Backup and continuity
1proven
- Backup and restoration (Validated by testing)
Most recent proof10/11/2026
Commitments by area
what the company does, and how we know- Validated by testingSomeone tested the control and it worked.
- Evidenced by collectionThe proof was collected and checked, and is still within its validity.
- DeclaredThe company approved the policy. It is not yet proof that it works.
Access and identity
1proven
- Multi-factor authentication (Evidenced by collection)
Most recent proof09/03/2026
Infrastructure and monitoring
2proven
- Network segmentation (Validated by testing)
- Configuration hardening (Evidenced by collection)
Most recent proof10/12/2026
People and policies
Approved policies
- Norma de Cópia de Segurança e Retenção · version 1.3 (Declared)
- Padrão de Acesso de Terceiros · version 1.0 (Declared)
- Plano de Resposta a Incidentes · version 2.0 (Declared)
Asset inventory
Only what the daily count proves appears here. What is missing is not shown.- Inventory fed by 14 tools
- Last checked on 10/27/2026
Latest completed audit
December 9, 2025
External assessment · PCI DSS (Payment Card Industry). Completed and passed.
Standards followed
- LGPD (Brazilian General Data Protection Law)Compliance achieved
- CMN Resolution 5.274/2025 (amends 4.893/2021) + BCB 538/2025Being implemented
- ISO/IEC 27001Being implemented
- PCI DSS (Payment Card Industry)Being implemented
Recent proof
- 10/12/2026Configuration hardening: proof collected and checked
- 10/11/2026Backup and restoration: tested and passed
- 09/28/2026Backup and restoration: proof collected and checked
- 09/03/2026Multi-factor authentication: proof collected and checked
- 07/30/2026Network segmentation: tested and passed
Documents on request
- Report · PCI DSS (Payment Card Industry)December 2025