Currently, the Zuora API supports CORS-enabled API requests for managing credit cards, but not for ACH.
We don't want to see bank information travel across our infrastructure for the same reason we don't want to see credit card numbers. I would love to be able to have a CORS-enabled call to manage ACH information for our customers.
