Brex

brex.com · facts updated 1 hour ago

Privacy facts at a glance

Breach notification: Brex will notify the customer upon becoming aware of a Security Breach that is notifiable under applicable Data Protection Laws, but no specific hour SLA is stated.
Transfer mechanism: EU SCCs (Standard Contractual Clauses per European Commission Implementing Decision 2021/914) and UK Addendum
DPA available: Yes
Certifications: SOC 1 Type II · SOC 2 Type II · PCI-DSS
GDPR addressed: Yes
CCPA addressed: Yes

Tracked documents

https://privacy.brex.com/ checked 1 day ago

https://www.brex.com/legal/platform-agreement checked 18 hours ago

Data processing agreement

https://www.brex.com/legal/dpa checked 4 hours ago

Subprocessor list

https://www.brex.com/subprocessors checked 17 hours ago

Security / trust page

https://www.brex.com/trust checked 17 hours ago

minor Subprocessor list 17 hours ago

Brex's subprocessor list page returned a 404 error, replacing the actual subprocessor content with a generic error page and navigation links.

Public summary; per-account review history visible to subscribers tracking this vendor.

Get notified when Brex adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

No card required.