Running a small or mid-sized company in Brazil: the legal essentials

Most legal problems that damage a small company in Brazil are not sophisticated. A contract with no indexation clause. A shareholder who left with no valuation formula in the articles. A contractor treated as a service company without care. A customer database with no lawful basis. A brand someone else registered first. None of these show up the day they happen — they show up months later, multiplied.

Preventive versus reactive

There is a structural difference between fixing and preventing. Once the problem exists, the options are few and expensive: the contract is signed, the employee is dismissed, the data has leaked. Before, the options are many and cheap: a clause drafted, a document signed, an internal process adjusted.

That does not mean every company needs a monthly retainer. It means identifying which decisions are hard to reverse — the standard contracts that will be used hundreds of times, the corporate structure, the annual tax election, the data policy — and treating those with care. Mistakes there repeat at scale.

A note on figures: a lot of material circulates claiming how much preventive advice "saves". We prefer not to repeat averages we cannot source. What can be stated with confidence is what the law provides, and that is what this guide covers.

Contracts: the backbone

Brazilian contract law rests on party autonomy, binding force and objective good faith. Since the Economic Freedom Act (Law 13.874/2019), the Civil Code reinforced that axis for business dealings: article 421 provides that State intervention in private contractual relations shall be exceptional and minimal, and article 421-A presumes that civil and commercial contracts are balanced and symmetrical, with judicial revision applying only exceptionally. In practice: between companies, what is written tends to govern — which raises, not lowers, the importance of writing it well.

The recurring drafting failures are familiar. A generic template that does not describe the actual business. A poorly defined scope, the leading cause of service disputes: without a detailed description of the deliverable, a schedule, allocated responsibilities and acceptance criteria, every delivery becomes an argument. Vague or unrealistic deadlines. No penalty clause, which turns an obligation into a suggestion. And no price adjustment mechanism in long-term contracts, which forces the company to perform at a loss when costs rise.

On the protective side, four clauses earn their keep: force majeure, defining qualifying events, notice procedure and risk allocation; confidentiality, specifying what is protected, for how long and with what consequence; intellectual property, allocating ownership of what is created during performance — critical in technology, marketing and project work; and dispute resolution, choosing deliberately between courts, mediation and arbitration.

Company structure and articles of association

The vehicle of choice is the sociedade limitada, roughly equivalent to a private limited company, and since Law 13.874/2019 it may be formed by a single quotaholder (Civil Code, article 1.052, paragraphs 1 and 2). That made the older EIRELI vehicle redundant: article 41 of Law 14.195/2021 converted existing EIRELIs into single-member limitadas automatically, with no amendment required.

The articles of association (contrato social) are the company's most important document and the most often neglected. Four points deserve careful drafting, and each only hurts when it is missing:

• Management. Who manages, which acts require joint signature, which need quotaholder approval and above what value. Without this, one manager can bind the company alone.

• Entry and exit of quotaholders. Pre-emption rights, transfer procedure and above all the valuation formula for a departing quotaholder. Silence on this point is the most common origin of shareholder litigation in Brazil.

• Succession. What happens to quotas on death: do the heirs join, are they paid out, or do the remaining quotaholders have preference? Without a provision, the company can be held hostage by a probate proceeding.

• Profit distribution and management remuneration. Clear rules keep pay for work distinct from return on capital.

A separate quotaholders' agreement is worth adding: it covers governance, voting, non-compete, investor entry and exit, and can stay outside the public registry.

On personal liability: article 49-A of the Civil Code, added by Law 13.874/2019, affirms the company's separate legal personality. The exception is piercing the corporate veil under article 50, which requires abuse characterised by misuse of purpose or commingling of assets — concepts the same statute defined precisely in order to narrow the doctrine.

