# Document Traceability and Privacy for Impact Investors | KEZ$

Canonical: https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors
Language: en-US

How to assess impact evidence, track project spending and protect beneficiaries while distinguishing donations, project support and financial returns.

[Impact investors and foundations: diligence and governance](https://kezs.com.br/en/learn/impact-investors-diligence)

# Document Traceability and Privacy for Impact Investors

How to assess impact evidence, track project spending and protect beneficiaries while distinguishing donations, project support and financial returns.

KEZS team · Educational guide

[impact investing](https://kezs.com.br/en/learn?tag=impact%20investing)[document traceability](https://kezs.com.br/en/learn?tag=document%20traceability)[privacy](https://kezs.com.br/en/learn?tag=privacy)[governance](https://kezs.com.br/en/learn?tag=governance)[additionality](https://kezs.com.br/en/learn?tag=additionality)[beneficiary protection](https://kezs.com.br/en/learn?tag=beneficiary%20protection)[impact measurement](https://kezs.com.br/en/learn?tag=impact%20measurement)

[← Impact investors and foundations: diligence and governance](https://kezs.com.br/en/learn/impact-investors-diligence)[1. What an investor needs to reconstruct](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-1)[2. The legal relationship determines what must be demonstrated](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-2)[3. A hypothetical project with a defined budget and indicators](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-3)[4. The evidence chain from obligations to outcomes](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-4)[5. Additionality: what the funding actually adds](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-5)[6. Reading results without switching denominators](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-6)[7. Cash flow, installments and decisions during delivery](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-7)[8. Privacy starts with deciding what not to collect](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-8)[9. Access levels and the risk of reidentification](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-9)[10. Evidence quality, versions and corrections](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-10)[11. Proportionate verification and the cost of accountability](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-11)[12. Adverse scenarios and responses that preserve the evidence](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-12)[13. Responsibilities, conflicts and the right to challenge records](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-13)[14. What to agree before releasing funds](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-14)[15. Technology-based intermediation and the limits of trust](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-15)[16. Closing with a dossier that supports decisions and learning](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#topic-16)[Frequently asked questions](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#faq)[References](https://kezs.com.br/en/learn/impact-investors-diligence/document-traceability-and-privacy-for-impact-investors#references)

What you will find 

An attractive report does not necessarily support an informed decision. Claims that a project trained people, increased incomes or reduced waste leave important questions unanswered: who was counted, which records support the claim, and what limits the conclusion? Document traceability means being able to reconstruct the path from an analytical question to a reported indicator, including the criteria, records, responsible people and data transformations along the way.

01 

## What an investor needs to reconstruct

Different questions require different evidence. Did the money reach the organization responsible for delivery? Did spending follow the approved budget? Did the intended participants receive the service? Did the observed change follow the intervention, and might it have happened anyway? A payment receipt cannot establish learning, an attendance register cannot establish higher income, and a favorable interview cannot establish that the project caused a change.

Traceability does not require giving funders unrestricted access to beneficiaries' lives. It requires enough information to assess delivery, outcomes and risk, with disclosure proportionate to the decision. Reconciled totals, a clear methodology, protected samples and an independent review may support verification. Names, identity documents, health information and home addresses can remain under restricted access with the organization responsible for them.

The starting question combines analysis with protection: what decision will each document support, and what is the least intrusive evidence sufficient for that purpose? This avoids two costly extremes: funding on the strength of a narrative alone, or creating a surveillance system that harms the people the project intends to support. More collected information does not automatically mean a better decision.

02 

## The legal relationship determines what must be demonstrated

Before entering a document room, identify the proposed relationship in its Brazilian legal and commercial context. Donations, sponsorships, grants and investments seeking financial returns create different obligations. A donation can have a restricted purpose and reporting requirements without giving the donor an ownership interest. Sponsorship commonly includes publicity or brand association, while a grant depends on its instrument and provider. Obligations must be explicit, rather than inferred from a commercial label.

