Brazil's digital identity market is dominated by players who lock customers into contracts, hide pricing, and require a sales call to unlock an API key.
We created Campeão Sec to change that.
Our model is simple: create an account, buy credits, and you’re already integrated. No friction, no surprises on the invoice.
Data never resold
Your queries and your users’ data never feed any third-party product.
Real self-service
API key generated instantly. No "talk to sales" form.
Brazil-based infrastructure
Servers in Brazil. AES-256-GCM at rest. HMAC-SHA256 in transit.
Built to pass due diligence.
LGPD
We operate as a data processor. A processing agreement is available for clients who require a DPA.
Encryption
AES-256-GCM at rest · TLS 1.3 in transit · HMAC-SHA256 on webhook signatures.
Data retention
Biometric images stored for 5 years (Brazilian regulatory requirement). Query logs for 12 months.
Consent
The KYC widget shows a non-dismissible biometric consent screen before any capture.
Have a question or need support?
Have a technical question, need a DPA, or want to know if Campeão Sec fits your stack?
Technical documentation