Transparency

How our data works

OutboundPro is a Brazilian B2B intelligence platform with direct contact of partners/decision-makers from 27M+ Brazilian companies — used to expand into the Brazilian market or prospect Brazilian buyers from abroad. Origin, legal basis, validation and update frequency. No black box: your due diligence fits on this page.

TL;DR
  • Two data layers: Brazilian IRS (public) + broker partners (LGPD legitimate interest).
  • RFB: 27M+ CNPJs, weekly update, fully public data under Brazil's Freedom of Information Act.
  • Broker partners: ~12M personal partner contacts under LGPD Art. 7 IX (legitimate commercial B2B interest).
  • Validation: triangulation between QSA + multiple brokers + public marketing data. Each contact has a confidence score.
  • Right to object: anyone can be removed within 15 business days via dpo@outboundpro.com.br.

Why this page exists

"But what about LGPD?" is the first question in every enterprise demo. It makes sense: you're about to hire a platform that delivers personal contact of partners of companies that have never known you. Is that legal? Auditable? What changes in case of an incident?

This page exists to answer those questions without needing a legal call. If you still have doubts after reading, the direct channel with our DPO is dpo@outboundpro.com.br.

The two layers

All information in OutboundPro comes from one of these two sources. No hidden third layer.

01

Brazilian IRS (Receita Federal — RFB)

Coverage
27M+ active CNPJs
Fields
CNPJ, legal name, trade name, primary and secondary industry code (CNAE), size, registration status, address, share capital, QSA (Partner Registry)
Legal basis
Public data by law (Law 12.527/2011, LAI — Brazilian Freedom of Information Act). Free access.
Update
Weekly, with automatic delta
02

Partner data brokers

Coverage
~12M validated partner contacts
Fields
Partner's direct phone, personal/professional email, position, links between people and companies
Legal basis
LGPD Art. 7, IX (legitimate commercial B2B interest). Contracts with compliance clauses.
Update
Monthly, with churn detection

Validation: triangulation

How we ensure the phone really belongs to the partner, and not to their office.

01

Name match

Contact name matches exactly the name registered in the Brazilian IRS QSA. Without that, discard.

02

Position confirmed

Position consistent with role declared in public sources (LinkedIn, talks, events). Score boost if confirmed.

03

Cross-confirmation

2+ independent brokers confirm the same phone for the same name. Maximum score if 3 sources match.

The confidence score appears on the platform. You see, for each contact, whether it has 1, 2 or 3 validation sources. Sales teams use that signal to prioritize who to call first.

Right to object

Under legitimate interest (LGPD Art. 7 IX), the data subject has the right to object guaranteed by Art. 18, §2. Anyone can request removal of their data from our database.

  • How to request: send an email to dpo@outboundpro.com.br or use the form at /en/privacy.
  • Deadline: we process within 15 business days (LGPD allows up to 15 calendar days).
  • Guarantee: removed data goes to our "stop-list". Even if reprocessed from new sources in the future, it does not return.

Frequently asked questions

Where does OutboundPro's data come from?
From two layers. First: public data from the Brazilian IRS (Receita Federal — RFB): CNPJ, legal name, industry code (CNAE), size, address, registration status, and Quadro de Sócios e Administradores (QSA — official partner registry). This data is public by law and covers all 27M+ active CNPJs in Brazil. Second: personal contact data of partners (phone, email) comes from partner data brokers, all LGPD-compliant, with auditable origins and signed contracts.
Who are these "partner brokers"?
They are Brazilian companies specialized in personal data processing (regulated data brokers) that operate within LGPD with consolidated legal bases. By contract, we don't publicly reveal each partner's name: that information is shared under NDA for enterprise prospects requesting due diligence. Each partner has an auditable origin for the data (mostly via public opt-in on B2B registrations + official databases).
What LGPD legal basis do you use to process partner data?
Legitimate commercial interest (Art. 7, IX of LGPD), a legal basis explicitly provided for B2B prospecting in Brazil. This basis is applicable when: (1) there is a legitimate and specific purpose (professional B2B contact), (2) there is proportionality between processing and purpose, (3) there is transparency (public Privacy Policy), (4) the data subject can exercise the right to object. We apply all 4 criteria.
Can the partner ask to be removed?
Yes. Right to object guaranteed by LGPD. Anyone can send a deletion request to dpo@outboundpro.com.br or via the form in our Privacy Policy. We process removal within 15 business days and propagate it to our exclusion system (data does not return even if reprocessed from new sources).
How often is the data updated?
RFB layer: weekly update (Receita Federal publishes deltas every 7 days). Broker layer: monthly refresh of partner phones/emails, with churn detection (deactivated numbers, bouncing emails). Registration status (active/inactive) is re-verified at each query execution in production.
How do you validate that the contact is REALLY the partner's?
Triangulation. Each personal contact passes through: (1) name match with RFB QSA (same name officially registered), (2) match with public B2B marketing databases (positions disclosed on LinkedIn, events, talks), (3) orthogonal check by multiple partners (if 2+ independent brokers confirm the same phone for the same name, score rises). The score is exposed in the platform. You know the confidence of each contact.
Do you store LGPD-sensitive data?
No. We do not process sensitive data in the LGPD sense (racial origin, religion, political opinion, health, sex life, biometric/genetic data). We only work with public or semi-public professional data under legitimate interest: name, position, professional phone, professional/personal email, association with CNPJ. Sensitive data requires explicit consent and is not our model.
Is there a DPO available?
Yes. dpo@outboundpro.com.br is the direct channel with our Data Protection Officer. For incidents, data subject requests, due diligence or compliance clarifications, that's the official path. Response within 72h.

Ready to see the data in action?

30-min demo with real data from your market. No credit card.

Schedule Demo Test with 5 CNPJs (free)

Have a specific LGPD question? dpo@outboundpro.com.br