Now in beta · EPCIS 2.0 certified

The traceability layer built on NF-e

SurTrace turns Brazil's 3-billion-a-year fiscal invoice system into a cryptographically verifiable supply chain. EUDR due diligence, ANVISA serialization and ESG Scope 3 reporting — via a single REST API.

Request API accessRead the docs →
<50msp99 latency
99.99%Ledger integrity
GS1 EPCIS 2.0Standard
SOC 2 · LGPDCompliant

Built on open standards

GS1 EPCIS 2.0MapBiomasPRODESSEFAZ NF-eSCTM ANVISAISSB S2

Developer experience

Integrate in 15 minutes, not 15 months

A single POST transforms your existing NF-e stream into a verifiable EPCIS 2.0 event chain. No ERP replacement. No proprietary SDKs.

bash
# Ingest an NF-e and get a signed EPCIS event back
curl https://api.surtrace.io/v1/ingest/nfe \
  -H "Authorization: Bearer $SURTRACE_KEY" \
  -d @nfe-35240812345678901234.xml

{
  "lotId":      "SORS-IBAN-01HRXQKZ8B9...",
  "eventId":    "epcis:obj:01HRXQKZ8B9...",
  "hashChain":  "sha256:b8f3a...c2d1",
  "eudrScore":  0.94,
  "submitted":  "2026-04-17T09:22:14Z"
}

Platform primitives

Everything your supply chain needs

🔗

Append-only ledger

security

SHA-256 hash chain per lot. Every EPCIS event is cryptographically linked to the previous one — tampering is instantly detectable.

📄

NF-e native ingestion

standard

Connect directly to your SEFAZ pipeline. We parse the XML, extract lots and relationships, generate EPCIS events automatically.

🌍

EUDR verification pipeline

compliance

Five-step automated due diligence: polygon geometry, PRODES alerts, IBAMA embargos, FUNAI indigenous lands, MapBiomas land-cover — each run tagged and timestamped.

🏛️

DDS generation

compliance

Due-diligence statements built from verified evidence. EU IS sandbox submission live with design partners; production submission rolling out Q2 2026.

💊

ANVISA RDC 657 (beta)

compliance

Serial commissioning with GTIN + SN validation and SCTM payload format. Production SCTM integration requires a pharma design partner — talk to us.

📊

ESG reporting (Q3 2026)

esg

Scope 3 Cat. 1 emissions per lot by biome and commodity. Data model in place; emission-factor library and CDP export ship with M2.

🏢

Multi-tenant by design

security

Row-level isolation via JWT scopes. Tenant-aware queries at the repository layer. Zero cross-tenant leakage.

🔄

Recall with real side-effects

execute() flips affected lots to RECALLED, generates a PDF EvidenceGroup, dispatches signed webhooks to connected tenants, and drops durable outbox rows for MAPA / ANVISA. Forward + backward graph traversal in milliseconds.

📑

DDS submission audit

compliance

Every EU IS / TRACES NT submission is idempotent (tenant + lot + payload hash). dds_submission_audit stores request, response, and status per attempt; a 5-min polling job reconciles PENDING → ACCEPTED/REJECTED. GET /api/v1/dds/audit/{lotId} exposes the full trail.

🔐

Share links with lifecycle

security

Scope-bound, expiring, rotatable share tokens. Revoke auditor access in under a minute without touching credentials or redeploying.

🌐

Cloud or edge

Cloud profile (Postgres + S3) for HQ. Edge profile (SQLite + local filesystem) for offline facilities and rural operations.

🔌

REST + Webhooks

standard

GS1 EPCIS 2.0 REST binding. Webhook delivery with retries and HMAC-SHA256 signatures. Streaming ingestion on the roadmap.

The NF-e advantage

Brazil's fiscal infrastructure is the largest traceability layer in the world

We connect it to product traceability — something no one else has done systematically.

3B+
NF-e per yearFiscal invoices issued in Brazil
18yrs
In productionNF-e ecosystem maturity
5k+
Exporters affectedBy EUDR alone
€4.2B
Coffee to EU / yearNeeds EUDR DDS from Dec 2025

How we compare

Built different, on purpose

SurTraceTOTVS AgroIBM Food TrustConsulting firms
Developer-first API✓———
Native NF-e ingestion✓✓——
Open-source frameworks✓———
EUDR end-to-end✓——✓
Self-serve onboarding✓———
Implementation timeWeeks6–12 months6–12 months3–6 months
Starting priceFree tierEnterprise onlyEnterprise onlyR$ 80k+

Frequently asked

What developers ask us

How is SurTrace different from TOTVS or SAP?
SurTrace is a trust layer that sits on top of your existing systems — not a replacement. We ingest NF-e from your ERP, generate EPCIS events, and expose a clean API. You keep your ERP, WMS, LIMS; we handle traceability and compliance.
Do I need to replace my ERP?
No. SurTrace reads NF-e directly from SEFAZ or from your ERP export. We integrate with TOTVS Protheus, SAP B1, Sankhya, and any system that produces NF-e. Implementation typically takes 2–6 weeks.
What about offline operations?
The edge profile runs on SQLite with local filesystem storage. It syncs with the cloud when connectivity returns. We've tested it on Raspberry Pi 5 in rural Brazilian conditions.
How do you handle EUDR for blends (coffee, cocoa)?
Each input lot keeps its origin polygon. When you blend, we create an EPCIS TransformationEvent that records proportional composition. The final DDS references every contributing property with its individual EUDR score.
What's your pricing model?
Free tier up to 10k events/month for evaluation. Growth plan starts at R$ 2,500/month. Enterprise for >1M events/month with dedicated support and SLA. No per-seat pricing.

Start ingesting events today

Free tier · No credit card · Full API access for evaluation

Request API keyRead the docs →

Get on the beta

We're onboarding 10 design partners this cycle. Tell us about your use case.

Typically we respond within 24h. No spam.