How to Search Brazilian Companies by CNPJ

Brazil runs one of the most open company-identity systems in the world. Every business has a single national ID — the CNPJ — it is free to look up, the whole database is published as open data, and for most companies the partners are right there in the record. For a KYB or sales team, that is a gift.

Then the picture turns. The documents behind the ID sit in 27 separate state boards. Financial statements are public for a few hundred thousand corporations and dark for everyone else. The ultimate owner is filed with the tax authority, not the public. And the CNPJ itself is mid-change: from July 2026 it starts carrying letters.

This guide covers what the CNPJ gives you, where the rest of the data lives, what is free, and where Brazil goes quiet.

The CNPJ: the master key

Everything in Brazil hangs off one number: the CNPJ (Cadastro Nacional da Pessoa Jurídica), the national registry of legal entities run by the Receita Federal, Brazil’s federal tax authority. It is a 14-digit identifier carried by every company, branch, and even most non-profits, and it is the key that links the tax authority, the state boards, the courts and the banks.

Two things make it unusually powerful for due diligence. First, anyone can look up a CNPJ free of charge and pull the company card — legal name, trade name, status, address, activities (CNAE codes), capital, and the QSA (Quadro de Sócios e Administradores), the partners and administrators. Second, the Receita publishes the entire CNPJ base as open data, refreshed monthly. That is tens of millions of records, downloadable in bulk, for nothing.

The CNPJ is a tax ID as much as a company number — for how it compares with identifiers elsewhere, see our guide to global tax-ID formats.

The change happening now

If you build anything that stores or validates a CNPJ, this is the headline: from 1 July 2026, the Receita Federal starts issuing alphanumeric CNPJs — numbers that can contain letters. The reason is plain arithmetic. The purely numeric format is running out of combinations against roughly 60 million establishments already registered and millions more opening every year.

Two points matter for a data team. The change applies to new registrations only — every existing CNPJ stays exactly as it is, valid and unchanged. And the rollout is gradual, so even after July a fresh registration may still come out fully numeric. The practical takeaway: any system that assumes a CNPJ is digits-only — validation rules, database columns, search and de-duplication — needs to accept letters before the two formats start circulating side by side.

How many companies exist

Brazil is a high-volume, fast-moving market. By the second four-month period of 2025 there were 24.2 million active companies, and the country opens businesses at remarkable speed — the average time to register is around 21 hours. More than half of all active companies are MEIs, the individual micro-entrepreneur regime.

Two layers, one company

Here is the structural quirk. Forming a Brazilian company is a two-layer act. The corporate documents — the articles (contrato social or estatuto), amendments and minutes — are filed and held at a state Junta Comercial, the commercial board. There are 27 of them, one for each state and the Federal District. The CNPJ then comes from the federal Receita Federal. The two are stitched together by REDESIM, the national integration network, under federal coordination by DREI.

For a single check, the CNPJ tells you most of what you need. For the source documents — the signed articles, the latest amendment, an official certificate — you have to know which state board holds them, and most certificates carry a fee.

The company types you will meet

Two laws govern the landscape: the Civil Code (Law 10.406/2002) for most entities and the Corporations Law (Law 6.404/1976) for the S.A. A recent simplification swept away one form and added another.

One trap for the unwary: the EIRELI you may still see in older filings no longer exists as a live form — those entities are now SLUs.

The financials gap

This is where Brazil is the mirror image of much of Europe. There is no central public registry of company accounts. Financial statements are public only where the law forces publication — and for most companies, it does not.

Public and listed companies file with the CVM (Comissão de Valores Mobiliários), Brazil’s securities regulator — the equivalent of the SEC. Their standardized financial statements, reference forms and material facts are free to consult on the CVM’s systems. That data is rich and reliable.

But a publicly traded company is a needle in a haystack here. Of 24 million active companies, only about 205,000 are S.A.s at all, and only a fraction of those are CVM-registered. The private Ltda — which is the overwhelming majority of real businesses — is generally not required to publish its accounts. Unless a company is listed, or a genuinely large corporation caught by specific rules, its financials are simply not in the public record. For credit and counterparty risk, that is the single biggest blind spot in Brazilian data.

