UNITED STATES
SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 20-F

(Mark One)

☐    REGISTRATION STATEMENT PURSUANT TO SECTION 12(b) OR (g) OF THE SECURITIES EXCHANGE ACT OF 1934

OR

☒    ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934
For the fiscal year ended December 31, 2021

OR

☐    TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934
For the transition period from                           to                          

OR

☐    SHELL COMPANY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934
Date of event requiring this shell company report                                  

Commission file number: 001-39155

XP Inc.
(Exact name of Registrant as specified in its charter)

Not applicable
(Translation of Registrant’s name into English)

Cayman Islands
(Jurisdiction of incorporation or organization)

Av. Chedid Jafet, 75, Torre Sul, 30th floor,
Vila Olímpia – São Paulo
Brazil 04551-065
+55 (11) 3075-0429
(Address of principal executive offices)

Bruno Constantino Alexandre dos Santos, Chief Financial Officer
Tel: +55 (11) 3075-0429
Av. Chedid Jafet, 75, Torre Sul, 30th floor,
Vila Olímpia – São Paulo
Brazil 04551-065
(Name, Telephone, E-mail and/or Facsimile number and Address of Company Contact Person)

Copies to:
Manuel Garciadiaz
Byron B. Rooney
Davis Polk & Wardwell LLP
450 Lexington Avenue
New York, NY 10017
Phone: (212) 450-4000
Fax: (212) 701-5800

Securities registered or to be registered pursuant to Section 12(b) of the Act:

Title of each class	Trading Symbol	Name of each exchange on which registered
Class A common shares, par value US$0.00001 per share	XP	The NASDAQ Global Select Market

Securities registered or to be registered pursuant to Section 12(g) of the Act:
None

Securities for which there is a reporting obligation pursuant to Section 15(d) of the Act:
None

Indicate the number of outstanding shares of each of the issuer’s classes of capital or common stock as of the close of the period covered by the annual report.

The number of outstanding shares as of December 31, 2021 was 424,153,735 Class A common shares and 135,394,989 Class B common shares.

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act.

Yes ☒

No ☐

If this report is an annual or transition report, indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934.

Yes ☐

No ☒

Note – Checking the box above will not relieve any registrant required to file reports pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934 from their obligations under those Sections.

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.

Yes ☒

No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T during the preceding 12 months (or for such shorter period that the registrant was required to submit such files).

Yes ☒

No ☐ (not required)

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, or an emerging growth company. See definition of “large accelerated filer,” “accelerated filer” and “emerging growth company” in Rule 12b-2 of the Exchange Act. (Check one):

Large Accelerated Filer ☒

Accelerated Filer ☐

Non-accelerated Filer ☐

Emerging growth company ☐

If an emerging growth company that prepares its financial statements in accordance with U.S. GAAP, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards† provided pursuant to Section 13(a) of the Exchange Act. ☐

† The term “new or revised financial accounting standard” refers to any update issued by the Financial Accounting Standards Board to its Accounting Standards Codification after April 5, 2012.

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

Indicate by check mark which basis of accounting the registrant has used to prepare the financial statements included in this annual report:

U.S. GAAP ☐

International Financial Reporting Standards as issued by
the International Accounting Standards Board ☒

Other ☐

If “Other” has been checked in response to the previous question, indicate by check mark which financial statement item the registrant has elected to follow.

Item 17 ☐

Item 18 ☐

If this is an annual report, indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act).

Yes ☐

No ☒

XP INC.
TABLE OF CONTENTS

		Page
Presentation of Financial and Other Information		1
Cautionary Statement Regarding Forward-Looking Statements		6
PART I
ITEM 1.	IDENTITY OF DIRECTORS SENIOR MANAGEMENT AND ADVISERS	7
A.	Directors and Senior Management	7
B.	Advisers	7
C.	Auditors	7
ITEM 2.	OFFER STATISTICS AND EXPECTED TIMETABLE	7
A.	Offer Statistics	7
B.	Method and Expected Timetable	7
ITEM 3.	KEY INFORMATION	7
A.	[Removed and Reserved.]	7
B.	Capitalization and Indebtedness	7
C.	Reasons for the Offer and Use of Proceeds	7
D.	Risk Factors	7
ITEM 4.	INFORMATION ON THE COMPANY	43
A.	History and Development of the Company	43
B.	Business Overview	50
C.	Organizational Structure	97
D.	Property, Plant and Equipment	99
ITEM 4A.	UNRESOLVED STAFF COMMENTS	99
ITEM 5.	OPERATING AND FINANCIAL REVIEW AND PROSPECTS	99
A.	Operating Results	99
B.	Liquidity and Capital Resources	121
C.	Research and Development, Patents and Licenses, etc.	125
D.	Trend Information	125
E.	Critical Accounting Estimates	125
ITEM 6.	DIRECTORS, SENIOR MANAGEMENT AND EMPLOYEES	125
A.	Directors and Senior Management	125
B.	Compensation	132
C.	Board Practices	133
D.	Employees	136
E.	Share Ownership	136
ITEM 7.	MAJOR SHAREHOLDERS AND RELATED PARTY TRANSACTIONS	136
A.	Major Shareholders	136
B.	Related Party Transactions	138
C.	Interests of Experts and Counsel	139
ITEM 8.	FINANCIAL INFORMATION	140
A.	Consolidated Statements and Other Financial Information	140
B.	Significant Changes	143
ITEM 9.	THE OFFER AND LISTING	143
A.	Offering and Listing Details	143
B.	Plan of Distribution	143
C.	Markets	143
D.	Selling Shareholders	143
E.	Dilution	143
F.	Expenses of the Issue	143

i

ITEM 10.	ADDITIONAL INFORMATION	143
A.	Share Capital	143
B.	Memorandum and Articles of Association	143
C.	Material Contracts	153
D.	Exchange Controls	153
E.	Taxation	153
F.	Dividends and Paying Agents	157
G.	Statement by Experts	157
H.	Documents on Display	157
I.	Subsidiary Information	157
ITEM 11.	QUANTITATIVE AND QUALITATIVE DISCLOSURES ABOUT MARKET RISK	158
ITEM 12.	DESCRIPTION OF SECURITIES OTHER THAN EQUITY SECURITIES	161
A.	Debt Securities	161
B.	Warrants and Rights	161
C.	Other Securities	161
D.	American Depositary Shares	161
PART II
ITEM 13.	DEFAULTS, DIVIDEND ARREARAGES AND DELINQUENCIES	162
A.	Defaults	162
B.	Arrears and Delinquencies	162
ITEM 14.	MATERIAL MODIFICATIONS TO THE RIGHTS OF SECURITY HOLDERS AND USE OF PROCEEDS	162
A.	Material Modifications to Instruments	162
B.	Material Modifications to Rights	162
C.	Withdrawal or Substitution of Assets	162
D.	Change in Trustees or Paying Agents	162
E.	Use of Proceeds	162
ITEM 15.	CONTROLS AND PROCEDURES	163
A.	Disclosure Controls and Procedures	163
B.	Management’s Annual Report on Internal Control Over Financial Reporting	163
C.	Attestation Report of the Registered Public Accounting Firm	163
D.	Changes in Internal Control Over Financial Reporting	163
ITEM 16.	[RESERVED]	164
ITEM 16A.	Audit Committee Financial Expert	164
ITEM 16B.	Code of Ethics	164
ITEM 16C.	Principal Accountant Fees and Services	164
ITEM 16D.	Exemptions from the Listing Standards for Audit Committees	165
ITEM 16E.	Purchases of Equity Securities by the Issuer and Affiliated Purchasers	165
ITEM 16F.	Change in Registrant’s Certifying Accountant	165
ITEM 16G.	Corporate Governance	165
ITEM 16H.	Mine Safety Disclosure	170
ITEM 16I.	Disclosure Regarding Foreign Jurisdictions that Prevent Inspections	170
PART III
ITEM 17.	FINANCIAL STATEMENTS	171
ITEM 18.	FINANCIAL STATEMENTS	171
ITEM 19.	EXHIBITS	171

ii

PRESENTATION OF FINANCIAL AND OTHER INFORMATION

All references to “U.S. dollars,” “dollars” or “$” are to the U.S. dollar. All references to “real,” “reais,” “Brazilian real,” “Brazilian reais” or “R$” are to the Brazilian real, the official currency of Brazil. All references to “IFRS” are to International Financial Reporting Standards, as issued by the International Accounting Standards Board, or the “IASB.”

Financial Statements

XP was incorporated on August 29, 2019, as a Cayman Islands exempted company with limited liability duly registered with the Cayman Islands Registrar of Companies. Until the contribution of the shares of XP Investimentos S.A., or XP Brazil shares, to it prior to the consummation of our initial public offering of Class A common shares completed on December 13, 2019, or the “Initial Public Offering” and the “Share Contribution,” XP had not commenced operations and had only nominal assets and liabilities and no material contingent liabilities or commitments.

We maintain our books and records in Brazilian reais, the presentation currency for our financial statements and the functional currency of our operations in Brazil. Our annual consolidated financial statements were prepared in accordance with IFRS, as issued by the IASB. Unless otherwise noted, our consolidated statement of financial position information presented herein as of December 31, 2021 and 2020 and the consolidated statements of income for the years ended December 31, 2021, 2020 and 2019 is stated in Brazilian reais, our reporting currency. Our consolidated financial information contained in this annual report is derived from our audited consolidated financial statements as of December 31, 2021 and 2020 and statements of income for the years ended December 31, 2021, 2020 and 2019, together with the notes thereto. All references herein to “our financial statements,” “our audited consolidated financial information” and “our audited consolidated financial statements” are to our consolidated financial statements included elsewhere in this annual report.