For an investment seeking returns, establish the source of the economic right: equity, debt, a future conversion right or another appropriate structure. A nonprofit association cannot offer ownership interests in the same way as a Brazilian limited liability company, or LTDA. A MEI cannot admit equity partners while remaining a MEI. A social purpose does not identify who owes payment, establish an enforceable instrument or explain where repayment could come from.

Loans, receivables, equity, convertibles and donations carry different rights and potential losses. An existing eligible receivable requires evidence of its origin, ownership and conditions; hoped-for sales are not already that asset. For sponsorship, evidence that a workshop took place does not establish that agreed publicity was delivered. For a donation, a satisfactory social outcome does not itself create an obligation to pay the donor a financial return.

These distinctions belong in the initial presentation and the documents. Loose references to contributions, units or returns can create expectations unsupported by the contract. Public securities distribution and regulated financial activities require appropriate structures and providers. Technology, intermediation or a Brazilian CNAE economic activity classification is not permission to conduct them. Document review must include that structural question, rather than treating a well-organized file as an answer.

03 

## A hypothetical project with a defined budget and indicators

Consider an entirely hypothetical Brazilian nonprofit association providing vocational training and support for entry into paid work to 120 adults. The project runs for nine months, with training completed by month six and outcome follow-up continuing through month nine. Its R$240,000 funding consists of a R$180,000 restricted donation and a R$60,000 private grant under separate instruments. Neither provides equity or financial remuneration to the funders.

The budget allocates R$120,000 to teaching staff, R$48,000 to participants' transport and meals, R$36,000 to follow-up and measurement, R$24,000 to administration and R$12,000 to contingencies. The first four categories total R$228,000 in planned expenditure. The contingency brings the funding ceiling to R$240,000, but does not authorize unnecessary spending. The agreement must explain approval for its use and the treatment of any remaining balance.

The targets are at least 84 training completions and at least 60 verified entries into paid work by project closure. Completion requires specified attendance and practical assessment criteria. Entry into work requires paid activity meeting a documented protocol. Enrollment, starting, completion and paid work are separate events. The 120 people enrolled remain the reference denominator, including those who never start, so the report does not quietly exclude an important delivery problem.

These are planning assumptions, not announced results. Initial diligence considers whether staffing, timing, costs and follow-up methods make the targets plausible. It also examines what qualifies as paid work. A short assignment might count under a particular indicator, but should not be described as stable employment. Defining this beforehand limits the opportunity to improve the final report by changing what success means after outcomes become known.

04 

## The evidence chain from obligations to outcomes

The first document layer establishes the association's governing rules, authorized representatives, internal project approval and funding instruments. It identifies who can commit the organization, which funds are restricted and who must account for them. A second layer contains the work plan, budget and indicator definitions. A third contains delivery records: procurement, payments, activities, participant follow-up and evidence of outcomes. Each layer answers a different part of the funding decision.

The layers need verifiable links. An expense identifier connects a budget category to its authorization, invoice or equivalent billing document, payment and confirmation of delivery. A training group code connects its schedule, responsible professional and activity records. An aggregate report identifies the dataset version and calculation rules used. Everything need not sit in one file, but a reviewer must be able to follow the relationships without guessing.

Keep recorded events separate from interpretations. An attendance entry indicates participation in an activity, subject to the reliability of the attendance process. Course completion follows from applying attendance and assessment criteria. Improved employability is a broader interpretation requiring additional reasoning. Preserving these distinctions lets an investor challenge a conclusion without automatically rejecting every underlying record, and helps the organization identify exactly where stronger evidence is needed.

Documents can contradict one another. If a report lists ten workshops but the calendar lists nine, investigate, record the explanation and correct affected materials. A rescheduled activity may explain the difference; a charge for an undelivered service may reveal a larger problem. Traceability makes it possible to resolve the discrepancy through specific evidence, rather than selecting the most favorable file or dismissing the entire project.

