An institution can have a portfolio with regular repayments while relying on one person to interpret contracts, approve exceptions or locate transaction evidence. Observed defaults may reveal little about that weakness. It becomes visible when someone is absent, changes roles or leaves, and a process loses speed, quality or the ability to demonstrate what happened. For investors, assessing the team means investigating how individual knowledge and authority become repeatable operations that another appropriately qualified person can perform.
Key-person dependency can emerge before it appears in the accounts
The assessment should cover the authorized institution, origination channels and service providers involved in serving businesses. A proposal may arrive through an intermediary, undergo analysis elsewhere and depend on a third party to move funds. Continuity must work across those boundaries. A replacement inside the institution offers limited protection if only the correspondent knows how to contact the client, or if a provider delivers files that nobody can interpret without informal assistance from its usual contact.
The economic question is how much revenue and portfolio quality depend on work that cannot yet be transferred safely. A small team may be sufficient when duties are clear, records are recoverable and replacement capacity has been demonstrated. A large team may remain vulnerable if everyone turns to the founder for decisions. Headcount is a starting point; the actual distribution of knowledge, access and responsibility is more informative. Investors should also consider how workload changes during absences and whether the remaining team can maintain controls.
Define the investment and each participant's role
Before assessing people, investors need to identify what they would be investing in. Owning equity in a technology company differs from financing an institution, purchasing a receivable or investing through a vehicle. Each structure creates distinct rights, possible losses and monitoring arrangements. Operational continuity matters in all of them, but rights to demand information, replace a provider or recover money depend on the applicable documents. Access to a shared dashboard does not create those rights by itself or establish a claim over the assets displayed.
KEZS connects entrepreneurial projects and potential funders through technology and intermediation. Organizing a project and its documents can help identify responsible parties, assumptions and unresolved issues, without replacing investor diligence or decision-making. KEZS does not assign a credit score. When examining an institution or channel presented in this context, investors must establish who enters into contracts, makes decisions, moves funds and answers for each obligation. A well-presented project does not independently demonstrate operational capacity.
Structures serving different purposes must remain distinct. Loans create repayment obligations; receivables require examination of the assigned right; equity and convertibles have their own entry, conversion and exit conditions. Donations to nonprofit entities are neither equity investments nor promises of financial return. In Brazil, a MEI, or individual microentrepreneur, cannot admit equity partners while retaining MEI status. If a project combines these possibilities without explaining who administers each one, its team may be accepting responsibilities it has not adequately understood.
Correspondent arrangements require verifiable contracts, scope and supervision
A channel that reaches businesses can expand commercial coverage and reduce the effort involved in gathering initial information. That does not automatically make every intermediary a correspondent or authorize it to perform every stage of a financial transaction. Correspondent activities depend on a contractual arrangement with an institution and a defined scope. During diligence, investors should be able to connect each activity to the instrument permitting it, the designated personnel and the agreed supervision. The commercial description of a relationship is insufficient evidence.
A useful process map follows a proposal through product presentation, document collection, questions, information submission, decision communication and complaints handling. Where correspondent activities are involved, the map should reflect the contract and applicable Brazilian requirements, interpreted by the responsible professionals. The financing institution retains the responsibilities assigned to it by regulation. Describing a stage as outsourced or technological does not remove those responsibilities or turn a service contract into an unrestricted transfer of duties.
Personal dependency becomes particularly dangerous when a channel verbally negotiates conditions unknown to the institution. A sales manager might promise timelines or criteria inconsistent with approved policy and retain the details only in private conversations. Controls should require authorized communications, accessible records and a way to correct inaccurate information given to clients. Relevant evidence includes contracts, communication samples and records of how deviations were handled. A manual may describe the intended process, but its existence alone does not demonstrate that staff follow it.
Map critical functions before discussing recruitment
Start with functions whose interruption would prevent an obligation from being met or increase the possibility of loss. These include maintaining credit policy, checking identity and representation, examining signs of illicit activity, completing contracts, authorizing disbursements, reconciling transactions and responding to incidents. For each function, identify the primary owner, replacement, required access, supporting documentation and time available to act. A named replacement must have the practical ability and appropriate authority to perform the work; designation alone does not establish readiness.
