https://brale.xyz/assets/security-DM-lpe5l.js

1import{t as e,w as t}from"./jsx-runtime-vlDczagz.js";import{En as n,Ft as r,Ht as i,It as a,Lt as o,Mt as s,Pt as c,Qt as l,Ut as u,Xt as d,bt as f,hn as p,kn as m,t as h}from"./layout-1UWg9V41.js";import{o as g}from"./constants-Hr0ije_t.js";import{t as _}from"./get-meta-CJ8PcTDR.js";import{t as v}from"./subpage-hero-B7QQp3lC.js";import{t as y}from"./feature-split-B6QOJMYc.js";import{t as b}from"./feature-cards-CdNAGYhe.js";import{t as x}from"./trust-signals-row-D__rhsQd.js";var S={hero:{eyebrow:`Security & compliance`,heading:`Stablecoin program infrastructure built for real diligence.`,headingLead:`Stablecoin program infrastructure`,headingTail:`built for real diligence.`,subhead:`Brale provides the regulated infrastructure, reserve controls, and audit-ready operations teams need to launch stablecoins with confidence.`,primaryCta:{label:`Book a demo`,href:`/contact`},secondaryCta:{label:`Talk to our compliance team`,href:`/contact`}},trustSignals:{signals:[`SOC 2 Type II`,`Monthly reserve attestations`,`Annual AML/BSA audit`,`Annual penetration testing`,`Segregated reserves + daily reconciliation`]},reserveTransparency:{eyebrow:`Reserve transparency`,headingLines:[`Every stablecoin Brale issues is fully backed.`,`Every month, independently verified.`],subhead:{left:`Brale maintains segregated reserve accounts with daily reconciliation and monthly independent CPA attestations. Reserves are held separately from Brale's operating funds and structured to protect holders.`},cards:[{icon:m,title:`Reserve composition`,text:``,bullets:[`Short-duration US Treasury bills (≤90-day)`,`Government money market funds`,`Bank deposits`]},{icon:d,title:`Custody structure`,text:``,bullets:[`Segregated accounts held separately from corporate assets`,`Multi-institution diversification`,`Daily reconciliation against stablecoins in circulation`]},{icon:r,title:`Attestation cadence`,text:``,bullets:[`Published monthly`,`Conducted by independent CPA firm`,`Confirms reserves exceed stablecoins in circulation`,`Prepared per AICPA attestation standards`]}]},regulatoryCoverage:{kicker:`Regulatory coverage`,headlineLines:[`Regulatory infrastructure that programs can launch on from day one.`],body:`Brale operates with the licensing, reporting, and compliance infrastructure required to support stablecoins in the U.S. Brale built this so programs launching on Brale don't have to.`,cards:[{icon:a,title:`US coverage`,text:``,bullets:[`FinCEN-registered Money Services Business · NMLS #2376957`,`Licensed or exempt in 45 US jurisdictions`,`BSA/AML, sanctions, and money transmission controls maintained through ongoing review`]},{icon:o,title:`Expansion`,text:``,bullets:[`EU regulatory application in progress`,`Structured to align with emerging U.S. stablecoin regulatory frameworks, including the GENIUS Act`]}]},complianceInfrastructure:{eyebrow:`Compliance infrastructure`,headingLines:[`Compliance embedded in the`,`platform.`],subhead:{left:`Every program on Brale runs on a common compliance control plane for onboarding, sanctions enforcement, transaction monitoring, and auditability. Teams launch on infrastructure with screening, review workflows, policy controls, and logged administrative actions already in place.`},cards:[{icon:i,title:`KYB`,text:`Risk-based onboarding for businesses, with support for reliance where appropriate. If your program already has approved onboarding processes, Brale can integrate with that model.`},{icon:l,title:`Sanctions screening`,text:`Screening is applied at onboarding and across account and transaction activity, with continuous list updates and platform-level enforcement controls including block and freeze actions.`},{icon:c,title:`Transaction monitoring`,text:`Risk-based AML monitoring is applied across program activity, with automated alerting, analyst review workflows, case handling, and reporting processes that support SAR investigation and filing.`},{icon:d,title:`Program controls`,text:`Programs can enforce token controls like denylist, freeze, and clawback on supported networks, with logging of every administrative action.`},{icon:f,title:`Audit trail`,text:`Issuance, redemption, transfers, and administrative actions are logged with full context. Records are exportable for audit, review, and incident response.`}]},securityPosture:{eyebrow:`Security posture`,headingLines:[`Third-party validated security for regulated`,`financial infrastru