This financial information should be read in conjunction with “Item 5. Operating and Financial Review and Prospects” and our audited consolidated financial statements, including the notes thereto, included elsewhere in this annual report.

Our fiscal year ends on December 31. References in this annual report to a fiscal year, such as “fiscal year 2021,” relate to our fiscal year ended on December 31 of that calendar year.

Corporate Events

Our Incorporation

We are a Cayman Islands exempted company incorporated with limited liability on August 29, 2019 for purposes of effectuating our initial public offering. At the time of our incorporation, XP Controle Participações S.A., or “XP Controle” (the predecessor-in-interest to XP Control LLC, or “XP Control”), Itaú Unibanco S.A., or “Itaú Unibanco” (the predecessor-in-interest to ITB Holding Brasil Participações Ltda., or “ITB Holding,” and Itaú Unibanco Holding S.A., or “Itaú Unibanco Holding”), G.A. Brasil IV Fundo de Investimento em Participações Multiestratégia (the predecessor-in-interest to General Atlantic (XP) Bermuda, L.P., or “GA Bermuda”), and DYNA III Fundo de Investimento em Participações Multiestratégia, or “DYNA III,” held 2,036,988,542 shares (prior to giving effect to the Share Split, as defined herein) of XP Brazil, which were all of the shares of XP Brazil. All references to “XP Brazil” refer to XP Investimentos S.A., our principal Brazilian non-operating holding company.

Itaú Transaction and 2022 Acquisition

In connection with the Itaú Transaction entered into on May 11, 2017, ITB Holding shall purchase in 2022, subject to certain conditions precedent (including regulatory approvals), the equivalent of 11.5% of XP’s total issued share capital (pre-initial public offering), which share capital is currently held by XP Controle, GA Bermuda and DYNA III, for a certain and adjusted price previously agreed in the relevant share purchase agreement relating to the Itaú Transaction.

Share Contribution and Share Split

On November 29, 2019, XP Controle, ITB Holding, GA Bermuda and DYNA III contributed all of their shares in XP Brazil to us. In return for this contribution, we issued new Class B common shares to XP Controle, new Class A common shares and Class B common shares to ITB Holding, new Class A common shares and Class B common shares to GA Bermuda and new Class A common shares to DYNA III in a one-to-one exchange for the shares of XP Brazil contributed to us. In addition and following the Share Contribution, we implemented a four-to-one reverse share split (or consolidation), effective as of November 30, 2019, which we refer to herein as the Share Split.

1

XPart Merger

On October 1, 2021, we consummated the merger of XPart S.A., or “XPart,” with and into us, pursuant to which XPart ceased to exist. In connection with the merger, XPart shareholders, including Itaú Unibanco Participações S.A., or “IUPAR,” and Itaúsa S.A., or “Itaúsa,” received 225,796,528 Class A common shares previously held by XPart, including in the form of Brazilian Depositary Receipts, or “BDRs,” in the case of Brazilian or non-Brazilian residents. Our BDRs started trading at the B3 on October 4, 2021 under the symbol “XPBR31.” See “Item 7. Major Shareholders and Related Party Transactions—A. Major Shareholders—Itaú Unibanco Holding Transaction.”

The following chart shows our corporate structure as of the date hereof:

On December 10, 2021, IUPAR concluded a corporate reorganization within its partial spin-off resulting in the transfer of (1) 39,386,461 Class A common shares to its shareholder Itaúsa; (2) 9,906,362 Class A common shares to São Carlos Investimentos Ltda.; and (3) 9,906,362 Class A common shares to São Marcos Investimentos Ltda., the last two being personal holding companies held by João Moreira Salles and Walther Moreira Salles Junior, respectively.

On December 14, 2021, XP Controle went through a corporate reorganization resulting in the transfer of 108,631,284 Class B common shares to XP Control, so that XP Controle retained only 12,730,020 Class B common shares acquired before our initial public offering in connection with our corporate reorganization on November 29, 2019. The indirect holders of such common shares and our indirect controlling shareholders did not change as a result of such XP Controle corporate reorganization, since XP Control is under the same control as XP Controle.

As of the date of this annual report, we had a total of 559,548,724 common shares issued and outstanding; 135,394,989 of these shares were Class B common shares beneficially owned by XP Controle, XP Control and GA Bermuda; and 424,153,735 of these shares were Class A common shares beneficially owned by Itaúsa, GA Bermuda, São Carlos Investimentos Ltda., São Marcos Investimentos Ltda. and public holders.

2

Please read the information in the section entitled “Item 4. Information on the Company—C. Organizational Structure” for a more thorough description of the operations of our material operating subsidiaries.

Financial Information in U.S. Dollars

Solely for the convenience of the reader, we have translated some of the real amounts included in this annual report from reais into U.S. dollars. You should not construe these translations as representations by us that the amounts actually represent these U.S. dollar amounts or could be converted into U.S. dollars at the rates indicated. Unless otherwise indicated, we have translated real amounts into U.S. dollars using a rate of R$5.5805 to US$1.00, the commercial selling rate for U.S. dollars as of December 31, 2021 as reported by the Central Bank. See “Item 5. Operating and Financial Review and Prospects—A. Operating Results—Exchange Rates” for more detailed information regarding translation of reais into U.S. dollars and for historical exchange rates for the Brazilian real.

Special Note Regarding Non-GAAP Financial Measures

This annual report presents our Floating Balance, Adjusted Gross Financial Assets, Adjusted EBITDA, Adjusted Net Income, Adjusted Cash Flow from Operating Activities, Adjusted Cash Flow from Investing Activities, and Adjusted Cash Flow from Financing Activities information for the convenience of the investors.

We present Floating Balance because we believe this measure helps to understand the effect on our balance sheet of uninvested cash balances from retail clients’ investment accounts at XP companies. We calculate Floating Balance as the sum of securities trading and intermediation (liabilities), minus securities trading and intermediation (assets). It is a metric that our management tracks internally and that investors and analysts typically want to calculate. Unlike the portions of Retail AUC invested by clients in equities, fixed income, mutual funds and almost all our other asset classes, Floating Balance is accounted for on our balance sheet, resulting in a net increase in our liabilities, and is a source of funds that we allocate to securities and financial instruments, which generates interest revenues for us. Given the size of our current AUC and the pace of our growth, Floating Balance, despite being historically only in the range of 1% to 3% of total AUC, is material and therefore helps explain the variation of the assets and liabilities in our balance sheet.

We present Adjusted Gross Financial Assets because we believe this metric captures the liquidity that is in fact available to us, net of the portion of liquidity that is related to our Floating Balance (and therefore attributable to clients). We calculate Adjusted Gross Financial Assets as the sum of (1) Cash and Financial Assets (comprising Cash plus Securities – Fair value through profit or loss, plus Securities – Fair value through other comprehensive income, plus Securities – Evaluated at amortized cost, plus Derivative financial instruments, plus Securities purchased under agreements to resell, plus Loan operations), less (2) Financial Liabilities (comprising of the sum of Securities loaned, Derivative financial instruments, Securities sold under repurchase agreements and Private pension liabilities, Deposits and Structured operation certificates), and (3) less Floating Balance. It is a measure that we track internally on a daily basis, and it more intuitively reflects the effect of the operational profits we generate and the variations between working capital assets and liabilities (cash flows from operating activities), investments in fixed and intangible assets (cash flows from investing activities) and inflows and outflows related to equity and debt securities in our capital structure (cash flows from financing activities). Our management treats all securities and financial instrument assets, net of financial instrument liabilities, as balances that compose our total liquidity, with sub line items (such as, for example, “securities at fair value through profit and loss” and “securities at fair value through other comprehensive income”) expected to fluctuate substantially from quarter to quarter as our treasury manages and allocates our total liquidity to the most suitable financial instruments.

We present Adjusted EBITDA because we believe this measure can provide useful information to investors and analysts regarding the operational results of the business, EBITDA being a fairly common metric that market participants are familiar with, in particular when understanding and analyzing service companies. Despite having two subsidiaries that are financial institutions in Brazil, we believe our business is primarily an asset-light services and fees business. We calculate Adjusted EBITDA as net income, plus income tax, plus depreciation and amortization, plus interest expense on debt, minus share of profit or (loss) in joint ventures and associates, plus Itaú Transaction and deal-related expenses, plus offering process-related expenses, plus our share-based plan expenses, minus tax claim recognition (2010-2018).

We present Adjusted Net Income because we believe this measure can provide useful information to investors and analysts regarding the net results of the business, excluding one-time revenues or expenses related to transactions or events that are not reflective of our core operating performance. We calculate Adjusted Net Income as net income, plus Itaú Transaction and deal-related expenses, plus offering process-related expenses, plus our share-based plan expenses, minus tax claim recognition (2010-2018), plus/minus taxes.

