BrandX combines audited smart-contract escrow with SOC 2 Type II controls, GDPR compliance, multi-sig fund custody, and on-chain proof-of-reserves. Every dollar tracked. Every signature provable. Every deal defensible.
Independently audited controls covering security, availability, processing integrity, confidentiality, and privacy. Latest report Q2 2026.
EU/UK data subject rights, data residency in Frankfurt and London regions, signed DPAs available on request, full erasure workflow.
Every BrandX escrow contract is audited by two independent firms before mainnet deployment. Bytecode hashes pinned and published.
Legally binding electronic signatures with full audit trail — IP, timestamp, geolocation, signer identity, document hash on-chain.
We treat escrow capital like a trust company would — with multi-sig custody, segregated reserves, daily proofs, and insurance on principal. The contracts are open-source and the bytecode is pinned.
Identity, contract terms, payment instructions and PII are all encrypted at the field level. We assume breach by default and architect every layer to fail safe.
Travel Rule compliant via Coinbase TRUST, Chainalysis address screening on every wallet, sanctions list checks (OFAC, EU, UK, UN).
GDPR (EU/UK), CCPA/CPRA (California), PIPEDA (Canada), POPIA (South Africa), LGPD (Brazil). DPAs signed on request.
E-SIGN Act + UETA in the US, eIDAS Advanced E-Signatures in EU/UK. Full audit trail anchored on-chain.
MiCA-aware in the EU, FINRA + SEC-aware in the US. Working with outside counsel; not legal advice — talk to your own.
Not legal advice. We work with outside counsel in every jurisdiction we operate; you should too. Our compliance team can introduce you to qualified outside counsel on request.
We publish what we can publicly and share the rest under NDA. No hand-waving — every claim on this page maps to a document we can put in front of you.
Request the security packOur HackerOne program rewards security researchers $500–$50,000 per issue depending on severity. We acknowledge within 24 hours, triage within 72, and ship critical hotfixes inside 24 hours of triage.
Submit reports to security@brandx.io — PGP key in our trust center.
Get the full security pack — SOC 2, audits, penetration tests, DPAs, contracts, the works.