Skip to main content
TrackJud TrackJud
· Updated on · 14 min read

Judicial due diligence on Brazilian entities: the practical guide from M&A to credit

By TrackJud

Complete guide to judicial due diligence in Brazil in 2026: when to do it, what to check, real costs (manual vs API), LGPD/OAB legal coverage, and an actionable checklist. Updated April 2026.

TL;DR: Judicial due diligence is the verification of court cases linked to a person or company before making a business decision — M&A, credit, supplier onboarding. In 2026 Brazil, with R$ 220 billion in M&A transactions in 2025 alone (per KPMG), ignoring a counterparty’s judicial exposure is accepting unnecessary risk. This guide covers when to do it, what to check, the real cost (manual vs API), legal coverage (LGPD art. 7, OAB Provimento 205/2021, Law 6,404 art. 158), and an actionable checklist. Estimated cost for 15 entities across 10 courts: R$ 6,000-10,000 manual vs R$ 15 automated — a 400-700x difference.

Judicial due diligence is the verification of court cases linked to a person or company before making a business decision. It’s essential practice in credit origination, mergers and acquisitions, supplier contracting, client onboarding, and any situation where the risk of inheriting hidden liabilities outweighs the cost of checking.

In Brazil, where more than 83 million active cases are in court according to the Justice in Numbers 2024 report from the CNJ, ignoring the judicial status of a counterparty means accepting unnecessary risk. And the Brazilian M&A market, which moved R$ 220 billion in 2025 per KPMG (+20% vs 2024), reflects exactly that perception: judicial due diligence became standard even in smaller transactions.

This guide covers, in depth, when to do it, what to check, what it really costs, what LGPD and OAB say, and an actionable checklist you can copy for your next deal.

For specific contexts, combine this guide with the deep dive on labor liability and Súmula 331 (the supplier and outsourcing angle) and on continuous lawsuit monitoring (what to do after the initial DD, until closing).

What judicial due diligence really is

Judicial due diligence isn’t “checking if there are lawsuits.” It’s the process of searching, analyzing, classifying, and documenting court cases to feed an informed commercial decision.

In practice, it involves 4 layers:

  • Existence verification — are there cases? how many?
  • Qualitative analysis — what’s the nature? labor, civil, criminal, tax, bankruptcy, administrative?
  • Financial assessment — what’s the aggregate case value? are there first-instance convictions? provision reserve?
  • Continuous monitoring — during the period between term sheet and closing, do new cases appear? (they frequently do — sellers often rush to settle pending matters before the deal)

Layer 4 is where many DDs fail. The first search is done at the beginning (week 1), and then the firm stops. But the deal takes another 60-90 days to close. In those 60-90 days, new cases can be filed against the target — and they’re precisely the most relevant for negotiation, because they may indicate the seller is trying to dispatch issues before closing.

When to do it — 7 typical situations

SituationWhyCost of not doing it
Merger or acquisition (M&A)Identify hidden liabilities, size the indemnification reserveInheriting the target’s judicial debts — R$ 2-20M in medium transactions
Credit originationJudicial score complementing the traditional bureauDefault from hidden liability the score doesn’t catch
Supplier contractingVerify legal health and Súmula 331Subsidiary liability, operational disruption
Client onboardingKYC/KYB regulatory (BACEN Circular 3,978)Fines, sanctions, license revocation
Executive hiringCheck the executive’s case historyReputational risk, past labor claims
Commercial leaseCheck lessee’s delinquency and historyDefault, property damage, expensive eviction
Investment (VC, PE, private equity)Hidden liabilities of the shareholders, litigation historyInvestment in a company with hidden risk, forced impairment

Each situation has its own nuances. For M&A, scope goes far beyond the target — it includes shareholders, officers, controllers, and sometimes subsidiaries. For credit, it’s usually just the borrower’s CPF. For suppliers, it’s the CNPJ plus the shareholders’ CPFs when the contract is significant.

