Due diligence in Brazilian M&A is not optional. The country's risk categories — labor, tax, corporate, IP, data protection, contractual, regulatory — each carry the kind of exposure that surfaces months or years after closing if not properly mapped at acquisition. Foreign buyers who treat Brazilian DD as a checklist exercise pay later. Foreign buyers who treat it as substantive risk allocation get clean closings.
This guide walks through the seven critical DD areas and how each feeds the SPA's protection clauses.
Read first: Doing Business in Brazil — A Legal Guide for Foreign Companies — the pillar guide.
The Seven Critical Areas
| Area | Why it matters | Where it surfaces in the SPA |
|---|---|---|
| Labor and social security | Long statutes of limitation; veil-piercing in succession | Specific indemnity, escrow, reps and warranties |
| Tax (federal, state, municipal) | Layered exposure across IRPJ, ICMS, ISS | Specific indemnity, escrow |
| Corporate | Filing gaps cascade into RDE-IED and exit | Reps and warranties, conditions precedent |
| Intellectual property | Title gaps invalidate the asset | Reps and warranties, specific indemnity |
| LGPD and privacy | Regulatory and reputational exposure | Reps, indemnity, post-closing remediation |
| Critical contracts | Change of control clauses, dependency | Conditions precedent, consents required |
| Sector regulation | Some licenses non-transferable | Conditions precedent, structural change |
Each area produces specific findings. Each finding produces a specific SPA clause. The SPA is therefore the byproduct of a serious DD.
1. Labor and Social Security DD
Brazilian labor law has wide statutes of limitation and broad veil-piercing in succession scenarios. Foreign buyers should understand: what they buy is the company and the labor history attached to it, including claims that have not yet been filed.
Labor DD maps:
- Current and past employment relationships — payroll, individual contracts, collective bargaining
- Outsourcing — contractors classified correctly vs. effective employees
- PJ vs CLT — independent contractor structures vs. formal employment
- Commissions and variable pay — compliance with proper accrual and payment
- Overtime, off-hours work, intervals, vacations — recurring sources of claims
- Leaves and accommodations — disability, maternity, pregnancy, others
- Active lawsuits and provisions — and patterns suggesting future claims
- Severance practices — alignment with applicable rules
Findings translate to specific SPA mechanics: indemnity for identified contingencies (often with no cap or extended cap), escrow proportional to estimated exposure, R&W on labor regularity covering the look-back period.
2. Tax DD: Three Layers
Brazilian tax DD runs across three governmental layers:
Federal:
- Corporate income tax (IRPJ) and social contribution on net profit (CSLL)
- PIS and COFINS — federal contributions on revenue
- Withholdings (IRRF, INSS withholding, etc.)
- Tax installments (parcelamentos) — known liabilities being paid over time
- Administrative and judicial disputes
State:
- ICMS — state value-added-style tax with state-by-state rules
- Tax substitution (substituição tributária) — particular complexity in many sectors
- Conditioned tax benefits — risks if conditions are not met
Municipal:
- ISS — municipal services tax
- Fiscal competition between municipalities
Tax DD is typically the area producing the largest price adjustments. Findings translate to specific indemnities, escrow, and sometimes restructuring of the deal.
3. Corporate DD
Corporate DD verifies that the target's structure stands up:
- Articles of association (LTDA) or bylaws (S.A.) current and consistent
- All amendments filed at the Junta Comercial
- Minutes of board, committee, and shareholder meetings maintained
- Cap table accurate, with all classes, encumbrances, options, and vesting recorded
- RDE-IED at the Central Bank reflects all foreign capital movements and identifies ultimate beneficial owners
- Compliance with sector ownership restrictions (telecom, media, etc.)
Corporate filing gaps cascade. A capital increase not properly filed at the Junta Comercial may create RDE-IED inconsistency, which blocks remittances and creates exit complications.
