Security & compliance

Stablecoin program infrastructure built for real diligence.

Brale provides the regulated infrastructure, reserve controls, and audit-ready operations teams need to launch stablecoins with confidence.

  • SOC 2 Type II

  • Monthly reserve attestations

  • Annual AML/BSA audit

  • Annual penetration testing

  • Segregated reserves + daily reconciliation

Reserve transparency

Every stablecoin Brale issues is fully backed.
Every month, independently verified.

Brale maintains segregated reserve accounts with daily reconciliation and monthly independent CPA attestations. Reserves are held separately from Brale's operating funds and structured to protect holders.

  • Reserve composition

    • Short-duration US Treasury bills (≤90-day)
    • Government money market funds
    • Bank deposits
  • Custody structure

    • Segregated accounts held separately from corporate assets
    • Multi-institution diversification
    • Daily reconciliation against stablecoins in circulation
  • Attestation cadence

    • Published monthly
    • Conducted by independent CPA firm
    • Confirms reserves exceed stablecoins in circulation
    • Prepared per AICPA attestation standards

Regulatory coverage

Regulatory infrastructure that programs can launch on from day one.

Brale operates with the licensing, reporting, and compliance infrastructure required to support stablecoins in the U.S. Brale built this so programs launching on Brale don't have to.

  • US coverage

    • FinCEN-registered Money Services Business · NMLS #2376957
    • Licensed or exempt in 45 US jurisdictions
    • BSA/AML, sanctions, and money transmission controls maintained through ongoing review
  • Expansion

    • EU regulatory application in progress
    • Structured to align with emerging U.S. stablecoin regulatory frameworks, including the GENIUS Act

Compliance infrastructure

Compliance embedded in the
platform.

Every program on Brale runs on a common compliance control plane for onboarding, sanctions enforcement, transaction monitoring, and auditability. Teams launch on infrastructure with screening, review workflows, policy controls, and logged administrative actions already in place.

  • KYB

    Risk-based onboarding for businesses, with support for reliance where appropriate. If your program already has approved onboarding processes, Brale can integrate with that model.

  • Sanctions screening

    Screening is applied at onboarding and across account and transaction activity, with continuous list updates and platform-level enforcement controls including block and freeze actions.

  • Transaction monitoring

    Risk-based AML monitoring is applied across program activity, with automated alerting, analyst review workflows, case handling, and reporting processes that support SAR investigation and filing.

  • Program controls

    Programs can enforce token controls like denylist, freeze, and clawback on supported networks, with logging of every administrative action.

  • Audit trail

    Issuance, redemption, transfers, and administrative actions are logged with full context. Records are exportable for audit, review, and incident response.

Security posture

Third-party validated security for regulated
financial infrastructure

  • SOC 2 Type II

    Annual penetration testing and zero high findings in the most recent test.

  • Key management

    Issuer keys are protected through multi-party control and threshold signing, with encrypted key shares stored in isolated environments across regions. Hardware-backed protections support signing ceremonies and reduce single-point-of-failure risk.

  • Infrastructure security

    Brale runs a defense-in-depth security model across cloud infrastructure, edge protection, and production telemetry. Monitoring, alerting, and audit logging support security operations, incident containment, and continuous improvement across the platform.

  • Access controls

    Production access requires multi-factor authentication with phishing-resistant hardware security keys. Privileged access is governed by role-based permissions and least-privilege controls across systems and operational workflows.

  • Incident response & resilience

    Brale maintains incident response procedures, operational logging, and recovery practices designed for regulated financial infrastructure. Response plans are exercised through tabletop review and continuous operational improvement.

  • Smart contract security

    Brale uses independently audited smart contract patterns, including CertiK and Zellic-reviewed contract coverage, with additional review on major changes.

Proven in production across payments,ecosystems, and institutional use cases

  • Live programs

    Used by customer and ecosystem programs operating across payments and stablecoin infrastructure use cases.

  • Institutional trust

    Brale is used in institutional contexts including the Canton Network and is backed by investors including Lightspeed and NEA.

  • Operating discipline

    Monthly reserve attestations, SOC 2 Type II, annual AML/BSA audit, and annual penetration testing support ongoing diligence and operational review.

Built for diligence

Move your legal, compliance, security,and treasury review forward

Compliance, regulatory, and security questions answered directly.