kycert integrates with 28+ data sources grouped into logical categories. Each source is available as a check in your KYC templates and flow nodes. You can assign any source to any phase — critical, important, or additional — and configure an on_hit rule that governs what happens when the source returns INVALID. Below you will find every source organised by category, with its source ID, subject types (PF = individual, PJ = company), and a description of what it verifies.
New data sources are added regularly as kycert expands its integrations. Contact your account manager to request a specific source not listed here, or to check whether a source in beta is available for your plan.
Identity — Brazilian Government Sources
These sources verify the legal existence and registration status of individuals and companies directly against Receita Federal and state commercial registries.
| Source ID | Subject | Provider | Description |
|---|
receita_federal_cpf | PF | InfoSimples | CPF situação cadastral, death record, date of birth confirmation, and name similarity check (≥ 70%) against the Receita Federal. The primary identity verification for any individual — assign to the critical phase. |
receita_federal_cnpj | PJ | InfoSimples | CNPJ situação cadastral, razão social, natureza jurídica, date of incorporation, capital social, CNAE codes, and QSA (Quadro de Sócios e Administradores) with partner CPFs when available. Provides the QSA list used for automatic partner chaining. |
bdc_basic_data_pf | PF | BigDataCorp | CPF situação cadastral, death indication flag (HasObitIndication), and name correspondence check via BigDataCorp. A lower-cost alternative to receita_federal_cpf with an additional death-fraud detection check. |
bdc_basic_data | PJ | BigDataCorp | CNPJ situação cadastral, alert for newly registered companies (< 6 months), tax regime history, COMEX status, and capital social as a number. Faster and more economical than receita_federal_cnpj when QSA is not needed. |
bdc_registration_data | PJ | BigDataCorp | Company registration data and multi-source contact information (email, telephone, address) from BigDataCorp. Contacts are masked per LGPD. Use when QSA is not required and contact enrichment is the goal. |
bdc_dynamic_qsa_data_pj | PJ | BigDataCorp | QSA current and historical data with configurable freshness (recency parameter forces a real-time Receita Federal query when cache is stale). Detects recent partner changes — a compliance risk signal. |
| Source ID | Subject | Description |
|---|
jucesp_simplifica | PJ | Certidão simplificada confirming the company’s registration and current status with JUCESP. |
jucesp_completa | PJ | Complete JUCESP registration record including full QSA with CPFs, capital social, and the history of all registered contractual amendments. |
jucesp_ficha | PJ | Summarised JUCESP registration sheet — faster and less expensive than the complete record, suitable for initial screening. |
jucesp_lista_dcs | PJ | Lists all documents (Atos) archived with JUCESP for the CNPJ, with document number, type, date, and status. Use before requesting specific document downloads. |
jucesp_download_dc | PJ | Retrieves the file of a specific document archived with JUCESP, identified by its document number. Use in conjunction with jucesp_lista_dcs. |
jucesp_nire | PJ | Searches for a company by name in JUCESP and returns its NIRE (Número de Identificação do Registro de Empresas). Use when you have a name but not a CNPJ. |
jucesp_nire_socio | PF | Finds all companies registered with JUCESP in which the CPF appears as a partner, administrator, or legal representative. Maps an individual’s corporate footprint in São Paulo. |
jucesp_cli | PJ | Public licensing query (CLI/JUCESP) checking the status of licences, operating permits, and authorisations for the company in São Paulo. |
jucesp_redesim_acp | PJ | Tracks the status of a REDESIM registration or amendment process in JUCESP, identifying document or procedural holdups. |
Criminal
| Source ID | Subject | Provider | Description |
|---|
cnj_mandados_prisao | PF | InfoSimples | Active federal arrest warrants from the CNJ Banco Nacional de Mandados de Prisão (BNMP). A single active warrant is an absolute disqualifier — assign to the critical phase with on_hit: block. |
antecedentes_pf | PF | InfoSimples | Formal criminal antecedents certificate (CACI) from the Departamento de Polícia Federal. Requires full name and date of birth. Covers federal crimes only; takes up to 30 seconds. Assign to the important or additional phase. |
Judicial
| Source ID | Subject | Provider | Description |
|---|
cnj_seeu_processos | PF/PJ | InfoSimples | Criminal enforcement proceedings and active debts in the CNJ Sistema Eletrônico de Execução Unificado (SEEU). Available for both individuals and companies. |
cnj_improbidade | PF/PJ | InfoSimples | Convictions for administrative misconduct in the CNJ Cadastro Nacional de Condenados por Ato de Improbidade (CNIA). Only records with final judicial decisions (trânsito em julgado) appear here. |
trf_processos | PF/PJ | InfoSimples | Case search across all five Brazilian Federal Regional Courts (TRF 1–5). Covers federal cases including tax disputes, social security matters, federal crimes, and environmental violations. |
bdc_processes_pf | PF | BigDataCorp | Judicial process data for individuals via BigDataCorp — returns criminal proceedings, cases where the individual appears as defendant, and cases filed in the last 365 days. |
bdc_processes_pj | PJ | BigDataCorp | Judicial process data for companies via BigDataCorp — returns criminal proceedings, cases where the company appears as defendant, and cases filed in the last 365 days. |
Sanctions
This category covers both Brazilian government sanction registries and major international sanctions lists.