4. Intellectual Property DD
IP DD verifies what the target actually owns:
- Trademark ownership at INPI in the company's name — not the founder personally, not a former partner, not a former contractor
- Trademark coverage — relevant Nice classes, geographic scope, status
- Patents and industrial design — ownership, status, prior art
- Software — express assignment from developers (founders, employees, contractors), optional INPI registration
- Licensing and technology transfer agreements — recorded at INPI where applicable
- Background IP — pre-existing rights of founders or employees, properly licensed or assigned to the company
In tech and creator targets, IP is the asset. IP gaps are deal-breakers — or, when fixable, deep negotiation points.
5. LGPD and Privacy DD
LGPD DD weight depends on the target. B2C platforms, fintech, healthtech, and any data-intensive business carry heavier scrutiny. The DD assesses:
- Legal bases for processing personal data
- Data mapping — what data is collected, where it lives, who accesses it
- Privacy policy — current, adequate, accurate to actual practice
- Processor and joint controller contracts — properly structured
- Data subject rights — operational mechanisms in place
- Information security — technical and organizational measures
- Incident response — plan, history, notifications
- DPO appointment — when required
ANPD enforcement has matured. Gaps create exposure that the foreign buyer inherits.
6. Critical Contracts DD
Contracts shape what survives the deal:
- Top customers — revenue concentration, exclusivity, term, change of control clauses
- Critical suppliers — supply continuity, dependence, exclusivity
- Licensing and technology — INPI recording, royalty caps, term
- Financial — covenants, change of control, acceleration
- Distribution and franchise — specific regimes, termination indemnities under Brazilian law
- Related-party — transfer pricing, tax compliance
- Material commercial agreements — those that meaningfully shape the business
Change of control clauses are especially important. A foreign buyer can find that 30% of revenue depends on contracts that will terminate or accelerate at closing — unless renegotiated as a condition precedent.
7. Sector Regulatory DD
Regulated sectors carry license-specific DD:
- Telecom — Anatel
- Financial and capital markets — Central Bank, CVM
- Healthcare — ANS, ANVISA
- Energy — ANEEL, ANP
- Aviation — ANAC
Some licenses are non-transferable. M&A may need to be structured as asset deal vs share deal, or include license re-application as a condition.
How DD Feeds the SPA
DD is not a report. It is the input to the SPA's protection structure:
- Reps and warranties — customized to findings, with materiality and knowledge qualifiers
- Specific indemnities — for known, quantifiable risks (often without cap)
- General indemnity — for unknown risks, with cap, basket, and survival period
- Escrow or holdback — funds retained to cover contingencies
- Earn-out — price tied to post-closing performance
- Conditions precedent — items that must be cured before closing
- Post-closing covenants — remediation obligations of the seller
- R&W insurance — increasingly common to cover residual risk
An SPA without clear DD inputs becomes a generic contract that protects neither side properly.
Common Mistakes
- Rushing DD to close fast. Hidden contingencies surface later at higher cost.
- Treating DD as a financial exercise. Legal DD shapes the SPA — financial DD shapes the price.
- Skipping IP DD in tech targets. The asset's title can be defective.
- Generic SPA without DD-specific protections. Real risks not addressed.
- Ignoring change of control clauses. Top contracts terminate at closing.
- No escrow for material contingencies. Recovery becomes a lawsuit, not a deduction.
Talk to Hosaki Advogados
Hosaki Advogados conducts due diligence in Brazilian M&A for foreign buyers — labor, tax, corporate, IP, LGPD, contractual, and regulatory — and integrates DD findings into customized SPA protections. We coordinate with financial and operational DD streams, work in English and Portuguese, and translate Brazilian risk categories into terms that international decision-makers can act on.
If you are evaluating a Brazilian target — or already in DD and looking for a second view — schedule a conversation with our team.
Reach us at hosakiadvocacia.com.br // contato@hosakiadvocacia.com.br // schedule a 30-minute consultation.