05 

## Additionality: what the funding actually adds

Additionality asks what support makes possible beyond what would otherwise happen. The association might already have enough unrestricted funding to run a smaller class. Funding 120 places therefore does not necessarily create 120 additional opportunities. Diligence should examine previous capacity, available budgets, other confirmed funding and activities that would be canceled, reduced or delayed without the proposed support. The relevant comparison is a plausible alternative, not an assumption that nothing would happen.

One testable proposition is that the funding expands enrollment and pays for transport that helps participants stay. The earlier plan, revised budget and records of identified access barriers can make that proposition open to examination. They do not turn a statement of need into conclusive proof. They can also reveal whether two funders are each being told that their contribution alone enabled the same expansion.

Financial additionality differs from causing a social outcome. Funding may enable the class, while entry into paid work also depends on local demand, previous experience and other support. Earlier participant groups may provide a useful comparison if differences in selection and context are disclosed. Without a suitable evaluation design, the evidence may support a plausible contribution, but not an exact share of outcomes attributable to one funder.

Support may also add institutional capacity. Flexible resources could pay for privacy safeguards, evaluation or follow-up that other funding excludes. Those activities need budget lines and demonstrable deliverables; administrative spending is not automatically impact. Ask what capacity was created, how it will be used and whether it will remain useful after the project. A claim of stronger organizational capability requires evidence of its own.

06 

## Reading results without switching denominators

Suppose the hypothetical project ends with 120 people enrolled, 108 who started and 96 who completed. Twelve starters did not complete, and another twelve enrollees never began. Completion is 80% of enrollment because 96 divided by 120 is 0.80. Among starters it is approximately 88.9%. Both measures can be useful, but they answer different questions. Reporting only the higher percentage would conceal part of the enrollment-to-completion journey.

During follow-up, 72 people report paid work and 60 provide confirmation meeting the protocol. Report 72 self-reported outcomes, including 60 verified and 12 awaiting sufficient confirmation. Verified entry into work therefore represents 50% of the original 120 enrollees. This does not establish that the remaining 60 are unemployed: some outcomes may be unconfirmed, and some people may be unreachable. Missing evidence must remain visible without becoming automatic success or failure.

With expenditure of R$228,000 and the contingency unused, cost per completion is R$2,375: R$228,000 divided by 96. Cost per verified entry into work is R$3,800: R$228,000 divided by 60. These ratios help compare scenarios, but do not independently establish efficiency or causality. Participants facing greater barriers may need more resources, and the project may provide benefits that the paid-work indicator does not capture.

Suppose an earlier group recorded 84 completions among 120 enrollees, or 70%. The funded group is ten percentage points higher, equivalent arithmetically to twelve more completions. Without accounting for differences in selection, circumstances and delivery, that does not show that the funding caused twelve additional completions. Keep both the observed improvement and the uncertainty about its cause in the report; neither should disappear to simplify the narrative.

07 

## Cash flow, installments and decisions during delivery

The hypothetical agreement provides three combined disbursements: R$120,000 at the start, R$80,000 at the beginning of month four and R$40,000 at the beginning of month seven. Each installment is 75% donation and 25% grant, preserving totals of R$180,000 and R$60,000. Planned expenditure is R$100,000 in months one to three, R$84,000 in months four to six and R$44,000 in the final period, totaling R$228,000.

The cash movement is straightforward: R$120,000 received minus R$100,000 spent leaves R$20,000; adding R$80,000 and spending R$84,000 leaves R$16,000; adding R$40,000 and spending R$44,000 leaves R$12,000. That closing balance is the unused contingency. Its treatment follows the agreement, potentially requiring repayment or another expressly authorized use. Money remaining in an account is neither evidence of expenditure nor evidence of an achieved outcome.

