Brazil's Securities Regulator Created a Permanent Division for AI. The Regulatory Sandbox Has a New Owner.
Brazil's securities regulator doesn't create new institutional divisions by accident. On July 31, the CVM — the Comissão de Valores Mobiliários, Brazil's equivalent of the SEC — published Resolution 246, establishing DITEC, the Divisão de Tecnologia Financeira (Financial Technology Division), as a permanent functional unit within its Superintendency of Intelligence Development. The announcement generated modest headlines in the specialized financial press. It deserves considerably more attention than it received.
DITEC is not another study group. The CVM already had one of those: the GTT, a temporary working group created to draft a proposal for tokenized securities regulation, operating under a 60-day mandate to analyze the problem and report back. Study groups study. Institutional divisions govern — on a permanent basis, with ongoing budget, staff, and a mandate that doesn't expire. DITEC is what institutional commitment to AI governance actually looks like: a standing body within the regulator, not a committee that files a report and dissolves.
The Regulatory Sandbox is where this matters most for founders and investors building in Brazilian capital markets. Brazil's sandbox has historically been the mechanism through which genuinely innovative financial products — products that don't fit cleanly into existing regulatory categories — can test with real customers under CVM supervision before seeking full authorization. Tokenized funds, credit-linked digital assets, and distributed-ledger-based settlement systems have all passed through previous sandbox cohorts. With DITEC managing the next round, those applications will be reviewed by a division whose explicit mandate is AI and financial technology — not by generalist securities regulators applying frameworks built for analog financial instruments.
This creates a meaningful shift in the risk profile for Brazilian fintechs building AI-driven capital markets products. Before DITEC, an AI-enabled credit scoring model or tokenized securities platform applying to the sandbox would be evaluated by staff whose primary expertise was traditional securities regulation. After DITEC, the same application reaches a division that monitors IOSCO's global Fintech Task Force agenda, coordinates with the Banco Central on credit information, and holds an explicit technical mandate around AI governance. The regulatory interlocutor has changed — and that is a substantively different conversation for founders who understand what their product actually does.
DITEC's creation is part of a broader pattern of Brazilian financial regulators building internal AI governance capacity before comprehensive AI legislation arrives. Brazil's AI bill — PL 2338/2023 — is still working through the Senate, with a full vote expected in September 2026. Rather than waiting for Congress to define the framework and then adapting, both the CVM and the Banco Central are positioning themselves as institutions capable of reasoning about AI-driven financial products on their own terms. The BCB's 2025 AI monitoring agenda flagged algorithmic credit decisioning as a priority supervision area. The two regulators also signed a separate Technical Cooperation Agreement to expand information-sharing on credit operations — the coordination layer that makes a dual-regulator approach to AI governance coherent rather than fragmented.
The open question is scope. Resolution 246 gives DITEC specific initial mandates — the tokenization project, the sandbox, and IOSCO monitoring. But institutional divisions in regulatory bodies tend to expand their remit as they accumulate expertise and credibility. The division sits inside the Superintendency of Intelligence Development, which is positioned to absorb competitive intelligence on global fintech trends. The regulator that governs the sandbox governs what gets built. DITEC has that authority now, and if the next sandbox cohort produces credible AI-driven financial products, the division's influence within the CVM will expand accordingly.
| Item | Detail |
|---|---|
| Division name | DITEC (Divisão de Tecnologia Financeira) |
| Created by | CVM Resolution 246, July 31, 2026 |
| Reports to | Superintendency of Intelligence Development (SDI) |
| Initial priorities | Tokenization project (2026–27); Regulatory Sandbox management; IOSCO Fintech Task Force monitoring |
| Related initiative | CVM–Banco Central Technical Cooperation Agreement on credit data |
Frequently asked questions
What is Brazil's CVM?
The CVM (Comissão de Valores Mobiliários) is Brazil's securities and capital markets regulator — equivalent to the SEC in the United States. It oversees publicly traded companies, investment funds, securities offerings, and the operation of capital markets infrastructure.
What is DITEC?
DITEC is the Divisão de Tecnologia Financeira — Financial Technology Division — created within the CVM by Resolution 246 on July 31, 2026. It is the CVM's first standing institutional division dedicated to overseeing AI and financial technology in capital markets. Its initial priorities include advisory on a securities tokenization project and management of the next Regulatory Sandbox round.
What is the CVM's Regulatory Sandbox?
The Regulatory Sandbox is a CVM-supervised program that allows innovative financial companies to test new products with real customers before obtaining full regulatory authorization. It has historically been the primary path to market for AI-driven financial products and tokenized securities in Brazil. With DITEC managing the next round, applications will be reviewed by specialists in AI and financial technology rather than generalist securities regulators.