The policy discloses that when a company connects its email service to Brex, Brex may receive and process the content of email communications and their attachments from authorized users.
This analysis describes what Brex's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that integration of an employer's email service with Brex may result in transmission of email content and attachments to Brex for processing, which engages consent and disclosure requirements under applicable electronic communications statutes and may require evaluation under GDPR and CPRA obligations regarding the lawfulness of processing communications content.
Interpretive note: The policy does not specify the purposes for which email content and attachments are processed, or the retention periods that apply, creating uncertainty about the full scope of this data collection.
Under this clause, if an employer connects its email service to Brex, the content of an authorized user's email communications and attachments may be received and processed by Brex. The provision states this access continues until the integration is disconnected by the user or the company.
Cross-platform context
See how other platforms handle Email Communications and Attachments Collection via Integrations and similar clauses.
Compare across platforms →"if your company connects its email service, we may receive your email communications and attachments for processing.Excerpt from Brex's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision may engage the Electronic Communications Privacy Act (ECPA) and the Stored Communications Act (SCA), which govern interception and access to electronic communications content.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that integration of an employer's email service with Brex may result in transmission of email content and attachments to Brex for processing, which engages consent and disclosure requirements under applicable electronic communications statutes and may require evaluation under GDPR and CPRA obligations regarding the lawfulness of processing communications content.
Under this clause, if an employer connects its email service to Brex, the content of an authorized user's email communications and attachments may be received and processed by Brex. The provision states this access continues until the integration is disconnected by the user or the company.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Brex.