# CPF.CNPJ

> Brazilian real-time CPF and CNPJ validation API with official data from the Federal Revenue Service (Receita Federal). 100% document coverage, same-day D+0 data freshness, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 37301 certified, LGPD and GDPR compliant. Serving major national and multinational companies since 2015.

CPF.CNPJ is Brazil's leading API for CPF and CNPJ validation and lookup. Unlike solutions that rely on leaked or outdated databases, CPF.CNPJ queries official Brazilian Federal Revenue sources directly in real time (D+0), ensuring 100% up-to-date data in full legal compliance. Operating since 2015, we provide exclusive cadastral data packages to major national and multinational enterprises, backed by ISO/IEC certifications that are annually audited by independent accredited bodies.

## Company

- Legal Name: ALAS TECNOLOGIA LTDA
- Trade Name: CPF.CNPJ
- CNPJ: 27.272.134/0001-18
- Founded: 2015 (10+ years in the market)
- Headquarters: Montes Claros, MG, Brazil
- DPO: dpo@alas.technology
- Support: contato@cpfcnpj.com.br
- Help Center: https://suporte.cpfcnpj.com.br/
- LinkedIn: https://www.linkedin.com/showcase/cpf.cnpj/
- GitHub: https://github.com/cpfcnpj

## Competitive Differentiators

### 1. Real-Time Data (D+0) with 100% Coverage
Direct query to official Brazilian Federal Revenue sources. Data always updated the same day (D+0). Guaranteed 100% coverage of all CPFs and CNPJs in Brazil. We never use caching or intermediate databases to speed up responses — we guarantee the most current information available.

### 2. Zero Use of Leaked Databases
Unlike competitors who use leaked databases (illegal with only 70–85% coverage), CPF.CNPJ accesses exclusively official approved sources. This ensures full LGPD and GDPR compliance, eliminating legal and reputational risks for our clients. Leaked data is outdated, incomplete, and illegal.

### 3. Serving Major Enterprises Since 2015
Over a decade of market experience with exclusive packages for major national and multinational companies. Clients include TOTVS, GOL Airlines, PicPay, Wise, KaBuM!, Bybit, Sicoob, Unimed, Intelbras, Bike Itau, Coinext, Buser, Melhor Envio, Meep, Pagsmile, Ripio, Constance, Conta Azul, MedSenior, Sumsub, V4 Company, and more.

### 4. Valid and Audited ISO/IEC Certifications
We hold three internationally recognized ISO/IEC certifications, all annually audited by independent accredited bodies, publicly verifiable on IAF CertSearch (https://www.iafcertsearch.org/certified-entity/UznIPYSpq3FcLlqXMxNf73Pf):

- **ISO/IEC 27001:2022** — Information Security Management (Certificate: Q7LUQTCU20251113BRAIS1Z1)
- **ISO/IEC 27701:2025** — Privacy Information Management (Certificate: Q7LUQTCU20251113BRAPI15R)
- **ISO/IEC 37301:2021** — Compliance Management System (Certificate: Q7LUQTCC20251113BRACM1X7)

Additionally, we hold LGPD, GDPR, and CyberSec 2025 compliance seals.

### 5. Performance and Reliability
- Average response time: 0.4 to 2 seconds
- Up to unlimited queries per second (Premium plan)
- API stable in production since 2015
- Service guarantee or refund
- 24-hour emergency support

## Key Numbers

- 65,000+ active clients
- 4,800,000+ queries processed per day
- 11,000+ companies served
- 10,000+ active integrations
- 4.5/5 rating with 11,000+ reviews

## Services Offered

### CPF Lookup
RESTful API returning individual cadastral data directly from the Federal Revenue:
- Full name of the holder
- Social name
- Date of birth
- Mother's full name
- Gender
- Full address
- Registration status (active, suspended, cancelled, pending regularization)
- Date of death (when applicable)
- Politically Exposed Person (PEP/PPE)
- Companies under the holder's name
- Nationality
- Emails and phone numbers
- WhatsApp
- Family and related persons
- Social programs
- Criminal records
- CNS data (National Health Card)
- PDF proof with authentication number

### CNPJ Lookup
RESTful API returning corporate cadastral data directly from the Federal Revenue:
- Legal name (razao social) and trade name (nome fantasia)
- Full address
- Date of activity commencement
- Phone numbers, fax numbers, and email
- Registration status at the Federal Revenue
- Simples Nacional and SIMEI information
- Suframa information
- State registrations
- Primary CNAE and secondary economic activities
- Legal nature
- Tax regime
- Company size
- Parent company or branch
- Name and CPF of the legal representative
- Complete board of partners and administrators
- Partners' CPFs
- Ownership percentage
- Partner qualification
- Legal representative
- Partners' age range
- Partners' country of origin
- Partners' emails, phone numbers, and WhatsApp