What to check — the structured checklist

Essential data (every DD needs this)

  1. Case existence — how many cases exist in the searched database?
  2. Role in cases — is the subject plaintiff, defendant, or intervenor?
  3. Case type — civil, labor, criminal, tax, bankruptcy, environmental, administrative
  4. Status — active, archived, on appeal, suspended, in execution
  5. Case value — what amount is involved? (useful for estimating exposure)
  6. Jurisdiction — in which states and courts are the cases?
  7. Temporal distribution — are there recent spikes? (red flag — someone may be dispatching pending issues)

Advanced analysis (M&A, large operations, corporate credit)

  1. Movement history — how has the case evolved? was there a ruling? at which instance?
  2. Parties involved — is there a habitual litigation pattern? (see the specific post on vexatious litigants)
  3. Decisions — was there a conviction? for what amount? did it become final?
  4. Current instance — trial, appeals, special appeal, extraordinary appeal
  5. Related cases — are there dependent cases (enforcement, attachments, related)?
  6. Recurring lawyers — does the same opposing firm appear multiple times? may indicate a business relationship
  7. Judges — what’s the reform rate on appeal? (signal of pleading technical quality)

A thorough DD answers all 14 questions. A rushed DD only answers the first 7. The difference is the quality of the red flags report delivered.

The cost of NOT doing it — 3 real scenarios

Scenario 1 — Credit without judicial verification

A fintech approves R$ 100,000 in credit for an entrepreneur based solely on the Serasa score (780 points, “good payer”). No judicial search. The entrepreneur has 8 active labor claims totaling R$ 500,000 in aggregate case value and 3 tax execution cases from the Federal Revenue. Six months later, he’s hit by a generalized judicial freeze (BacenJud tools) and the fintech becomes an unsecured creditor in the estate. Estimated recovery: 5-15% of value.

  • Cost of prior verification: R$ 1.00 (10 queries × R$ 0.10)
  • Cost of non-verification: R$ 85,000-95,000 in net loss
  • Verification ROI: 85,000x to 95,000x

Scenario 2 — Acquisition without full judicial DD

A company acquires a mid-sized competitor for R$ 25 million. The contracted DD is “express” and covers only the target (CNPJ), not the shareholders or officers. Three months after closing, R$ 4.3 million in labor claims against the majority shareholder from previous operations are discovered — and part extends to the acquired company via subsidiary/joint liability.

  • Cost of complete verification (15 entities × 10 courts): R$ 15-20
  • Cost of non-verification: R$ 4.3 million in unprovisioned liability
  • Earn-out impact: hostile post-closing negotiation, lawyers on both sides for 12 months

Scenario 3 — Strategic supplier with pending bankruptcy

A retailer establishes an exclusive logistics supply contract with a transport company. The contract is based on a commercial proposal and references. No judicial DD. The transport company has a judicial recovery petition filed 8 months prior (public case, searchable). Four months after contracting, the company stops fulfilling the contract due to cash shortage.

  • Cost of verification: R$ 0.50 (5 queries)
  • Cost of non-verification: 3-week operational disruption + emergency contracting cost + commercial losses = R$ 2-5 million depending on sector

The scaling challenge — by decision volume

Occasional DD (1 deal, 15 entities) is manageable manually. The problem appears when volume increases:

DD volume/dayViable methodNote
1-10 verifications/dayManualSlow, but feasible
10-100/dayDedicated paralegal or intermediate toolManual doesn’t scale anymore; errors increase
100-1,000/dayAutomated APIOnly viable option
1,000+/dayAPI with dedicated infra (webhooks, batch)Enterprise contracts

For fintechs and credit bureaus processing hundreds of applications daily, judicial DD needs to be automatic, integrated into the decision pipeline, and with response time in seconds — not hours. Otherwise, you’re either throttling the approval funnel or operating blind.

For M&A boutiques with 5-20 deals per quarter, automation frees paralegals for analytical work instead of copying CPFs between websites — and shrinks the risk window between “initial DD” and “confirmatory” because it’s cheap to run the search twice, three times, ten times.