The second installment could require financial reconciliation and evidence of initial delivery. The third could depend on completed training and a credible follow-up plan, without prematurely requiring work outcomes that can only be verified through month nine. Linking payment to an outcome that cannot yet be observed encourages premature claims. Conversely, paying everything without documentation removes an opportunity to identify and correct problems while delivery is still under way.

If the second installment is delayed by one month, average monthly expenditure in the second three-month period would be R$28,000, exceeding the R$20,000 available after the first period. The indicative shortfall is R$8,000, although actual needs depend on payment deadlines. This calls for early notice and a cash-flow review. It does not justify assuming that staff or suppliers will finance the gap, or diverting funds restricted to another purpose.

08 

## Privacy starts with deciding what not to collect

The association needs information about participants to provide its service, but not every available detail is necessary. Registration should follow defined purposes: checking eligibility, organizing activities, arranging support and tracking outcomes. Questions about health, family circumstances or experiences of violence require specific justification and handling appropriate to the context. A longer form can create exposure and discourage participation without improving any operational or funding decision.

Map the purpose and applicable Brazilian legal basis for each processing activity, with suitable legal advice where needed. Consent should not become blanket permission for unspecified uses. Where participants are vulnerable, examine whether they understand their choices and can refuse optional uses without losing services. Permission to publish a photograph is separate from supplying information necessary for participation; combining them can obscure whether a choice is genuinely optional.

An investor may need aggregate information on participant profiles, access barriers and outcomes without needing every registration file. An authorized evaluator could inspect a sample in a controlled environment and report verification findings. That arrangement still requires defined purposes, access rules and security. Changing who receives personal information does not remove the need to limit its use or establish responsibility for its protection.

Consider concrete consequences. An address could expose someone to stalking; public association with a program could reveal sensitive circumstances; income information could affect family relationships. Removing a CPF number alone does not resolve these risks. Ask whether someone could be recognized and harmed through the information as a whole, including combinations with local knowledge or other published material. Privacy review must follow that practical possibility, not just obvious identifiers.

09 

## Access levels and the risk of reidentification

A document room can provide access in layers. The public receives methodology, aggregate figures and limitations. Authorized investors review contracts, budgets, reconciliations and detailed reports appropriate to their role. Service staff access personal records needed for delivery. Evaluators receive only what their verification scope requires. Permissions should follow specific tasks and be reviewed when those tasks end, rather than continuing indefinitely because someone once participated in the project.

An analytical dataset may identify participants by codes, with the identity lookup kept separately under tighter access. This is pseudonymization, not automatic anonymization. A remaining key or another reasonable way to identify someone leaves a risk to manage. Sending a coded spreadsheet by email does not make it secure merely because the names column is gone; the remaining details and the receiving environment still matter.

Aggregation can also identify people. A table describing one woman of a particular age in a small neighborhood who found work at a named company may reveal her identity. A project might adopt a hypothetical rule against publishing groups smaller than ten. That is neither a universal legal threshold nor a guarantee. Review combinations of tables, local knowledge and whether subtraction from totals can expose a small group.

Technical controls and working practices must support one another: appropriate authentication, role-based permissions, access logs, sharing reviews and export restrictions where feasible. Investors must also control copies they receive. A protected document room loses value when its contents are reproduced in presentations, personal devices or messages without equivalent restrictions. The agreement should define responsibility for each onward disclosure, including access changes when staff or service providers leave.

10 

## Evidence quality, versions and corrections

Evidence has different strengths for different questions. A participant's account may explain an access barrier yet be insufficient to confirm a particular paid engagement. External records may strengthen confirmation while containing errors or unnecessary personal information. A protocol should define acceptable alternatives, validation criteria and inconclusive cases. Requiring only one document type can exclude legitimate forms of work that the project itself is intended to support.

