Compliance frameworks, security audits, and quality certifications this company maintains.
Security & Compliance
SOC 2 Type II
CertifiedAnnual SOC 2 Type II audit for Security, Availability, and Confidentiality covering Brex platform infrastructure, cardholder data, and business account operations.
Payment Security
PCI DSS Level 1
CertifiedPCI DSS Level 1 certification for Brex corporate card program, cardholder data handling, and payment processing infrastructure.
Security & Compliance
ISO 27001
CertifiedInformation Security Management System certification covering Brex engineering, financial data operations, and enterprise customer data handling.
EU General Data Protection Regulation compliance for Brex European operations covering employee and cardholder personal data processing, DPAs, and data subject rights.
California Consumer Privacy Act compliance including data rights portal, opt-out mechanisms, and third-party data sharing disclosures for California-resident users.
Brex Business Account deposits are FDIC insured up to $6 million through program bank partners, providing enterprise treasury protection beyond the standard $250,000 limit.
Gramm-Leach-Bliley Act compliance governing how Brex collects, shares, and protects customer financial data in connection with corporate banking and card services.
Financial Regulation
BSA/AML
CompliantBank Secrecy Act and Anti-Money Laundering compliance program including customer due diligence, transaction monitoring, and SAR filing procedures.
Payment Network
Mastercard Network
ActiveBrex corporate cards are issued on the Mastercard network, providing global acceptance at 100M+ merchant locations and access to Mastercard commercial card infrastructure.
Web Content Accessibility Guidelines 2.1 Level AA compliance across the Brex web dashboard and mobile app interfaces.