Reserve composition
- Short-duration US Treasury bills (≤90-day)
- Government money market funds
- Bank deposits
Security & compliance
Brale provides the regulated infrastructure, reserve controls, and audit-ready operations teams need to launch stablecoins with confidence.
SOC 2 Type II
Monthly reserve attestations
Annual AML/BSA audit
Annual penetration testing
Segregated reserves + daily reconciliation
Reserve transparency
Brale maintains segregated reserve accounts with daily reconciliation and monthly independent CPA attestations. Reserves are held separately from Brale's operating funds and structured to protect holders.
Regulatory coverage
Brale operates with the licensing, reporting, and compliance infrastructure required to support stablecoins in the U.S. Brale built this so programs launching on Brale don't have to.
Compliance infrastructure
Every program on Brale runs on a common compliance control plane for onboarding, sanctions enforcement, transaction monitoring, and auditability. Teams launch on infrastructure with screening, review workflows, policy controls, and logged administrative actions already in place.
Risk-based onboarding for businesses, with support for reliance where appropriate. If your program already has approved onboarding processes, Brale can integrate with that model.
Screening is applied at onboarding and across account and transaction activity, with continuous list updates and platform-level enforcement controls including block and freeze actions.
Risk-based AML monitoring is applied across program activity, with automated alerting, analyst review workflows, case handling, and reporting processes that support SAR investigation and filing.
Programs can enforce token controls like denylist, freeze, and clawback on supported networks, with logging of every administrative action.
Issuance, redemption, transfers, and administrative actions are logged with full context. Records are exportable for audit, review, and incident response.
Security posture
Annual penetration testing and zero high findings in the most recent test.
Issuer keys are protected through multi-party control and threshold signing, with encrypted key shares stored in isolated environments across regions. Hardware-backed protections support signing ceremonies and reduce single-point-of-failure risk.
Brale runs a defense-in-depth security model across cloud infrastructure, edge protection, and production telemetry. Monitoring, alerting, and audit logging support security operations, incident containment, and continuous improvement across the platform.
Production access requires multi-factor authentication with phishing-resistant hardware security keys. Privileged access is governed by role-based permissions and least-privilege controls across systems and operational workflows.
Brale maintains incident response procedures, operational logging, and recovery practices designed for regulated financial infrastructure. Response plans are exercised through tabletop review and continuous operational improvement.
Brale uses independently audited smart contract patterns, including CertiK and Zellic-reviewed contract coverage, with additional review on major changes.
Used by customer and ecosystem programs operating across payments and stablecoin infrastructure use cases.
Brale is used in institutional contexts including the Canton Network and is backed by investors including Lightspeed and NEA.
Monthly reserve attestations, SOC 2 Type II, annual AML/BSA audit, and annual penetration testing support ongoing diligence and operational review.
Built for diligence
Compliance, regulatory, and security questions answered directly.