Datasets need identifiable versions and duplicate controls. Suppose an import counts one participant twice and reports 97 completions. Review identifies the duplicate and restores the correct total of 96. Record the reason, affected version, responsible person and recalculated indicators. On expenditure of R$228,000, the reported cost per completion changes from approximately R$2,350.52 at 97 completions back to R$2,375 at 96. One record can therefore affect several published figures.

A correction history does not require keeping every erroneous personal record forever. An audit trail can describe the change with reduced exposure under an appropriate retention policy. Notify recipients of the earlier report and replace materials under the organization's control. Correcting only the internal spreadsheet leaves inaccurate figures circulating in funders' decisions. The correction should make its practical effect understandable without redisclosing unnecessary participant information.

A digital integrity marker may help demonstrate that a particular file has not changed since registration. It does not establish truthful content or lawful collection. Blockchain has the same boundary: integrity does not establish legal title, reserve solvency or guaranteed payment. Private documents should not be placed on public blockchains. Any technical registration needs its own assessment of purpose, cost and limitations, and cannot replace sound document governance.

11 

## Proportionate verification and the cost of accountability

Traceability takes money, time and operational capacity. In the example, some of the R$36,000 for follow-up and measurement supports dataset organization, outcome verification and reporting. The R$24,000 administrative budget also supports reconciliation and filing. If a funder later requests extra interviews, extensive auditing or specific systems, the parties should discuss the cost and effect on delivery. A reporting requirement is not free simply because it serves oversight.

Verification intensity can follow risk and the importance of the decision. Large expenses, related-party transactions, inconsistent documents and indicators that trigger payments merit greater scrutiny. Sampling may support review if the selection method and limitations are clear. Examining only the best-organized cases is likely to produce an overly favorable picture. The relevant question is what the chosen sample allows a reviewer to conclude about the wider records.

Combining a randomly selected sample with targeted risk cases can be useful. Random selection reduces convenient cherry-picking; targeted selection investigates particular warning signs. Findings should identify what was reviewed and what was excluded. If a few cases contain two inconsistencies, correcting those cases alone may be inadequate. Assess whether the same failure could affect the remaining dataset, and expand the review when there is reason to do so.

Independent review also costs money and has boundaries. An evaluator hired by the association may work rigorously, but the relationship and scope must be disclosed. A review limited to financial reconciliation does not validate social causality. Read the engagement's purpose, procedures actually performed and qualifications. The presence of an audit or consultancy name cannot turn a limited review into comprehensive certification of the project's finances, outcomes and governance.

12 

## Adverse scenarios and responses that preserve the evidence

A plan should anticipate failures in both spending and outcomes. A supplier may fail to deliver, a group may lose participants, or a security incident may expose personal information. Each calls for a distinct response. Suspending an installment might protect funds while interrupting meals or transport already provided to beneficiaries. Decisions should consider severity, the possibility of correction and consequences for participants, rather than treating suspension as an automatically neutral safeguard.

In an alternative scenario, a security failure requires R$12,000 in extraordinary response and recovery measures. If use of the entire contingency is authorized and other costs stay unchanged, expenditure rises from R$228,000 to R$240,000 and the closing balance falls to zero. With 96 completions and 60 verified work outcomes unchanged, unit costs become R$2,500 and R$4,000. The reserve absorbs the expense; it neither removes the harm nor proves prevention was adequate.

In another scenario, separate from the security incident, follow-up verifies only 45 work outcomes. At expenditure of R$228,000, cost per verified outcome becomes approximately R$5,066.67. Pending self-reports must not be reclassified simply to reach the target of 60. Investigate participant profiles, local demand, training quality and confirmation difficulties. Some of the shortfall may reflect measurement limitations, while some may reflect outcomes below expectations; the evidence should distinguish them where possible.

Contractual responses may include a corrective plan, revised activities, stronger follow-up or stopping future expenditure. Apply documented criteria and record the decision. A poor outcome does not prove fraud, and a socially valuable purpose does not rule out misuse of funds. Distinguish reduced effectiveness, operational failure and misconduct so the response addresses the actual problem. Neither continuing funding nor stopping it is free from potential cost and harm.