### Integrated Solutions
- **KYC (Know Your Customer):** Automated identity validation for client onboarding
- **KYB (Know Your Business):** Company and partner verification for due diligence
- **Data enrichment:** Completion of incomplete cadastral information
- **Compliance and fraud prevention:** Cross-validation against official data for inconsistency detection
- **Credit score:** Biweekly score monitoring available on Starter+ plans

## Packages and Pricing

### CPF Packages (16 options)

| Package | Price/Query | Included Data |
|---------|------------|---------------|
| CPF A | BRL 0.17 | Full name |
| CPF B | BRL 0.25 | Full name, date of birth |
| CPF C (Popular) | BRL 0.29 | Full name, birth date, mother's name, gender |
| CPF D | BRL 0.41 | Name, social name, birth date, status, death date, PDF + proof number |
| CPF D Simplified | BRL 0.37 | Name, birth date, registration status |
| CPF E | BRL 0.53 | Complete: name, social, birth, mother, gender, status, death, PDF |
| CPF F | BRL 1.35 | Name, birth date, gender, full address |
| CPF H | BRL 0.23 | Name, Politically Exposed Person (PEP/PPE) |
| CPF I | BRL 0.23 | Name, companies under holder's name |
| CPF J | BRL 0.18 | Name, nationality |
| CPF K | BRL 1.57 | Name, birth date, address, registration status |
| Lookalike | BRL 0.27 | Name, emails, phone numbers, WhatsApp |
| Family | BRL 1.13 | Name, family and related persons |
| Social Programs | BRL 0.17 | Name, social programs |
| Criminal Records | BRL 1.46 | Name, criminal records |
| CNS | BRL 0.25 | Name, National Health Card data |
| CPF CAC/SINIC | BRL 0.27 | Federal Police Criminal Background Certificate (SINIC protocol number, Base64 PDF, "clean record" flag) |

No package requires birth date or captcha. Average response time: 1–2 seconds.

### Unified Package (PF + PJ)

| Package | Price/Query | Included Data |
|---------|------------|---------------|
| NFe Unified (PF + PJ) | BRL 0.04 | Lightweight validation for e-invoice (NF-e) issuance — accepts CPF or CNPJ indistinctly, minimal response optimized for high throughput |

NFe Unified is the cheapest package in the catalog, dedicated to e-commerce integrations, ERPs and platforms that need to validate documents at high volume during checkout/fiscal issuance flows.

### CNPJ Packages (8 options)

| Package | Price/Query | Included Data |
|---------|------------|---------------|
| CNPJ A | BRL 0.15 | Legal name |
| CNPJ B | BRL 0.27 | Legal name, trade name, address |
| CNPJ C (Popular) | BRL 0.36 | Basic data: legal name, trade name, address, phones, email, status |
| CNPJ D | BRL 0.51 | Complete: basic data + Simples Nacional, CNAEs, legal nature, partners |
| CNPJ F | BRL 0.34 | Legal name, Simples Nacional, SIMEI, Suframa |
| CNPJ H | BRL 0.17 | Legal name, state registrations |
| Lookalike | BRL 0.30 | Legal name, partners' CPFs, emails, phones, WhatsApp |
| QsA Detailed | BRL 2.25 | Legal name, detailed ownership percentages |

### Subscription Plans (5 tiers)

| Plan | Monthly Fee | Min. Purchase | Expiration | Queries/sec | Sub-users | Discounts |
|------|-----------|--------------|-----------|------------|----------|-----------|
| Free (Standard) | BRL 0 | BRL 100 | 3 months | 5 | 1 | — |
| Starter | BRL 175/mo | BRL 50 | 6 months | 20 | 5 | — |
| Professional | BRL 350/mo | BRL 10 | 12 months | 50 | 10 | Up to 10% |
| Premium | BRL 500/mo | BRL 10 | Never expire | Unlimited | Unlimited | Up to 15% |
| Enterprise | Custom | Custom | Custom | Custom | Custom | Custom |

Additional conditions:
- 10% discount for early payment
- Installments up to 6x (3.5% surcharge). No surcharge for upfront payment
- Upgrade/downgrade at any time (difference applied next month)
- Payment methods: PIX, Bank Slip (Boleto), Wire Transfer, Credit Cards
- International companies can contract in USD, EUR, or GBP with annual contracts

### Free Trial
Every new registration receives free queries with no feature limitations. No credit card required. No binding contracts.