3

We present Adjusted Cash Flow from Operating Activities, Adjusted Cash Flow from Investing Activities, and Adjusted Cash Flow from Financing Activities because we believe these are useful indicators of liquidity that provides information to management and investors about the amount of cash generated from our core operations after changes in working capital. We calculate Adjusted Cash Flow from Operating Activities net cash flow (used in) operating activities less investments in our IFA network (commissions and advances paid to our IFA network, which are classified as cash flow from operating activities in our consolidated financial statements) and financing instruments payable. We calculate Adjusted Cash Flow from Investing Activities as cash flows from investing activities plus investments in our IFA Network. We calculate Adjusted Cash Flows from Financing Activities as net cash flows from financing activities plus financing instruments payable. We maintain consistency with our Adjusted Gross Financial Assets. Adjusted Cash Flow has limitations as an analytical tool, and you should not consider Adjusted Cash Flow in isolation or as an alternative to cash flow from operating activities or any other liquidity measure determined in accordance with GAAP. You are encouraged to evaluate each adjustment. In addition, in evaluating Adjusted Cash Flow, you should be aware that in the future, we may incur changes similar to the adjustments in the presentation of Adjusted Cash Flow. In addition, Adjusted Cash Flow may not be comparable to similarly titled measures used by other companies in our industry or across different industries.

The non-GAAP financial measures described in this annual report are not a substitute for the IFRS measures of earnings. Additionally, our calculation of Adjusted EBITDA and Adjusted Net Income may be different from the calculation used by other companies, including our competitors in the financial services industry, and therefore, our measures may not be comparable to those of other companies. Adjusted EBITDA does not reflect historical cash expenditures or future requirements for capital expenditures or contractual commitments.

Market Share and Other Information

This annual report contains data related to economic conditions in the market in which we operate. The information contained in this annual report concerning economic conditions is based on publicly available information from third-party sources that we believe to be reasonable. Market data and certain industry forecast data used in this annual report were obtained from internal reports and studies, where appropriate, as well as estimates, market research, publicly available information (including information available from the United States Securities and Exchange Commission website) and industry publications. We obtained the information included in this annual report relating to the industry in which we operate, as well as the estimates concerning market shares, through internal research, a report by management consulting company Oliver Wyman commissioned by us, public information and publications on the industry prepared by official public sources, such as the Brazilian Central Bank, the Brazilian Institute of Geography and Statistics (Instituto Brasileiro de Geografia e Estatística), or the “IBGE,” the Institute of Applied Economic Research (Instituto de Pesquisa Econômica Aplicada), or the “IPEA,” as well as private sources, such as B3, ANBIMA, Nielsen, consulting and research companies in the Brazilian financial services industry, the Brazilian Economic Institute of Fundação Getulio Vargas (Instituto Brasileiro de Economia da Fundação Getulio Vargas), or the “FGV/IBRE,” among others.

Industry publications generally state that the information they include has been obtained from sources believed to be reliable, but that the accuracy and completeness of such information is not guaranteed. Although we have no reason to believe any of this information or these reports are inaccurate in any material respect and believe and act as if they are reliable, neither we nor our affiliates or agents have independently verified it. Governmental publications and other market sources, including those referred to above, generally state that their information was obtained from recognized and reliable sources, but the accuracy and completeness of that information is not guaranteed. In addition, the data that we compile internally and our estimates have not been verified by an independent source. Except as disclosed in this annual report, none of the publications, reports or other published industry sources referred to in this annual report were commissioned by us or prepared at our request. Except as disclosed in this annual report, we have not sought or obtained the consent of any of these sources to include such market data in this annual report.

4

Calculation of Net Promoter Score

Net Promoter Score, or “NPS,” is a widely known survey methodology that measures the willingness of customers to recommend a company’s products and services. It is used to gauge customers’ overall satisfaction with a company’s products and services and their loyalty to the brand, and it is typically based on customer surveys. NPS measures satisfaction using a scale of zero to 10 based on a customer’s response to the following question: “How likely is it that you would recommend XP to a friend or colleague?” Responses of nine or ten are considered “Promoters.” Responses of seven or eight are considered neutral. Responses of six or less are considered “Detractors.” The NPS, a percentage expressed as a numerical value, is calculated by subtracting the percentage of respondents who are Detractors from the percentage who are Promoters and dividing that number by the total number of respondents, which means that the higher the number, the higher the measure of customer satisfaction. The NPS calculation gives no weight to customers who decline to answer the survey question. The NPS calculation as of a given date reflects the average of the answers in the previous six months, e.g., the NPS as of December 2021 reflects the average of answers from July 2021 to December 2021. Our NPS score as calculated by us as of December 2019, December 2020 and December 2021 was 73, 71, and 76, respectively.

Rounding

We have made rounding adjustments to some of the figures included in this annual report. Accordingly, numerical figures shown as totals in some tables may not be an arithmetic aggregation of the figures that preceded them.

5

CAUTIONARY STATEMENT REGARDING FORWARD-LOOKING STATEMENTS

This annual report on Form 20-F contains statements that constitute forward-looking statements. Many of the forward-looking statements contained in this annual report can be identified by the use of forward-looking words such as “anticipate,” “believe,” “could,” “expect,” “should,” “plan,” “intend,” “estimate” and “potential,” among others.

Forward-looking statements appear in a number of places in this annual report and include, but are not limited to, statements regarding our intent, belief or current expectations. Forward-looking statements are based on our management’s beliefs and assumptions and on information currently available to our management. Such statements are subject to risks and uncertainties, and actual results may differ materially from those expressed or implied in the forward-looking statements due to various factors, including, but not limited to, those identified under the section entitled “Item 3. Key Information—D. Risk Factors” in this annual report. These risks and uncertainties include factors relating to:

•general economic, financial, political, demographic and business conditions in Brazil, as well as any other countries we may serve in the future and their impact on our business;

•fluctuations in interest, inflation and exchange rates in Brazil and any other countries we may serve in the future;

•the economic, financial, political and health effects of the ongoing coronavirus pandemic, or COVID-19, or other pandemics, epidemics and similar crises, and governmental responses thereto, particularly as such factors impact Brazil and consumer behavior and continue to cause severe, ongoing, negative macroeconomic effects, which could intensify the impacts of other risks described under “Risk Factors;”

•competition in the financial services industry;

•our ability to implement our business strategy;

•our ability to adapt to the rapid pace of technological changes in the financial services industry;

•the reliability, performance, functionality and quality of our products and services, the investment performance of investment funds managed by third parties or by our asset managers and the quality, reliability and performance of our suitability, risk management and business continuity policies and processes;

•the availability of government authorizations on terms and conditions and within periods acceptable to us;

•our ability to continue attracting and retaining new appropriately skilled employees;

•our capitalization and level of indebtedness;

•the interests of our controlling shareholders;

•changes in government regulations applicable to the financial services industry in Brazil and elsewhere;

•our ability to compete and conduct our business in the future;

•the success of our operating initiatives, including advertising and promotional efforts and new product, service and concept development by us and our competitors;

•changes in consumer demands regarding financial products, customer experiences related to investments and technological advances, and our ability to innovate to respond to such changes;

•changes in labor, distribution and other operating costs;

•our compliance with, and changes to, government laws, regulations and tax matters that currently apply to us;

•other factors that may affect our financial condition, liquidity and results of operations; and

•other risk factors discussed under “Item 3. Key Information—D. Risk Factors.”

Forward-looking statements speak only as of the date they are made, and we do not undertake any obligation to update them in light of new information or future developments or to release publicly any revisions to these statements in order to reflect later events or circumstances or to reflect the occurrence of unanticipated events.

6

PART I

ITEM 1. IDENTITY OF DIRECTORS, SENIOR MANAGEMENT AND ADVISERS

A.    Directors and Senior Management

Not applicable.

B.    Advisers

Not applicable.

C.    Auditors

Not applicable.

ITEM 2. OFFER STATISTICS AND EXPECTED TIMETABLE

A.    Offer Statistics

Not applicable.

B.    Method and Expected Timetable

Not applicable.

ITEM 3. KEY INFORMATION

A.    [Removed and Reserved.]

B.    Capitalization and Indebtedness

Not applicable.

C.    Reasons for the Offer and Use of Proceeds

Not applicable.

D.    Risk Factors

Summary of Risk Factors

Our business, results of operations, financial condition or prospects could be adversely affected if any of these risks occurs, and as a result, the trading price of our common shares could decline. The risks described below are those known to us and those that we currently believe may materially affect us.

Certain Risks Relating to Our Business and Industry

•If we cannot make the necessary investments to keep pace with rapid developments and change in our industry, the use of our services could decline, reducing our revenues. The financial services market in which we compete is subject to rapid and significant changes, and in order to remain competitive and maintain and enhance customer experience and the quality of our services, we must continuously invest in projects to develop new products and features. These projects carry risks, such as cost overruns, delays in delivery, performance problems and lack of client adoption. Our future success will depend in part on our ability to develop or adapt to technological changes and evolving industry standards. Furthermore, our competitors may have the ability to devote more financial and operational resources than we can to the development of new technologies and services that provide improved functionality and features to their existing service offerings.

7

•Substantial and increasingly intense competition within our industry may harm our business. The financial services market is highly competitive. Our growth will depend on a combination of the continued growth of financial services and our ability to increase our market share. Our primary competitors include traditional financial services providers. We may need to reduce the fees we charge in order to maintain market share, as clients may demand more customized and favorable pricing from us.

•Client attrition could cause our revenues to decline, and the degradation of the quality of the products and services we offer, including support services, could adversely impact our ability to attract and retain clients and partners. We experience client attrition resulting from several factors, including, among others, client business closures, transfers of accounts to our competitors and lack of client satisfaction with our platform and overall user experience, including the reliability, performance, functionality and quality of our products and services. Moreover, our clients expect a consistent level of quality on our platform and in the provision of our products and services.