13 

## Responsibilities, conflicts and the right to challenge records

Separate responsibilities even in a small team. The person authorizing a purchase should not be the only person confirming delivery and approving payment. Staff working with participants may collect information while another person reviews consistency before publication. Where full separation is unaffordable, compensating controls can include periodic review by a governing officer outside daily operations and external checking of significant items. Any remaining limits should be understood rather than concealed.

Declare conflicts before decisions. If a business owned by an association officer supplies meals, the investor needs to know the relationship, selection criteria and justification for price and quality. The relationship alone does not settle the assessment. Risks also arise from absent comparisons, approval by the interested person and difficulty challenging the service. Records should show how the conflict was handled and who made the decision.

Indicators create less visible conflicts. Staff rewarded for completions may relax criteria or avoid participants needing greater support. A funder seeking publicity may favor emotional stories over representative evidence. Governance should allow the measurement lead to record qualifications and beneficiaries to report pressure, misuse of photographs or inaccurate classifications without fear of losing services. Disclosure helps reveal incentives, but practical channels and decision controls are needed to manage them.

Challenging a record requires an accessible channel, a responsible person, a defined response period and a route to review. Someone classified as having dropped out may have taken a temporary interruption allowed by program rules. Correcting the record means applying the relevant rule, not bargaining over the indicator to improve the report. A consistent procedure protects participants while preserving comparability and gives reviewers evidence of how disputed cases were resolved.

14 

## What to agree before releasing funds

Negotiation should begin with decisions to support, rather than an unlimited file request. Funders may need to verify authorized representation, budget coherence, financial execution and outcomes. For each need, agree on the document, detail level, frequency and responsible person. Include the funder's own review deadline: timely reporting loses practical value if it receives no response until the next installment is jeopardized. Accountability requires a workable process on both sides.

Legitimate disagreements may arise. An investor might request individual income evidence, while the association explains that disclosure exposes people and discourages participation. An authorized evaluator could inspect records and provide aggregate conclusions with relevant exceptions. That alternative must retain sufficient evidential strength. Privacy cannot become a blanket reason to prevent verification, just as diligence cannot justify unrestricted access. The solution should address the specific error or risk the investor needs to assess.

Agree on consequences for deviations: when correction is appropriate, when budget transfers require authorization, how contingencies may be used and when installments may be suspended. Completion definitions and the paid-work protocol should form part of the agreement or a controlled annex. Later changes need justification, version control and an explanation of their effect on comparisons. A target must not be quietly redefined after the result is known.

Sponsorship requires separate agreement on brand and image rights, beyond data necessary for accountability. The example's donation and grant promise no financial return. A different project offering remuneration requires analysis of payment flows, the investor's contractual position, default and potential loss. Reusing one form for every relationship can hide material rights. Reporting arrangements should follow the actual legal and economic structure instead of creating an impression that all project funding works alike.

15 

## Technology-based intermediation and the limits of trust

KEZS connects entrepreneurial projects and potential funders through technology and intermediation. A project-based method can organize analysis around objectives, intended beneficiaries, budgets, legal instruments and corresponding evidence. Its potential usefulness lies in making questions and documents easier to understand and compare. Investors remain responsible for their own diligence and decisions. KEZS does not assign a credit score, and an organized presentation should not be interpreted as an investment recommendation or approval.

Better organization may reduce repeated work, but does not automatically verify a statement. Distinguish documents submitted by a project, documents checked, independent verification and an investor's own conclusions. A completed beneficiary-count field does not validate its underlying dataset. An attached contract does not establish that it was performed. These distinctions should remain clear in any presentation so that orderly information does not create confidence unsupported by the actual checks.

