Better Health for All

DLocal Limited's core business is cross-border payment processing.

The company has no significant involvement in products with established negative health outcomes, such as alcoholic beverages, adult entertainment, gambling, or tobacco. While DLocal facilitates financial inclusion for 1.4 billion unbanked adults in emerging markets and operates in countries like Chile, Colombia, Peru, Egypt, Nigeria, and South Africa, this is an indirect link to health access rather than direct provision of health services or addressing health disparities, and therefore does not directly score on the 'vulnerable_reach' KPI which is specific to health needs. There is no evidence of investment in health innovation, health equity programs, or other direct health-related initiatives. The company's products do not have direct safety implications for physical or mental health, nor do they carry health risks requiring disclosure.

Fair Money & Economic Opportunity

dLocal obtained payment service licenses in Kenya, Rwanda, and Nigeria, and a payment institution license from the Central Bank of Brazil in 2023.

The company ensures compliance with each market's specific standards, including PCI DSS security standards. dLocal operates in over 40 countries across Africa, Asia, and Latin America, including high-growth emerging markets, and supports a national real-time payment system in Colombia (Bre-B) and Google's digital accessibility in Kenya. The company's platform uses a single API to connect merchants to over 900 payment methods, and for Bre-B, it uses digital keys instead of full bank account details, integrating into existing banking and wallet platforms without requiring a new app. dLocal intends to make an aggregate investment of up to USD 100 million in Argentina over time, which is approximately 5% of its 2023 pre-tax profit of USD 199.5 million.

Fair Trade & Ethical Sourcing

No quantitative data or specific information regarding DLO.US's performance on Fair Trade & Ethical Sourcing KPIs was found in the provided articles.

The articles are placeholders and do not contain any relevant evidence to assess the company against the rubric.

Honest & Fair Business

DLocal has implemented a confidential and anonymous whistleblowing channel, as mandated by SEC ruling.

This channel allows for the receipt, retention, and treatment of complaints regarding accounting, internal controls, auditing, or compliance matters, and users can submit complaints via a secure web form or hotline. The Audit Committee may request additional information. However, the available evidence does not detail independent investigation processes, training frequency, or resolution times.

Planet-Friendly Business

The company reported total Scope 1, 2, and 3 emissions of 95 tCO₂e in 2024, which increased from 93 tCO₂e in 2023.

No environmental compliance violations were reported. For climate justice, the company made donations of HK$15,600 to the Institution of Dining Art Foundation and HK$600,600 to Eastside College Preparatory School.

Respect for Cultures & Communities

DLocal Limited has 20 partnerships.

However, this number does not precisely align with the defined quantitative thresholds in the rubric, which specify '10-15 formal partnerships' for a score of 50 and 'Over 20 formal partnerships' for a score of 100. As 20 is neither within the 10-15 range nor 'over 20', and no other tier explicitly covers this value, the KPI is scored as 0, indicating no specific applicability to the defined positive tiers. No other specific, concrete data points were found in the provided articles that directly pertain to DLocal Limited and match the quantitative thresholds for other KPIs under 'Respect for Cultures & Communities'.

Safe & Smart Tech

DLocal has no documented data breaches. The company's API uses HMAC-SHA256 for request signatures and JWE for encrypting sensitive credit card data (number, CVV) within the request body, sharing public RSA keys with merchants.

However, the API documentation indicates that only these specific parameters need to be encrypted, implying other request data can be sent unencrypted. The company's privacy notice states that personal data is retained only as long as necessary to provide services or fulfill collection purposes. The Merchant Dashboard is protected by username and password, but there is no evidence of multi-factor authentication (MFA) availability for any services. DLocal has a confidential whistleblowing channel. The company is authorized and regulated by the MFSA as an Electronic Money Issuer and Payments Institution in the EU, by the FCA as an Authorised Payment Institution in the UK, and is registered as a Money Service Business with FinCEN. It also received a Central Bank-issued license in Brazil in July 2023 and certification as a payment initiation service provider for Pix. However, a federal securities fraud class action lawsuit was filed alleging DLocal engaged in improper conduct and transfers abroad in violation of Argentine laws and/or regulations, including foreign exchange regulations, and that its compliance controls were deficient. DLocal developed a proprietary generative AI solution in 2023 to streamline website reviews, with up to 75% of merchant website reviews completed automatically. The UI agent provides detailed reasoning for decisions, which can be included in human-in-the-loop review steps.