Distinguish exclusive knowledge, exclusive access and exclusive authority. One analyst may be the only person who understands a complex contract, another may hold the only operational access, and a third may control approval. These dependencies need different responses. Documenting the contract does not supply access; creating another user account does not transfer understanding; distributing passwords does not establish valid authority. The arrangement should preserve individual accountability and avoid shared credentials as an improvised solution to staff absence.
A simple criticality map can prioritize a function with no replacement, an immediate obligation and significant financial consequences over an administrative task that can wait several days. Remediation need not begin with expanding the entire workforce. It might involve supervised training, individually approved access, specialist support or process redesign. Compare the cost of each option with the remaining risk. In particular, examine whether a replacement would have to combine incompatible duties, such as preparing and independently reviewing the same transaction.
Policies and decision authority must survive the decision-maker's absence
An institution needs its own policies and approval arrangements, appropriate to the responsibilities it assumes. An originator can gather information and advocate for a proposal, but its sales targets should not replace the financing institution's decision criteria. Investors should understand who approved the policy, how it changes and which matters require escalation. Vague criteria such as a good relationship or a familiar client increase reliance on personal memory and make inconsistent treatment harder to detect, explain or challenge.
A functional authority framework specifies the decision type, relevant internal limits, conflicts or other restrictions, and required records. In a hypothetical workflow, a transaction meeting approved parameters follows the ordinary route; a documentation discrepancy requires correction; a risk exception needs specific assessment. Sending the proposal to someone more senior is insufficient. The framework must identify what that person can decide and which requirements cannot be waived for commercial reasons. A replacement receives defined powers rather than inheriting unlimited informal discretion.
Exception records should identify the rule departed from, the justification, evidence considered and conditions imposed. Investors can examine whether exceptions cluster around a particular executive, channel or product and whether their subsequent performance differs. Replacing a decision-maker should preserve access to this history. If every absence requires fresh exceptions merely to maintain volume, policy may depend excessively on personal interpretation or describe a different operation from the one staff actually run. That gap warrants investigation before treating the replacement arrangement as effective.
KYC and prevention of illicit activity must be transferable processes
For business clients, know-your-customer work involves understanding the legal entity, its activities, representatives and relevant people in its ownership or control structure, as appropriate under applicable requirements. Staff need to verify whether the applicant can act for the company and whether the documents support the proposed transaction. Receiving a file is not equivalent to validating it. Records should distinguish declared information, independent confirmation, identified inconsistencies and the analyst's conclusion, so another authorized professional can understand what remains unresolved.
Preventing illicit activity requires identification, assessment and escalation processes suited to each participant's role. A channel might notice an unusual change of account or a mismatch between the stated business activity and submitted documents. The institution must define how those signals reach it, who examines them and what responses are available. During the responsible person's absence, alerts must not disappear from the queue or be closed merely to meet a target. Sensitive information also needs restricted access and appropriate handling.
A useful replacement exercise combines a recently changed company representative with a credit request and a change to the destination account. Observe whether the replacement identifies the issues, seeks confirmation through authorized means and records the decision. Every signal need not indicate fraud; the test concerns consistent investigation. Protected samples and handling reports can demonstrate the process without giving investors unrestricted access to personal documents or confidential analyses. The evidence should show how concerns were resolved, escalated or left open with a responsible owner.
The product structure determines the expertise required
A team capable of assessing working-capital loans is not automatically equipped to evaluate receivables purchases or equity investments. Loan analysis must connect repayment capacity, contractual obligations and monitoring. Receivables analysis requires understanding existence, eligibility, ownership, assignability and other relevant conditions. Expected sales may support a business forecast, but they should not be treated as existing rights already available for purchase. Maintaining that distinction requires product knowledge throughout origination, analysis and documentation, including when the usual specialist is absent.
Consider one company presenting commercial orders still subject to delivery and another presenting claims arising from completed transactions. Even with equal face values, their supporting documents and events that could prevent collection differ. If only one employee understands the distinction, an absence could lead others to classify expected revenue as an eligible receivable. Continuity requires written criteria, examples of rejected situations, review proportionate to complexity and training on the product actually contracted. It also requires clarity about which unresolved conditions prevent a proposal from advancing.