•Our investment services to our retail clients subject us to additional risks. We provide investment services to our retail clients, including through IFAs. The risks associated with these investment services include those arising from possible conflicts of interest, unsuitable investment recommendations, inadequate due diligence on the issuer or the provider of the security, inadequate disclosure and fraud.

•We do not have long-term contractual arrangements with most of our institutional brokerage clients, and our trading volumes and revenues could be reduced if these clients stop using our platform and solutions. Our business largely depends on certain of our institutional brokerage clients using our solutions and trading on our platforms. A limited number of such clients can account for a significant portion of our trading volumes, which in turn results in a significant portion of our transaction fees. Most of our institutional brokerage clients do not have long-term contractual arrangements with us and utilize our platform and solutions on a transaction-by-transaction basis and may choose not to use our platform at any time. These institutional brokerage clients buy and sell a variety of products within various asset classes using traditional methods, including by telephone, email and instant messaging, and through other trading platforms.

•In the past, we identified material weaknesses in our internal control over financial reporting, and if we fail to maintain effective internal controls over financial reporting, we may be unable to accurately report our results of operations, meet our reporting obligations and/or prevent fraud. In addition, if we fail to maintain the adequacy of our internal control over financial reporting, as accounting standards are modified, supplemented or amended from time to time, we may not be able to conclude on an ongoing basis that we have effective internal control over financial reporting in accordance with Section 404 of the Sarbanes-Oxley Act of 2002. If we fail to maintain an effective internal control environment, we could suffer material misstatements in our financial statements, fail to meet our reporting obligations or fail to prevent fraud, which would likely cause investors to lose confidence in our reported financial information.

Certain Risks Relating to Brazil

•Brazilian federal government has exercised, and continues to exercise, significant influence over the Brazilian economy. This involvement as well as Brazil’s political and economic conditions could harm us and the price of our Class A common shares. The Brazilian federal government frequently exercises significant influence over the Brazilian economy and occasionally makes significant changes in policy and regulations. We have no control over and cannot predict what measures or policies the Brazilian government may take in the future. Recent economic and political instability has led to a negative perception of the Brazilian economy and higher volatility in the Brazilian securities markets, which also may adversely affect us and our Class A common shares.

•Inflation and certain measures by the Brazilian government to curb inflation have historically harmed the Brazilian economy and Brazilian capital markets, and high levels of inflation in the future would harm our business and the price of our Class A common shares. In the past, Brazil has experienced extremely high rates of inflation. Inflation and some of the measures taken by the Brazilian government in an attempt to curb inflation have had significant negative effects on the Brazilian economy generally. Inflation, policies adopted to curb inflationary pressures and uncertainties regarding possible future governmental intervention have contributed to economic uncertainty and heightened volatility in the Brazilian capital markets.

8

•Economic uncertainty and political instability in Brazil may harm us and the price of our Class A common shares. Brazil’s political environment has historically influenced, and continues to influence, the performance of the country’s economy. Political crises have affected and continue to affect the confidence of investors and the general public, which have historically resulted in economic deceleration and heightened volatility in the securities offered by companies with significant operations in Brazil. The recent economic instability in Brazil has contributed to a decline in market confidence in the Brazilian economy as well as to a deteriorating political environment.

•Exchange rate instability may have adverse effects on the Brazilian economy, us and the price of our Class A common shares. The Brazilian currency has been historically volatile and has been devalued frequently over the past three decades. Although long-term depreciation of the real is generally linked to the rate of inflation in Brazil, depreciation of the real occurring over shorter periods of time has resulted in significant variations in the exchange rate between the real, the U.S. dollar and other currencies. Restrictive macroeconomic policies could reduce the stability of the Brazilian economy and harm our results of operations and profitability.

•Infrastructure and workforce deficiency in Brazil may impact economic growth and have a material adverse effect on us. Brazilian GDP growth has fluctuated over the past few years, with growth of 3.0% in 2013 but decreasing to 0.5% in 2014, a contraction of 3.5% in 2015, a contraction of 3.3% in 2016, a growth of 1.1% in each 2017, 2018 and 2019, a contraction of 4.1% in 2020, and a growth of 4.6% in 2021. Growth is limited by inadequate infrastructure, including potential energy shortages and deficient transportation, logistics and telecommunication sectors, general strikes, the lack of a qualified labor force, and the lack of private and public investments in these areas, which limit productivity and efficiency. Additionally, despite the business continuity and crisis management policies currently in place, travel restrictions or potential impacts on personnel due to the COVID-19 pandemic may continue to disrupt our business, our IFAs and the expansion of our client base.

•The COVID-19 pandemic has had, and is expected to continue to have, a negative impact on global, regional and national economies, and we would be materially adversely affected by a protracted economic downturn. The COVID-19 pandemic has had, and is expected to continue to have, a negative impact on global, regional and national economies and to disrupt supply chains and otherwise reduce international trade and business activity, and also result in an increase of unemployment rates in Brazil, which may decrease the flow of money into investments and increase withdrawal of funds from investment and other financial products, negatively impacting our business. The COVID-19 pandemic could also negatively impact specific portfolios through negative ratings migration and higher than expected losses, potentially leading clients to redirect investments away from us and to more traditional financial institutions, as well as reduced management fees from our asset management businesses, which are required to meet certain criteria to earn performance fees. The current COVID-19 pandemic and its potential impact on the global economy may affect our ability to meet our financial targets.

Certain Risks Relating to Our Class A Common Shares

•An active trading market for our common shares may not be sustainable. If an active trading market is not maintained, investors may not be able to resell their shares at or above offering price and our ability to raise capital in the future may be impaired. An active trading market may also impair our ability to raise capital to acquire other companies or technologies by using our shares as consideration.

•XP Controle and XP Control jointly own 89.64% of our outstanding Class B common shares, which represents approximately 68.28% of the voting power of our issued share capital, and, subject to the provisions of the Shareholders’ Agreement, they control all matters requiring shareholder approval. This concentration of ownership and voting power limits your ability to influence corporate matters.

•The dual class structure of our common shares has the effect of concentrating voting control with XP Controle and XP Control, our controlling shareholders; this will limit or preclude your ability to influence corporate matters. Due to the ten-to-one voting ratio between our Class B and Class A common shares, our controlling shareholders, XP Controle and XP Control, control a majority of the combined voting power of our common shares and therefore are able to, subject to the provisions of the Shareholders’ Agreement, elect a majority of the members of our board of directors, so long as the total number of the issued and outstanding Class B common shares is at least 10% of the voting share rights of the Company.

•We are a Cayman Islands exempted company with limited liability. The rights of our shareholders, including with respect to fiduciary duties and corporate opportunities, may be different from the rights of shareholders governed by the laws of U.S. jurisdictions. In particular, as a matter of Cayman Islands law, directors of a Cayman Islands company owe fiduciary duties to the Company and separately a duty of care, diligence and skill to the Company.

9

Certain     Risks Relating to Our Business and Industry

If we cannot make the necessary investments to keep pace with rapid developments and change in our industry, the use of our services could decline, reducing our revenues.

The financial services market in which we compete is subject to rapid and significant changes. This market is characterized by rapid technological change, new product and service introductions, evolving industry standards, changing client needs and the entrance of nontraditional competitors. In order to remain competitive and maintain and enhance customer experience and the quality of our services, we must continuously invest in projects to develop new products and features. These projects carry risks, such as cost overruns, delays in delivery, performance problems and lack of client adoption. There can be no assurance that we will have the funds available to maintain the levels of investment required to support our projects, and any delay in the delivery of new services or the failure to differentiate our services or to accurately predict and address market demand could render our services less desirable, or even obsolete, to our clients.

In addition, the services we deliver are designed to process highly complex transactions and provide reports and other information concerning those transactions, all at high volumes and processing speeds. Any failure to deliver an effective and secure service, or any performance issue that arises with a new service, could result in significant processing or reporting errors or other losses. As a result of these factors, our development efforts could result in increased costs and/or we could also experience a loss in business that could reduce our earnings or could cause a loss of revenue if promised new services are not timely delivered to our clients or do not perform as anticipated. We also rely in part, and may in the future rely in part, on third parties for the development of, and access to, new technologies. Our future success will depend in part on our ability to develop or adapt to technological changes and evolving industry standards. We cannot predict the effects of technological changes on our business. If we are unable to develop, adapt to or access technological changes or evolving industry standards on a timely and cost-effective basis, our business, financial condition and results of operations could be materially adversely affected.

Furthermore, our competitors may have the ability to devote more financial and operational resources than we can to the development of new technologies and services that provide improved functionality and features to their existing service offerings. If successful, their development efforts could render our services less desirable to clients, resulting in the loss of clients or a reduction in the fees we could generate from our service offerings.

Substantial and increasingly intense competition within our industry may harm our business.

The financial services market is highly competitive. Our growth will depend on a combination of the continued growth of financial services and our ability to increase our market share. Our primary competitors include traditional financial services providers such as affiliates of financial institutions and well-established financial services companies in Brazil. We also face competition from non-traditional financial services providers that have significant financial resources and develop different kinds of services.