Foreign shareholders and capital

Foreign individuals and entities may hold quotas in a Brazilian limitada. Three practical requirements come up every time. A foreign quotaholder needs a Brazilian tax number — CPF for individuals, CNPJ for entities. A non-resident quotaholder must appoint a resident attorney-in-fact with powers to receive service of process in Brazil. And foreign capital must be registered with the Central Bank of Brazil, which is what allows dividends to be remitted and capital repatriated through official channels later. Powers of attorney and corporate documents issued abroad need notarisation, an apostille under the Hague Convention and a sworn translation — the step that most often delays an incorporation.

Tax regimes and exposure

Choosing the regime is an annual decision with direct cash-flow impact. Three main routes:

• Simples Nacional (Complementary Law 123/2006): a micro-enterprise with annual gross revenue up to BRL 360,000 and a small business up to BRL 4.8 million (article 3, I and II). It consolidates several taxes into a single payment, at an effective rate that varies by activity annex and revenue band.

• Lucro Presumido: available where gross revenue in the prior year did not exceed BRL 78 million (Law 9.718/1998, article 13). Corporate income tax is calculated on a statutory deemed margin.

• Lucro Real: mandatory above that threshold and in other statutory cases; tax is assessed on actual profit, which suits thin-margin or loss-making operations.

No regime is better in the abstract, and the election has to be revisited as the company grows or changes activity.

On exposure, it is worth knowing the size of federal penalties. On an assessment, the fine is 75% of the tax due; where evasion, fraud or collusion is established it rises to 100%, and to 150% on repeat conduct (Law 9.430/1996, article 44, paragraph 1, VI and VII, as amended by Law 14.689/2023, which reduced the qualified rate previously set at 150%). Older material still quotes "150% to 225%" — those figures no longer reflect the statute.

Hiring and employment liability

The front with the greatest potential for silent liability. Four structural points:

• Employment is determined by facts, not labels. Personal performance, regularity, subordination and payment characterise employment even where the contract is with a service company. Engaging a contractor is lawful; disguising an employee as one is not.

• Outsourcing is lawful, including of core activity, under Law 13.429/2017 and Law 13.467/2017, and the Supreme Court confirmed that position in ADPF 324 and RE 958.252 (Theme 725) in 2018. The client company remains secondarily liable for the provider's employment obligations during the contract, which makes checking the provider's compliance a routine rather than a formality.

• Working hours. Overtime carries a minimum premium of 50% over the normal hourly rate (Constitution, article 7, XVI). Weak time records are among the most frequent causes of adverse judgments, because missing records shift the burden of proof onto the employer.

• Dismissal without cause. On top of severance entitlements, a 40% penalty applies over the employee's FGTS severance-fund deposits (Law 8.036/1990, article 18, paragraph 1). Employees can claim credits from the last 5 years, within 2 years of the contract ending (Constitution, article 7, XXIX) — so liability accumulates for five years before it surfaces.

Consumer relationships

If the company sells to end consumers, the Consumer Protection Code (Law 8.078/1990) applies, and its rules cannot be contracted out of. Three of them shape daily operations: strict liability for product or service defects, where fault is not discussed; complaint periods for apparent defects of 30 days for non-durable and 90 days for durable goods and services (article 26); and a cooling-off right of 7 days for purchases made away from business premises, including online and by telephone (article 49). Add the prohibitions on misleading or abusive advertising (article 37) and on debt collection that exposes the consumer to ridicule or embarrassment (article 42). For online sellers, Decree 7.962/2013 sets out mandatory disclosures about the supplier, the product and customer service.

LGPD: data protection

Brazil's General Data Protection Law (Law 13.709/2018) applies to any company processing personal data — customers, employees, candidates, suppliers. There is no revenue threshold; small companies have a simplified regime for certain obligations but are not outside the statute. Readers familiar with the GDPR will recognise the architecture, though the legal bases and the sanction framework differ.

Adequacy starts with three questions: what data does the company process, on what legal basis, and for how long. Consent is only one of the statutory bases, and many operations sit better on contract performance, legal obligation or legitimate interest, each with its own requirements. From there come plain-language privacy notices, handling of data subject rights, information security and supplier management.