Equity, convertibles, investment funds and securities offerings add their own governance, structuring and disclosure questions. Public securities distribution and regulated financial activities require appropriate structures and providers under Brazilian rules; technology or a CNAE economic activity classification is not permission. Team competence includes recognizing the limits of its role and involving specialists when necessary. Expanding a product catalogue without matching legal, operational and control capacity can increase apparent revenue while accumulating difficult errors. Investors should examine both the opportunity and the cost of building the required expertise.
A numerical example: volume, staffing and operating cash measure different things
Consider an institution and an origination channel in an entirely hypothetical cycle. They receive 120 business proposals of R$ 40,000 each, totaling R$ 4.8 million requested. Ninety become documentarily complete; 60 of those are approved, representing R$ 2.4 million. Forty-eight reach contracting and disbursement, totaling R$ 1.92 million. The other approvals do not convert within that cycle. These figures describe separate stages. Alone, they establish neither sound selection nor a financial result, and an approval should not be counted as a completed disbursement.
The operating plan schedules those 48 disbursements over four business days: 12 transactions and R$ 480,000 daily. The safe capacity already tested with the full team is up to 16 disbursements a day while retaining required checks. That headroom may absorb some delay but does not authorize removing controls. Assume the principal needed for the planned transactions is available. Those funds are distinct from the organization's operating cash for salaries, suppliers and other expenses; availability in one category does not establish availability in the other.
Monthly operating expenses in this example are R$ 60,000: R$ 48,000 for personnel and R$ 12,000 for other costs. Unrestricted operating cash of R$ 180,000 covers three months at that spending level, excluding future revenue and new expenses. A R$ 9,000 emergency response would leave R$ 171,000, equivalent to 2.85 months at the same monthly cost. This is hypothetical arithmetic, without market rates, taxes or promised returns. The R$ 1.92 million financed does not automatically add to that operating reserve.
One person's absence and its effect on the schedule
On the first day, the planned 12 transactions are disbursed, totaling R$ 480,000. On the second, an unexpected absence leaves eight transactions without the required operational review. Only four, worth R$ 160,000, proceed through the regular workflow. The other eight, totaling R$ 320,000, remain pending. This preserves the review requirement and makes the delay measurable. Releasing everything on an informal signature might reduce the visible queue, but it would create a governance and evidence problem rather than demonstrate that continuity controls worked.
With a qualified replacement working from day three, the schedule rises to 16 transactions that day: the original 12 plus four delayed transactions, totaling R$ 640,000. Another 16 transactions, also worth R$ 640,000, complete the cycle on day four. The arithmetic remains consistent: 12 plus four plus 16 plus 16 equals 48; R$ 480,000 plus R$ 160,000 plus R$ 640,000 plus R$ 640,000 equals R$ 1.92 million. No day exceeds the assumed safe capacity of 16 disbursements.
Finishing the total by day four does not erase the interruption's effects. Four businesses receive funds one business day late, and four receive them two business days late, potentially affecting commercial commitments and requiring individual communication. Recovery depends on a replacement being available, documents remaining valid, funds being accessible and no new restrictions arising. If actual capacity were only 12 transactions daily, the calendar would need extending or the plan revising. The resulting change should not be presented as the client's failure.
Settlement and reconciliation: demonstrating where the money is
Financial continuity requires distinguishing authorization, submission of a payment instruction, confirmation of settlement and a reconciled record. A screen showing that a request was sent does not establish that the beneficiary received the funds. Reconciliation connects internal records, supporting documents and external information to identify and resolve differences. Investors should examine who monitors outstanding items, which evidence closes each case and how the team prevents an attempt to resolve a delay from producing a duplicate payment. Each stage needs an identifiable status and owner.
Return to day one. Suppose financial confirmation shows R$ 480,000 leaving the account, while the internal system records only 11 settled transactions totaling R$ 440,000. The R$ 40,000 difference relates, by assumption, to one transaction whose confirmation was not linked to its contract. That is consistent with 12 disbursements having occurred, but it still requires evidence. Staff should locate the transaction identifier, verify the account and beneficiary, link the confirmation and record the correction. A missing internal entry is not grounds for sending the principal again.
