# Document Traceability and Privacy: Assessing Business Finance Origination | KEZ$

Canonical: https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination
Language: en-US

Learn how institutions and investors can assess document trails, identity checks, privacy, approval authority and reconciliation in Brazilian business finance.

[Finance companies and institutions: diligence and governance](https://kezs.com.br/en/learn/financial-institutions-diligence)

# Document Traceability and Privacy: Assessing Business Finance Origination

Learn how institutions and investors can assess document trails, identity checks, privacy, approval authority and reconciliation in Brazilian business finance.

KEZS team · Educational guide

[Financial institutions](https://kezs.com.br/en/learn?tag=Financial%20institutions)[Document traceability](https://kezs.com.br/en/learn?tag=Document%20traceability)[Privacy](https://kezs.com.br/en/learn?tag=Privacy)[Governance](https://kezs.com.br/en/learn?tag=Governance)[Business finance origination](https://kezs.com.br/en/learn?tag=Business%20finance%20origination)[Due diligence](https://kezs.com.br/en/learn?tag=Due%20diligence)[Financial reconciliation](https://kezs.com.br/en/learn?tag=Financial%20reconciliation)

[← Finance companies and institutions: diligence and governance](https://kezs.com.br/en/learn/financial-institutions-diligence)[1. What document traceability helps investors understand](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-1)[2. Separate project connections, correspondent services and financial responsibility](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-2)[3. Define the financial instrument before building the document checklist](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-3)[4. Build a trail that preserves context and document versions](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-4)[5. Organize KYC and financial crime controls proportionately](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-5)[6. Turn privacy principles into access and retention decisions](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-6)[7. Link credit policy, approval authority and exceptions to evidence](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-7)[8. A numerical example: from the submitted batch to eligible value](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-8)[9. The decision timeline and the cost of missing evidence](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-9)[10. Disbursement: verify the destination before moving funds](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-10)[11. Reconciliation: connect each payment to the correct obligation](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-11)[12. Adverse scenarios: distinguish delay, dispute and loss](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-12)[13. Resolve disagreements without treating pressure as evidence](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-13)[14. Correct errors and incidents while preserving the history](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-14)[15. Test process quality and account for the cost of controls](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-15)[16. Close diligence with a decision that can be revisited](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#topic-16)[Frequently asked questions](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#faq)[References](https://kezs.com.br/en/learn/financial-institutions-diligence/document-traceability-and-privacy-assessing-business-finance-origination#references)

What you will find 

A business project can provide authentic documents and still present an incomplete picture of its risks. A contract may have been replaced, a receivable may already have been paid, or an authorization may permit collection without allowing unrestricted sharing. Document traceability means being able to reconstruct how information entered a process, who examined it, what checks were performed and how it supported a decision. Investors can then assess the quality of the analysis and identify matters that still require confirmation.

01 

## What document traceability helps investors understand

That reconstruction should cover the entire path: project presentation, identification of the parties, document selection, analysis, approval, contracting, disbursement and monitoring. An organized folder is useful, but does not establish that the correct version informed the decision or that an outstanding issue was resolved before funds were released. The important connection is between a document, an event and its consequence. If delivery confirmation changes a receivable's eligibility, the record should explain when the confirmation arrived and which assessment changed.

Privacy belongs within this design because business due diligence also involves individuals. Representatives, owners, guarantors and customer contacts may appear in the records. Investors need enough evidence to decide, but may not need complete copies of every personal document. Two questions should guide disclosure: what information establishes the point being assessed, and what is the smallest necessary exposure that lets an authorized person examine it? A useful trail preserves the reasoning behind a decision while limiting access to unrelated personal information.

02 

## Separate project connections, correspondent services and financial responsibility

KEZS connects entrepreneurial projects and potential funders through technology and intermediation. Organizing information around a project, its needs and its supporting documents can make the assessment easier to follow. It does not replace investors' own due diligence or decisions, and KEZS does not assign a credit score. An organized presentation also provides no basis for assuming that contracted banking partners, approved products or regulated services exist. Each claimed capability requires its own evidence, including the relevant scope and responsible provider.

