Your data protected from day one.
Acta complies with the LGPD and equivalent laws across the region. Each client’s data is kept separate, and everything that happens is recorded.
How we protect your data
- Data kept separate by client
- Each organization sees only its own data. A problem at another client never reaches you.
- Access only for the right people
- Each staff member signs in with their own role, by password or biometrics, and sees only what they need.
- Data stored in Brazil
- It lives on Google Cloud, on servers in Brazil, protected when sent and when stored. Backups run every day.
- A history of who did what
- Every action — by a person, the system or the artificial intelligence — is recorded with date, reason and responsible party. Ready for audits.
Ready for four countries.
| Brazil | LGPD · Lei 13.709/2018 | We comply with the General Data Protection Law. Data stays in Brazil, and the data processing agreement and third-party services are documented. |
|---|---|---|
| Argentina | Ley 25.326 | Aligned with the Ley de Protección de los Datos Personales. Ready for provincial direct contracting. |
| Chile | Ley 19.628 | Aligned with the Ley sobre Protección de la Vida Privada. Compatible with direct dealing and framework agreements (ChileCompra). |
| Uruguay | Ley 18.331 | Aligned with the Ley de Protección de Datos Personales y Acción de Habeas Data. Ready for direct purchasing (TOCAF). |
Evidence, not promises.
- Terms with a history
- Terms of use and the privacy policy are versioned, and each user’s acceptance is recorded.
- Data agreement available
- The data processing agreement (DPA) is available for your legal team to review.
- Third-party services
- We keep an up-to-date list (Google Cloud, Firebase, Gemini, OpenAI), with the purpose and location of each.
- Incident plan
- A documented continuity plan is in place, and clients are notified within 72 hours of an incident.