Skip to content
ValidaAuditoria
VLD · COMPLIANCEValida, verified

The same yardstick, applied to us.

A firm that verifies others publishes what can be verified about it. Each line below is a claim — and next to it, the way to check it without asking permission.

See what is proven and what is assumed
  • 01
    The controller and the CNPJ are named.

    In the Privacy Policy, with the list of operators and the region where data is stored. → /privacidade

    Verified
  • 02
    The data stays in Brazil.

    The policy names the operator and the region (São Paulo). The form and the signature tool use no other. → /privacidade

    Verified
  • 03
    No font, script or style comes from a third party the policy does not name.

    Fonts are served by this domain; the site's content security policy (CSP) lists every allowed origin. How to check: the response headers of any page, in the browser or via curl -I.

    Verified
  • 04
    The site responds only over HTTPS, and is enrolled in browsers' preload list.

    Strict-Transport-Security header with preload; enrollment at hstspreload.org. How to check: the header, and the public lookup at hstspreload.org.

    Verified
  • 05
    There is a public channel to report a security flaw.

    /.well-known/security.txt, following the RFC 9116 standard, with contact and validity. → /.well-known/security.txt

    Verified
  • 06
    The domain cannot be used to spoof email in our name.

    DMARC record with a reject policy. How to check: a DNS lookup on the _dmarc.validaauditoria.com.br record.

    Verified
  • 07
    Audience-measurement consent can be given and withdrawn.

    The consent bar accepts it, and the footer allows revoking it at any time. → link Consent in the footer

    Verified
  • 08
    The free electronic signature has a declared legal basis, with the source.

    MP 2.200-2/2001, Código Civil art. 107, Lei 12.682/2012 and an STJ ruling, each with a link to the official source. → /assinatura

    Verified
  • 09
    Everything this site publishes is indexed in one place, for people and for machines.

    sitemap.xml and llms.txt. → /sitemap.xml · /llms.txt

    Verified
  • 10
    What changes here is traceable.

    Every page declares the date of its last change in the sitemap; versioned assets do not change without a name change.

    Verified

What is not on this list is not claimed. When it is, it goes here — verifiable, or it does not go in.

Last checked: 24/09/2026.