1cture`],cards:[{icon:p,title:`SOC 2 Type II`,text:`Annual penetration testing and zero high findings in the most recent test.`},{icon:u,title:`Key management`,text:`Issuer keys are protected through multi-party control and threshold signing, with encrypted key shares stored in isolated environments across regions. Hardware-backed protections support signing ceremonies and reduce single-point-of-failure risk.`},{icon:o,title:`Infrastructure security`,text:`Brale runs a defense-in-depth security model across cloud infrastructure, edge protection, and production telemetry. Monitoring, alerting, and audit logging support security operations, incident containment, and continuous improvement across the platform.`},{icon:n,title:`Access controls`,text:`Production access requires multi-factor authentication with phishing-resistant hardware security keys. Privileged access is governed by role-based permissions and least-privilege controls across systems and operational workflows.`},{icon:s,title:`Incident response & resilience`,text:`Brale maintains incident response procedures, operational logging, and recovery practices designed for regulated financial infrastructure. Response plans are exercised through tabletop review and continuous operational improvement.`},{icon:r,title:`Smart contract security`,text:`Brale uses independently audited smart contract patterns, including CertiK and Zellic-reviewed contract coverage, with additional review on major changes.`}]},trackRecord:{cardLeading:`numeral`,headlineLines:[`Proven in production across payments,`,`ecosystems, and institutional use cases`],cards:[{title:`Live programs`,text:`Used by customer and ecosystem programs operating across payments and stablecoin infrastructure use cases.`},{title:`Institutional trust`,text:`Brale is used in institutional contexts including the Canton Network and is backed by investors including Lightspeed and NEA.`},{title:`Operating discipline`,text:`Monthly reserve attestations, SOC 2 Type II, annual AML/BSA audit, and annual penetration testing support ongoing diligence and operational review.`}]},diligence:{kicker:`Built for diligence`,headlineLines:[`Move your legal, compliance, security,`,`and treasury review forward`],body:`Compliance, regulatory, and security questions answered directly.`,checklistAside:{title:`What we can cover`,items:[`U.S. licensing posture and jurisdiction coverage`,`Reserve structure, reconciliation, and attestation process`,`BSA/AML program, sanctions controls, and monitoring workflows`,`SOC 2 Type II, penetration testing, and security controls`,`Documentation available through the diligence process`],cta:{label:`Book a demo`,href:`/contact`}}}},C=e(),{desc:w,title:T}=g.security,E=({loaderData:e})=>e?_({desc:w,title:T,urls:e.urls}):[],D=t(function(){let{hero:e,trustSignals:t,reserveTransparency:n,regulatoryCoverage:r,complianceInfrastructure:i,securityPosture:a,trackRecord:o,diligence:s}=S;return(0,C.jsxs)(h,{children:[(0,C.jsx)(v,{content:e,halftoneCorner:`top-right`,layout:`centered`,tightBottom:!0,copyAs:`header`}),(0,C.jsx)(x,{content:t,tightTop:!0,signalsAsList:!0}),(0,C.jsx)(b,{content:n,showFade:!0,dataSection:`reserve-transparency`,introAs:`header`,tileAs:`article`}),(0,C.jsx)(y,{content:r,showFade:!0,dataSection:`regulatory-coverage`,introAs:`header`,cardsAsList:!0,tileAs:`article`}),(0,C.jsx)(b,{content:i,showFade:!0,dataSection:`compliance-infrastructure`,introAs:`header`,tileAs:`article`}),(0,C.jsx)(b,{content:a,showFade:!0,dataSection:`security-posture`,introAs:`header`,tileAs:`article`}),(0,C.jsx)(y,{content:o,showFade:!0,dataSection:`security-track-record`,introAs:`header`,cardsAsList:!0,tileAs:`article`}),(0,C.jsx)(y,{content:s,showFade:!0,dataSection:`security-diligence`,introAs:`header`,checklistPanelAs:`aside`})]})});export{D as default,E as meta};