The correction should retain the error history and evidence of review. If investigation does not establish the difference's nature, keep the case open with a responsible owner and treatment proportionate to risk; do not choose the most convenient explanation to close the day. Replacement arrangements should also avoid unrestricted access to banking data. Consistent identifiers, individual accounts and recoverable audit trails help make the work transferable. Reconciliation is demonstrated by matching evidence, rather than by confidence in the employee who normally performs it.
Documentation should support continuity, investigation and challenge
A useful procedure explains the action, the control's purpose, required materials, completion criteria and route for handling deviations. An instruction to check the documentation teaches a replacement little. Specify which documents establish representation, how discrepancies are recorded and when processing must stop for analysis. Procedures should reflect the systems and contracts actually used. A lengthy manual disconnected from everyday work, with nobody responsible for updating it, can create false confidence. Staff should be able to identify the applicable version and understand how to raise an unclear case.
Organizing information by project can keep business purpose, intended structure, documents, assumptions and decisions together. An institution assessing a channel may then reconstruct why a proposal advanced and which conditions remained unresolved. This potential usefulness depends on document quality and disciplined updates. It does not demonstrate that a platform performs regulatory controls or provides particular operational features. Investors should distinguish files supplied by the applicant from validations performed by the institution and conclusions still awaiting confirmation; placing them together does not give them equal evidential weight.
Protect the content and test recovery. Uncontrolled copies can expose business and personal data, while an inaccessible folder makes otherwise useful records unavailable. Retention, permissions and disposal should serve applicable purposes and obligations. If blockchain is used, record integrity does not establish document truth, legal ownership, reserve solvency or payment. Private documents should not be placed on public blockchains. Traceability must remain compatible with confidentiality and review, including the ability to understand a correction without unnecessarily exposing the underlying private information.
Outsourcing and technology can move dependency elsewhere
Outsourcing may provide specialist knowledge and additional capacity, but it can relocate dependency to another organization. A provider whose support depends on one person, whose documentation is inadequate and whose data are difficult to export may become as critical as an irreplaceable employee. Investors should understand which services support identification, contracting, communication and financial processing, which failures interrupt the business journey, and what the institution can do while a service is unavailable. The provider's size alone does not answer those questions.
Read the contract alongside practical execution capability. Response commitments, record access, cooperation duties and termination arrangements must match operational needs. An export clause helps little if the resulting files cannot link client, contract and transaction. A test using protected data can establish whether another professional can reconstruct those relationships and identify pending work. That provides stronger evidence than a general portability statement. It also reveals the time and interpretation required, which may affect whether the exported records are useful during an interruption.
An immediate alternative may not exist for every function. An institution may choose to pause a stage until its provider recovers, provided it understands the consequences and preserves its obligations. Manual contingency work needs its own controls, capacity and authorization; improvised spreadsheets do not establish continuity. Consider common dependencies too: two providers may share infrastructure or support staff. Assess plausible simultaneous failures, transition costs and contractual restrictions. Duplicating contracts does not eliminate risk if both arrangements can fail for the same underlying reason.
Incentives, conflicts and disagreements need to be visible
Incentives can reinforce dependency on particular people. If a channel is paid for completed contracts, sales staff are judged only on volume and control staff are measured by release speed, each may have reasons to reduce questioning. This does not establish misconduct, but it calls for counterweights. Compensation, indicators and consequences should reflect each function's role and observed quality problems. Investors also need to understand economic relationships among originators, analysts, providers and the businesses presented, including relationships that could influence judgment.
Imagine a discussion about the eight delayed transactions. The commercial lead argues for immediate release to preserve client confidence. Operations identifies the missing review, while risk considers whether authorized substitution is possible. The appropriate outcome cannot be inferred from the seniority of whoever speaks most forcefully. Record the outstanding requirement, alternatives considered, competent decision-maker and communication to those involved. Disagreement can expose risks a solitary decision would miss, but it needs a route to a reasoned, accountable outcome rather than an undocumented compromise.
