Provision record
Brex · Brex Privacy Policy · View original document ↗

EEA Brex Dual Role as Processor and Controller

Common · 273 of 343 platforms
Stay ahead of the changes
Track Brex and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Brex's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

How other platforms handle this

Boston Dynamics

When we process personal information about you, we do so with your consent or as necessary to comply with our legal and regulatory obligations; to provide the products and services you use...

Zoom

Where we process your personal data, personal information, or personally identifiable information in the provision of Services to you, you acknowledge that Zoom is acting on your behalf and you determine the means and purposes of the processing.

Kling AI

We may also aggregate and/or de-identify your Data and may use such aggregate or de-identified information for any other purposes to the extent permitted under applicable law and not attempt to re-identify the information, unless required by law.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Brex may process personal information in accordance with the instructions of or on behalf of a business customer, including when providing Services to a Company under an agreement. In this context, Brex acts as a processor and the business customer acts as a controller. Brex may also act as a controller when directly determining the processing...

Excerpt from Brex's Privacy Policy

Provision details

Document information
Document
Brex Privacy Policy
Entity
Brex
Tracking information
First captured by ConductAtlas
May 5, 2026
Text quoted from version
CA-V-002679, captured May 16, 2026
Record ID
CA-P-049276
Document ID
CA-D-000534
Evidence Provenance
Source URL
Wayback Machine
Extracted-text SHA-256 (version CA-V-002679)
03e3d5117ef0e23aa742612ed789cc324f5f5dea288772c0ff297cd989239160
Analysis generated
May 21, 2026 02:58 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-002679, captured May 16, 2026 (checked Oct. 6, 2026)
Citation Record
Entity: Brex
Document: Brex Privacy Policy
Record ID: CA-P-049276
Version: CA-V-002679
Captured: 2026-05-16 00:50:42 UTC
SHA-256: 03e3d5117ef0e23a…
URL: https://conductatlas.com/platform/brex/brex-privacy-policy/provision/CA-P-049276/eea-brex-dual-role-as-processor-and-controller/
Accessed: Nov. 10, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Related Analysis

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does Brex's EEA Brex Dual Role as Processor and Controller clause do?

The clause states: “Brex may process personal information in accordance with the instructions of or on behalf of a business customer, including when providing Services to a Company under an agreement. In this context, Brex acts as a processor and the business customer acts as a controller. Brex may also act as a …”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 273 platforms. See the full comparison.

Is ConductAtlas affiliated with Brex?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Brex.