Banking correspondent services in Brazil depend on an agreement with an institution and a defined scope of activity. Receiving a proposal, checking whether a form is complete and deciding whether to finance a transaction are separate tasks. The agreement should explain what the channel may do, which systems it uses, where it sends information and how it communicates its limits to applicants. The funding institution retains the responsibilities assigned to it by applicable regulation. Outsourcing a step does not make the channel a universal substitute for the institution's control functions.

Before discussing commercial efficiency, investors should request a functional description: who originates proposals, identifies customers, checks documents, makes decisions and moves funds? Public distribution of securities and other regulated financial activities require appropriate structures and providers. Technology, a generic contract or a Brazilian CNAE business activity classification is not permission to conduct them. Banco Central do Brasil and CVM materials are reference entry points for their respective subjects. They do not establish that KEZS or any particular platform is authorized to perform a regulated activity.

03 

## Define the financial instrument before building the document checklist

The required evidence depends on the economic right being acquired. A loan requires an understanding of the debtor, payment obligation, contractual terms and any security. Receivables financing requires analysis of the claims' existence, eligibility, legal ownership and transferability. Equity investment involves economic and voting rights, the capital structure and contractual restrictions. Convertible instruments introduce future conditions that must be read alongside the company's ownership arrangements. Similar document names can therefore answer very different questions across these instruments.

This distinction prevents a common mistake: treating projected revenue as an existing claim against an identified buyer. Expected sales may support an assumption about future cash generation, but do not establish an existing eligible receivable. Likewise, a donation to a nonprofit organization grants neither equity ownership nor a promised financial return. A Brazilian individual microentrepreneur, or MEI, cannot admit equity partners while remaining a MEI. Any equity proposal involving that status must address the incompatibility before proceeding, rather than leaving it hidden in a generic checklist.

A useful document matrix begins with the intended right and the conditions that could affect it. For each condition, identify the expected evidence, the reviewer and the response if evidence is missing. If the investment thesis depends on goods being delivered, an invoice alone may not answer the question. If it depends on authority to sign, a business registration cannot replace verification of representation powers. This order also limits excessive collection: request evidence for a relevant condition and explain why any associated personal information is necessary.

04 

## Build a trail that preserves context and document versions

Each material document should have a stable identifier linked to the relevant project and transaction. Its record should distinguish who submitted it, its source, when it was received, which version applies and what analysis was performed. File names can help navigation, but should not be the primary identifiers. Two files named final_contract can contain different obligations, while a renamed file may contain exactly the same material. The trail must distinguish a change in content from a change in labeling.

Keep three elements separate: the preserved source file, the extracted data and the analyst's conclusion. The file supports examination of the source; the data supports calculations and comparisons; the conclusion explains the judgment. Changing an extracted value should not silently alter the original. If an installment amount was read incorrectly, the correction should identify the field, the reason and the affected outputs. An auditor can then distinguish an extraction error from a contractual amendment or a revised interpretation, and determine which decisions need review.

A cryptographic hash can help detect content changes when the reference file and the hash-generation process are properly controlled. It does not establish a signature's validity, delivery of goods or the sender's authority. Blockchain has the same boundary: record integrity does not establish truth, legal title, reserve solvency or a payment guarantee. Private documents should not be placed on public blockchains, where exposure can persist beyond the original purpose. The technology should solve an identified integrity problem without creating unnecessary disclosure or implying broader legal or financial protection.

05 

## Organize KYC and financial crime controls proportionately

Know your customer, or KYC, involves understanding the business, its representatives, who exercises control and why the transaction makes economic sense for its activities. Depending on the product and applicable obligations, this may involve ownership structure, signing powers, source of funds and consistency between financial movements and the stated business. The objective is to answer risk questions with proportionate evidence, rather than accumulate personal files. Confirming an individual's identity does not, by itself, resolve uncertainty about beneficial ownership or the transaction's economic purpose.

Responsibilities should be explicit. An origination channel may collect information within its contracted scope, while the institution defines procedures, escalation criteria and control responsibilities. A material inconsistency should become a tracked issue with an owner and a defined response. Contradictory documents, representatives whose authority is unclear and requests to pay third parties require clarification. Pressure to complete a proposal should not turn a substantive unresolved issue into a harmless-looking note. The record should show whether the issue blocks progress and who may authorize any permitted exception.