Useful minutes and records capture questions, evidence and follow-up without exposing unnecessary data. Constant unanimity does not independently demonstrate sound governance. Ask whether someone can challenge commercial pressure without losing access to information or facing informal punishment. Where a founder combines client relationships, decision authority and variable compensation, independent controls deserve particular attention. The purpose is to preserve consistent decisions even when influential individuals or commercially important transactions are involved. A replacement should be able to apply that same process without relying on personal standing.
Test adverse scenarios without presenting assumptions as facts
A continuity exercise should state the scenario, assumptions and observed result. An absent analyst, an unavailable provider and suspected compromised access are different situations. The first may permit a prepared replacement; the second may require recovery or a compatible alternative; the third may require access blocking and investigation before work resumes. Grouping them all as staff unavailability hides different decisions and can produce a response that expands the incident. The exercise should make clear which resources remain trustworthy and available under its own assumptions.
In the numerical example, recovery within four days is conditional, not a fact about any institution. A more severe scenario might also remove the replacement or prevent access to financial confirmations. The capacity of up to 16 daily disbursements would then cease to be a valid assumption. Recalculate the queue, pending amounts, communication needs and operating cash consumption. Include the hypothetical R$ 9,000 emergency expense only if that spending is actually assumed in the scenario; it is neither a market price nor a guarantee of resolution.
Loss risks remain even when operations continue. A financed business may fail to repay, a receivable may be disputed, and a provider may not deliver the expected recovery. Keeping staff working does not guarantee liquidity or preservation of capital. Investors should distinguish simulation, controlled testing and a real incident, recognizing each type of evidence's limits. A successful exercise with a few simple contracts may not demonstrate capacity for a surge of complex transactions or a failure involving multiple participants. Findings should retain those qualifications.
Negotiate verifiable commitments and sustainable costs
Diligence findings may become contractual conditions, depending on the investment structure and the parties' negotiating power. Examples include periodic information on critical functions, notification when responsible personnel leave, demonstration of replacement capability and monitoring of significant reconciliation failures. Each commitment should specify the deliverable, who verifies it and how noncompliance is handled. Demanding absolute continuity or an impossible recovery time creates a fragile promise that is difficult to assess and potentially expensive. The commitment should address a defined exposure rather than imply that disruption is impossible.
Relate cost to the problem being reduced. The example's R$ 60,000 monthly expense supports the existing structure; it does not establish that every desired backup arrangement is affordable within it. Training replacements consumes productive hours, separating duties may require recruitment, and better records require work. Investors can compare alternatives using demonstrated capacity, failure exposure and available operating cash. Three months of expense coverage is only arithmetic under the stated assumptions, not evidence of adequacy or safety. Additional costs or interrupted revenue can change that picture.
Negotiation also involves information boundaries. Investors may need to understand knowledge concentration without receiving personnel files or every client's documents. Aggregated reports, protected samples and review by a qualified professional can serve different purposes. Refusal to provide essential evidence informs the assessment; requests exceeding contractual rights or demonstrated need should be adjusted. Monitoring rights and rights to replace providers cannot be assumed. They require examination of the applicable legal structure, including how they could actually be exercised when cooperation is difficult.
Reach a conclusion supported by evidence, ownership and review
A useful conclusion separates what was observed, what was reported and what remains hypothetical. It might record that a replacement is formally designated but untested; that sample reconciliation was reconstructed with help from the usual employee; or that a contract defines the channel's scope while sales communications depart from it. Such precision prevents partial improvement from becoming a claim of proven continuity. It also makes comparison before and after remediation possible, because the conclusion identifies both the evidence and its practical limitations.
A practical assessment can combine an inventory of critical functions, a complete transaction sample, an absence exercise and investigation of a financial discrepancy. Assign each gap an owner, an action and completion evidence. An incomplete settlement record requires proof that the confirmation was linked and its cause reviewed. Informal decision authority requires defined powers and demonstrated application. Writing a procedure completes a documentation task; showing that another person can use it requires a further check. Remediation should therefore close the identified weakness, not merely produce another file.
