- Do you decide on the bank’s behalf?
- No. We deliver the opinion with the evidence for every data point; the decision, and its record, belong to the bank.
- Who is the controller and who is the processor?
- In most flows the institution is the controller and GarantiaBR the processor. When we acquire a document from a public source on our own account, we are the controller of that data. The detail is in Security and compliance and in the DPA.
- Where is the data kept?
- On AWS, São Paulo region, within the domestic scenario of CMN Resolution 4,893/2021. We provide what your institution needs for its notification to the Central Bank of Brazil.
- Which AI model do you use, and what happens if it goes down?
- Every model is validated against reference sets before going to production, and there is a documented vendor and continuity policy.
- Do our documents train any model?
- No. It is a contractual clause with the AI providers.
- What is the SLA?
- Agreed per document type and per source, and measured in the pilot. Unstable public sources are declared as exceptions.
- How many registry offices do you have curated?
- The ones in your operation. The reference base is the CNJ’s, and curation grows with every project.
- Do you hold ISO 27001?
- Yes. Information security management system certified under ISO/IEC 27001:2022 by QMS Certification, certificate QMS-03419, valid until 15/09/2029. Scope and verification in Security and compliance.
- Can I talk to a client?
- Yes, with their authorisation. We ask on your behalf.
Frequently asked questions