Brex

brex.com · facts updated 23 hours ago

Privacy facts at a glance

Breach notification: Brex will notify the customer upon becoming aware of a Security Breach that is notifiable under applicable Data Protection Laws, but no specific hour SLA is stated in the excerpts provided.
Transfer mechanism: EU SCCs (European Commission Implementing Decision 2021/914) and UK Addendum
DPA available: Yes
Certifications: SOC 1 Type II · SOC 2 Type II · PCI-DSS
GDPR addressed: Yes
CCPA addressed: Yes

Tracked documents

https://privacy.brex.com/ checked 18 hours ago

https://www.brex.com/legal/platform-agreement checked 17 hours ago

Data processing agreement

https://www.brex.com/legal/dpa checked 13 hours ago

Subprocessor list

https://www.brex.com/subprocessors checked 1 day ago

Security / trust page

https://www.brex.com/trust checked 23 hours ago

Subprocessor list 1 day ago

Document updated.

Data processing agreement 2 days ago

Document updated.

Security / trust page 3 days ago

Document updated.

Subprocessor list 3 days ago

Document updated.

Data processing agreement 3 days ago

Document updated.

Subprocessor list 1 week ago

Document updated.

Subprocessor list 1 week ago

Document updated.

Public summary; per-account review history visible to subscribers tracking this vendor.

Get notified when Brex adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

No card required.