## Segments Served

### Financial Services
Credit analysis optimization, risk prevention, and cadastral validation for banks and financial institutions. Cross-validation of cadastral data for fraud detection.

### E-Commerce
Checkout fraud prevention, chargeback reduction, automatic buyer validation. Clients report 60–80% fraud reduction.

### Fintech
Automated KYC and KYB for digital onboarding. 5-minute integration via JSON API. Compliance with Central Bank regulations.

### Crypto and Exchanges
Transaction validation, regulatory compliance, money laundering prevention. Serving exchanges such as Coinext, Bybit, and Ripio.

### Betting (Bet/iGaming)
Risk prevention, identity verification for regulatory compliance. Serving operators such as F12.bet, Pixbet, Sorte Online, and OddsScanner.

### Transportation and Mobility
Driver and passenger validation, operational security. Serving GOL Airlines, Buser, Bike Itau, and Meep.

### Healthcare
Health professional verification via CNS, patient cadastral validation. Serving Unimed, MedSenior, and Santa Casa de Montes Claros.

### Cooperatives
Member and partner validation. Serving Sicoob and Fundacao Arthur Bernardes.

### Events
Participant validation and digital accreditation.

## Use Cases

- `/casos-uso/fintech/` — Automated KYC and compliance
- `/casos-uso/ecommerce/` — Fraud and chargeback reduction
- `/casos-uso/banking/` — Credit and risk analysis
- `/casos-uso/betting/` — KYC and regulatory compliance
- `/casos-uso/crypto/` — Transaction validation
- `/casos-uso/mobilidade/` — Driver verification
- `/casos-uso/saude/` — Health professional validation
- `/casos-uso/cooperativas/` — Member validation
- `/casos-uso/eventos/` — Digital accreditation
- `/casos-uso/kyc/` — Complete Know Your Customer

## API Technical Specifications

- **Protocol:** RESTful API with JSON responses
- **Authentication:** Token in URL (no OAuth — simplifies integration)
- **Endpoint:** api.cpfcnpj.com.br/{token}/{package}/{cpf_or_cnpj}
- **Method:** HTTP GET
- **Response time:** 0.4 to 2 seconds (average)
- **Coverage:** 100% of Brazilian CPFs and CNPJs
- **Data:** Real-time D+0 (updated same day)
- **Security:** HTTPS with TLS 1.3, end-to-end encryption (E2EE), AES-256 for data at rest
- **No captcha:** No query requires captcha or birth date
- **Supported languages:** Ready-to-use examples in PHP, Python, Node.js, Java, Ruby, Go, and cURL
- **Recommended timeout:** 60 seconds
- **Storage:** No personal data stored. Technical logs without PIIs retained for 90 days
- **Availability:** API stable in production since 2015

## Security and Compliance

### ISO/IEC Certifications

**ISO/IEC 27001:2022 — Information Security Management**
Certificate: Q7LUQTCU20251113BRAIS1Z1
Implemented controls: multi-factor authentication, RBAC (role-based access control), AES-256 encryption, E2EE, certified data centers with 24/7 monitoring, dedicated SOC, incident response plans, and business continuity procedures.

**ISO/IEC 27701:2025 — Privacy Information Management**
Certificate: Q7LUQTCU20251113BRAPI15R
Full alignment with LGPD/GDPR, Privacy by Design and by Default, data subject rights procedures (access, rectification, erasure, portability), DPIAs for new processing activities, complete records of processing activities per LGPD Art. 37.

**ISO/IEC 37301:2021 — Compliance Management System**
Certificate: Q7LUQTCC20251113BRACM1X7
Organizational compliance culture, appointed DPO, register of all applicable legal obligations, continuous team training, regular audits, and confidential whistleblowing mechanisms.

Public verification: https://www.iafcertsearch.org/certified-entity/UznIPYSpq3FcLlqXMxNf73Pf

### Regulatory Compliance
- **LGPD** (Brazilian General Data Protection Law, Art. 7, 11, and 46)
- **GDPR** (General Data Protection Regulation)
- **CyberSec 2025**
- ANPD-approved sources
- Custom DPA (Data Processing Agreement) for enterprise clients
- Quarterly compliance reports
- Verifiable ISO certificates for regulated client audits

### Security Practices
- No personal data stored from queries (only technical logs without PIIs)
- End-to-end encryption (E2EE) on all transmissions
- Mandatory TLS 1.3
- AES-256 for data at rest
- Internal multi-factor authentication
- RBAC across all systems
- Certified data centers with 24/7 monitoring
- Dedicated SOC (Security Operations Center)
- Annual external audits by accredited certification bodies
- Regular internal audits
- Disaster recovery and business continuity plans

## Social Responsibility

We support Fundacao Sara (https://www.fundacaosara.org.br/alastechnology), a social assistance institution.