Investors may receive the verification status, its limitations and material exceptions without receiving all identifying material. Where full access is necessary, it should have a defined purpose, an appropriate authorization or other applicable basis, and a restricted environment. Financial crime controls also involve sensitive communications and records whose circulation must follow applicable duties and procedures. Not every internal control record can be shared with every participant in an opportunity. A meaningful explanation of the review should respect those limits without suggesting that undisclosed checks establish more than they actually do.

06 

## Turn privacy principles into access and retention decisions

A privacy policy becomes operational through concrete choices: which fields are collected, who can view them, how long they are retained and how they can be corrected or deleted. Organizations should identify appropriate purposes and legal bases under Brazil's data protection framework, including the LGPD, without assuming that generic consent covers every use. They must also assess their data protection roles according to the activities they actually perform. Contracts should reflect that reality; assigning labels alone does not settle who determines purposes or carries out particular processing activities.

Access can be layered. An initial assessment may use business information and aggregate amounts; deeper diligence can release relevant documents to designated reviewers; more sensitive personal information can remain limited to those who need to examine it. Redacted copies may satisfy some needs, provided the redaction preserves essential evidence. Investors should know when they are reading a reduced copy and what procedure allows restricted elements to be confirmed. A redacted document should not imply that the reader has personally checked information that was withheld.

Retention should account for the purpose, applicable recordkeeping duties and the need to defend rights, without treating convenience as a reason for indefinite storage. After a project closes, some records may remain necessary while redundant copies and exports require treatment under the applicable policy. Deletion should cover relevant environments and providers, subject to justified restrictions. ANPD guidance offers useful reference points, but specific decisions require a responsible assessment of each processing activity. Keeping an audit trail does not justify retaining every copy of every personal document forever.

07 

## Link credit policy, approval authority and exceptions to evidence

An institution needs its own policies and approval limits suited to the product and the businesses it serves. Policy converts a general intention to control risk into reviewable criteria: minimum documents, eligibility conditions, exposure limits, concentration treatment and situations requiring additional review. Approval authority determines who may decide in each situation. Investors should be able to establish whether the decision followed those criteria and whether the approver had authority to accept the exposure. A signature without a clear mandate leaves an important gap.

An exception is not necessarily an error, but it must be recognized and justified. If policy requires delivery confirmation and the proposal contains only the seller's statement, the record should not mark delivery verification as complete. The response may be rejection, suspension or an exception permitted by the appropriate authority. An exception record should identify the deficiency, additional risk, rationale and compensating controls. A free-text comment saying management approved does not explain what was accepted, why it was acceptable or which conditions still applied.

Policy versions should be preserved alongside decisions. A later policy change must not make an earlier transaction appear to have met criteria that did not yet exist. Preparation and authorization of material decisions should also be separated to a degree appropriate to the organization's size and structure. The trail should identify the documents available when approval occurred. Later evidence may support a new assessment, but cannot rewrite what was known earlier. This distinction matters when judging both the original decision and the adequacy of subsequent corrective action.

08 

## A numerical example: from the submitted batch to eligible value

Consider a wholly hypothetical example. A company submits ten receivable entries of R$ 20,000 each, giving a presented total of R$ 200,000, associated with business-to-business sales. For clarity, assume all are due on day 45, counted from the start of the process. In a real transaction, the legal instrument, transfer of the claims and all other requirements would need verification. These figures illustrate document selection, financing and reconciliation; they are not an offer, market quotation or indication of actual returns.

The review finds three separate, non-overlapping reasons for exclusion. One R$ 20,000 receivable appears twice in the submitted batch, so the duplicate entry is removed. Another R$ 20,000 item lacks sufficient delivery confirmation, and a third R$ 20,000 item is subject to a commercial dispute. Seven distinct receivables remain eligible under the example's criteria, totaling R$ 140,000. Removing the duplicate avoids counting one underlying claim twice. Accepting the remaining seven only means they met the hypothetical selection criteria; it does not establish that their buyers will pay.

Assume policy permits financing of 80% of eligible face value. The principal disbursed is R$ 112,000: R$ 140,000 multiplied by 80%. The remaining R$ 28,000 is the arithmetic difference between eligible face value and principal, rather than cash deposited in a reserve account. For this exercise, set a single contractual financing charge of R$ 4,000, making the obligation at maturity R$ 116,000. No other charges enter the calculation. Nothing here establishes applicable taxes, market rates or effective profitability, and the face-value difference provides no payment guarantee.

