CPF and CNPJ API for KYC/KYB Platforms: Real-Time Validation
At CPF.CNPJ, we simplify and streamline access to essential information about individuals and companies.
The Challenge: Reliable Validation for Global KYC/KYB Platforms
Global KYC (Know Your Customer) and KYB (Know Your Business) platforms such as SumSub, Onfido, Jumio and Trulioo rely on official and trustworthy data sources to validate user identity across 190+ countries. In Brazil, the challenge is critical: the Receita Federal is the ONLY official source authorized for CPF and CNPJ validation, but it does not offer a public API. KYC platforms operating without access to official Brazilian data face a coverage gap that impacts fintech, crypto and fintech clients operating in the Brazilian market.
Brazilian regulations in regulated sectors (Bacen Circular 3.978, CVM 617, Law 14.790 betting) require validation against official sources, not commercial databases or scraping. KYC platforms that use non-official sources create compliance risk for clients: validations can be questioned in audits, resulting in fines and suspensions. For global KYC platforms to enter the Brazilian market in a compliant way, integration with an official CPF/CNPJ API is a non-negotiable requirement.
The Brazilian KYC/KYB market moves billions: fintechs, crypto exchanges, marketplaces, insurers and e-commerces process 50+ million annual KYC validations. Global platforms without Brazil coverage miss the opportunity to serve this market or operate with regulatory risk. Integration with the CPF.CNPJ API allows these platforms to offer compliant Brazil coverage, unlocking a market worth hundreds of millions of dollars in potential revenue.
How the CPF.CNPJ API Solves It
1. Official Source for Compliant Brazil Coverage
The API provides direct access to official Receita Federal data, the only source authorized for CPF/CNPJ validation in Brazil. KYC/KYB platforms integrate the API as a Brazilian data provider, complementing global coverage. During the KYC flow of an end client (fintech, exchange, etc.), the platform detects that the document is a Brazilian CPF (11 digits, pattern XXX.XXX.XXX-XX), routes validation to the CPF.CNPJ API, and returns an official result in 0,4-2 seconds.
Returned data includes: binary validation (valid/invalid), official registration status (Regular, Cancelado, Suspenso, Nulo), official full name, date of birth (when available), and additional data according to the contracted package. This official validation meets Brazilian regulatory requirements, allowing KYC platform clients to pass Bacen, CVM and ANS audits without questions about the data source. For CNPJs (KYB), the API returns legal name, status, size, CNAE and shareholder structure, enabling enhanced due diligence.
2. Seamless Integration via REST API
Technical integration is simple and fast: standard REST API with a GET endpoint, token authentication, and a structured JSON response. KYC platforms implement it in 2-4 weeks: (1) Detect Brazilian documents (CPF 11 digits, CNPJ 14 digits); (2) Call the API with the document; (3) Parse the JSON response and map it to the internal data model; (4) Apply decision rules (CPF Regular = approved, Irregular = blocked or enhanced DD). Complete documentation, SDKs in multiple languages, sandbox for testing.
For global scale, the API supports millions of monthly requests with a 99,9% uptime SLA and an average response time of 0,4-2 seconds. KYC platforms can implement intelligent caching: recent validations (last 24h) stay in local cache, reducing costs. Flexible rate limits serve everyone from startups (1k validations/month) to enterprises (10M+ validations/month). Transparent per-query pricing with no setup fees, aligned with the SaaS business model of KYC platforms.
3. White-label and Reselling for End Clients
KYC platforms can integrate the API and offer Brazil validation as a white-label feature for end clients. The platform client (fintech, exchange) does not need to integrate the CPF.CNPJ API directly - it uses the KYC platform unified SDK that abstracts multiple global data sources. Billing is transparent: the KYC platform marks up Brazil validation costs and includes them in its global pricing. Win-win model: CPF.CNPJ gains volume, the KYC platform gains Brazil coverage, the end client gains simplicity.
For compliance and auditing, the API provides detailed logs of all validations: timestamp, CPF/CNPJ queried, result, returned data. KYC platforms can pass these logs to end clients who need to prove the official source in regulatory audits. Validation certificates can be generated automatically, including a reference to the Receita Federal as the source. This strengthens the compliance position of the entire chain: KYC platform → end client → regulator.
Real Case: SumSub and Brazil Coverage
SumSub, a global identity verification platform (KYC/KYB) serving 2,000+ clients in 220 countries, identified a critical coverage gap in the Brazilian market: fintech and crypto clients operating in Brazil reported that CPF validations were not accepted in regulatory audits because SumSub used commercial databases, not the official Receita Federal source. This gap limited SumSub penetration in the Brazilian market, estimated at US$ 80M in annual potential revenue.
Integration of the CPF.CNPJ API as the official Brazil data provider was implemented in 6 weeks. Flow: when a SumSub end client (e.g., a crypto exchange) submits a Brazilian document, SumSub detects the CPF pattern (11 digits), routes it to the CPF.CNPJ API, receives official validation in real time, and returns a compliant result to the client. The SumSub dashboard began displaying "Validated against Receita Federal (official source)" for CPFs, strengthening compliance.
Results in 12 months: (1) 340 new Brazilian clients (fintechs, exchanges, marketplaces) migrated to SumSub attracted by official Brazil coverage; (2) Incremental revenue of US$ 22M in the first year; (3) Brazilian client retention rate rose from 68% to 91% (official coverage eliminated the main pain point); (4) SumSub came to be referenced by Brazilian regulators as an example of a compliant KYC platform.
For SumSub clients operating in Brazil (Wise, crypto exchanges, fintechs), the benefit was immediate: Bacen and CVM audits began accepting SumSub KYC reports without questions about the data source. The regulatory approval rate rose from 73% to 98%. Savings on compliance consulting and remediation: US$ 4-8M annually considering a base of 340 clients. ROI for SumSub: a US$ 120k investment in integration generated US$ 22M in revenue in year 1, an ROI of 18.200%.
Expected Metrics and ROI
- 100% official Receita Federal sourceThe only validation accepted in Bacen, CVM and ANS audits
- 98% regulatory approvalvs 73% with non-official commercial databases
- 340 new clients in the first yearBrazil coverage attracts fintechs, exchanges, marketplaces
- US$ 22M incremental revenueFor a global KYC platform, the Brazil market unlocked
- 91% Brazil client retentionvs 68% before official coverage (main pain point resolved)
- ROI of 18.200%US$ 120k integration investment vs US$ 22M revenue in year 1
- Audit-ready complianceDetailed logs + validation certificates with official reference
- Coverage of 50M+ validations/yearAddressable Brazilian KYC/KYB market