Brazilian sanctions registries
| Source ID | Subject | Provider | Description |
|---|
cgu_cnc | PF/PJ | InfoSimples | Unified negative certification from the CGU (Certidão Negativa Correcional), covering three registries simultaneously: CEIS (companies debarred or suspended from government contracts), CNEP (companies punished for corruption and misconduct), and CEPIM (non-profit entities barred from receiving government funds). One call — three checks. |
sit_trabalho_escravo | PF/PJ | InfoSimples | The MTE/SIT “Lista Suja” of employers found guilty of subjecting workers to conditions analogous to slavery: forced labour, debt bondage, exhausting workdays, or degrading conditions. Updated twice yearly. |
cvm_processo_adm | PF/PJ | InfoSimples | Administrative sanction proceedings at the CVM (Comissão de Valores Mobiliários). Covers fund managers, investment advisors, distributors, and other capital market participants investigated or penalised by the CVM. |
International sanctions lists
kycert synchronises all four lists below daily. Matching uses fuzzy name algorithms (Jaro-Winkler) to catch name variations, transliterations, and alternative spellings — a critically important feature for Brazilian customers with foreign-origin names.
| Source ID | Subject | Provider | Description |
|---|
uk_sanctions | PF/PJ | Direct (OpenSanctions) | UK Foreign, Commonwealth & Development Office (FCDO) consolidated financial sanctions list. Covers terrorism, non-proliferation, human rights, and geographic sanction regimes. Synchronised daily. |
eu_sanctions | PF/PJ | Direct (OpenSanctions) | EU Financial Sanctions Files (FSF) consolidated list. Covers terrorism, proliferation, human rights, and active geopolitical conflict regimes. Synchronised daily. |
ofac_sdn | PF/PJ | InfoSimples | OFAC Specially Designated Nationals (SDN) list from the US Department of Treasury — the world’s most comprehensive sanctions list. Essential for any FX operation involving US dollars or correspondent banks in the United States. Match threshold: 85%. |
un_sanctions | PF/PJ | InfoSimples | UNSC (United Nations Security Council) consolidated sanctions list. Covers active entries associated with Al-Qaeda, ISIS, Afghanistan, North Korea, and other regimes. Only non-delisted records are included. |
icij_offshore_leaks | PF/PJ | Direct | ICIJ Offshore Leaks database aggregating the Panama Papers (2016), Paradise Papers (2017), Pandora Papers (2021), and related investigations. A match signals offshore structure exposure — it does not establish illegality. Use in the additional phase to flag for enhanced due diligence. |
world_bank_debarred | PJ | Direct | World Bank Group list of entities debarred or suspended for fraud, corruption, collusion, or coercion in World Bank-financed projects. Includes cross-debarments with other multilateral development banks. |
BigDataCorp consolidated sanctions (recommended for high-volume templates)
These sources each combine multiple individual sanctions lists into a single API call, reducing run time and credit consumption for templates that would otherwise include several of the sources above.
