the program

Our values are our identity. This is what sets us apart from other companies and makes us unique. At Itaú Unibanco, our Corporate Culture known as “Itubers Culture” drives the way we relate to customers, employees, shareholders, competitors, suppliers, governments and society at large. It establishes the way we pursue our vision:

“To be the leading bank in sustainable performance and customer satisfaction.”

Among the principles that make up our organizational culture, we value our ethics, which is non-negotiable, that is, we commit ourselves to always doing what is right, without any devious way, without shortcuts. And we exercise our leadership in a transparent and accountable manner, fully committed to society and best governance and management practices. For this:

• It’s about doing what’s right—always—even when it’s the hardest choice.

• No shortcuts; always assessing the risks.

Click here to acess “Itubers Culture”

We are constantly challenged to serve our customers with excellence and exceed their expectations in a highly competitive environment. The current moment, with rapid and intense changes in technology and consumption habits, makes this challenge even greater. At the same time, we must seek differentiated results, always in an ethical manner and aligned with our values, an indispensable condition for these results to be sustainable. To ensure that the conduct of the bank’s employees is known and practiced on a daily basis, we have the Itaú Unibanco Code of Ethics and Conduct. It expresses our conviction that organizations wishing to be perennial do not admit to gain at any cost and that the success of an institution depends on its ability to lead with ethics, integrity and accountability.

Click here to access Itaú Unibanco Code of Ethics and Conduct.

The Compliance role aims to prevent and mitigate Itaú Unibanco’s exposure to situations of non-compliance with standards and commitments (Compliance Risk), being responsible for governance, certification of adherence, conduct and transparency.

Regulatory or Compliance Risk is the risk of sanctions, financial losses or reputational damage arising from the lack of compliance with legal and regulatory provisions, local and international market standards, commitments with regulators, public commitments, self-regulation codes and codes of conduct adhered to by Itaú Unibanco.

Compliance risk is managed through a structured process that aims to identify changes in the regulatory environment, analyze the impacts on the institution’s departments and monitor actions aimed at adherence to regulatory requirements and other commitments mentioned in the previous paragraph.

The Compliance function is carried out directly by the Compliance & OpRisk Board and other Boards in the Risk Department, under the coordination of the Compliance & OpRisk, and in an integrated manner with the other risks incurred by the institution.

Compliance risk governance is governed by the Compliance Policy, which addresses the regulatory requirements of Brazilian CMN Resolution No. 4,595/2017.

Itaú Unibanco is subject to national and international rules, including, at the national level, Law 12,846/13, known as the Anti-Corruption Law, which establishes that legal entities have strict liability (regardless of intent, fault or negligence) if they are involved in any form of corruption or commit other harmful acts against the Brazilian or foreign public administration, such as bid fraud and obstruction of justice, providing for penalties for the practice of acts of corruption, such as suspension of activities or dissolution of the company. Internationally, the Foreign Corrupt Practices Act (FCPA) and the UK Bribery Act stand out, among others in the countries where we are present.

Itaú Unibanco rejects any form of direct or indirect, active or passive corruption, and always seeks to establish fair and transparent relations. In this way, Itaú structures its processes and practices based on global market corruption prevention standards, jurisprudence and information.

The Corporate Corruption Prevention Policy is one of the components of the Integrity and Ethics Program, and aims to reinforce Itaú Unibanco’s commitment to preventing and fighting corruption, in any shape or form. The Policy establishes guidelines and procedures for preventing and combating corruption, such as training, communication and channels for questions and complaints, procedures that aim to avoid conflicts of interest in relations with our stakeholders in the public and private sectors.

 Click here for Federal Law No. 12.846 / 2013

Financial institutions play a central role in preventing unlawful acts such as money laundering, terrorism financing, corruption, fraud, and claims. These acts involve the concealment of illegal funds, support for criminal activities, or misuse of financial structures for illicit purposes.

Money laundering seeks to conceal or disguise the criminal origin of assets or funds.

Terrorism financing and proliferation of weapons of mass destruction occur when resources are directly or indirectly allocated to these purposes.

Corruption involves offering or receiving undue advantages to influence decisions or actions.

Fraud refers to deceptive practices aimed at obtaining undue gains.

Claims are unexpected events causing losses, such as robberies, thefts, or kidnappings.

Embargoes and trade restrictions are measures imposed by authorities against countries, companies, or individuals involved in illicit activities.

The challenge lies in identifying and preventing increasingly sophisticated operations that attempt to mask the origin and destination of illegal resources.

Itaú Unibanco, aware of this scenario, maintains a dedicated structure for the prevention of unlawful acts, focusing on governance, transparency, regulatory compliance, and cooperation with authorities.

To ensure compliance with the guidelines of this policy and prevent its products and services from being used in illicit activities, Itaú Unibanco has established a Corporate Program for the Prevention of Unlawful Acts.

The prevention and combat of fraud are institutional commitments involving all employees, based on principles of ethics, integrity, and compliance.

Fraud may occur through:

• Violations of the Code of Ethics and internal rules, such as engaging in practices not authorized by the company, misconduct, breach of confidentiality, and conflicts of interest.

• Non-compliance with legal and regulatory obligations that jeopardize the organization’s image, assets, or continuity.

• Unlawful acts such as forgery, fraud, embezzlement, theft, robbery, and extortion.

Preventive actions aim to identify inappropriate behavior, mitigate risks, and protect the organization, its clients, and partners from financial, operational, and reputational losses.

In order to ensure transparent and sustainable relationships between our employees and suppliers, we have developed our Supplier Relationship Code. In this code, we present Our Principles, which deal with the values that guide the proper conduct in the business relationship between Itaú Unibanco and its suppliers. The code also translates these values into objective guidelines, stating the expected form of action between both parties in everyday interactions.

