He passed away on Thursday. On Friday, the company could not issue an invoice.

Marco was the managing partner of a small construction firm in the interior of Goiás state. Five employees, monthly revenue between R$ 200,000 and R$ 350,000 depending on the time of year. He handled everything involving paperwork, digital certificates, and bureaucracy. His wife managed the finances in the office, two employees were on-site, one handled internal administration.

On a Thursday morning in March 2024, Marco collapsed in the office. Massive heart attack at 51. The wake was on Friday. The burial on Saturday.

On Monday morning, his wife arrived at the office to begin understanding the scale of what had happened. She found the second administrative employee in a panic. They had a construction project finishing that day. The client, a larger company, wanted the invoice issued so they could release a payment of R$ 87,000 and close the contract.

The company's A3 digital certificate was in Marco's name. On the USB token that sat in his desk drawer. With a password only he knew.

That invoice was not issued on Monday. Or Tuesday. Or Wednesday. It was issued 23 days later, after an emergency power of attorney granted at a notary by the wife (now a widow), recognition of the estate administrator, and several legal workarounds.

In those 23 days:

• The R$ 87,000 payment was delayed
• The client did not sign an additional contract that was under discussion (an estimated R$ 140,000)
• Two other clients asked for invoices for smaller projects and had to wait
• The accountant, without the certificate, could not submit that month's eSocial filing
• An eSocial penalty of around R$ 1,700 was issued

All of this while the wife was trying to recover from grief, organize the estate, care for teenage children, and keep the company running.

Why this happened (and happens every week in Brazil)

Marco's story is not an exception. It is the pattern. To understand why, it helps to separate three layers.

Layer 1: the digital certificate is tied to a specific person

In Brazil, digital certificates operate on a model of holder identity. There are two main types:

• e-CPF: the individual's certificate. Used by the person directly.
• e-CNPJ: the company's certificate. But it requires a responsible person who is an individual.

In an e-CNPJ, the company is the formal holder, but the legal representative (usually the managing partner, owner, or authorized representative) is the one who signs for, installs, configures the token, and sets the password. This representative is a specific person, with a name and a CPF.

When that person passes away, the certificate becomes orphaned. The company still exists (active CNPJ, revenue being generated, live contracts), but the technical instrument for acting digitally on its behalf depends on a person who is no longer there.

Layer 2: the certificate password is private

Even if the company has the physical token (usually sitting in the administrator's desk drawer, on his key ring, or stored in a safe), the password to use the certificate is private to that person. It is not shared information that flows to the team. It is the holder's secret.

Without the password:

• You cannot issue electronic invoices
• You cannot submit eSocial, EFD-Reinf, or DCTFWeb filings
• You cannot digitally sign contracts through a certification authority
• You cannot access gov.br if the only authentication method was the certificate
• You cannot perform certain operations on the business bank account

The company becomes operationally paralyzed. Employees keep working. Construction projects keep going. Clients keep requesting service. But the digital machinery seizes up.

Layer 3: the legal path to resolve it is slow

When a widow or heir tries to access a deceased holder's certificate, the standard path is:

1. Judicial estate proceeding or extrajudicial probate at a notary (faster, if heirs are adults and agree)
2. Appointment of an estate administrator (usually spouse or child)
3. Specific power of attorney or court order for the administrator to represent the company
4. Re-registration of the responsible party with the Federal Revenue (corporate restructuring if necessary)
5. New certificate issued in the name of the new responsible person

Each step takes weeks. In parallel, the company may try:

• An emergency power of attorney if the deceased had a formal proxy (rare)
• An emergency court injunction for operational continuity (depends on the judge, takes business days)
• Manual invoice issuance in some situations (some municipalities accept this, others do not)

Realistic total time: 15 days to 4 months for the company to return to full digital operation. Complex cases can exceed 6 months.

The Brazilian legal framework in 2026

Business continuity after the death of an administrator is regulated by several sections of the Civil Code (Law 10.406/2002) and specific legislation:

• Articles 1.028 and following of the Civil Code address the death of a partner in limited liability companies. The general rule is partial dissolution with payment of shares to heirs, unless the articles of incorporation provide for continuity.
• Well-drafted articles of incorporation can provide for continuity with heirs or automatic substitution. But the vast majority of small Brazilian businesses have generic articles without this provision.
• The Corporate Law (Law 6.404/76) treats corporations differently, but continuity in a corporation depends on other formalities.
• The Federal Revenue defines administrative procedures for changing the partner composition and appointing a new responsible person (Federal Revenue Normative Instruction).