| Source ID | Subject | Replaces | Description |
|---|
bdc_kyc_pf | PF | pep_coaf, ofac_sdn, un_sanctions, eu_sanctions, uk_sanctions, cgu_cnc, sit_trabalho_escravo, cnj_mandados_prisao | One call covering PEP status + 15 sanctions lists in 10 independent checks. Lists covered: OFAC, FBI Most Wanted, UK FCDO, EU FSF, INTERPOL, UNSC, CEAF, CNEP, MTE Lista Suja, CNJ BNMP, TCU, BCB, CVM, IBAMA, SEAPE-DF, Canada Sanctions, DDTC. Configurable minmatch (default 80%) and optional expanded PEP definition. |
bdc_kyc_pj | PJ | ofac_sdn, un_sanctions, eu_sanctions, uk_sanctions, cgu_cnc, sit_trabalho_escravo, world_bank_debarred | Same consolidated coverage for companies — PEP exposure via partners, 7 sanction categories, historical sanctions, and electoral donation history. Does not verify individual partners (use bdc_kyc_socios for that). |
bdc_kyc_socios | PJ | — | Queries BigDataCorp KYC for all individual partners (PF) listed in the company’s QSA using a single CNPJ lookup. Returns 11 checks per partner set: active and historical PEP, 7 sanction categories, historical sanctions, and electoral donation. Configurable minmatch and max_owners parameters. |
bdc_economic_group_kyc | PJ | — | KYC for the company’s full economic group — direct and indirect ownership relationships. Detects PEP and sanctions at second and third degree of corporate control. Use for high-risk PJ clients with holding structures. |
PEP — Politically Exposed Persons
| Source ID | Subject | Provider | Description |
|---|
pep_coaf | PF | InfoSimples | PEP verification per Resolução COAF 36/2021 and Circular BCB 4.753/2021. Covers current and historical PEP status including first-degree family members, spouses, and close associates. The mandatory PEP check for any individual onboarding. |
tse_doadores_2024 | PF/PJ | InfoSimples | Donations and campaign services to candidates in the 2024 Brazilian municipal elections (TSE/SPCE data). Indicator of indirect political exposure — may identify donors with relationships to elected officials or parties. |
tse_doadores_2022 | PF/PJ | InfoSimples | Donations and campaign services to candidates in the 2022 general elections — presidential, federal, and state (TSE/SPCE data). Historical political exposure indicator for clients active in the last federal election cycle. |
bdc_political_involvement_pf | PF | BigDataCorp | Normalised political involvement score (0–1) from BigDataCorp covering PEP classification, current public office status, electoral history, and campaign contribution values. Supports graduated due diligence — a former city councillor with no recent activity receives different treatment than an active federal MP. Configurable score threshold. Replaces pep_coaf + tse_doadores_2024 + tse_doadores_2022. |
bdc_first_level_relatives_kyc_pf | PF | BigDataCorp | PEP and sanctions check for first-degree relatives (spouse, parents, children, siblings) of the individual. BCB Circular 3.978 requires enhanced due diligence when a family member is a PEP or is sanctioned. |
Regulatory
| Source ID | Subject | Provider | Description |
|---|
cvm_participante | PF/PJ | InfoSimples | Checks whether the CPF or CNPJ is registered as a CVM-regulated market participant: fund managers, distributors, investment advisors, autonomous agents, and fiduciary administrators. A match means the client is a financial markets professional — relevant for enhanced due diligence. |
Financial
| Source ID | Subject | Provider | Description |
|---|
cenprot_protestos | PF/PJ | InfoSimples | Protested instruments registered with CENPROT-SP (São Paulo state protest registry). Returns total count and value. Indicator of credit default and payment risk. Geographic coverage: São Paulo state only. |
bcb_valores_receber | PF/PJ | InfoSimples | Checks for unclaimed balances in the Banco Central’s Sistema de Valores a Receber (SVR) — dormant account balances, incorrectly charged fees, insurance quotas. Informational only — assign to the additional phase and never use as a block criterion. Requires date of birth (PF) or date of incorporation (PJ). |
bdc_financial_data_pf | PF | BigDataCorp | Estimated income, IR declaration history, and financial score via BigDataCorp. Informational enrichment — use in the additional phase to contextualise the customer’s declared income against available signals. |
bdc_collections_pj | PJ | BigDataCorp | Indicates whether the company is currently or has recently been subject to a debt collection process. Returns three checks: active collection, collections in the last 12 months, and historical collection record. |
bdc_government_debtors_pj | PJ | BigDataCorp | Checks whether the company has active debts inscribed with the PGFN (Procuradoria-Geral da Fazenda Nacional) — federal tax debts and FGTS. Returns two checks: inscription in active federal debt and ajuizado (litigation-initiated) debt. |
Employment & Social
| Source ID | Subject | Provider | Description |
|---|
cnis_inscricao | PF | InfoSimples | Retrieves the NIT/PIS/PASEP number from the CNIS (Cadastro Nacional de Informações Sociais) at Dataprev. Confirms social security registration. Requires full name and date of birth. |
