Know who you are dealing with.

Gathering, cross-referencing and analysis of information about individuals (CPF) and companies (CNPJ), plus cybersecurity and compliance due diligence, to support assessments, negotiations and decisions.

4areas: individuals, companies, links and cybersecurity

6documented steps, from scope to report

LGPDdefined purpose and traceable sources

Request an analysis Chat on WhatsApp

gti://due-diligence · link analysisEXAMPLE · FICTITIOUS DATA

CONSOLIDATED RISK Analyzing… 1 of 4 sources checked

What we gather

Scattered data becomes a clear report to decide

Gathering, cross-referencing and analysis of information about individuals (CPF) and companies (CNPJ), with identified sources and an objective conclusion.

INTELLIGENCE REPORT · GTI-0427/P ILLUSTRATIVE EXAMPLE · FICTITIOUS DATA

Individual

Subject: J. S. M. · CPF ***.482.***-**

Registration status Regular No alert

Company holdings 2 active companies Informative

Court cases 1 civil lawsuit pending Attention

Notarial protests No records No alert

Public / media exposure No relevant mentions No alert

Analyst's conclusion: profile consistent with the negotiation. Monitor the civil lawsuit and confirm the relationship with both companies before signing.

SOURCESFederal Revenue ServiceCommercial RegistriesCourts (TJ/TRF)Protest registries

Method

From request to report, in 6 steps

A process documented from start to finish, so every piece of information in the report has a known origin and can support a decision.

01STEP 01 OF 06

Scope and purpose

Before any search, we understand the decision that needs to be made and record the objective and legal basis of the analysis.

WHAT WE DO

Kickoff meeting with the client
Definition of individuals and companies to analyze
Record of purpose and legal basis (LGPD)

next step

YOU RECEIVE

Scope approvedDocument signed by the parties

Objective of the analysis
Targets and limits of the work
Deadline and delivery format

With support from Digital Law →

COMMITMENT

Intelligence with legal responsibility

Four rules that apply to every analysis, from the first contact to the disposal of the information.

Defined purposeEvery analysis starts with a recorded objective and legitimate interest.
LGPD complianceData processed on an appropriate legal basis, and only what's necessary.
Traceable sourcesPublic, official and licensed sources, cited in the report.
Confidentiality and disposalInformation protected and disposed of at the end of the engagement.

When to reach out

Do you recognize yourself in any of these situations?

Pick yours and talk to an expert. We'll recommend the right solution for the case.

“I'm about to hire a vendor or partner”VENDOR DUE DILIGENCE “I'm going to buy, sell or invest in a company”MERGERS, ACQUISITIONS AND INVESTMENTS “I'm going into business with someone”PARTNER AND DIRECTOR VERIFICATION “I suspect fraud in the company”FRAUD PREVENTION AND INVESTIGATION “I need to recover a debt”ASSET AND DEBTOR TRACING “We are about to give a supplier access to our data”CYBERSECURITY DUE DILIGENCE

DUE DILIGENCE

Assessing risks and opportunities before deciding

Analysis and verification of information to better understand individuals and companies before a strategic decision, with clear points of attention and transparency.

WHEN TO USE IT

Business negotiations and major contracts
New partnerships, vendors and joint ventures
Investments, mergers and acquisitions

DELIVERABLES

Risk reportLink mapExecutive opinion

Request due diligence

CYBERSECURITY AND COMPLIANCENEW

Cybersecurity and regulatory compliance due diligence

Validation of security controls and alignment with LGPD, Central Bank (BACEN) rules and standards such as ISO 27001 and NIST, to measure the cyber risk of suppliers, partners and target companies before you hire, connect systems or close an acquisition.

WHEN TO USE IT