Investors should examine intermediation incentives: who pays for the service, what event triggers a fee and whether relationships exist with project sponsors or providers. Such incentives may affect selection, prominence or commercial urgency. Transparency about costs and conflicts helps interpretation but does not itself eliminate a conflict. Identify who verifies each claim, the scope of that work and who is accountable for errors, rather than assuming responsibility is shared equally.

These functions imply no approval, repayment, profitability, liquidity or capital guarantee. Where regulated providers are involved, examine their specific roles and terms. Institutional sources are reference entry points, not proof that KEZS or a particular offering is authorized. Review the concrete structure without transferring the authority of an official source to an activity it has not assessed. Technical presentation cannot replace economic, legal and operational diligence.

16 

## Closing with a dossier that supports decisions and learning

The hypothetical closing dossier should reconcile the approved budget, R$228,000 spent, the R$12,000 balance and its contractual treatment. It should report 120 enrollees, 108 starters, 96 completers, 72 self-reported paid-work outcomes and 60 verified outcomes. The final version identifies criteria, observation period, unresolved items and corrections. Together, these allow a funder to reconstruct the figures without receiving each beneficiary's identity or a complete copy of every personal record.

Financial closure does not automatically end all data processing. Determine which documents must be retained for applicable obligations or justified needs, for how long and under whose responsibility. Other data can be deleted or effectively anonymized when no longer necessary. Address copies held by evaluators and funders as well as the association. Keeping everything indefinitely increases costs and exposure, and should not be confused with maintaining a useful audit trail.

A further funding decision should consider the evidence as a whole. The project exceeded its target of 84 completions and achieved 60 verified work outcomes, but those results alone establish neither causality nor sustainability. Investors may need better outcome confirmation, investigation of withdrawals and comparison with projects serving similar populations. New support should neither reward only the most striking number nor penalize an organization for reporting uncertainty honestly.

Conclude with a short, reasoned decision record: the relationship being funded, verified facts, remaining assumptions, accepted risks and conditions requiring follow-up. Include what could not be verified and why that matters. Assess whether further support would add something beyond existing activity, and what the organization learned from difficulties. This turns documentation into a decision that can later be reviewed while preserving the dignity of the people whose experiences underpin the impact assessment.

FAQ 

## Frequently asked questions.

### How can impact be checked without receiving beneficiaries' personal documents?

Start with the indicator and the error you need to detect. Reconciled totals, eligibility criteria, calculation rules and version records may answer part of the question. Individual cases can sometimes be checked through a sample examined by an authorized professional in a controlled environment, with findings and relevant exceptions reported to the funder. Understand the review's scope and limitations. Receiving everyone's documents does not guarantee better analysis and increases the funder's own responsibility for protecting them.

### Can a donation tied to targets generate a financial return for the donor?

Targets and reporting obligations do not turn a donation into a remunerated investment. In the example, funders monitor spending and outcomes but receive neither equity nor earnings. Returning an unused balance or applying a contractual remedy for noncompliance is different from paying a profit. If remuneration is promised, examine the appropriate structure, the entity responsible for payment and the associated risks. Calling a project an impact initiative does not resolve these legal and economic differences.

### Does a verified outcome mean the project caused the change?

No. Verification establishes that an event, such as training completion or paid work, met a particular protocol. Causal attribution asks what would probably have happened without the intervention. Participant selection, previous experience, labor-market conditions and other support may influence outcomes. Simple comparisons can suggest hypotheses without isolating the project's effect. Reports should distinguish a verified event, a plausible contribution and a causal estimate supported by an appropriate method, rather than presenting those levels of evidence as interchangeable.

### Should an investor suspend funding when a target is missed?

Consider the contract, the cause of the shortfall and the consequences of suspension. A correctable measurement problem differs from misuse of funds or an ineffective intervention. Check cash, existing commitments, risks to beneficiaries and realistic adjustments. A corrective plan with verifiable actions may be appropriate, or future expenditure may need to stop. Automatically continuing funding also carries risk. Establish criteria before problems arise while allowing documented circumstances to inform the decision.

