Reporting debt is different from checking it
REDEC does not require consent to report information to the CMF. But every debt inquiry requires prior, valid, traceable consent.
Transparency boosts conversion: what we learned designing consent experiences under Law 21.719.
Read the articleComply with Law 21.680 and NCG 540 by managing consent and rights with auditable evidence for every operation assessing borrowers' commercial and credit risk.
Trusted by privacy leaders
Organizations must demonstrate how, when, and why they access consolidated debt information.
REDEC does not require consent to report information to the CMF. But every debt inquiry requires prior, valid, traceable consent.
REDEC requires verifiable evidence of consent before every inquiry. Without traceability, compliance cannot be demonstrated.
Requests to update, rectify, supplement, and cancel data must be managed with deadlines, traceability, and auditable records. The CMF will monitor compliance.
Written policies alone are not enough. Every operation must be backed by auditable, exportable records.
| Aspecto | Traditional management | With Soyio |
|---|---|---|
| Consent | PDFs unlinked to inquiries | Traceable, auditable, and linked to every operation |
| Records | Scattered across multiple systems | Centralized and unified |
| Reports | Manual and error-prone | Automated to meet regulations |
| Consent withdrawals | No effective control over consent withdrawals | Complete lifecycle management |
| Data subject requests | Requests sent to generic support channels | Dedicated inquiry portal |
| Auditing | Only in response to inspections | Proactive in real time |
We are fully aligned and prepared for the new Data Protection Law 21.719.
Soyio records every action with verifiable, audit-ready evidence
Every action records who did what, when, and in what context. The history cannot be altered and is available for audits and regulatory inspections.
Find any operation, consent record, or data subject request by person, date, or type.
Generate reports in the formats required by the CMF and other authorities.
When someone withdraws consent, the system updates immediately so your integrations can avoid further debt inquiries that could breach regulations
Bring consent and data subject requests together, with auditable evidence to support compliance.
Granular, revocable, traceable consent aligned with the CMF's regulatory requirements.
Every inquiry is recorded with its prior consent, timestamp, and associated purpose. Full traceability.
A straightforward portal where borrowers can exercise their rights and track every step. Manage requests, monitor regulatory deadlines, and maintain the daily records required by the CMF.
REDEC requires multiple reports at different intervals: weekly, daily, and monthly. With Soyio, you can generate RDC30 and RDC40 reports automatically and without errors.

Financial institutions with high volumes of REDEC inquiries and ongoing supervision.
Savings and credit cooperatives that must meet the same regulatory standards.
Financial technology companies that provide credit advisory services and check consolidated debt as part of loan origination.
Subscribe to our newsletter
A weekly roundup of privacy, regulation, and technology news that could affect your business.
Subscribe (LinkedIn, opens in a new tab)