The assessment remains relevant after an investment decision. Channel growth, product changes, staff departures and provider replacements can invalidate earlier assumptions. Within agreed rights, investors can monitor aging queues, concentrated exceptions, reconciliation differences and repeated difficulty arranging replacements. They retain responsibility for their decision, whether to proceed, impose conditions, reduce the proposed exposure or decline participation. These are transaction-specific choices rather than personal asset-allocation instructions. Clear records and well-distributed duties make risk more understandable; they do not guarantee approval, repayment, profitability, liquidity or capital.
Frequently asked questions.
Is a small team sufficient reason to reject an institution or origination channel?
No. Compare team size with volume, complexity, obligations and replacement capacity. A small team may have clear processes and specialist support, while a larger one may depend on the same executive for every decision. Diligence should examine incompatible duties, absences and periods of higher demand. The relevant evidence is whether the structure can perform and control the work it accepts, with costs and remaining risks identified. Headcount alone cannot establish either resilience or inadequacy.
How can investors assess founder dependency while recognizing the founder's experience and relationships?
Recognize the contribution while examining what has been recorded and transferred. Personal relationships create greater operational risk when contracts, negotiated conditions and service history cannot be recovered by the organization. Ask another responsible person to reconstruct a decision and perform an authorized stage without continuous founder assistance. The result shows which activities belong to an institutional process and which still depend on the founder's presence. It also identifies where training, documentation or defined authority may be needed.
Does appointing a correspondent remove the financing institution's responsibilities?
The financing institution retains the responsibilities assigned to it by Brazilian regulation. Correspondent activities depend on a contractual arrangement and scope with the institution, and the operational division must be assessed against applicable instruments and requirements. Investors should examine supervision, client communication, information quality and handling of deviations alongside the contract. Provisions allocating responsibilities between companies should not be interpreted as automatically eliminating regulatory duties. Calling a process outsourced does not establish that every responsibility has moved with it.
What KYC and illicit-activity prevention evidence can an investor request?
Subject to the investor's rights and the assessment's purpose, requests may cover responsibilities, escalation criteria, indicators and protected samples showing how inconsistencies were handled. Unrestricted access to personal documents or sensitive analyses should not be presumed. Evidence should support evaluation without creating unnecessary data exposure. A checklist of documents received demonstrates collection; validation records and discrepancy handling demonstrate separate analytical work. Where access is restricted, an appropriately scoped report or professional review may provide relevant evidence within those boundaries.
If a transaction appears pending internally, is it safe to send the payment again?
An internal pending status alone does not establish payment failure. Check the original instruction, transaction identifier, available confirmations and destination. In the example, R$ 480,000 of confirmed outflow against R$ 440,000 recorded internally reflects, by assumption, an unlinked confirmation. Resending R$ 40,000 without investigation could duplicate payment. Any correction should follow evidence and retain review records. If the cause remains unclear, keep the discrepancy open with an owner and appropriate risk treatment rather than forcing a convenient explanation.
What distinguishes a convincing continuity plan from a purely formal document?
A convincing plan connects functions, people, access, dependencies, restart criteria and communication. It includes execution evidence suited to the scenario: who replaced whom, what was completed, what remained pending and where help was required. One test cannot establish readiness for every future situation, but it can reveal concrete limits. Missing owners, unavailable access and instructions requiring interpretation by the usual employee indicate unfinished continuity work. Conclusions should distinguish a written plan from a demonstrated ability to use it.
Does organizing documents on a platform replace investor diligence?
No. Project organization can help locate assumptions, documents and decisions, but investors must assess authenticity, consistency, rights and risks for the intended structure. KEZS connects entrepreneurial projects and potential funders and does not assign credit scores. A project's presence does not prove regulatory authorization, financial capacity, receivable ownership or an effective control. Official sources can provide reference entry points for verification; they are not proof that KEZS or any participant holds a particular authorization. Investors remain responsible for their diligence and decisions.
References and context
Institutional reference points for checking applicable rules and guidance. Calculations and scenarios are original examples, not quotes, historical results or individualized recommendations.
- Banco Central — correspondentes no País ↗
- CVM — Resolução 88, texto e alterações ↗
- CVM — Resolução 175, fundos de investimento ↗
- Portal do Empreendedor — perguntas sobre MEI ↗
- ANPD — orientações e perguntas frequentes ↗
AI-assisted educational content. Decisions require verification of the information, instruments and providers in each actual case.