09 

## The decision timeline and the cost of missing evidence

On day zero, the channel receives the ten entries and records the batch. On day one, checking identifies the three exclusions. On day two, the company confirms that it wishes to proceed with only the seven eligible receivables. On day three, the appropriate authority approves R$ 112,000 of principal, with R$ 116,000 due on day 45, subject to formal execution and validation of the payment destination. On day four, those conditions are checked and the initial disbursement takes place.

This sequence creates an interval of 41 days between disbursement and maturity, without turning that interval into a recommended implied rate. It also shows how to handle late evidence. If delivery confirmation for the excluded item arrives on day five, it must not be inserted retrospectively into the day-three approval record. The institution may assess a revised proposal or an additional transaction under its policy. The original approved batch remains seven receivables with R$ 112,000 of principal, preserving a clear account of the exposure actually authorized.

For the company, waiting for evidence may delay an inventory purchase. For the funder, releasing money before confirmation may create exposure without the required support. The decision should make that trade-off visible. One option is to reduce scope and proceed with substantiated items, as in the example; another is to wait and reassess the entire batch. Investors should examine whether commercial urgency was treated as context or used to bypass an essential condition without authority or a record. Speed has value, but does not itself answer the missing factual question.

10 

## Disbursement: verify the destination before moving funds

Approval records a decision; disbursement executes a movement of money. New instructions, mismatched accounts and fraud attempts can arise between those steps. Before releasing the example's R$ 112,000, the responsible parties should verify that the contract has been executed, conditions have been met and the destination matches the intended beneficiary. Records should connect the payment instruction to the transaction, its authorization and confirmation of execution. An informally supplied screenshot should not be the sole basis for establishing that connection or confirming where funds went.

An account change requires its own procedure. If someone requests a change by message, knowledge of project details does not establish the sender's identity or authority. The request should be validated through appropriate means, the relevant powers checked and the decision recorded. Material changes may require renewed approval under policy. The evidence should explain why the destination was accepted and who checked it, while protecting banking details from unnecessary access. A correct original approval does not automatically authorize every later payment instruction.

Investors also need to understand who actually holds and moves funds. An information dashboard does not establish custody, legal segregation of assets or an available cash balance. Each function requires an appropriate structure and provider where applicable, with contractual and operational evidence. When assessing intermediation technology, a visual demonstration of a payment flow is not proof that payments operate in practice. The method can be evaluated without attributing unverified disbursement or settlement capabilities to KEZS. Responsibility follows the actual arrangements, rather than the appearance of the interface.

11 

## Reconciliation: connect each payment to the correct obligation

Reconciliation links a financial event to its corresponding obligation. In the example, controls should distinguish R$ 112,000 of principal disbursed, the R$ 4,000 contractual charge, the R$ 116,000 obligation and R$ 140,000 of eligible face value. These amounts describe different things. Adding face value and principal as though they were independent assets would produce a misleading picture. Accounting and legal recognition depend on the transaction structure, but operational controls must at least prevent this double-counting interpretation and show what each balance represents.

In the base scenario, assume the seven receivables produce R$ 140,000 on day 45 and the contract requires R$ 116,000 to be applied to the financed obligation. That leaves R$ 24,000 for the company before any items outside the exercise: R$ 140,000 minus R$ 116,000. This is different from the initial R$ 28,000 gap because R$ 4,000 goes toward the contractual charge. The allocation rule must exist in both the contract and the control records. Arithmetic alone does not give anyone a legal right to redirect collections.

If funds arrive through separate transfers, each receipt should be matched to the correct receivable, recording its amount, identification and settlement status. A deposit without sufficient reference should remain under investigation instead of being assigned to the oldest obligation for convenience. Reversals and refunds should reopen the relevant treatment. Reconciliation is complete only when differences are resolved or formally identified as outstanding issues, with an owner and a known effect on reported balances. An unexplained difference should remain visible even when the total bank balance appears sufficient.

12 

## Adverse scenarios: distinguish delay, dispute and loss

Keep the same seven receivables and the R$ 116,000 obligation. In an adverse scenario, two buyers fail to pay their respective R$ 20,000 claims on day 45. The other five produce R$ 100,000, leaving a R$ 16,000 shortfall against the obligation at that point. The gap between face value and principal did not prevent insufficient cash, and the two outstanding claims total R$ 40,000. This demonstrates why an initial margin and actual liquidity are different: an unpaid claim cannot settle an obligation merely because it remains recorded.

