Data retention policy
Customer data is stored for 5-7 years depending on the data type, and potentially longer if required by law or regulation. Certain personal information or de-identified information associated with the customer's Brex Account may nonetheless remain on systems owned or maintained by Brex where required to comply with the law or our contractual obligations.
Data archiving and removal policy
When no longer required to comply with the law, for contractual obligations, or for legitimate business, we will either delete or de-identify it.
Data storage policy
Brex stores data in data centers in North America only.
Data center location(s)
United States
Data hosting details
Cloud hosted
App/service has sub-processors
yes
Guidelines for sub-processors