About — Governance, Compliance and BACEN Regulation

Regulation and Framework

Our regulatory status

SuitCoin operates in compliance with the applicable Central Bank of Brazil regulation, with an SPSAV operating authorization request currently under review.

Regulatory basis: Joint Resolution 13/2024 — BACEN / CVM
Type: SPSAV — Digital Asset Service Provider
Classification: Segment S5
CNPJ: 59.159.538/0001-96
Headquarters: Barueri / SP — Av. Sagitário, 138 – Sala 914 – Torre London, Alphaville · Barueri/SP · Brazil · 06473-073

The authorization request is under review by the Central Bank of Brazil. We operate in compliance with current regulations during the regulatory transition period.

Operational Model

How we operate

SuitCoin acts as intermediary for buying, selling and settling BTC, USDC and USDT for institutional clients.

Assets pass through SuitCoin's wallet and are transferred immediately to the client at the end of each operation. Immediate settlement, no retention.

Assets: BTC, USDC, USDT
Exclusive access for companies
Minimum ticket: equivalent to USD 1,000
Immediate settlement at each operation
Proprietary platform: portal.suitcoin.com.br

Corporate Governance

Formal structure

Two statutory directors with defined responsibilities
Separation between operational and control functions
Formal Compliance officer
Internal policies documented and periodically reviewed
Record and traceability of all operations

Compliance, KYC and Source of Funds

Who can operate

All clients undergo a formal qualification process before operating:

KYC / KYB — complete verification of the company and controllers
Risk profile assessment
Source of funds analysis
Continuous transactional monitoring
Documentary trail and internal audit

PEP clients, entities on sanctions lists (OFAC, UN, EU) or those domiciled in FATF non-cooperative countries are not approved.

Monitoring and Sanctions

Continuous preventive control

Verification against national and international restrictive lists
Geographic risk assessment
Negative media monitoring
Reporting to authorities as required by regulation

Operational and Accounting Segregation

Clear resource separation

Individualized accounting records per client
Periodic reconciliations
Separation between own and third-party resources
Immediate settlement — no retention of client assets

Risk Management

Identification and structured treatment

Formal Risk Management Policy
Identification of operational, regulatory and reputational risks
Classification by impact and probability
Continuous monitoring and periodic review

Business Continuity

Structured plan for critical events

RTO and RPO defined per critical area
Formal procedures for operational events
Periodic testing and annual review
Reporting to the Central Bank when applicable

Ombudsman

Independent channel

SuitCoin maintains an Ombudsman channel for complaints not resolved through regular channels, including grievances, reports and communication of irregularities.