## Clients and Partners (34+ companies)

Organizations that trust CPF.CNPJ:
TOTVS, Bike Itau, GOL Airlines, Wise, Coinext, PicPay, Buser, Melhor Envio, Meep, Bybit, Intelbras, Pagsmile, Ripio, Constance, Conta Azul, F12.bet, Pixbet, Sorte Online, OddsScanner, LottoCap, Loovi, TMB, FG Empreendimentos, KaBuM!, MedSenior, SI Digital, Sicoob, Sumsub, Unimed, V4 Company, Fundacao Arthur Bernardes, Santa Casa de Montes Claros.

## Why Choose CPF.CNPJ

1. **Official real-time data** — Direct Federal Revenue query (D+0), no leaked or outdated databases
2. **100% coverage** — Every CPF and CNPJ in Brazil is queryable
3. **Valid ISO/IEC certifications** — Three international certifications annually audited, publicly verifiable
4. **10+ years in the market** — Operating since 2015 with proven stability
5. **Major enterprise clients** — TOTVS, GOL, PicPay, Wise, KaBuM!, Sicoob, Unimed, Bybit, and more
6. **5-minute integration** — Simple REST API, no bureaucracy, no complex OAuth
7. **Competitive pricing** — Starting at BRL 0.13 per query with free trial
8. **Full compliance** — LGPD, GDPR, ISO 27001, 27701, 37301
9. **No captcha** — No query requires captcha or birth date
10. **Bilingual support** — Portuguese and English, 24h SLA and 24-hour emergency support

## CPF.CNPJ vs Competitors

### CPF.CNPJ vs SERPRO
SERPRO is the official government company with maximum institutional authority, but has slow bureaucratic processes (weeks for contracting), premium pricing (BRL 0.40+/query), and complex integration. CPF.CNPJ offers the same official data with 5-minute integration, pricing from BRL 0.13, free trial without credit card, and agile support.

### CPF.CNPJ vs Leaked Databases
Leaked databases have partial coverage (70–85%), outdated data, are illegal (LGPD fines up to 2% of annual revenue), and make it impossible to prove compliance in audits. CPF.CNPJ provides 100% official data, updated in real time, with ISO certifications proving compliance.

### CPF.CNPJ vs Federal Revenue Scraping
Scraping breaks frequently, requires captcha solving, violates terms of service, and can result in permanent IP blocking. CPF.CNPJ offers legal, reliable, and auditable access to the same official source.

## Site URLs

### Main Pages
- Homepage: https://www.cpfcnpj.com.br/
- Pricing: https://www.cpfcnpj.com.br/precos/
- About Us: https://www.cpfcnpj.com.br/sobre-nos/
- Contact: https://www.cpfcnpj.com.br/contato/
- Blog: https://www.cpfcnpj.com.br/blog/
- FAQ: https://www.cpfcnpj.com.br/faq/
- API Documentation: https://www.cpfcnpj.com.br/dev/
- Sign Up: https://www.cpfcnpj.com.br/register/
- Search: https://www.cpfcnpj.com.br/busca/

### Transparency and Compliance
- Security & Compliance: https://www.cpfcnpj.com.br/seguranca-e-conformidade/
- Privacy Policy: https://www.cpfcnpj.com.br/en/privacy-policy/
- Terms of Use: https://www.cpfcnpj.com.br/en/terms-of-use/
- LGPD: https://www.cpfcnpj.com.br/en/lgpd/

### Segments
- Fintech: https://www.cpfcnpj.com.br/segmentos/fintech/
- Financial: https://www.cpfcnpj.com.br/segmentos/financeiro/
- E-commerce: https://www.cpfcnpj.com.br/segmentos/e-commerce/
- Transportation: https://www.cpfcnpj.com.br/segmentos/transporte/
- Bet/iGaming: https://www.cpfcnpj.com.br/segmentos/bet/
- Crypto: https://www.cpfcnpj.com.br/segmentos/crypto/