Who you can — and can’t — see

Ownership in Brazil is a study in contrasts. At the direct level, it is unusually open: for an Ltda, the QSA in the CNPJ names the partners (sócios) and administrators, with their tax IDs partly masked. You can see who holds the company straight from a free lookup — more than many European registers reveal.

Two layers up, it closes. For an S.A., shares are not recorded in the CNPJ the way quotas are, so the shareholders of a corporation are generally not visible in the public record. And the ultimate beneficial owner — the natural person at the top of the chain — must be declared to the Receita Federal, but that declaration is held for tax and anti-money-laundering purposes and is not public.

So Brazil shows you the first ring of ownership for most companies, and hides the last. For how that compares across jurisdictions, see our guide to beneficial-ownership registers worldwide.

Compliance and integrity signals

Here is where Brazil pays you back for the financial opacity. The integrity layer — whether a company is in good standing, in debt to the state, sanctioned, or worse — is unusually rich and almost entirely free. For a KYB, AML or credit team, this is some of the most useful official data anywhere.

Good standing. Fiscal regularity is proven by free, online certificates. The CND — one unified certificate from the Receita Federal and the PGFN — covers federal taxes, social security and the Union’s active debt. The CNDT covers labour-court debts, issued by the labour judiciary (TST). The FGTS CRF from Caixa confirms the company is current on its workers’ severance-fund deposits. State and municipal certificates complete the picture.

Red flags. The PGFN publishes a public list of debtors in the Union’s active debt. The CGU runs two open registers on the Transparency Portal: CEIS, companies barred or suspended from contracting with the public sector, and CNEP, companies punished under the Anti-Corruption Law, including leniency agreements. And the Labour Ministry maintains the Lista Suja — the register of employers caught using labour analogous to slavery, refreshed every six months.

Insolvency is the exception. Unlike many countries, Brazil has no single national register of insolvency. A judicial reorganization (recuperação judicial) or bankruptcy (falência) runs through the state courts under Law 11.101/2005. The CNPJ status flags some cases, the labour court keeps a recoveries-and-bankruptcies bank, and individual state courts run their own systems — but to be sure, you check the courts case by case, across as many as 91 tribunals.

What is free vs paid

The free surface in Brazil is broad — broader than most countries.

• Free. CNPJ lookups for identity, status, activities and the QSA; the full CNPJ open data in bulk; listed-company financials at the CVM; official market statistics at Mapa de Empresas; and the whole integrity layer — good-standing certificates (CND, CNDT, FGTS) and the public red-flag lists (PGFN debtors, CEIS, CNEP, Lista Suja).
• Paid. Certified extracts and the underlying corporate documents at the state Juntas Comerciais, priced per document and per state.
• Not public. The ultimate beneficial owner, and the financials of private companies.

One caution that applies everywhere: the CNPJ is largely self-declared at the point of registration, though the Receita cross-checks it against other federal databases. For a fuller toolkit, see how to verify any company for free.

The corporate linkage gap

Brazil is a magnet for foreign capital and a base for large domestic groups, so a great many Brazilian companies are one node in a structure that runs across borders. The CNPJ and the QSA show you the Brazilian partners. Neither maps the group above and around the entity.

What’s changing

Three shifts are worth tracking.

• The CNPJ goes alphanumeric. From 1 July 2026, new registrations can carry letters. Existing numbers are untouched, but every system that reads a CNPJ has to accept the new format.
• The forms have settled. The EIRELI was abolished in 2021 and converted to SLU, so historical records may show a legal form that no longer exists as a live category.
• Registration keeps getting faster. Through REDESIM, the average time to open a company is now measured in hours, which is part of why the numeric CNPJ pool is running dry.

How to access Brazilian data at scale

One company at a time, Brazil’s free tools are genuinely good. At scale — onboarding, monitoring, and due diligence across many entities — the friction is the spread: identity and open data at the Receita, documents across 27 state boards, listed financials at the CVM, private financials nowhere, and ownership that stops at the first ring. For how access differs country by country, see our business-registry API map and the primer on what government-registry data is and why provenance matters.

What the records won’t tell you

Brazil’s identity layer is world-class. The gaps sit around it.

Each gap is a place where a multi-source, registry-direct layer earns its keep — joining the CNPJ to CVM financials, adding ownership where lawful, and placing a Brazilian entity inside its global group.

Frequently asked questions