Many of our competitors have substantially greater financial, technological, operational and marketing resources than we do. Accordingly, these competitors may be able to offer more attractive fees to our current and prospective clients, especially our competitors that are affiliated with financial institutions. In recent years, we announced the elimination of brokerage fees for online stock trades at Rico Corretora de Títulos e Valores Mobiliários S.A., or “Rico,” and a 75% reduction in brokerage fees for online stock trades through XP Direct, which we currently expect will not have a material impact on our revenues and margins as we believe they will be offset by increased growth in client onboarding into our platform in the future. If the expected offset does not materialize, we will need to offset the impact by reducing and eliminating costs in order to maintain our profit margins. Moreover, we may not be successful in reducing or controlling costs and our margins may be adversely affected. In particular, we may need to further reduce the fees we charge in order to maintain market share, as clients may demand more customized and favorable pricing from us. In addition, we may incur increased costs from incentive payments made to independent financial advisors, or “IFAs” in order to gain or maintain market share. We may also decide to terminate client relationships which may no longer be profitable to us due to such pricing pressure. Competition could also result in a loss of existing clients, and greater difficulty in attracting new clients. One or more of these factors could have a material adverse effect on our business, financial condition and results of operations. For further information regarding our competition, see “Item 4. Information about the Company—B. Business Overview—Competition.”

10

Client attrition could cause our revenues to decline, and the degradation of the quality of the products and services we offer, including support services, could adversely impact our ability to attract and retain clients and partners.

We experience client attrition resulting from several factors, including, among others, client business closures, transfers of accounts to our competitors and lack of client satisfaction with our platform and overall user experience, including the reliability, performance, functionality and quality of our products and services. We cannot predict the level of attrition in the future, and our revenues could decline as a result of higher than expected attrition, which could have a material adverse effect on our business, financial condition and results of operations. In addition, our growth to date has been partially driven by the growth of our clients’ businesses. Should the rate of growth of our clients’ business slow or decline, this could have an adverse effect on our results of operations. Furthermore, should we not be successful in selling additional solutions to our active client base, we may fail to achieve our desired rate of growth.

Moreover, our clients expect a consistent level of quality on our platform and in the provision of our products and services. The support services that we provide are also a key element of the value proposition to our clients. In addition, increased market volatility may result in unexpected losses in equities, derivatives and other products, which may lead to questions regarding the accuracy of our suitability procedures and our advisory services. If the reliability, performance or functionality of our products and services is compromised or the quality of those products or services is otherwise degraded, or if we fail to continue to provide a high level of support, this could adversely affect our reputation and the confidence in and use of our products and services, and we could lose existing clients and find it harder to attract new clients and partners. If we are unable to scale our support functions and our suitability procedures to address the growth of our client and partner network, the quality of our products and services may decrease, which could adversely affect our ability to attract and retain clients and partners.

For more information on consumer complaints and proceedings, see “Item 8. Financial Information—A. Consolidated Statements and Other Financial Information—Legal Proceedings—Consumer Matters.”

Our investment services to our retail clients subject us to additional risks.

We provide investment services to our retail clients, including through IFAs. The risks associated with these investment services include those arising from possible conflicts of interest, unsuitable investment recommendations, inadequate due diligence on the issuer or the provider of the security, inadequate disclosure and fraud. Realization of these risks could lead to liabilities for client losses, regulatory fines, civil penalties and harm to our reputation and business. The realization of these risks may be heightened during periods of increased market volatility, which may result in unexpected losses in the products provided to our retail clients.

We do not have long-term contractual arrangements with most of our institutional brokerage clients, and our trading volumes and revenues could be reduced if these clients stop using our platform and solutions.

Our business largely depends on certain of our institutional brokerage clients using our solutions and trading on our platforms. A limited number of such clients can account for a significant portion of our trading volumes, which in turn results in a significant portion of our transaction fees. Most of our institutional brokerage clients do not have long-term contractual arrangements with us and utilize our platform and solutions on a transaction-by-transaction basis and may choose not to use our platform at any time. These institutional brokerage clients buy and sell a variety of products within various asset classes using traditional methods, including by telephone, email and instant messaging, and through other trading platforms. Any significant loss of these institutional brokerage clients or a significant reduction in their use of our platform and solutions could have a substantial negative impact on our trading volumes and revenues, and materially adversely affect our business, financial condition and results of operations.

Our institutional brokerage business depends on our key dealer clients providing us with liquidity and supporting our marketplaces by transacting with our other institutional and wholesale clients.

Our institutional brokerage business relies on its key dealer clients to provide liquidity on our trading platforms by posting prices on our platform and responding to client inquiries, and this business has historically earned a substantial portion of its revenues from such dealer clients. Increased market volatility and market declines can cause our key dealer clients to experience reduced liquidity or to decrease their use of our platform. Market knowledge and feedback from these dealer clients have been important factors in the development of many of our offerings and solutions. In addition, these dealer clients also provide us with data via feeds and through the transactions they execute on our trading platforms, which is an important input for our market data offerings.

11

Our dealer clients also buy and sell through traditional methods, including by telephone, email and instant messaging, and through other trading platforms. Some of our dealer clients have developed electronic trading networks that compete with us or have announced their intention to explore the development of such electronic trading networks, and many of our dealer clients are involved in other ventures, including other trading platforms or other distribution channels, whether as trading participants and/or as investors. In particular, some of our dealer clients or their affiliates, as is typical for a large number of major banks, have their own single bank or other competing trading platform and frequently invest in such businesses and may acquire ownership interests in similar businesses, and such businesses may also compete with us. These competing trading platforms may offer some features that we do not currently offer or that we are unable to offer, including customized features or functions and solutions that are fully integrated with some of their other offerings. Accordingly, there can be no assurance that such dealer clients’ primary commitments will not be to one of our competitors or that they will not continue to rely on their own trading platforms or traditional methods instead of using our trading platforms.

Although we have established and maintain significant long-term relationships with our key dealer clients, we cannot assure you that all of these relationships will continue or will not diminish. Any reduction in the use of our trading platforms by our key dealer clients for any reason, including increased market volatility, and any associated decrease in the pool of capital and liquidity accessible across our marketplaces, could reduce the volume of trading on our platform, which could, in turn, reduce the use of our platform by their counterparty clients. In addition, any decrease in the number of dealer clients competing for trades on our trading platforms could cause our dealer clients to forego the use of our platform and instead use platforms that provide access to more competitive trading environments and prices. The occurrence of any of the foregoing may have a material adverse effect on our business, financial condition and results of operations.

A significant part of our business depends on the B3.

The B3 is the only public stock exchange in Brazil, and a significant volume of our trading activities is conducted through the B3, for which we pay the B3 clearing, custody and other financial services fees. We cannot assure you that the B3 will not impose restrictions on trading, request additional guarantees or margin requirements, increase existing fees or introduce new fees, among other measures. The occurrence of any of the foregoing may have a material adverse effect on our business, financial condition and results of operations.

XP CCTVM depends in part on the performance of its IFAs. If XP CCTVM is unable to hire, retain and qualify such IFAs, our business may be harmed.

XP CCTVM, one of our principal operating subsidiaries and a securities broker, has a broad network of IFAs, and our business depends in part on such IFAs. Pursuant to CVM Resolution No. 16, IFAs may carry out the following activities on behalf of a broker-dealer: (1) prospecting and acquiring customers; (2) receiving and registering orders and transmitting such orders to the appropriate trading or registration systems; and (3) providing information on the products offered and the services provided by XP CCTVM. XP CCTVM’s reliance on IFAs creates numerous risks.

As of December 31, 2021, XP CCTVM had approximately 10,000 individual IFAs organized into approximately 1,400 IFA entities, which were responsible for serving approximately 22% of XP CCTVM’s active clients. In addition, XP CCTVM’s 20 largest IFA entities comprised 3,186 individual IFAs and were responsible for serving approximately 29% of XP CCTVM’s active clients.

Pursuant to Article 20 of CVM Resolution No. 16, XP CCTVM is liable for the acts of its IFAs. As a result, XP CCTVM may be subject to claims, lawsuits, arbitration proceedings, government investigations and other legal and regulatory proceedings seeking to hold XP CCTVM liable for the actions of IFAs. We cannot give any assurances as to the outcome of any such claims, lawsuits, arbitration proceedings, government investigations or other legal or regulatory proceedings. Any claims against XP CCTVM, whether with or without merit, could be time-consuming, result in costly litigation, be harmful to its reputation and to the “XP” brand, require significant management attention and divert significant resources, and the resolution of one or more such proceedings may result in substantial damages, settlement costs, sanctions, consent decrees, injunctions, fines and penalties that could adversely affect XP CCTVM’s business, financial condition and results of operations. In addition, no assurances can be given that these IFAs’ interests will continue to be aligned with the interests of XP CCTVM, that there will be no commercial disagreements between the IFAs and XP CCTVM, that such IFAs will not compete with XP CCTVM or that they will not engage in improper conduct (i.e., churning) in their role as IFAs. In Brazil, there is increased competition between financial institutions seeking to attract IFAs to increase their client base, assets under custody and business possibilities. No assurances can be given that XP CCTVM will be able to remain an attractive player to such IFAs or to retain such agents in its business platform. Furthermore, many clients have their commercial relationship directly with the IFA of their choice and trust and not with the employees of XP CCTVM. Accordingly, the loss of IFAs may result in loss of clients and assets under custody, which would affect XP CCTVM’s business.

12

Furthermore, the independent contractor status of the IFAs may be challenged in the courts of Brazil. For example, XP CCTVM has in the past been involved in, and successfully challenged, a number of legal proceedings claiming that IFAs should be treated as its employees rather than as independent contractors, and there can be no assurance that we will be successful in challenging any future claims. Changes to foreign, federal, state, and local laws governing the definition or classification of independent contractors, or judicial decisions regarding independent contractor classification, could require classification of IFAs as employees. If, as a result of legislation or judicial decisions, XP CCTVM is required to classify IFAs as employees, XP CCTVM would incur significant additional expenses for compensating IFAs, potentially retroactively to the past five years and including expenses associated with the application of wage and hour laws (including minimum wage, overtime, meal and rest period requirements), vacation, 13th-month salary, Fundo de Garantia do Tempo de Serviço, or “FGTS,” severance, employee benefits, social security contributions, taxes, and penalties (including collective moral damages in case of a collective lawsuit).