Real cost comparison

The math matters. Table based on real market prices:

MethodCost per entity (10 courts)Time per entityScale
Paralegal/intern (manual)R$ 15-30 (labor hour)30-90 minLow
Boutique firm (partner supervising)R$ 50-15015-30 min + overheadMedium
Legal software with subscriptionR$ 50-200/month + variable per queryVariableMedium-high
Vigilant (pay-as-you-go API)R$ 1.00< 60 secondsHigh

Automation ROI — math for a mortgage credit bank

For a mortgage bank verifying 100 borrowers per day across 10 courts:

ManualVigilant
Cost per verificationR$ 20.00 (paralegal time)R$ 1.00 (10 queries)
Daily costR$ 2,000R$ 100
Monthly cost (22 business days)R$ 44,000R$ 2,200
Monthly savingsR$ 41,800 (95%)
Annual savingsR$ 501,600

Even assuming Vigilant doesn’t eliminate 100% of paralegal work (human analysis always remains), net savings run ~R$ 30,000-40,000/month. For M&A operations, the proportional savings are even higher because volume concentrates in 2-3 month windows per deal.

For real pricing and credit packages, see /en/pricing/.

Data returned per Vigilant query

For each CPF/CNPJ searched, the API returns cases found across all requested courts, in a standardized structure:

  • CNJ number (national standard case ID)
  • Case class and type (Civil Procedure, Tax Execution, Labor Claim, etc)
  • Parties involved (plaintiff, defendant, lawyers)
  • Chronological movement history
  • Subjects (CNJ topic classification)
  • Case value
  • Current status (active, archived, on appeal, suspended)
  • Instance (trial and appellate, when applicable)
  • Jurisdiction (court, chamber, district)
  • Original case URL on the source portal (for manual opening when detail is needed)

All in standardized JSON, regardless of the source court. This matters for M&A because the analyst doesn’t need to learn each portal’s layout — they consume the same data shape from any covered court. To integrate into your flow, the technical docs at /en/developers/ have examples in cURL, Python, Node.js, and Go.

LGPD (Law 13,709/2018)

Judicial DD falls under 3 simultaneous legal bases in Brazil’s data protection law:

  • Art. 7, §4 — dispenses consent for data “made manifestly public by the subject.” Court cases whose public lookup is provided by the court fit exactly this definition
  • Art. 7, VI — “regular exercise of rights in judicial, administrative, or arbitration proceedings.” For DD in regulated transactions (public company M&A with CVM, for example), this is the safest basis
  • Art. 7, IX — “legitimate interests of the controller or a third party.” Covers general commercial DD (supplier, executive hire, corporate client)

Vigilant accesses exclusively public data made available by the courts themselves. No access to sealed cases, cases under judicial secrecy, or any protected information.

Keep a per-query audit log (Vigilant’s API generates this automatically and exposes it via the history endpoint) and you have an auditable trail for any challenge from ANPD or the data subject.

OAB — Provimento 205/2021

Provimento OAB 205/2021 governs legal advertising — it doesn’t affect internal automation of research. Using APIs and software for judicial DD lookup is an operational activity, fully permitted. The OAB actually encourages technology adoption by lawyers.

Administrator liability for NOT doing DD

This is the point many forget: not doing due diligence can constitute administrator fault. Law 6,404/76 (Corporations Act), art. 158, holds directors liable for acts contrary to the company’s interest. The Civil Code, art. 1,016, holds managing partners of limited liability companies liable for negligence. And art. 1,011 of the same code requires “the care and diligence that every active and honest person customarily employs in managing their own business.”

In practice: an administrator who approves a R$ 25 million acquisition without adequate judicial DD can be personally liable if hidden liabilities appear — especially in a public company transaction with disadvantaged minority shareholders. DD isn’t optional for a prudent administrator.

