Brazilian organisations need two layers of AI agent training. Everyone near agents needs literacy: what agents do, how they are governed and how personal data under the LGPD must be handled. People who approve agent actions, especially Pix payments, credit and customer data changes, need certified competence. Banco Central do Brasil, CVM, SUSEP and the ANPD shape its content.
What should staff in Brazil be trained on?
The foundations do not change by country. Staff working with agents should understand depth (how far each agent may act), the four verdicts (allowed, held, refused, withheld), provenance (sealed, signed, declared or external facts) and the record that every verdict leaves.
What changes in Brazil is where the pressure falls. Three features of the market shape the content:
- Instant payments. Pix settles in seconds, at any hour. A payment approved in error is very hard to recover. Approvers must treat every beneficiary change and every urgent request as a fraud signal until verified.
- Personal data. The LGPD governs personal data, and the ANPD enforces it. Agents process large volumes of it, and staff must know what may be disclosed and to whom.
- Consumer volume. Businesses serving large retail customer bases through digital channels may route much of their contact through agents. Approvers see high volumes, which makes seeded-error testing and attention to automation bias important.
Which Brazilian rules shape the training?
Banco Central do Brasil. Supervises banks and payment institutions and runs Pix. Institutions using agents in payments, onboarding or credit must be able to show that the people overseeing them are competent.
CVM. Regulates securities markets. Where agents draft communications or prepare transactions for investors, the people approving them need to understand what the agent may do.
SUSEP. Supervises insurance. Agents in claims and underwriting need trained approvers, as covered in the brief on risk managers in insurance in Brazil.
The LGPD and the ANPD. Every organisation processing personal data in Brazil is covered. Staff using agents must understand data minimisation, lawful purposes and data subjects' rights; the note on LGPD and training staff who use AI agents goes further.
Cross-border. Brazilian organisations with operations in the EU face Article 4 of the EU AI Act. FATF Recommendations shape AML expectations, including customer due diligence.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
What should each tier include?
| Tier | Who | Content | Evidence |
|---|---|---|---|
| Literacy | All staff | Agents, verdicts, provenance, LGPD basics | Completion records |
| Users | Staff working alongside agents | The specific agents, their depth and refusals | Role training records |
| Approvers | Staff releasing Pix payments, credit, data changes | Decision chain, fraud signals, practice on real cases | Certificate checkable at source |
| Owners | Those who design and certify agents | Building, certifying and monitoring agents | Advanced certificate |
E-commerce operations are a common starting point; see the brief on operations managers in e-commerce in Brazil.
An example from a digital bank
A digital bank in São Paulo uses an agent to handle customer contacts and prepare Pix refunds and beneficiary changes, all held for a person. Fraudsters target the bank with requests to change beneficiary keys, often claiming urgency.
The bank gives all staff a literacy module covering agents and the LGPD. It trains the contact team on the agent's refusals. It certifies the 30 people who approve held Pix actions, after a supervised practicum full of seeded fraud cases. Approval rights depend on a current certificate. When the Banco Central do Brasil asks how the bank controls fraud in Pix operations, the bank can show the agent's depth, its approvers, their certificates and the record of each approval.
How should you evidence it?
Keep the role map, training records with results, certificates checked at source, rights histories and change briefings. Organisations operating in several markets can compare with Ireland and Singapore. The guide to AI literacy and certification explains the general model.
Where the Academy fits
Pryme Intelligence Academy works across markets, with module tests set in each learner's own industry and role. Lessons can be read or listened to as audio. Professional certificates are issued through VerifyDoc.ai and can be checked at source by number or QR code, which suits Brazilian organisations that need evidence they can show a supervisor.
Questions people ask
Does the LGPD require AI training?
It does not name AI training. It requires lawful, minimal and secure processing of personal data, and staff using agents must be trained enough to meet those duties.
Should Pix approvals always need a person?
Routine, low-value payments within tight bounds may run at depth 3. Beneficiary changes and anything unusual should be held for a certified person.
Do fintechs need the same training as banks?
If they release payments or make credit decisions with agents, yes. The supervisor may differ; the competence needed does not.