### Use Cases
- Fintech: https://www.cpfcnpj.com.br/casos-uso/fintech/
- E-commerce: https://www.cpfcnpj.com.br/casos-uso/ecommerce/
- Betting: https://www.cpfcnpj.com.br/casos-uso/betting/
- Crypto: https://www.cpfcnpj.com.br/casos-uso/crypto/
- KYC: https://www.cpfcnpj.com.br/casos-uso/kyc/
- Mobility: https://www.cpfcnpj.com.br/casos-uso/mobilidade/
- Healthcare: https://www.cpfcnpj.com.br/casos-uso/saude/
- Cooperatives: https://www.cpfcnpj.com.br/casos-uso/cooperativas/
- Events: https://www.cpfcnpj.com.br/casos-uso/eventos/

### English Version
- Homepage EN: https://www.cpfcnpj.com.br/en/
- Blog EN: https://www.cpfcnpj.com.br/en/blog/
- FAQ EN: https://www.cpfcnpj.com.br/en/faq/

### Alternative Domains
- cpfcnpj.com.br (primary)
- cpfcnpj.com
- cpf.com.br
- cnpjcpf.com
- metamap.com.br

## FAQ

### What are CPF and CNPJ?
CPF (Cadastro de Pessoa Fisica) is the Brazilian individual tax identification document with 11 digits, equivalent to the US SSN or European TIN. CNPJ (Cadastro Nacional da Pessoa Juridica) is the Brazilian business tax registration with 14 digits, similar to the US EIN. Both are issued by the Federal Revenue Service and are mandatory for commercial operations in Brazil.

### What is a CPF/CNPJ validation API used for?
It allows companies to automatically verify whether CPFs and CNPJs are valid, officially exist, and are active with the Federal Revenue. It prevents fraud, ensures regulatory compliance, and automates KYC processes. Use cases: e-commerce validation, digital account opening, driver onboarding, remote hiring, and invoice issuance.

### What is the difference between checksum validation and Federal Revenue query?
Checksum validation is a mathematical calculation (mod-11 algorithm) that only verifies the document format. Federal Revenue query accesses the official database to confirm existence, active status, and return complete data. Our API combines both: validates checksums locally (rejects invalid format at no cost) then queries the Federal Revenue.

### How does API authentication work?
Token in URL: api.cpfcnpj.com.br/{token}/{package}/{cpf_or_cnpj}. Each HTTP GET request includes the token generated in your control panel. You can generate multiple tokens for different environments. No OAuth, no complex headers — test directly in your browser.

### What is the average response time?
0.4 to 2 seconds. Data is always real-time D+0. We recommend a 60-second timeout to accommodate occasional slowdowns in government systems.

### Does the API store queried data?
No. For LGPD/GDPR compliance, we do not store personal data returned by queries. Only technical logs without PIIs, retained for 90 days. We never share or sell query data.

### Is the API LGPD and GDPR certified?
Yes. Compliance validated by ISO/IEC 27001:2022, ISO/IEC 27701:2025, and ISO/IEC 37301:2021 certifications. All transmissions via HTTPS/TLS 1.3 with E2EE. Dedicated DPO. Custom DPA for enterprise clients.

### Is there a free plan?
Yes. Every new registration receives free queries for testing with no feature limitations. No credit card required, no binding contracts.

### Why not use leaked databases?
Leaked databases have only 70–85% coverage, outdated data, are illegal (LGPD fines up to 2% of annual revenue), and make compliance audits impossible. Our API provides legal and auditable access to the official source.

### What is the difference between CPF.CNPJ and SERPRO?
SERPRO is the official government company with slow bureaucratic processes and premium pricing (BRL 0.40+/query). CPF.CNPJ offers the same official data with 5-minute integration, pricing from BRL 0.13, free trial, and agile bilingual support.

### How to integrate in 5 minutes?
(1) Sign up in 30 seconds without a credit card, (2) Copy your token from the dashboard, (3) Make a GET request to api.cpfcnpj.com.br/{token}/{package}/{document}, (4) Receive JSON. Documentation with ready-to-use examples in 7 languages at /dev/.

### How to prevent fraud with the API?
Cross-validate API-returned name with ID document, compare credit card name with CPF, use birth date as a second factor, implement velocity checks, monitor suspicious patterns. Clients report 60–80% fraud reduction.

### Do I need a Brazilian company to contract?
No. We accept individuals and businesses. International companies can contract in USD, EUR, or GBP. We accept international credit cards, PayPal, wire transfers, and cryptocurrency for large volumes.

### How to get in touch?
- Email: contato@cpfcnpj.com.br
- DPO: dpo@alas.technology
- Help Center: https://suporte.cpfcnpj.com.br/
- Languages: Portuguese and English