Judicial due diligence checklist — expanded version

  • Map the universe of CPFs/CNPJs to search
    • Primary target (CNPJ)
    • Direct shareholders (CPFs)
    • Ultimate controllers (CPFs/CNPJs of individuals and entities in the control chain)
    • Statutory officers (directors, board members)
    • Relevant subsidiaries and affiliates
  • Define the relevant courts
    • State court at headquarters (TJSP, TJRJ, etc)
    • State court at each branch/relevant operation
    • Federal court for the region (TRF1-TRF6)
    • Labor court (TRT for each operation’s region)
    • Administrative when applicable (CADE, ANPD, Revenue)
  • Execute the search — manual or via API
  • Check both instances (trial and appellate)
  • Catalog cases found in a structured spreadsheet
  • Classify by criticality — high/medium/low risk
  • Calculate aggregate value of potential liability
  • Identify patterns — recent spikes, habitual litigation, recurring lawyers
  • Document results in the red flags report
  • Define adjustment clauses — escrow, earn-out, indemnification cap based on calculated exposure
  • Establish continuous monitoring until closing (see lawsuit monitoring)

Vigilant coverage

Vigilant covers 12 judicial sources across 10 Brazilian states today, including TJSP, TJRJ, TJMG, TJDFT, TJBA, TJCE, TJPE, TJMA, TJAP, TJAC, TJAM, TJAL — all ESAJ or PJe, both instances. The full list, status per court, and expansion plans are at /en/courts/. Pricing starts at R$ 0.10 per court queried, no subscription or contract — see /en/pricing/.

For enterprise operations with high volume (thousands of verifications per month), or for direct integration into your approval/closing engine, it’s worth talking to the team at /en/contact/.

Glossary

TermDefinition
Due diligenceStructured investigation process of a company, person, or asset before a commercial decision
Red flags reportConsolidated document listing risks identified in DD, organized by criticality
TargetThe company being acquired in an M&A transaction
LOILetter of Intent — preliminary document formalizing interest in buying
Term sheetDocument with the deal’s main terms, pre-contractual
ConfirmatoryDeep DD phase that occurs after the term sheet, before closing
ClosingFormal deal completion, with transfer of control
Earn-outPortion of the purchase price contingent on post-closing metrics
EscrowDeposit in a third-party account, released per contract clauses
Subsidiary liabilitySecondary obligation — only becomes effective if the primary party doesn’t pay

Conclusion

Judicial due diligence in 2026 has moved from “nice to have” to operational requirement for anyone making data-driven commercial decisions. With 83 million active cases in the country, R$ 220 billion in annual M&A, and regulation (LGPD, OAB, Law 6,404) that provides clear legal basis for consultation and holds administrators who skip DD liable, the cost of not doing it has become much higher than the cost of doing it.

The difference between quality DD and checkbox DD is, today, a matter of tooling. Searching 150 entities across 10 courts manually takes 20-40 hours. Via API, it takes 15-30 minutes of processing + the analyst’s time to interpret the data. You decide where to spend the 20 saved hours — analysis, deal negotiation, or simply running more deals.

If you want to see the full commercial layer — how Vigilant fits into M&A, credit, or compliance workflows — check our M&A and due diligence solutions page. To integrate into your approval pipeline, the technical docs have the path. And for a direct conversation about enterprise volume, /en/contact/.


Automate your judicial due diligence. 5 free credits on signup, no credit card. Start now.

Frequently asked questions

What's the difference between judicial due diligence and labor due diligence?

Labor due diligence focuses exclusively on Labor Justice liability — active claims, settlements, accounting provisions for subsidiary responsibility (TST Súmula 331). Judicial due diligence is the broader umbrella: it covers civil, labor, tax, criminal, bankruptcy, and administrative proceedings. For serious M&A transactions, you do both — judicial DD provides the panoramic view, and labor DD digs deeper into the area that typically holds the largest hidden liability. We cover the labor-specific angle in the post [Súmula 331 and supplier labor audits](/en/blog/brazilian-labor-liability-supplier-audit/).

