Alterdata Software

Brazil · www.alterdata.com.br · 13 vendors

Alterdata Software is a leading Brazilian technology company specializing in the development of business management software. They offer solutions such as ERP systems, accounting software, and commercial automation tools to thousands of companies and accounting professionals across Brazil. The company aims to streamline operations, enhance productivity, and ensure compliance for its clients.

Resilience scores

Technology vendors

Insights

Last updated 2026-08-15 · revision 2

13 direct vendors, 180 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Alterdata Software shows medium migration readiness. The company has a foundational understanding and existing infrastructure for cloud operations, utilizing AWS and offering its own 'Alterdata Nuvem' cloud hosting service, which indicates experience with SaaS delivery models. This existing cloud presence is a strong enabler for further migration. However, a key challenge lies in the potential for legacy 'desktop software systems' that are currently hosted in the cloud rather than being truly cloud-native. Migrating these systems to a fully modern, containerized, or microservices architecture would likely require significant refactoring efforts. The company's extensive experience with complex Brazilian regulatory requirements (LGPD, eSocial, SPED, Reforma Tributária) is a strength in managing compliance aspects of migration, though the specificity of these regulations could add complexity if migrating to different jurisdictions or cloud providers with varying compliance frameworks. The lack of data on financial stability and specific data residency requirements introduces uncertainty regarding the capacity to fund and execute a large-scale migration, and potential constraints on data placement. While vendor relationships show geographic diversity, the extent of vendor lock-in, particularly with major providers like AWS, remains unknown and could impact migration flexibility.

Compliance

7 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

Alterdata provides cloud-based software services (SaaS/cloud ERP, accounting software, and cloud hosting via their 'Nuvem' offering) to over 1 million users, which places them squarely in the category of cloud service providers for whom SOC 2 is highly relevant. The company has ISO 27001 certification (a strong information security control), but ISO 27001 and SOC 2 are distinct frameworks — ISO 27001 is a management system standard while SOC 2 is an assurance report on service organization controls (availability, security, confidentiality, processing integrity, privacy). No SOC 2 report has been publicly disclosed. Risk is Medium because: (1) their clients (Brazilian businesses) may increasingly require SOC 2 reports as part of vendor due diligence; (2) international expansion would make SOC 2 a market expectation; (3) the absence of SOC 2 is a gap for enterprise clients. However, SOC 2 is not legally mandated in Brazil, reducing immediate regulatory risk.

Evidence: https://www.alterdata.com.br/privacidade-e-seguranca, https://www.alterdata.com.br, https://www.aicpa-cima.com/resources/landing/system-and-organization-controls-soc-suite-of-services

LGPD — Partially Compliant

Alterdata demonstrates strong LGPD engagement: a named DPO (Wilton Almeida), a published and versioned Privacy Policy (v3, updated December 2025), documented legal bases for processing, data subject rights procedures, and the TI Rio 'LGPD Avançado' seal. However, the TI Rio seal is explicitly NOT a certification of full conformity — it is a self-assessment engagement indicator. The company discloses international data transfers to AWS Virginia (USA) under LGPD Article 33 mechanisms, which requires adequate contractual safeguards. No independent third-party LGPD audit or ANPD-recognized certification has been publicly disclosed. As a software provider processing data for 1M+ users across Brazil (including accounting, payroll, HR, and real estate data), the volume and sensitivity of personal data processed is high. ANPD enforcement has been increasing since 2023, with fines of up to 2% of Brazilian revenue (capped at R$50M per infraction). Risk is Medium rather than High due to the evident proactive compliance posture and documented controls.

Evidence: https://www.alterdata.com.br/privacidade-e-seguranca, https://www.ti.rio/selo-tirio-de-engajamento-com-a-lgpd/, https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm, https://www.gov.br/anpd/pt-br

Marco Civil da Internet — Partially Compliant

The Marco Civil da Internet establishes principles for internet use in Brazil, including data protection, privacy, and net neutrality obligations for internet application providers. Alterdata provides cloud-based software services and operates websites collecting user data, making them subject to Marco Civil requirements. Their Privacy Policy addresses data collection, retention, and user rights consistent with Marco Civil. However, the law's requirement for data storage of connection logs and application access logs in Brazil (Article 11) is potentially in tension with their disclosed use of AWS Virginia (USA) servers. Risk is Medium because: (1) international data storage requires compliance with Brazilian law even when data is abroad; (2) enforcement has been increasing; (3) the company's Privacy Policy acknowledges international transfers but the specific log retention compliance mechanism is not detailed.

Evidence: https://www.alterdata.com.br/privacidade-e-seguranca, https://www.planalto.gov.br/ccivil_03/_ato2011-2014/2014/lei/l12965.htm, https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2016/decreto/d8771.htm

Financials

Three-year financials

Financial Resilience Score: 7/10

Alterdata Software demonstrates strong qualitative financial resilience despite the absence of public financial statements. The company has operated continuously since 1989 (36+ years), successfully navigating multiple Brazilian macroeconomic crises including 1990s hyperinflation, the 2008 GFC, the 2015-16 recession, and the 2020 COVID pandemic. Its business model is based on recurring subscription and maintenance revenue from ERP, accounting, and fiscal software, which typically features high customer stickiness with churn rates below 10% annually in this niche. The company benefits from significant diversification across four business units (Contábil, Varejo, Imobiliário, ERP/Moda) and a broad SMB customer base of approximately 65,000 clients, reducing single-customer concentration risk. Blue-chip logos including Philips, Michelin, and Faber-Castell demonstrate up-market credibility. Inclusion in Valor 1000 in 2016 implies revenue of at least R$150-250M at that time, and third-party databases estimate current annual revenue in the R$200-400M range (unverified). However, resilience is constrained by several factors: zero public financial disclosure prevents external verification of profitability, leverage, or liquidity; virtually 100% revenue exposure to Brazil creates concentration risk on BRL and Brazilian macro cycles; intense competition from TOTVS, Linx, SAP, Oracle NetSuite, Sankhya, and others; and the upcoming Brazilian tax reform (EC 132/2023, CBS/IBS) will require substantial product re-engineering. The family/founder-led governance typical of Brazilian Ltdas also introduces succession risk. Overall, available evidence is consistent with a stable, profitable mid-market ERP vendor rather than a distressed operator.

Key strengths: 36+ years of continuous operation since 1989 through multiple Brazilian macro crises, Recurring SaaS/ERP revenue model with high customer stickiness, Diversified across four business units (Accounting, Retail, Real Estate, ERP/Fashion), Broad SMB customer base of ~65,000 clients with low concentration, Blue-chip customers including Philips, Michelin, Faber-Castell, ISO/IEC 27001 certified for information security, Proprietary IP built in-house with no third-party licensing dependency, Nationwide branch network across all five Brazilian regions, In-house training arm (UCA - Universidade Corporativa Alterdata)

Risk factors: Zero public financial disclosure — no verified revenue, EBIT, or equity data, 100% revenue concentration in Brazil with BRL exposure, SMB customer base more sensitive to recession and credit conditions, Intense competition from TOTVS, Linx, SAP, Oracle NetSuite, Sankhya, Senior Sistemas, Brazilian tax reform (EC 132/2023, CBS/IBS 2026-2033) requires major product re-engineering, Family/founder-led governance creates succession and governance risk, Private Ltda structure limits transparency for lenders and partners

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report