Moreover, on July 1, 2019, the CVM issued Public Hearing Release SDM No. 03/19 (Edital de Audiência Pública SDM No 03/19), or “SDM 3/19,” which aimed to initiate discussions with financial market entities and IFAs in connection with potential amendments to CVM Resolution No. 16. Such amendments included terminating the exclusivity provision set forth in CVM Resolution No. 16, among others. Several industry members responded to SDM 3/19, and the CVM decided not to amend CVM Resolution No. 16 at that time. Subsequently, on August 12, 2021, the CVM issued Public Hearing Release SDM No. 05/21 (Edital de Audiência Pública SDM No 05/21), or “SDM 5/21,” which aimed to resume discussions on other potential amendments to CVM Resolution No. 16. Such amendments include terminating the exclusivity provision set forth in CVM Resolution No. 16, as well as allowing IFA entities to become corporations and to admit unlicensed partners (i.e., non-IFA partners). SDM 5/21 also proposed amendments to CVM Resolution No. 35 to introduce rules concerning the transparency of commissions and potential conflicts of interest deriving therefrom.

In parallel, on February 17, 2022, the CMN approved Resolution No. 4,982/2022, or “Resolution No. 4,982,” which amends CMN Resolution No. 2,838/2001. The new rule permits IFA entities to become corporations and to admit unlicensed partners. Resolution No. 4,982 will formally come into force on March 2, 2022, but its effectiveness is subject to the rulemaking outcome of SDM 5/21. Market expectations, which have not been confirmed by the CVM, are that the new CVM rule regarding IFAs will be released by the end of the first semester or in the beginning of the second semester of 2022.

Although we cannot predict the impact of these amendments, they could result in increased competition for clients and qualified IFAs and reduced oversight of IFAs. Moreover, they could allow IFAs to work with other platforms or competitors, as well as to admit other partners to the IFAs entities as investors, which may adversely affect us.

Poor investment performance could lead to a loss of assets under management and a decline in revenues.

Distributing investment fund quotas managed by third parties or by our asset managers represents a relevant part of our business, which income is a percentage of the management and/or performance fee related to such funds. Moreover, a portion of our consolidated income is derived from management and performance fees collected by our three principal asset managers, XP Gestão, XP Advisory and XP Vista. Poor investment performance by the investment funds managed by third parties or by our asset managers for a number of reasons, including the overall market declines and increased volatility due to the COVID-19 pandemic, could continue to hinder our growth and reduce our revenues because (1) existing clients might withdraw funds in favor of better performing products or fixed income products, such as government debt, which would result in lower investment advisory and other fees; (2) our ability to attract capital from existing and new clients might diminish; and (3) the negative investment performance will directly reduce our managed assets and revenues base, which may have a material adverse effect on our business, financial condition, results of operations and the price of our Class A common shares.

13

Unauthorized disclosure, destruction or modification of data, through cybersecurity breaches, computer viruses or otherwise, or disruption of our services could expose us to liability and protracted and costly litigation and damage our reputation.

Our business involves the collection, storage, processing and transmission of customers’ personal data, including names, addresses, identification numbers, bank account numbers and trading and investment portfolio data. An increasing number of organizations, including large clients and businesses, other large technology companies, financial institutions and government institutions, have disclosed breaches of their information technology systems, some of which have involved sophisticated and highly targeted attacks, including on portions of their websites, networks or infrastructure, or those of third parties who provide services to them. We could also be subject to breaches of security by hackers. Threats may derive from human error, fraud or malice on the part of employees, third-party service providers or IFAs, or may result from accidental technological failure. Concerns about security are increased when we transmit information. Electronic transmissions can be subject to attack, interception or loss. Also, computer viruses and malware can be distributed and spread rapidly over the internet and could infiltrate our systems or those of our associated participants, which can impact the confidentiality, integrity and availability of information, and the integrity and availability of our products, services and systems, among other effects. Denial of service or other attacks could be launched against us for a variety of purposes, including interfering with our services or creating a diversion for other malicious activities. These types of actions and attacks could disrupt our delivery of products and services or make them unavailable, which could damage our reputation, force us to incur significant expenses in remediating the resulting impacts, expose us to uninsured liability, subject us to lawsuits, fines or sanctions, distract our management or increase our costs of doing business.

In 2013 and 2014, XP CCTVM suffered security breaches, through which an individual improperly accessed a small portion of our customer records and obtained certain non-material customer registration information, such as name, address and email, and subsequently publicly disclosed such information in January 2017. The security breaches were identified and immediately remedied, did not result in the imposition of penalties or fines from the relevant regulatory authorities, and did not materially impact us. We assisted all affected customers and mitigated their damages.

In the scope of our activities, we share information with third parties, including thousands of IFAs, commercial partners, third-party service providers and other agents, who collect, process, store and transmit sensitive data, and we may be held responsible for any failure or cybersecurity breaches attributed to these third parties insofar as they relate to the information we share with them. The loss, destruction or unauthorized modification of data by us or such third parties or through systems we provide could result in significant fines, sanctions and proceedings or actions against us by governmental bodies or third parties, which could have a material adverse effect on our business, financial condition and results of operations. Any such proceeding or action, and any related indemnification obligation, could damage our reputation, force us to incur significant expenses in defense of these proceedings, distract our management, increase our costs of doing business or result in the imposition of financial liability or sanctions that prevent us from processing data.

Our encryption of data and other protective measures may not prevent unauthorized access or use of sensitive data. A breach of our system or that of one of our associated participants may subject us to material losses or liability, including fines. A misuse of such data or a cybersecurity breach could harm our reputation and deter clients from using our products and services, thus reducing our revenues. In addition, any such misuse or breach could cause us to incur costs to correct the breaches or failures, expose us to uninsured liability, increase our risk of regulatory scrutiny, subject us to lawsuits, and result in the imposition of material penalties and fines under state and federal laws or regulations.

We cannot assure you that there are written agreements in place with every third party or that such written agreements will prevent the unauthorized use, modification, destruction or disclosure of data or enable us to obtain reimbursement from such third parties in the event we should suffer incidents resulting in unauthorized use, modification, destruction or disclosure of data. Any unauthorized use, modification, destruction or disclosure of data could result in protracted and costly litigation, which could have a material adverse effect on our business, financial condition and results of operations.

Cybersecurity incidents are increasing in frequency and evolving in nature and include, but are not limited to, installation of malicious software, unauthorized access to data and other electronic security breaches that could lead to disruptions in systems, unauthorized release of confidential or otherwise protected information and the corruption of data. Given the unpredictability of the timing, nature and scope of information technology disruptions, there can be no assurance that the procedures and controls we employ will be sufficient to prevent security breaches from occurring, and we could be subject to manipulation or improper use of our systems and networks or financial losses from remedial actions, any of which could have a material adverse effect on our business, financial condition and results of operations.

14

Moreover, while we maintain cyber insurance, which may help provide coverage for these types of incidents (including both cybersecurity incidents and civil damages arising therefrom), we cannot assure you that our insurance will be adequate to cover all costs and liabilities related to these incidents. In addition, such insurance may not be available to us in the future on economically reasonable terms, or at all. Further, our insurance may not cover all claims made against us and could have high deductibles in any event, and defending a suit, regardless of its merit, could be costly and divert management attention.

Law No. 13,709/2018 (Lei Geral de Proteção de Dados Pessoais), or the “LGPD” came into effect on September 18, 2020, following the President of Brazil’s veto of article 4 of Provisional Measure No. 959/2020, which established that the LGPD would only come into effect on May 3, 2021. However, the administrative sanctions provisions of LGPD will only become enforceable as of August 1, 2021, pursuant to Law No. 14,010/2020. Once the administrative sanctions of the LGPD become enforceable, cybersecurity incidents and data breach or leakage events may subject us to the following penalties: (1) warnings, with the imposition of a deadline for the adoption of corrective measures; (2) a one-time fine of up to 2% of gross sales of the company or a group of companies limited to a maximum amount of R$50,000,000 per violation; (3) a daily fine, up to a maximum amount of R$50,000,000 per violation; (4) public disclosure of the violation; (5) the restriction of access to the personal data to which the violation relates, until corrective measures are implemented; (6) deletion of the personal data to which the violation relates; (7) partial suspension of the databases to which the violation relates for up to 12 months, until corrective measures are implemented; (8) suspension of the personal data processing activities to which the violation relates for up to 12 months; and (9) partial or full prohibition on personal data processing activities. The postponement of the administrative sanctions does not prevent the competent authorities to begin supervision procedures and enactment of additional rules to be complied with prior to such effectiveness date, nor does it prevent individual or collective lawsuits based on violation of data subjects’ rights and subject to civil liability. Any such proceeding or action, and any related indemnification obligation, could damage our reputation, force us to incur significant expenses in defense of these proceedings, divert the attention of our management, increase our costs of doing business or result in the imposition of financial penalties.