When during an M&A deal should judicial due diligence be run?

Most boutiques run it at 2 points: (1) during LOI or term sheet — a preliminary sweep of the target, shareholders, and controllers to spot red flags that could kill the deal before spending 60-90 days; and (2) during confirmatory due diligence — a deep sweep of the same CPFs/CNPJs plus administrators, with continuous monitoring until closing. Some leaner deals skip step (1) and go straight to (2), but this increases the risk of discovering a problem that could have been caught early.

How many CPFs/CNPJs do I need to search in a typical transaction?

Depends heavily on size. A mid-market M&A deal (R$ 50-200 million): search the target (1 CNPJ) + controlling shareholders (usually 2-5 CPFs) + statutory officers (another 3-5 CPFs) + relevant subsidiaries (variable). Typical total: 8-15 entities. Larger deals can reach 30-50 entities when there's a holding company, investment funds, succession of control, or a complex economic group. In credit verifications (fintech or bank), it's usually just the borrower's CPF and possibly the spouse — much smaller volume per query.

Which courts are essential in a judicial due diligence?

For a transaction involving a company headquartered in São Paulo, the reasonable minimum is: TJSP (where 25% of all Brazilian lawsuits are, per CNJ Justice in Numbers 2024), TRF1 or TRF3 (federal — income tax, INSS, Federal Revenue, BACEN), the state court of each location where the company has relevant operations, and the TRTs for each subsidiary's region (labor liability). For nationwide operations, this can reach 15-20 courts. Vigilant covers 12 sources today — see the map at [/en/courts/](/en/courts/) to check if it covers your transaction's courts.

How much does a complete judicial due diligence cost?

The math is very different between manual and automated. Manual at a boutique firm: a partner + paralegal searching 15 entities across 10 courts each = 150 queries × 6 minutes per query + analysis = ~20h total. At R$ 300-500/h partner rate, that's R$ 6,000-10,000 just for the data collection phase. Via API: 150 queries × R$ 0.10 = R$ 15. The difference is 400-700x. This doesn't eliminate the partner's work — it's still needed for interpreting data, cross-referencing with other signals (fiscal, commercial, regulatory), and writing the red flags report — but it frees 18 of the 20 hours for actual legal analysis.

Is there a legal deadline for doing due diligence before closing a deal?

There's no statutory deadline — due diligence is a market practice, not a regulatory requirement. However, there are legal consequences if you DON'T do it and later complain about hidden liabilities: the Brazilian Civil Code holds administrators liable for negligence (art. 1,016 for limited liability companies) and Law 6,404/76 holds directors responsible for acts contrary to the company's interest (art. 158). In M&A, the standard is 30-90 days of confirmatory DD after the signed term sheet. Regulated transactions (financial institutions, insurers) have additional CVM/BACEN timelines.

Does LGPD allow querying court cases by CPF without authorization?

Yes, as long as the purpose is legitimate. Law 13,709/2018 (LGPD), art. 7 §4, dispenses consent for data 'made manifestly public by the subject' — court cases whose public lookup is provided by the court itself fit here. Additionally, art. 7 item VI covers 'the regular exercise of rights in judicial, administrative, or arbitration proceedings' and item IX covers 'legitimate interests of the controller or a third party.' Due diligence for commercial decision-making falls under item IX. Keep a per-query audit log (Vigilant generates this automatically) as an auditable compliance trail.

What is a 'red flags report' and why is it the main DD deliverable?

A red flags report is the consolidated document the law firm or consultancy delivers at the end of the due diligence. It lists, in order of criticality, the risks identified (the 'red flags') and which contractual clause or financial adjustment is recommended to mitigate each one. A well-made red flags report is what separates 'delivering a list of cases' from 'delivering an informed decision about the deal.' The top content competitors (Projuris, Uplexis, Deloitte) talk about DD but none publishes a template or real example of a red flags report — this is a clear market gap. We plan to publish a downloadable template soon as part of the content plan.

Related articles