If one of those buyers pays R$ 20,000 on day 60, total collections rise to R$ 120,000. Keeping the obligation fixed at R$ 116,000 solely for the exercise, with no additional costs or charges, leaves R$ 4,000 after covering it. The other R$ 20,000 claim remains outstanding. The delay may still have caused a temporary cash need, costs and disputes, even though later collections covered the obligation. A real economic assessment would need to include those effects and the timing of receipts, rather than treating eventual coverage as equivalent to punctual payment.

If neither buyer pays, the R$ 16,000 shortfall remains before recoveries, costs and other contractual payment sources. Who bears it depends on the rights actually agreed, including any recourse against the company and its ability to perform. Delay does not automatically mean a permanent loss, while a contractual guarantee does not make recovery certain. The trail should preserve collection attempts, disputes and settlements. A renegotiated receivable should remain distinguishable from a paid one, and neither collateral nor an agreed recovery plan should be presented as cash already received.

13 

## Resolve disagreements without treating pressure as evidence

An originator may consider an invoice sufficient, an analyst may require delivery confirmation, and the company may explain that its buyer does not issue that document. Frame the disagreement as a verifiable question: which fact needs to be established, and what evidence could establish it? This allows relevant alternatives, such as direct confirmation through a validated channel or another record suited to the business. An alternative should be assessed for its evidential quality. Renaming the requested document does not resolve uncertainty about whether delivery occurred.

Economic conflicts also matter. A channel paid by volume may favor including more proposals while the institution bears part of the credit and compliance risk. A provider paid by the company may produce useful conclusions, but its engagement and scope should be understood. Investors should seek transparency about compensation, incentives and decision-making powers. Disclosure does not remove a conflict's effects; it lets reviewers assess whether controls can limit its influence. The question is how incentives affect selection, analysis and escalation, particularly when excluding a proposal reduces someone's remuneration.

Negotiation may change the amount, term, batch composition or additional requirements, but each change should return to the appropriate approval process. In the example, increasing principal from R$ 112,000 to R$ 128,000 against the same R$ 140,000 of eligible receivables changes the financed percentage. It is a new exposure decision, rather than a document correction. The team should record the revised proposal and its rationale. Earlier approval cannot authorize different exposure simply because the project and parties remain the same, and commercial agreement does not replace the required authorization.

14 

## Correct errors and incidents while preserving the history

Extraction mistakes, misfiled attachments and excessive permissions require different responses. If a R$ 20,000 receivable was entered as R$ 200,000, correction must reach the calculations, analyses and decisions that used the wrong value. Editing the field while leaving an old report in circulation is insufficient. Identify affected recipients, replace the reference version and assess whether an approval or movement of funds should be suspended. The trail should retain the error as an event, with access proportionate to its purpose, so reviewers can understand its consequences.

If an investor receives a personal document belonging to another project, that is an access problem and a potential privacy incident. The response should contain the exposure, revoke access where possible, preserve necessary evidence and assess consequences and appropriate measures, including any required communications. Deleting the incident record to avoid embarrassment undermines investigation. Conversely, the exposed content and incident details should not be circulated widely in the name of transparency. Effective response requires enough information for responsible action without needlessly extending the original disclosure.

A useful correction record explains what happened, which transactions were affected, what action was taken and how its effectiveness was checked. Causes may include training, interface design, integration failures, missing review or inappropriate incentives. Corrective action should address the cause. If a system allows any file to be linked freely to any company, simply asking people to be more careful is unlikely to be enough. Restricting associations and reviewing existing links may reduce recurrence, provided the change is checked against the actual failure.

15 

## Test process quality and account for the cost of controls

Investors can assess a process through sampling, provided the selection includes relevant cases. Examining only approved proposals without payment delays conceals possible weaknesses. A useful sample includes rejections, exceptions, replaced documents, account changes, partial payments and unresolved reconciliation differences. For each case, try to reconstruct the decision from available records. Findings should distinguish what was actually observed from assumptions about repeating the procedure at greater scale. A successful sample supports a bounded conclusion; it does not establish that every transaction was handled correctly.