Further, as a consequence of the COVID-19 pandemic, most of our employees continue to work remotely from home. Based on thorough assessments of the well-being and performance of our workforce, our management announced on September 11, 2020 the permanent and company-wide adoption of the home-office model. This may cause increases in the unavailability of our systems and infrastructure, interruption of telecommunication services, generalized system failures and heightened vulnerability to cyberattacks. Accordingly, our ability to conduct our business may be adversely impacted.

Our business depends on well-regarded and widely known brands, including “XP Investimentos,” “Clear,” “Rico,”
“XP Asset Management,” “Infomoney,” “XP Educação,” “XP Seguros” and “XP Investments,” and any failure to maintain, protect, and enhance our brands, including through effective marketing and communications strategies, would harm our business.

We have developed well-regarded and widely known brands, including “XP Investimentos,” “Clear,” “Rico,” “XP Asset Management,” “Infomoney,” “XP Educação,” “XP Seguros” and “XP Investments,” that have contributed significantly to the success of our business. Maintaining, protecting, and enhancing our brands are critical to expanding our client base, and that of other third-party partners, as well as increasing engagement with our products and services. This will depend largely on our ability to remain widely known, maintain trust, be a technology leader, and continue to provide high-quality and secure products and services. Any negative publicity about our industry or our company, the quality, reliability and performance of our products and services, our suitability, risk management and business continuity policies and processes, changes to our products and services, our ability to effectively manage and resolve client complaints, our privacy and security practices, litigation, regulatory activity, and the experience of clients with our products or services, for example as a result of overall market declines and increased market volatility due to the COVID-19 pandemic, could adversely affect our reputation and the confidence in and use of our products and services. Harm to our brands can arise from many sources, including failure by us or our partners to satisfy expectations of service and quality, inadequate protection of personal information, compliance failures and claims, litigation and other claims, third-party trademark infringement claims, administrative proceedings at the applicable national trademark offices, employee misconduct, and misconduct by our associated participants, partners, service providers, or other counterparties. If we do not successfully maintain well-regarded and widely known brands, our business could be materially and adversely affected.

We have been from time to time in the past, and may in the future be, the target of incomplete, inaccurate, and misleading or false statements about our company, our business, and our products and services that could damage our brands and materially deter people from adopting our services. For example, over the past several years, certain persons or entities have fraudulently used the “XP” brand and/or presented themselves as part of or affiliated with the “XP” brand as IFAs carrying out activities on our behalf. Negative publicity about our company or our management, including about our product quality, reliability and performance, changes to our products and services, privacy and security practices, litigation, regulatory enforcement, and other actions, as well as the actions of our clients and other users of our services, even if inaccurate, could cause a loss of confidence in us.

15

In addition, we believe that promoting our brands in a cost-effective manner is critical to achieving widespread acceptance of our products and services and to expanding our base of clients. Our brand promotion activities may not generate customer awareness or increase revenue, and even if they do, any increase in revenue may not offset the expenses we incur in building our brands. If we fail to successfully promote and maintain our brands or if we incur excessive expenses in this effort, our business could be materially and adversely affected.

The introduction and promotion of new services, as well as the promotion of existing services, may be partly dependent on our visibility on third-party advertising platforms such as Google, Facebook or Instagram. Changes in the way these platforms operate or changes in their advertising prices or other terms could make the maintenance and promotion of our products and services and our brands more expensive or more difficult. If we are unable to market and promote our brands on third-party platforms effectively, our ability to acquire new clients would be materially harmed.

An increase in volume on our systems or other errors or events could cause them to malfunction.

Most of our trade orders to buy or sell securities or invest in the broad range of asset classes we offer are received and processed electronically. This method of trading is heavily dependent on the integrity of the electronic systems supporting it. While we have never experienced a significant failure of our trading systems, heavy stress placed on our systems during peak trading times could cause our systems to operate at unacceptably low speeds or fail altogether, such as in periods of increased market volatility. Any significant degradation or failure of our systems or the systems of third parties involved in the trading process (e.g., online and internet service providers, the systems of the B3, record keeping and data processing functions performed by third parties, and third-party software), even for a short time, could cause customers to suffer delays in trading. In addition, systems errors, including as a result of human error, could occur. These delays or errors could cause substantial losses for customers and could subject us to claims from these customers for losses or other regulatory penalties or other sanctions or increased settlement disbursements. There can be no assurance that our network structure will operate appropriately in the event of a subsystem, component or software failure or error. Furthermore, we cannot assure you that we will be able to prevent an extended systems failure in the event of a power or telecommunications failure, earthquake, terrorist attack, epidemics or pandemics such as COVID-19, fire or any act of God. Any systems failure that causes interruptions in our operations could have a material adverse effect on our business, financial condition and results of operations.

We rely on a number of external service providers for certain key market information and data, technology, processing and supporting functions.

We rely on a number of external service providers for certain key market information and data, technology, processing and supporting functions, such as Microsoft, SAP and Oracle, among others. These include trading platform, portfolio management and asset allocation services, account opening and management systems, communication systems, registration systems, data control systems, information security systems, anti-fraud systems, trading surveillance systems, exchanges, clearinghouses and others which are of critical importance for us in order to provide our services to our clients in a satisfactory manner. These service providers may face technical, operational and security risks of their own, including risks similar to those that we face as described herein. Any significant failures by them, including improper use or disclosure of our confidential customer, employee or company information, could interrupt our business, cause us to incur losses and harm our reputation. Particularly, we have contracted with Bloomberg, Reuters and certain other institutions to allow our clients to access real-time market information data, which are essential for our clients to make their investment decisions and take certain actions (such as making trades). Any failure of such information providers to update or deliver the data in a timely manner as provided in the agreements could lead to potential losses of our clients, which may in turn affect our business operations and reputation and may cause us to incur losses.

We cannot assure you that the external service providers will be able to continue to provide these services to meet our current needs in an efficient and cost-effective manner, or that they will be able to adequately expand their services to meet our needs in the future. Some external service providers may have assets and infrastructure that are important to the services they provide us that are located in or outside Brazil, and their ability to provide these services is subject to risks from unfavorable political, economic, legal or other developments, such as social or political instability, changes in governmental policies or changes in the applicable laws and regulations of the jurisdictions in which their assets and operations are located.

An interruption in or the cessation of service by any external service provider as a result of system failures, capacity constraints, financial constraints or problems, unanticipated trading market closures or for any other reason and our inability to make alternative arrangements in a smooth and timely manner, if at all, could have a material adverse effect on our business, financial condition and results of operations.

16

Further, disputes might arise in relation to the agreements that we enter into with our service providers or the performance of the service providers thereunder. To the extent that any service provider disagrees with us on the quality of the products or services, terms and conditions of the payment or other provisions of such agreements, we may face claims, disputes, litigation or other proceedings initiated by such service provider against us. We may incur substantial expenses and require significant attention of management in defending against these claims, regardless of their merit. We could also face damage to our reputation as a result of such claims, and our business, financial condition, results of operations and prospects could be materially and adversely affected.

We may not be able to ensure the accuracy of the third-party product information on our platform, and we have limited control over the performance of third-party financial products we offer.

We offer certain third-party financial products. The acceptance and popularity of our platform is partially premised on the reliability and performance of the relevant underlying products and information on our platform. We rely on the relevant third-party providers of the relevant products for the authenticity of their underlying products and the comprehensiveness, accuracy and timeliness of the related financial information. While the products and information from these third-party providers have been generally reliable, there can be no assurance that the reliability can be maintained in the future. If these third-party providers or their agents provide inauthentic financial products or incomplete, misleading, inaccurate or fraudulent information, we may lose the trust of existing and prospective investors. In addition, if our investors purchase the underlying products that they discover on our platform and they suffer losses, they may blame us and attempt to hold us responsible for their losses, even though we have made risk disclosures before they invest. Our reputation could be harmed and we could experience reduced user traffic to our platform, which would adversely affect our business and financial performance.

Furthermore, as investors access the underlying products through our platform, they may have the impression that we are at least partially responsible for the quality and performance of these products. Although we have established standards to screen product providers before distributing their products on our platform, we have limited control over the performance of the third-party financial products we offer. In the event that an investor is dissatisfied with underlying products or the services of a products provider, we do not have any means to directly make improvements in response to user complaints. If investors become dissatisfied with the underlying products available on our platform, our business, reputation, financial performance and prospects could be adversely affected.

We rely upon our systems and upon third-party data center service providers to host certain aspects of our platform and content, and any systems failure due to factors beyond our control or any disruption to, or interference with, our use of third-party data center services could interrupt our service, increase our costs and impair our ability to deliver our platform, resulting in customer dissatisfaction, damaging our reputation and harming our business.

We utilize data center hosting facilities from third-party service providers to make certain content available on our platform. Our primary data centers are located in the cities of Barueri and Santana do Parnaíba, in the state of São Paulo, Brazil (which are located approximately five miles apart). Our operations depend, in part, on our providers’ ability to protect their facilities against damage or interruption from natural disasters, power or telecommunications failures, criminal acts and similar events. The occurrence of spikes in user volume, traffic, natural disasters, acts of terrorism, vandalism or sabotage, or a decision to close a facility without adequate notice, or other unanticipated problems at our providers’ facilities, could result in lengthy interruptions in the availability of our platform, which would adversely affect our business.

