Legitimuz Joins Brazil Pact for Corporate Integrity
Brazil.- 22 September 2026 | www.zonadeazar.com Legitimuz, a Brazilian company specialising in identity verification, facial biometrics and fraud prevention, has joined the Brazil Pact for Corporate Integrity, an initiative led by Brazil‘s Office of the Comptroller General, CGU.
Participation represents a voluntary public commitment to strengthening corporate-integrity practices, preventing misconduct and continuously improving internal compliance controls.
CGU Initiative
The Brazil Pact was established by the CGU to encourage private companies and organisations operating in the country to make concrete commitments to integrity.
Its objectives include:
- Promoting an ethical business culture.
- Preventing corruption and fraud.
- Disseminating integrity knowledge.
- Strengthening risk management.
- Supporting transparent relationships with government and society.
Voluntary Participation
Joining the initiative is not a regulatory obligation.
Companies participate voluntarily by signing a formal commitment agreement.
The commitment is intended to apply across the organisation’s entire business cycle.
180-Day Self-Assessment
Following accession, a company has up to 180 days to complete an assessment of its integrity measures through the CGU’s system.
The process is intended to provide an internal diagnosis of the maturity of corporate policies and controls.
Areas Assessed
The self-assessment examines areas including:
- Senior leadership commitment.
- Risk management.
- Fraud prevention.
- Anti-corruption controls.
- Whistleblowing channels.
- Internal controls.
- Integrity culture.
- Monitoring mechanisms.
It can therefore identify both established practices and areas requiring further development.
Not an Automatic Government Certification
Participation in the Pact should be distinguished from a government certification of compliance standards.
Joining represents a public commitment by the company, which must continue meeting the CGU’s requirements in order to remain part of the programme.
Public Transparency
Participating companies are publicly identified through the CGU’s initiative.
Once relevant conditions have been satisfied, organisations may also use the Brazil Pact branding in their institutional communications.
Integrity in Digital Identity
The move is particularly relevant to companies operating in identity verification because of the nature of the information they process.
Legitimuz handles data including:
- Identity documents.
- Registration information.
- Biometric data.
- Facial images.
- Information used in KYC processes.
Handling such information requires security, privacy and governance structures suitable for heavily regulated industries.
KYC as Compliance Infrastructure
Know Your Customer systems have become an important component of controls used by iGaming operators and other regulated businesses.
Identity technology can support checks relating to:
- Age.
- Identity.
- Fraud.
- Duplicate accounts.
- Money laundering.
- Regulatory restrictions.
Relevance to iGaming
User-identification procedures have become particularly important within Brazil‘s regulated betting market.
Licensed operators are required to implement systems capable of correctly identifying customers and complying with relevant registration and verification obligations.
Fraud Prevention
Beyond regulatory compliance, digital-identity technology also seeks to reduce online fraud.
Risks include:
- Forged documents.
- Identity theft.
- Fraudulent accounts.
- Biometric attacks.
- Image manipulation.
- Use of third-party identities.
Facial Biometrics
Legitimuz also provides facial-biometric tools used during digital verification.
The company says its technology has obtained international certifications assessing resistance to presentation and injection attacks.
ISO/IEC 27001
Legitimuz also maintains ISO/IEC 27001 certification, an international standard for information-security management systems.
The company positions this certification as part of its wider approach to protecting the information handled by its platforms.
More Than 15 Certifications
The business reports securing more than 15 certifications over the past 18 months.
These cover different areas of security, biometrics, technology and infrastructure.
More Than 150 Companies
Legitimuz says its solutions are currently used by more than 150 companies.
Customers operate across:
- iGaming.
- Financial services.
- Fintech.
- Other regulated industries.
Integrity Across the B2B Supply Chain
Joining the Brazil Pact also highlights the role of technology suppliers in compliance.
Regulatory responsibilities no longer fall solely on the consumer-facing operator.
KYC, payments, data and infrastructure suppliers also process critical information and form part of the wider compliance chain.
Supplier Accountability
Companies servicing regulated industries increasingly need to demonstrate their own controls.
Clients may seek evidence covering:
- Information security.
- Governance.
- Risk management.
- Fraud prevention.
- Corporate integrity.
- Data protection.
Removal From the Pact
Participation is subject to continuing conditions.
The CGU can remove organisations that fail to meet Pact requirements, do not complete the self-assessment within the required period, misuse the initiative’s branding or become involved in illegal conduct or serious ethical failures contrary to its objectives.
Industry Context
Growth in regulated iGaming, digital financial services and online platforms has increased reliance on identity-verification technology.
At the same time, suppliers processing sensitive data face stronger expectations around transparency, security, auditability and corporate governance.
Next Steps and Impact
Legitimuz’s next step will be to complete the CGU self-assessment within the 180-day period and review its internal controls against the dimensions covered by the programme.
Joining the Pact adds another integrity initiative to the company’s compliance framework and reflects growing expectations not only for regulated operators but also for technology suppliers supporting their infrastructure.
Editó: @fonta