Indicators help when their definitions are clear. Analysis time should separate waiting for the applicant from internal work. Document completeness should measure completeness before the decision, rather than only after closure. Reconciliation differences should be classified by cause, amount and time outstanding. A low exception rate may indicate discipline or poor recording, so the underlying cases still need examination. Processing volume and a polished dashboard do not independently establish adequate controls. Comparisons are useful only when the underlying measures describe similar activities and preserve material unresolved issues.

Controls cost money through staffing, storage, verification, legal review and incident handling. In a separate hypothetical calculation, assume preparing and checking a dossier costs R$ 600 and an additional review costs R$ 400. If one in four proposals requires that review, average cost is R$ 700 per proposal: R$ 600 plus one quarter of R$ 400, or R$ 100. The average excludes losses and capital costs. It helps assess viability without justifying excessive data collection or abandoning essential checks. Individual cases may still cost more or less than the average.

16 

## Close diligence with a decision that can be revisited

The practical closing document is a memorandum connecting the instrument, parties, evidence, policy, exceptions and financial flow. It should explain the intended right, the criteria applied and any conditions still open. For the example, record seven eligible receivables totaling R$ 140,000, R$ 112,000 of principal and a R$ 116,000 obligation, together with three separate R$ 20,000 exclusions. It should also explain how the payment destination was validated and how collections will be reconciled under the contractual structure. A reader should be able to follow the figures back to their sources.

The memorandum should distinguish documented facts, third-party statements, assumptions and conclusions. Payment evidence establishes an event within its limits; expecting the same buyer to pay again remains an assumption. A sample check does not establish every item in a portfolio. This discipline allows informed disagreement between investors and an institution, while helping define reassessment triggers such as a change of representative, a new commercial dispute or a material payment delay. Subsequent evidence should update the assessment through a visible revision, preserving the reasoning behind the earlier decision.

The decision may be to proceed, reduce scope, request clarification or decline. Investors retain responsibility for their own diligence and decisions, with no guarantee of approval, repayment, profitability, liquidity or preservation of capital. Organizing information by project can make documents and questions easier to understand when its limits are explicit. The useful outcome is an evidence-supported choice, accessible to the right people, with costs, conflicts, uncertainty and possible loss acknowledged, plus a defined path for monitoring and correction. This framework supports assessment of a transaction; it does not prescribe anyone's personal asset allocation.

FAQ 

## Frequently asked questions.

### Does an investor need every personal document belonging to the company's owners?

Full access is not automatically necessary. First identify the question being examined and the evidence that answers it. Confirmation that representation powers were checked may support an initial stage, while a specific diligence issue may require restricted access to additional documents. Sharing needs an appropriate purpose, legal basis and controls. Redaction also requires care: a reduced copy must not suggest that the reader examined information that remained unavailable. Where details are withheld, the process should explain how an authorized reviewer can confirm the relevant fact without distributing the entire personal file.

### What is the difference between a document being received, checked and validated?

Received means the file entered the process. Checked should specify what was examined, such as legibility, completion or consistency with registration information. Validated is useful only when it describes the verification performed and its limits. Confirming that an invoice was issued does not necessarily establish delivery, absence of a dispute or future payment. Institutions should avoid a single badge that combines distinct checks and encourages investors to give a document more evidential weight than it has. The status should identify the reviewer, scope and unresolved conditions relevant to the decision.

### Can a blockchain record improve document due diligence?

It may help demonstrate integrity or compare versions, depending on the design. It does not resolve the quality of the original information, the issuer's powers, legal ownership or payment capacity. Nor does it establish reserve solvency or guarantee liquidity or payment. Private documents should not be placed on a public blockchain. Before choosing the technology, identify the specific problem and compare its costs and limitations with a controlled repository and suitable audit records. A reliable record of an assertion remains different from evidence that the assertion itself is true.

### Who is responsible if an origination channel misses an inconsistency?

Responsibility depends on the activity performed, the contract, applicable duties and the harm connected to the failure. The channel must perform its agreed scope, while the funder retains responsibilities assigned by regulation. A clause allocating tasks does not automatically remove those duties. Assessment requires reconstructing what each party should have done, what information it received, which warnings were available and which decision it made. A participant's commercial title alone does not determine the answer. The record should support that assessment without assuming that every error has the same consequences or responsible party.