On digital certificates specifically, ICP-Brasil (Brazilian Public Key Infrastructure) has technical standards, but there is no specific legislation governing what happens to a deceased person's certificate. Each certification authority (Serasa Experian, Certisign, Soluti, Valid, etc.) has its own procedure.

In general: a certificate is automatically revoked when the certification authority is notified of the death (upon presentation of a death certificate). Once revoked, it cannot be reactivated with a new password. The only path is a new certificate issued in the name of the new responsible person.

Jurisprudence on digital business continuity after death is still limited. Court decisions vary widely by jurisdiction. What does exist is an abundance of practical cases like Marco's showing that the legal system has not kept pace with the digitization of business.

What you can do now (without going through trauma)

For business owners still alive and organizing preventively:

1. Review the articles of incorporation

Check whether they contain a continuity clause in the event of the death of the managing partner. If not, an amendment to the articles costs very little and takes 1 to 2 weeks through the commercial registry. A simple clause:

"In the event of death or permanent incapacity of the managing partner, [name of heir or other partner] is hereby designated as the legal representative for all administrative, tax, and digital acts on behalf of the company, until a contrary court decision or new partnership resolution."

This clause gives the heir or partner immediate legal basis to act, without waiting for probate.

2. Designate a second responsible person for the e-CNPJ

The Federal Revenue allows a CNPJ to have more than one registered responsible person. Usually only one is listed (the administrator). But a second person (spouse, partner, trusted manager) can be added with permission to issue an A1 or A3 certificate on behalf of the company.

Cost: free registration with the Federal Revenue. Time: 30 minutes online via e-CAC.

Benefit: if the primary holder passes away, the second person already has permission to issue a new certificate immediately, without waiting for anything.

3. Critical procedures document

As administrator, you know exactly how to issue invoices, how to submit eSocial, which system you use, which auxiliary passwords exist. Your team generally does not.

A simple document, updated every 6 months:

• List of systems used (NF-e issuer, management system, bank, accountant)
• Login and procedure for each (without exposing passwords; passwords go in the digital vault)
• Who handles what in an emergency
• Direct contact for the accountant, attorney, and certification authority

4. Personal digital vault with native digital inheritance

This is the step that changes everything in practice. An encrypted client-side vault where you store:

• Digital certificate password
• Login and password for the NF-e issuer and fiscal system
• e-CAC, Federal Revenue, and Sefaz access
• Business bank account password
• Internal system logins
• Scanned documents (articles of incorporation, amendments, powers of attorney)
• Critical operational procedures document

With a configured Dead Man's Switch (DMS), if you stop checking in for X days (configurable, typically 30 to 90), the vault automatically releases access to pre-defined contacts (spouse, partner, trusted manager).

The contact receives access instructions and the procedures document. Instead of 23 days of paralysis like Marco experienced, the company can resume operations within 24 to 48 hours of confirming the death, even while the formal probate process continues.

The cost of not organizing

For Marco, the direct costs were:

• R$ 87,000 payment delayed 23 days
• R$ 140,000 additional contract lost (client went to a competitor)
• eSocial penalty R$ 1,700
• Emergency attorney fees R$ 8,000
• Notary fees (powers of attorney, authorizations) R$ 1,500
• Paralyzed team costs (5 employees × 2 weeks) opportunity cost ~R$ 18,000

Estimated total: R$ 256,200 in direct costs and lost opportunity, not counting the devastating emotional strain on a family already in grief.

The cost of prevention:

• Amendment to articles of incorporation: R$ 200 (commercial registry) plus 1 hour of work
• Registration of second responsible person for e-CNPJ: 30 minutes of time
• Critical procedures document: 2 to 4 hours of work
• Personal digital vault with DMS: R$ 0 to R$ 29 per month

Total: around R$ 200 and a half-day of work to prevent a potential loss of R$ 250,000 or more.

The honest question

If you are an owner or administrator of a small or medium business, answer quickly:

• Is the company's digital certificate only in your name?
• Is the password to that certificate known only to you?
• Does your spouse, child, or business partner know how to access the fiscal system without you?
• Is there a documented continuity procedure in case something happens to you?

If more than two answers are "no," your company is in a situation similar to Marco's. The difference is just one bad Thursday.

See how to organize all of this in 30 minutes, starting with the essentials.

TAIVA Vault: personal digital vault with Dead Man's Switch, ideal for business continuity in Brazilian SMEs. Passwords, documents, procedures: all encrypted client-side. Create free account →

This article is informational and does not constitute legal advice. The case described is a composite based on real events; names and specific details are fictional. For a concrete situation involving business continuity after the death of an administrator, consult a corporate attorney and accountant.