### Does a lower cost per beneficiary mean a better project?

Only a comparison that considers delivery, outcome quality and participant circumstances can support that judgment. Dividing expenditure by enrollment can produce a low figure despite many withdrawals. Cost per completion and cost per verified work outcome answer different questions. Projects serving people facing greater barriers may cost more while making a meaningful contribution. Specify included expenses, the denominator, observation period and limitations. A unit cost is an analytical input, not a stand-alone ranking or evidence that the project caused the result.

### Can blockchain or digital signatures replace document diligence?

No. Depending on implementation, technical tools may support checks of integrity, authorship or record sequence. They do not independently establish that a workshop happened, an indicator was calculated correctly or an organization can pay. An unchanged document may contain false information. Access, retention and privacy obligations also remain, and private documents should not be placed on public blockchains. Use technology for a specific evidential need, assessing its cost and limits alongside the underlying records and governance.

### What evidence supports considering further funding?

Look for a coherent combination of reconciled spending, outcomes calculated under known criteria, explained deviations, resolved or disclosed outstanding issues and capacity for the next stage. Assess what further support would add and which improvements followed earlier problems. For an investment seeking financial returns, social assessment must accompany the relevant economic and contractual analysis, including potential loss. Previous success is contextual evidence for a new decision; it does not guarantee repeated outcomes, repayment or liquidity.

## References and context

Institutional reference points for checking applicable rules and guidance. Calculations and scenarios are original examples, not quotes, historical results or individualized recommendations.
- [Banco Central — correspondentes no País ↗](https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?tipo=Resolu%C3%A7%C3%A3o%20CMN&numero=4935)
- [CVM — Resolução 88, texto e alterações ↗](https://conteudo.cvm.gov.br/legislacao/resolucoes/resol088.html)
- [CVM — Resolução 175, fundos de investimento ↗](https://conteudo.cvm.gov.br/legislacao/resolucoes/resol175.html)
- [Portal do Empreendedor — perguntas sobre MEI ↗](https://www.gov.br/empresas-e-negocios/pt-br/empreendedor/perguntas-frequentes)
- [ANPD — orientações e perguntas frequentes ↗](https://www.gov.br/anpd/pt-br/acesso-a-informacao/perguntas-frequentes)

AI-assisted educational content. Decisions require verification of the information, instruments and providers in each actual case.

## Keep learning.[Explore the category ↗](https://kezs.com.br/en/learn/impact-investors-diligence)

[

Impact investors and foundations: diligence and governance 

### Data Rooms and Evidence Quality for Impact Investors

Assess evidence, additionality, cash flow and beneficiary safeguards in an impact data room, distinguishing donations from investments seeking returns.Explore the article ↗  ](https://kezs.com.br/en/learn/impact-investors-diligence/data-rooms-and-evidence-quality-for-impact-investors)

[

Impact investors and foundations: diligence and governance 

### Cash Flow, Revenue and Execution Capacity for Impact Investors

Assess cash flow, revenue, delivery and impact in Brazilian ventures and nonprofits, distinguishing financial returns, donations and beneficiary safeguards.Explore the article ↗  ](https://kezs.com.br/en/learn/impact-investors-diligence/cash-flow-revenue-and-execution-capacity-for-impact-investors)

[

Impact investors and foundations: diligence and governance 

### Contracts, Powers and Investor Rights in Impact Investing: Financing Results While Managing Risk

Understand impact investment contracts, governance rights and safeguards while distinguishing financial returns, donations and protection for beneficiaries.Explore the article ↗  ](https://kezs.com.br/en/learn/impact-investors-diligence/contracts-powers-and-investor-rights-in-impact-investing-financing-results-while-managing-risk)

From knowledge to decisions 

## Plan your next step with more clarity.[Get started ↗](https://kezs.net/?lang=en)