Click here to access our Suppliers page.

Click here to access the list of our banking correspondents.

Click here to access the list of our a list of our brokers.

The relationship maintained with Public sector and its officers, regardless of their organization, position or hierarchy, require extensive transparency, act in good faith, and accurate books and records.

This relationshionship can happen (i) in Governamental and Institutional activities and/or (ii) during an acquisition of a product (ii) or during a bidding process that Itaú Unibanco and Agencies, Entities and Companies of the Public Sector are participating.

For this reason, we need to ensure that all interaction with Public sector will be guided by the maintenance of an ethical and transparent relationship, respecting the public administration law, the applicable laws and regulations and the principles established by the Itaú Unibanco Code of Ethics, such as legality, morality and administrative integrity.

Click here to access active contracts.

It is part of Itaú Unibanco’s commitment to build partnerships aimed at promoting the sustainable and ethical development of society, within the limits of local legislation and in accordance with our corporate guidelines. In line with this objective, Itaú Unibanco makes donations and sponsorships, and in order to make such practices transparent, we provide information on the main donation and sponsorship agreements made.

Click here for contracts signed

Internal control systems are an integral part of operational and regulatory risk management and follow a methodology based on the principles of Basel, COSO (Committee of Sponsoring Organizations of the Treadway Commission) and CMN (Brazilian National Monetary Council) Resolutions No. 4,557, No. 4,595 and No. 4,968.

To operationalize its risk management structure, Itaú Unibanco (Itaú) adopts the three lines strategy. This brings clarity as roles and responsibilities, allowing Itaú, through a risk-based approach, to be effective in risk management. The responsibilities involved in this model are:

• First Line: Business or Support areas or Communities, directly responsible for identifying, assessing, responding to, monitoring and reporting operational and compliance risks;
• Second Line: Its objective is to ensure, in an independent and centralized manner, that Itaú’s risks are managed in accordance with policies and procedures, aiming to define parameters for the risk management process and its supervision;
• Third Line: Internal Audit, which is segregated and independent from other áreas of Itaú.

The channel

In order to maintain and strengthen our commitment to ethics, we have an internal ombudsman channel: the Ombudsman, independent area, with full autonomy in the organization and that reports directly to the CEO.

How it works

Guided by trust, dialogue, transparency, ownership, integrity and ethics, the Ombudsman channel is responsible both for guiding and advising employees, and for dealing with suspicious, accusations and complaints, reports on ethical misconduct and behavior contrary to institutional policies, such as moral or sexual harassment, discrimination, or disrespect, as well as interpersonal conflicts and conflicts of interest in the workplace, always based on its operational pillars.

Pillars

There are three pillars that guide the Ombudsman’s performance:

Confidentiality – All information received is treated with discretion and the identity of the protester (when he decides to remain anonymous) and of the interviewees is preserved at all stages of the process.

Neutrality – The Ombudsman is impartial and does not judge anyone. The channel’s objective is, impartially, to understand the situation and seek a solution, valuing integrity in relationships and maintaining a healthy environment.

Independence – It is free to act in defence of best practices in the workplace at any hierarchical level. To reporting to the CEO reinforces and guarantees the channel’s independent and unbiased performance throughout the organization.

Historic

In its 14 years of existence, the Ombudsman has handled over 34 thousand calls, an indication of the credibility it has achieved, mainly driven by the channel’s commitment to helping build a company that values respect, trust, dialogue, transparency, integrity and ethics in all its relationships.

Itaú Explains

Watch the video and get to know, in less than five minutes, the work and performance of the Ombudsman at Itaú Unibanco.

Listen to the podcast to learn more about the Ombudsman’s role in building a culture of openness, trust and collaboration in the organization, in addition to knowing the answers to the main questions about the channel, such as: anonymity, forms and process of action, post-report follow-up, retaliation prevention, and more.

Information is one of the main assets of any organization. For the proper protection of this asset, Itaú Unibanco Holding SA establishes an Information Security and Cyber Security policy to ensure the application of the principles and guidelines for the protection of intellectual property and information of the organization, customers and the public in general. The Information Security and Cyber Security strategy is designed to prevent data security breaches, minimize the risks of unavailability of our services, protect the integrity and prevent any information leaks. To achieve this goal our strategy is based on expanded perimeter protection, supported by control processes for incident detection, prevention, monitoring and response ensuring cyber security risk management and building a robust foundation for the increasingly digital future of Itaú Unibanco. The expanded perimeter concept assumes that information should be protected regardless of where it is, whether it is in a service provider or an international unit, throughout its life cycle, from the moment it is collected through processing, transmission, storage, analysis and disposal.

Click here to access our Security page.

We aim to promote diversity and inclusion, fostering the social and financial development of people and companies for a fairer and more prosperous country.

We are made up of people and we believe that a workforce with a plurality of backgrounds, cultures, beliefs, experiences, races, disabilities, genders, affective-sexual orientations and generations broadens perspectives, and contributes to an environment of respect for and appreciation of differences.

We understand that it is essential to foster and promote entrepreneurship in Brazil. Through our products and services, partnerships and investments, we encourage the development of businesses by providing access to funds, tools and solutions that improve business management and expand their growth potential.

Click here to access Itaú Unibanco’s Diversity and Development.

For over four decades, we have strategically integrated sustainability and ESG issues, to encourage sustainable growth and meet the needs of people and the environment.

We are attentive to the market trends and the expectations of our clients, stockholders, investors, employees, suppliers and society, which enables us to promote a greener and more inclusive economy.

We make up the top sustainability indexes and are recognized by ESG rating agencies. Over the years, we have signed up to voluntary commitments and pacts aimed at global best practices.

Click here to access Itaú Unibanco’s Sustainability page