
  
• Your normal operations, in a passive DACA: Day-to-day banking is untouched until a trigger event. Revenue in, expenses out, nothing changes
  
• The right to cure: Most agreements include cure periods, a defined window in which you can remedy a default before the lender exercises control. This is negotiable and worth pushing on
  
• Negotiating leverage: You have more room to shape the terms than most founders realize. Lenders expect negotiation on this. Founders who don't negotiate leave protections on the table
  

A deposit account control arrangement doesn't hand over your business. It hands over priority access to one account, under specific conditions. Where you have the most leverage is in defining exactly which account that is and exactly what conditions trigger it.

How to negotiate a DACA

The agreement may be standard in secured lending, but that does not mean every term is fixed.

Before signing a deposit control account agreement, you should review the operating details with counsel. You do not need to become a lawyer. But you do need to understand what the agreement allows the lender and bank to do with your cash.

1. Start with control
   

Ask whether a passive DACA is available instead of an active one. With passive control, you may keep normal access to the account unless a default or trigger event occurs. With active control, the lender may have instruction rights from the start.

1. Define the trigger
   

What counts as a default? Is it a missed payment, breached covenant, low liquidity level, reporting delay, or something else? Also ask whether there is a cure period before control shifts. A short cure period can matter if the issue is administrative, not financial.

1. Review payment access
   

Can the lender block all payments, or only certain transfers? Can minimum operating funds stay available? Are payroll, taxes, rent, insurance, and essential supplier payments carved out?

If you use a controlled disbursement account, make sure the DACA finance structure does not interrupt critical outgoing payments.

1. Ask what happens at the end
   

How is the agreement released after repayment or refinancing? What approvals are needed if you change banks? Can the covered account be closed or replaced?

DACA vs. similar agreements: Quick overview

[Table:3]

Your bank's role in a DACA

Usually, founders focus entirely on the lender side of the agreement. But the bank, the third party in this agreement, has obligations that directly affect how it functions in practice. Choose the wrong bank, and the agreement you negotiated carefully can fall apart at execution.

When a lender issues a notice of exclusive control, your bank must act quickly. In a default scenario, time matters. A bank that takes four or five business days to process a DACA instruction isn't just slow but a liability. During that delay, cash could be withdrawn, misdirected, or subject to competing claims.

The questions to ask your bank before signing a DACA:

• Do you have a dedicated DACA team? Not all banks do. Smaller community banks and many fintech banking partners (BaaS providers) have limited experience executing DACA instructions accurately and quickly.
  
• What is your typical DACA setup and execution timeline? Best banking partners can set up relevant programs in hours and execute instructions the same day. Others take days.
  
• Can you execute DACA instructions across multiple accounts simultaneously? Relevant if your loan structure involves more than one account under this arrangement.
  

Many neobanks and financial technology platforms don't directly hold your deposits; they use a sponsor bank behind the scenes. That sponsor bank is the actual depositary institution for these specialized purposes.

Before you agree to a DACA on a fintech account, confirm that the underlying bank is capable of fulfilling the set obligations. Many are not set up to handle this.

Common DACA risks founders overlook

The biggest DACA banking risk is not signing the agreement. It is signing without knowing how the agreement affects daily cash access.

Watch for these risks before you sign:

• Active control from day one: An active DACA may give the lender control rights immediately, which can affect how cash moves through the account.
  
• No carveouts for essential payments: If your main operating account is controlled, confirm whether payroll, taxes, rent, insurance, and key vendor payments can continue.
  
• Unclear trigger events: A trigger may be a missed payment, a covenant breach, a reporting delay, a liquidity drop, or another event defined in the agreement.
  
• Assuming passive means no control: A passive DACA may not restrict access at first, but lender control can activate later.
  
• No release process: Ask how the bank DACA is removed after repayment, refinancing, or account closure.
  
• Too many accounts without clarity: If you use separate accounts for collections, payroll, reserves, and debt payments, confirm which accounts are covered.
  
• Ignoring the bank’s deposit account agreement: Your standard deposit account agreement governs day-to-day banking. The DACA is a separate document that establishes lender rights over the account. Both are in effect simultaneously.
  

Before signing, trace the path of every major dollar: customer receipts, payroll, rent, taxes, loan proceeds, and debt payments.

How to prepare for a DACA request from your lender

When a lender asks for a deposit account control agreement, the fastest response is not “send me the form.”

It is a clean map of how cash moves through your business.

• Start with your accounts. List every business bank account, including the account name, account number, bank name, and purpose. Mark which account receives customer payments, which one handles payroll and taxes, and which one is used for ACH, wires, card payments, vendor transfers, or debt payments.
  

• Then connect the account map to the loan. Identify current lender relationships, existing liens or security interests, and any loan agreement terms related to cash control. If one DDA deposit account is already used for collections and operating expenses, flag that early. A lender may treat it differently from a reserve account or separate DACA account.
  

• You should also assign one internal finance owner or external counsel to review the agreement, confirm which accounts are covered, and check whether any payment workflows could break if control shifts.
  

Aspire¹ full-stack fintech solution can help with the cash visibility side of this preparation.

With business accounts, payments, accounts receivable, accounts payable, corporate cards², and expense management in one finance platform, you can better track where money comes in, where it goes, and which workflows are tied to each account.

Why early-stage startups experience DACA differently

For early-stage founders, a DACA agreement often arrives mid-negotiation with no prior context and you may only have one operating account, a fintech banking setup, and no CFO in the room to flag what matters.

The fix is straightforward: open a dedicated collateral account early, confirm your bank can handle DACA obligations, and read the trigger event clause before anything else in the deposit account control agreement.

Preparation beats sophistication every time.

FAQs

1. What is a DACA in banking?

A DACA in banking is a deposit account control agreement between a borrower, lender, and bank. It gives the lender control rights over a business deposit account used as collateral for secured financing.

2. What is a DACA account?

A DACA account is a business deposit account covered by a DACA agreement. The business may still use the account normally, but the lender can gain control rights depending on the agreement terms.

3. Why do lenders require deposit account control agreements?

Lenders require deposit account control agreements to protect their claim over cash collateral. It helps them control or redirect funds in the account if the borrower defaults or a trigger event occurs.

4. What is the difference between active and passive DACA?

An active DACA gives the lender control rights from the start. A passive deposit account control agreement lets the borrower keep normal access until a default or trigger event activates lender control.

5. Is a DACA the same as a DDA deposit?

No. A DDA deposit is the business deposit account itself, usually a checking account. A deposit account control agreement is the legal agreement that governs lender control over that account.

6. What should founders check before signing a DACA agreement?

Founders should check which accounts are covered, when lender control starts, what counts as default, whether payroll and tax payments are protected, and how the DACA is released after repayment.

7. Does every business loan require a DACA?

No. A deposit account control agreement is usually required for secured financing where the lender needs control over a deposit account, such as asset-based lending, venture debt, receivables-backed financing, or larger credit facilities.

8. Is a DACA the same as a lockbox?

No. A lockbox is used to collect and route customer payments, while a DACA gives a lender control rights over a deposit account used as collateral. A lockbox manages payment flow. A DACA manages lender control.