dataprev_qualificacao | PF | InfoSimples | Qualificação cadastral: checks whether the name, date of birth, and sex provided match the Dataprev/eSocial records. Detects identity discrepancies that may signal fraud or data entry errors. |
bdc_occupation_data_pf | PF | BigDataCorp | RAIS-based employment data: formal employment sector (public or private), active employment status, and estimated monthly income. Flags public-sector employment for PEP-adjacent due diligence. Annual update cadence — up to 12 months of lag. |
Address
| Source ID | Subject | Provider | Description |
|---|
correios_completa_cep | PF/PJ | InfoSimples | CEP validation and standardised address lookup (logradouro, bairro, município, UF, IBGE code) from the Correios national CEP database. Use in the additional phase to normalise addresses provided during onboarding. |
bdc_addresses_extended_pf | PF | BigDataCorp | Address history and validation for individuals — confirms whether the declared CEP appears in the person’s address history, and flags the absence of any active address on record. |
bdc_addresses_extended_pj | PJ | BigDataCorp | Address data for companies with quality indicators: active status, Receita Federal confirmation, and concentration of registered entities at the same address (a virtual office or nominee address risk signal). |
| Source ID | Subject | Provider | Description |
|---|
bdc_media_profile_pf | PF | BigDataCorp | Adverse media screening against a curated set of Brazilian journalistic sources via BigDataCorp. Returns two checks: adverse media mentions (configurable keyword filter) and an unpopularity level score (A–H scale). Configurable sensitivity. Replaces buscador_google with structured coverage and per-article sentiment analysis. |
bdc_media_profile_pj | PJ | BigDataCorp | Same adverse media screening for companies — keywords default to terms relevant to corporate misconduct (fraud, fines, bankruptcy, embargo). Informational — always assign to the additional phase and review findings manually. |
buscador_google | PF/PJ | InfoSimples | Google search adverse media screening: searches the customer’s name combined with negative terms (fraud, money laundering, crime, arrest). Subjective result requiring manual interpretation by your analyst. Not suitable for automated blocking. Available as a manual-only tool from the run detail console. |
Identity enrichment — BigDataCorp extended datasets
These sources add depth to a customer profile without generating compliance blocks. Assign them to the additional phase.
| Source ID | Subject | Description |
|---|
bdc_demographic_data_pf | PF | Socio-demographic estimates (social class, estimated income, education level) derived from IBGE and MTE regional data. Inferred population-level data — not individual declarations. Informational only. |
bdc_phones_extended_pf | PF | All phone numbers associated with the CPF with quality flags: active, primary, recent, and Do-Not-Call (DNC) status. Useful for validating contact data required under BCB 3.978 Art. 15. |
bdc_phones_extended_pj | PJ | All phone numbers associated with the CNPJ with quality flags: active, primary, Receita Federal presence, and DNC status. |
bdc_activity_indicators_pj | PJ | Shell company score, operational activity indicators, and economic data. Detects dormant or shell companies using a configurable threshold (default 0.5). |
bdc_ubo_pj | PJ | Ultimate Beneficial Owner (UBO) identification via indirect ownership chain consolidation. Identifies individuals with cumulative participation ≥ 25% (BCB 3.978 Art. 12) even through holding structures. Asynchronous — up to 300 seconds. High credit cost — use for high-risk PJ due diligence only. |
bdc_boavista_participation_pj | PJ | Partner participation percentages via Boavista/BDC marketplace. Identifies UBOs ≥ 25% and flags partners with fraud or debt indicators. High cost — reserve for enhanced due diligence on high-risk companies. |
Fuzzy matching on sanctions lists
All four international sanctions lists (uk_sanctions, eu_sanctions, ofac_sdn, un_sanctions) and the ICIJ database use fuzzy name matching. kycert compares the customer’s name against every entry on the list using the Jaro-Winkler algorithm, which is well-suited to catching:
- Name transpositions (“José da Silva” vs. “Silva José da”)
- Transliterations of Arabic, Cyrillic, or Chinese names into Portuguese
- Alternative spellings and nicknames
- Partial name matches common in double-barrelled surnames
You configure the minimum match threshold in the source settings inside your template. The default is 80%, which balances sensitivity against false positives. Lower thresholds catch more variations but increase analyst workload for review.
QSA chaining
For company (PJ) runs, kycert can automatically run individual KYC checks on each partner listed in the company’s QSA. When you enable QSA chaining in your template (or use a Loop node in a flow), the engine:
- Retrieves the partner list from
receita_federal_cnpj or bdc_dynamic_qsa_data_pj
- Runs your configured PF template on each partner’s CPF in parallel
- Aggregates the results — any partner-level INVALID appears in the parent company’s run detail under the partner graph
You control the maximum number of partners verified and the PF template applied to each one. QSA chaining depth is configurable; default is immediate partners only (depth 1).