Two operational duties: appointing a data protection officer (article 41) and notifying security incidents to the national authority, the ANPD, and to affected individuals where there is relevant risk (article 48) — which presupposes having a response plan before you need one. Sanctions under article 52 include warnings, a fine of up to 2% of Brazilian turnover capped at BRL 50 million per infringement, daily fines, publicity of the infringement, and blocking or deletion of data.

Licensing and regulated activity

Beyond the general rules, each sector has its own regulator: Anvisa for food and health products, Anatel for telecoms, Aneel for energy, plus municipal operating permits, fire-safety certificates and environmental licensing where applicable.

One mechanism is worth knowing. Law 13.874/2019 removed the requirement for public licensing acts — permits and authorisations — for activities classified as low risk. The classification is set by regulation, and the exemption does not remove other obligations. Before opening or relocating, checking the risk classification of the activity and the municipal rule avoids months of interruption.

Trademarks and intangibles

A brand is often a small company's most valuable and least protected asset. Under Law 9.279/1996, trademark ownership is acquired by a validly issued registration at the INPI, the Brazilian PTO (article 129) — first use does not by itself create an exclusive right, apart from the precedence right of someone who had been using an identical or similar mark in good faith for at least six months before the filing.

Registration lasts 10 years from grant, renewable for equal and successive periods on application in the final year of the term (article 133). Applications are published for opposition within 60 days (article 158). A registration can lapse if the mark goes unused for five consecutive years (article 143). Registering a trade name with the commercial registry is not a substitute: they are different rights with different scope.

Integrity and debt recovery

Companies dealing with the public sector or with large clients live under the Clean Company Act (Law 12.846/2013), which imposes strict liability on legal entities for acts against public administration. Having an effective integrity programme is a factor in setting sanctions, under the parameters of Decree 11.129/2022. For a smaller company this need not be heavy: a code of conduct, a reporting channel, rules on gifts and hospitality, and basic due diligence on suppliers and partners.

On the other side of the balance sheet, two limitation periods matter. A claim on a liquidated debt evidenced by a public or private instrument prescribes in 5 years (Civil Code, article 206, paragraph 5, I), and a civil damages claim in 3 years (article 206, paragraph 3, V). Negotiable instruments have their own clocks — enforcement of a cheque, for instance, prescribes 6 months after the presentation period ends (Law 7.357/1985, article 59). Postponing a collection routine can mean losing the fastest enforcement route.

Frequently asked questions

Getting the legal side in order is a management decision

A well-structured company is not one that never has problems: it is one that knows where its risks are and has chosen which to accept. Clear contracts, a well-drafted corporate structure, the right tax election, people engaged correctly and data processed on a lawful basis are what allow a business to grow without surprises. At Falchet e Marques Sociedade de Advogados, a São Paulo firm on Avenida Paulista, we advise small and mid-sized companies on corporate matters, contracts, trademarks and data protection, working in English with founders and investors abroad. The initial review maps what exists and what is missing; fees are quoted in writing after that analysis.

Talk to our team on WhatsApp: +55 11 95901-1854 — and start with the front that weighs most today.

Sources checked on 16 August 2026: Brazilian Civil Code, articles 49-A, 50, 206 (paragraph 3, V and paragraph 5, I), 421, 421-A and 1.052; Complementary Law 123/2006, article 3; Law 9.718/1998, article 13; Law 9.430/1996, article 44, as amended by Law 14.689/2023; Law 13.874/2019; Law 14.195/2021, article 41; Law 8.078/1990 (Consumer Protection Code), articles 26, 37, 42 and 49; Decree 7.962/2013; Law 13.709/2018 (LGPD), articles 41, 48 and 52; Law 9.279/1996, articles 129, 133, 143 and 158; Law 13.429/2017 and Law 13.467/2017; Supreme Court, ADPF 324 and RE 958.252 (Theme 725); Federal Constitution, article 7, XVI and XXIX; Law 8.036/1990, article 18, paragraph 1; Law 12.846/2013 and Decree 11.129/2022; Law 7.357/1985, article 59. Portals: planalto.gov.br, portal.stf.jus.br, gov.br/inpi, gov.br/anpd.