Our data indicates CU Direct supports DMARC compliance via both DKIM and SPF authentication.
Contact CU Direct support to inquire about their DKIM capabilities.
Traffic seems to be flowing through 'relay.cudirect.com', which translates to an 'ip4:65.200.30.14' inclusion to your SPF record. Be sure to verify this with CU Direct support.