OR, a real estate company and part of the Odebrecht Group, operates in the construction and development of corporate, commercial, residential and allotment developments. With regional offices in 6 states of Brazil the company has already delivered more than 80 projects in 13 years of existence, and closed 2019 with 840 million reais revenue.

For OR data privacy is essential. Within the group, the company has the largest B2C relationship – direct contact with customers – many of them, individuals. The design of a compliance and data security project has gained priority with the approval of the Lei Geral de Proteção de Dados (LGPD) in Brazil.

The culture in the Brazilian real estate market was already challenging, as data sharing between the parties is quite intense.

Head of IT and Security at OR, Ygor Silva, describes the breadth of their operations: “We have to look not only at our 500 employees, and customers, but also at other players in the real estate structure: suppliers, operators, banks, and agents.”

The complexity is having to deal with individuals’ data in all the information flows from different areas of the company and outside it. 

“We deal with personal data all the time, in prospecting and winning new customers, in negotiation, sale, payment, execution, financial operations and after sales, and when the customer becomes the owner of a property built by OR”, detailed Ygor.

Choosing OneTrust for scalability, credibility, and trust

For over a year OR discussed the LGPD, sought advice, legal opinions and evaluated available tools in the market.  Early in the project OR knew that it would be ideal to choose a platform model as a service, a scalable solution that would not complicate and burden the infrastructure.