### Why is the example's R$ 28,000 unfinanced difference not a cash reserve?

It is the arithmetic difference between R$ 140,000 of eligible face value and R$ 112,000 of disbursed principal. The example includes no separate deposit of R$ 28,000. Cash depends on collecting the receivables and applying the contractual allocation rules. With a R$ 116,000 obligation, full collection leaves R$ 24,000 before other items. If only R$ 100,000 arrives at maturity, the obligation has a R$ 16,000 shortfall. Calling the initial difference an available reserve would hide the collection and liquidity risks. Any actual funded reserve would require separate evidence of its existence, ownership and permitted uses.

### Can loans and equity investments use the same document checklist?

Some business documents may overlap, but the checklist must follow the instrument's rights and risks. Loans raise questions about payment obligations, repayment capacity and security. Equity requires analysis of capital, voting rights, dilution and exit arrangements, among other matters. Convertibles require examination of their conversion conditions. A Brazilian MEI cannot admit equity partners while remaining a MEI, and a nonprofit donation creates neither equity nor a promised financial return. A generic checklist can conceal these incompatibilities. Start with the right being acquired, then identify which documents establish its existence, limits and conditions.

### How can investors compare two channels with equally organized dossiers?

Compare their ability to reconstruct decisions, alongside presentation quality. Request appropriately protected examples of an exclusion, an exception, a correction and a reconciliation difference. Look for connections between the source, analysis, responsible person and consequence. Examine contracted scope, commercial incentives, access controls and cost per proposal actually analyzed. If the evidence consists only of demonstrations, treat operational capacity as an assumption requiring confirmation. Banco Central do Brasil, CVM and ANPD materials guide inquiries into their respective subjects; they do not establish any channel's authorization or performance, including KEZS's.

## References and context

Institutional reference points for checking applicable rules and guidance. Calculations and scenarios are original examples, not quotes, historical results or individualized recommendations.
- [Banco Central — correspondentes no País ↗](https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?tipo=Resolu%C3%A7%C3%A3o%20CMN&numero=4935)
- [CVM — Resolução 88, texto e alterações ↗](https://conteudo.cvm.gov.br/legislacao/resolucoes/resol088.html)
- [CVM — Resolução 175, fundos de investimento ↗](https://conteudo.cvm.gov.br/legislacao/resolucoes/resol175.html)
- [Portal do Empreendedor — perguntas sobre MEI ↗](https://www.gov.br/empresas-e-negocios/pt-br/empreendedor/perguntas-frequentes)
- [ANPD — orientações e perguntas frequentes ↗](https://www.gov.br/anpd/pt-br/acesso-a-informacao/perguntas-frequentes)

AI-assisted educational content. Decisions require verification of the information, instruments and providers in each actual case.

## Keep learning.[Explore the category ↗](https://kezs.com.br/en/learn/financial-institutions-diligence)

[

Finance companies and institutions: diligence and governance 

### Data Rooms and Evidence Quality: How Institutions Assess Origination, Controls, and Settlement

Learn how institutions assess business data rooms, evidence quality, origination, KYC, decision authority, conflicts, settlement, and reconciliation.Explore the article ↗  ](https://kezs.com.br/en/learn/financial-institutions-diligence/data-rooms-and-evidence-quality-how-institutions-assess-origination-controls-and-settlement)

[

Finance companies and institutions: diligence and governance 

### Cash Flow, Revenue and Execution Capacity: Assessing Business Projects and Origination Channels

An educational guide for investors and institutions to assess business cash flow, execution capacity, origination channels, diligence and controls.Explore the article ↗  ](https://kezs.com.br/en/learn/financial-institutions-diligence/cash-flow-revenue-and-execution-capacity-assessing-business-projects-and-origination-channels)

[

Finance companies and institutions: diligence and governance 

### Contracts, Decision Authority and Investor Rights in Business Finance

Understand how Brazilian institutions and investors define contractual rights, decision authority, due diligence, settlement and reconciliation controls.Explore the article ↗  ](https://kezs.com.br/en/learn/financial-institutions-diligence/contracts-decision-authority-and-investor-rights-in-business-finance)

From knowledge to decisions 

## Plan your next step with more clarity.[Get started ↗](https://kezs.net/?lang=en)