FAQ
For three reasons. First, the statute of limitations for labor claims has a wide window — years of exposure can resurface after the deal closes. Second, labor contingencies often don't appear on the balance sheet — unprovisioned liabilities surface as claims after closing. Third, piercing the corporate veil in labor matters can reach the buyer through succession. Labor DD maps: current and past employment relationships, outsourcing, contractor (PJ) vs employee (CLT) structure, commissions and variable pay, overtime, leaves, active and potential lawsuits. Each finding becomes either price reduction, specific indemnity, or escrow.
Three layers in parallel. Federal: corporate income tax (IRPJ, CSLL), social contributions (PIS, COFINS), withholdings, payroll contributions, tax installments, audits, administrative and judicial disputes. State: ICMS, with state-by-state specifics, tax substitution mechanisms, and conditioned tax benefits. Municipal: ISS, with fiscal competition among municipalities. Each layer can carry years of contingencies. Tax DD is typically the area that produces the most price adjustments in Brazilian M&A. The scope and depth of tax DD depend on deal size and target profile.
Corporate DD verifies three blocks. Documentation: current articles or bylaws, minutes of meetings and board sessions, amendments filed at the commercial registry (Junta Comercial). Cap table: issued quotas or shares, classes, encumbrances, preferred rights, options, vesting. International chain: RDE-IED at the Central Bank reflects the capital movements, identifies ultimate beneficial owners, and is up to date. Gaps in any block create problems at closing — sale of equity not accepted by the bank for remittance, or corporate invalidity risk discovered later.
Five critical points. Trademarks: ownership at INPI (not in the founder's personal name, not with a former partner, not with a former contractor), classes covered, status (registered, pending, in opposition). Patents and industrial design: ownership and status. Software: express assignment by whoever developed (founder, employee, contractor), INPI registration where applicable. Licensing and technology transfer agreements: INPI recording. Background IP: founder's pre-existing IP licensed to the company, or actually assigned. IP gaps are deal-breakers in targets where IP is the main asset.
LGPD DD is particularly relevant in B2C targets, digital platforms, fintech, healthtech, and any business with material personal data volume. It assesses: legal bases for processing, data mapping, current and adequate privacy policy, contracts with processors and joint controllers, mechanisms for handling data subject rights, information security program, incident response plan, history of notified or unnotified incidents, presence of a DPO where applicable. Gaps create regulatory exposure with ANPD and reputational risk, plus potential civil liability.
Those with highest financial or operational impact. Contracts with top clients (revenue concentration, exclusivity, term, change of control). Contracts with critical suppliers (supply continuity, dependence, exclusivity). Licensing or technology contracts (INPI recording, royalty caps, term). Financial contracts (covenants, change of control clauses, acceleration). Distribution and franchise contracts (specific regimes, termination indemnities). Related-party contracts (transfer pricing, tax compliance). Change of control clauses are especially important — they can trigger acceleration or termination in the deal.
Well-conducted DD produces three outputs for the Share Purchase Agreement (SPA). Customized reps and warranties: each DD finding becomes a specific seller representation on the point, with materiality and knowledge qualifiers. Specific indemnities: for known and quantifiable risks (e.g., identified labor contingency), the SPA provides full or partial indemnity, often without cap. Escrow or holdback: part of the price is retained in escrow to cover contingencies during the warranty period. Earn-out: part of the price tied to post-closing performance, aligning seller and buyer through the transition. An SPA without clear DD inputs becomes a generic contract that protects no one.
No single answer — depends on target size, sector complexity, and the quality of available records. Targets with clean governance and an organized data room allow focused DD in weeks. Disorganized targets or those with long history may require more time. Tax and labor DD are usually the most time-consuming. A foreign buyer should plan four to twelve weeks for robust legal DD, in parallel with financial, commercial, and operational DD. Rushed DD becomes a liability discovered the following year.
