Skip to main content
APIBrasil

Security and privacy

What your compliance team needs to know

Who we are on paper, how we handle personal data, where to write when something goes wrong — and what we don't have yet.

  • Registered company

    Legal name, active CNPJ at the Brazilian federal revenue service, registered address and an INPI trademark. All verifiable in minutes, without taking our word for it.

  • Data protection officer

    There is an appointed DPO with a dedicated address and an open channel, as Brazil's LGPD (art. 41) requires. It is not a generic contact inbox.

  • Data subject rights

    Access, correction, portability and erasure are requested through the DPO channel and answered within the statutory deadline.

  • Data in transit

    All traffic is HTTPS, with HSTS and a Content-Security-Policy applied at the edge. The site accepts no unencrypted connection.

  • Consent-gated cookies

    Analytics and marketing start switched off and only load after acceptance. Google Consent Mode is initialised denying everything.

  • Responsible disclosure

    A public security.txt sits at the domain root, with a contact channel and a 48-hour response window for good-faith reports.

  • Public availability

    Service status is published outside our own infrastructure, so it stays up when that infrastructure doesn't.

  • Our role in the flow

    APIBrasil brokers queries to public sources and providers; it is neither the origin of the registry data nor its controller.

Where to write

Vulnerability
seguranca@apibrasil.com.brSecurity issue reports. We answer within 48 hours.
Data protection officer
dpo@privacypoint.com.brData subject rights and questions about data processing.
Availability
status.apibrasil.ioIncidents and service history, on an independent page.

The full documents are the Privacy Policy and the Terms of Use. This page is their operational summary, not a replacement.

We hold no ISO 27001, no SOC 2 and no third-party penetration test report, and we would rather say so than have you find out during due diligence. What exists today is the public record: APIBRASIL PROCESSAMENTO DE DADOS LTDA, CNPJ 44.959.669/0001-80. Contractual security requirements and SLAs are handled case by case in enterprise agreements.