Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on May 16, 2026; our capture on Oct 17, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“To prevent, detect, mitigate, and investigate potential risk, security issues, suspicious activity, as well as fraudulent or unauthorized transactions and breaches of policies and terms, and threats of harm, including in an automated fashion.”
“The information in a Company's Brex Account is governed by our Agreement with the business customer. You should direct questions about Personal Information we are processing on behalf of a Company to that Company's administrators.”
“Brex reserves the right to update or modify this Privacy Policy at any time.”
“We may share your personal information with our affiliates, including Capital One N.A., in accordance with this Privacy Policy.”
“If Brex goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its businesses, services, or assets, your personal information may be among the assets transferred.”
“Identification Information, such as social security number and driver's license, passport or other government-issued identification documents to comply with our verification process, global anti-money laundering (AML) and know your customer (KYC) obligations.”
This document explains what personal information Brex collects about you, who it shares that information with, and how long it keeps it. Brex collects sensitive data like your Social Security number, government ID, and bank account details as required conditions of using its services, and may share your information with affiliated companies including Capital One N.A. or with a new owner if Brex is acquired. If you use Brex through your employer's account, your personal information is governed by Brex's agreement with that business, not by your own.
Brex's Privacy Policy establishes the scope and conditions under which Brex collects, uses, retains, and shares personal information across its financial services platform. Brex collects highly sensitive data—including government-issued identification documents, social security numbers, bank account credentials, and detailed transaction records—as a non-optional condition of service, driven in part by AML and KYC compliance obligations. Personal information may be shared with affiliates including Capital One N.A., transferred to third parties in the event of a corporate transaction, and disclosed to service providers under contractual use restrictions enforceable only by Brex. Brex retains personal information without a fixed time limit, for as long as any stated purpose or legal obligation applies, and reserves the right to update the Privacy Policy at any time. Authorized users operating through a business customer's Brex Account are governed by Brex's agreement with that business, not by a direct individual relationship with Brex.
For an individual user, this document means that a broad range of sensitive personal and financial information—including identity documents, bank account numbers and balances, and detailed transaction data—is collected automatically and cannot be avoided if you use Brex's services. Your information may be shared with Brex affiliates such as Capital One N.A. and could be transferred to an acquiring company in a merger or sale. Automated systems may flag or process your activity for fraud and security purposes without human review. If you use Brex through a company account, your personal information is subject to Brex's agreement with that employer rather than any rights you hold directly. Brex may update the Privacy Policy at any time, altering these terms going forward.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“To prevent, detect, mitigate, and investigate potential risk, security issues, suspicious activity, as well as fraudulent or unauthorized transactions and breaches of policies and terms, and threats of harm, including in an automated fashion.”
“The information in a Company's Brex Account is governed by our Agreement with the business customer. You should direct questions about Personal Information we are processing on behalf of a Company to that Company's administrators.”
“The Brazilian General Data Protection Law ("LGPD") requires a legal basis for our use of personal information. Our basis varies depending on the specific purpose for which we use personal information.”
“Brex reserves the right to update or modify this Privacy Policy at any time.”
“To the extent that our marketing activities constitute a "share" or "sale" of your personal information, you can opt out. To opt out, you can modify your cookie choices as described in our Cookie Notice or activate Global Privacy Control...”
“We may share your personal information with our affiliates, including Capital One N.A., in accordance with this Privacy Policy.”
“If Brex goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its businesses, services, or assets, your personal information may be among the assets transferred.”
“Identification Information, such as social security number and driver's license, passport or other government-issued identification documents to comply with our verification process, global anti-money laundering (AML) and know your customer (KYC) obligations.”
“if you link business bank accounts during or after the application process...we will receive Bank Account Information about the linked account, like the bank routing and account numbers and account balance.”
“We keep your personal information for as long as it is required in order to fulfill the relevant purposes described in this Privacy Policy, or for other essential purposes such as complying with our legal obligations, resolving disputes and enforcing …”
“We contractually prohibit our service providers from retaining, using, or disclosing information about you for any purpose other than performing services for us...”
“Transaction Data, including information associated with your payments and card transactions made through your company's Brex Account...such as the purchase details, payment mechanism, amount, location, and any annotations or coding you provide.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle AI and Automated Fraud Detection Processing and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.