17

In addition, we depend on the efficient and uninterrupted operation of numerous systems, including our computer systems, software, data centers and telecommunications networks, as well as the systems of third parties. Our systems and operations, or those of our third-party providers, could be exposed to damage or interruption from, among other things, fire, natural disaster, power loss, telecommunications failure, unauthorized entry and computer viruses. We do not maintain insurance policies specifically for property and business interruptions. Defects in our systems or those of third parties, errors or delays in the processing of transactions, telecommunications failures or other difficulties could result in:

•loss of revenues;

•loss of clients;

•loss of client data;

•loss of licenses or authorizations with the CVM, the Central Bank, the Superintendency of Private Insurance (Superintendência de Seguros Privados), or “SUSEP,” and/or any other applicable authority;

•loss of our membership to the B3 and/or loss of access to the trading facilities of the B3;

•fines imposed by applicable regulatory authorities and other issues relating to non-compliance with applicable financial services or data protection requirements;

•a failure to receive, or loss of, Central Bank authorizations to operate as a financial services provider in Brazil;

•fines or other penalties imposed by the Central Bank, as well as other measures taken by the Central Bank, including intervention, temporary special management systems, the imposition of insolvency proceedings, and/or the out-of-court liquidation of XP CCTVM and any of our subsidiaries to whom licenses may be granted in the future;

•harm to our business or reputation resulting from negative publicity;

•exposure to fraud losses or other liabilities;

•additional operating and development costs; and/or

•diversion of technical and other resources.

We are subject to risks in using prime brokers and custodians.

Our asset management division and its managed funds depend on the services of prime brokers, administrators and custodians to settle and report securities transactions. In the event of the insolvency of a prime broker, administrator or custodian, our funds might not be able to recover equivalent assets in whole or in part, as they will rank among the prime broker’s, the administrator’s and the custodian’s unsecured creditors in relation to assets that the prime broker, administrator or custodian borrows, lends or otherwise uses. In addition, cash held by our funds with the prime broker, administrator or custodian will not be segregated from the prime broker’s, administrator’s or custodian’s own cash, and the funds will therefore rank as unsecured creditors in relation thereto.

If we lose key personnel, our business, financial condition and results of operations may be adversely affected.

We are dependent upon the ability and experience of a number of key personnel, including Guilherme Dias Fernandes Benchimol, one of our founders and our chief executive officer, as well as a high-profile public figure and the face of the XP brand, and other members of senior management, who have substantial experience with our operations, the financial services industry and the markets in which we offer our products and services. Many of our key personnel have worked for us for a significant amount of time or were recruited by us specifically due to their industry experience. It is possible that the loss of the services of one or a combination of our senior executives or key managers, including our chief executive officer, could have a material adverse effect on our business, financial condition and results of operations. On May 12, 2021, Mr. Benchimol stepped down as our chief executive officer and was replaced by Thiago Maffra. See “Item 6. Directors, Senior Management and Employees—A. Directors and Senior Management—Executive Officers.”

18

The ability to attract, recruit, develop and retain qualified employees and continue to strengthen our existing infrastructure and systems is critical to our success and growth. If we are not able to do so, our business and prospects may be materially and adversely affected.

Our business functions at the intersection of rapidly changing technological, social, economic and regulatory developments that require a wide-ranging set of expertise and intellectual capital. In order for us to successfully compete and grow, we must attract, recruit, develop and retain the necessary personnel who can provide the needed expertise across the entire spectrum of our intellectual capital needs. While a number of our key personnel have substantial experience with our operations, we must also develop our personnel to provide succession plans capable of maintaining continuity in the midst of the inevitable unpredictability of human capital. However, the market for qualified personnel is competitive, and we may not succeed in recruiting additional personnel or may fail to effectively replace current personnel who depart with qualified or effective successors. We must continue to hire additional personnel to execute our strategic plans. Our effort to retain and develop personnel may also result in significant additional expenses, which could adversely affect our profitability. We cannot assure you that our qualified employees will continue to be employed by us or that we will be able to attract and retain qualified personnel in the future. Failure to retain or attract key personnel could have a material adverse effect on our business, financial condition and results of operations.

In addition, in order to manage our growth effectively, we must continue to strengthen our existing infrastructure, develop and improve our internal controls, create and improve our reporting systems, and timely address issues as they arise. We expect to increase our capital expenditures to support the growth in our business and operations, including for the construction of Villa XP at São Roque, State of São Paulo, or “Villa XP.” The construction process of Villa XP may result in additional capital expenditures or lead to overruns of the initial budget for this project. This expansion and operation involve significant risks that could lead to lost revenues or increased expenses, including: construction and operational delays, unanticipated cost overruns, unforeseen engineering, regulatory and/or environmental problems, the inability to obtain or renew required operational permits and governmental approvals for our new location, employee relocation and work stoppages, particularly as a result of the ongoing COVID-19 pandemic. The construction of Villa XP and other expansion efforts may require substantial financial expenditures, commitments of resources, developments of our processes, and other investments and innovations. Furthermore, we encourage employees to quickly develop and launch new features for our products and services. As we grow, we may not be able to execute as quickly as smaller, more efficient organizations. If we do not successfully manage our growth, our business will suffer, which may have an adverse effect on our financial condition, results of operations and capacity to fulfill our contractual obligations.

We are subject to various risks associated with the securities industry, any of which could have a material adverse effect on our business, cash flows and results of operations.

We are subject to uncertainties that are common across the securities industry. These uncertainties include:

•the volatility of domestic and international financial, bond and stock markets, and the markets for funds and other asset classes, in particular in the current context of the COVID-19 pandemic;

•extensive governmental regulation;

•litigation;

•intense competition;

•poor performance of investment products that our advisors recommend or sell or that are otherwise sold or distributed on our platform, including poor performance of investment portfolios as a result of strategies or other trading actions;

•substantial fluctuations in the volume and price level of securities; and

•dependence on the solvency of various third parties.

19

As a result, our revenues and earnings may vary significantly from quarter to quarter and from year to year. In addition, lower price levels of securities may result in reduced volumes of securities, options and futures transactions, with a consequent reduction in our commission revenues. In periods of low retail and institutional brokerage volume and reduced investment banking activity, profitability is impaired because certain expenses remain relatively fixed. Sudden sharp declines in market values of securities and the failure of issuers and counterparties to perform their obligations can result in illiquid markets, which, in turn, may result in our having difficulty selling securities. In the event of a market downturn, our business could be adversely affected in many ways, potentially for a prolonged period of time, for example as a result of the impact of overall market declines and increased market volatility due to the COVID-19 pandemic on our equity and equity funds’ position and on the fair value of our AUC, which could lead to reduced demand for the asset class. Our revenues are likely to decline in such circumstances, and if we are unable to reduce expenses at the same pace, our profit margins would erode, which could have a material adverse effect on our business, financial condition and results of operations.

We derive a significant portion of our revenues from one of our operating subsidiaries.

A significant portion of our revenues is derived from one of our principal operating subsidiaries, XP CCTVM. For the years ended December 31, 2021, 2020 and 2019, the average net revenue of XP CCTVM represented approximately 64% of our total consolidated net revenue for such periods. We expect that we will continue to depend on XP CCTVM for a significant portion of our revenues for the foreseeable future, and any decrease in the revenue of XP CCTVM or any other event significantly affecting XP CCTVM may have a material adverse effect on our financial condition and results of operations.

Our holding company structure makes us dependent on the operations of our subsidiaries.

We are a Cayman Islands exempted company with limited liability. As a holding company, our corporate purpose is to invest, as a partner or shareholder, in other companies, consortia or joint ventures in Brazil, where most of our operations are located, and outside Brazil. Accordingly, our material assets are our direct and indirect equity interests in our subsidiaries, and we are therefore dependent upon the results of operations and, in turn, the payments, dividends and distributions from our subsidiaries for funds to pay our holding company’s operating and other expenses and to pay future cash dividends or distributions, if any, to holders of our Class A common shares, and we may have tax costs in connection with any dividend or distribution. In addition, the payments, dividends and distributions from our subsidiaries to us for funds to pay future cash dividends or distributions, if any, to holders of our Class A common shares, could be restricted under financing arrangements that we or our subsidiaries may enter into in the future, and we and such subsidiaries may be required to obtain the approval of lenders to make such payments to us in the event they are in default of their repayment obligations. Furthermore, we may be adversely affected if the Brazilian government imposes legal restrictions on dividend distributions by our Brazilian subsidiaries, and exchange rate fluctuations will affect the U.S. dollar value of any distributions our subsidiaries make with respect to our equity interests in those subsidiaries.

On May 29, 2020, in response to the ongoing uncertainty relating to the economic effects of the COVID-19 pandemic, the Central Bank issued CMN Resolution No. 4,820/2020, or “CMN Resolution No. 4,820.” CMN Resolution No. 4,820 prohibits financial institutions and other institutions authorized to operate by the Central Bank, including XP CCTVM and Banco XP S.A., or “Banco XP,” to, until December 31, 2021, make dividend distributions beyond the minimum legal requirement or the minimum threshold established in such institutions’ bylaws. Under CMN Resolution No. 4,820, the anticipated distribution of profits relating to 2020 must be made in a conservative and consistent manner compatible with the uncertainties of the current economic scenario. CMN Resolution No. 4,820 also temporarily prohibits financial institutions from making other related payments, paying interest on equity, effecting stock repurchases, and, as a general rule, effecting capital stock reductions.

For further information, see “—Certain Risks Relating to Brazil—Exchange rate instability may have adverse effects on the Brazilian economy, us and the price of our Class A common shares,” “—Certain Risks Relating to Brazil—Economic uncertainty and political instability in Brazil may harm us and the price of our Class A common shares” and “Item 8. Financial Information—A. Consolidated Statements and Other Financial Information—Dividends and dividend policy.” 

20

We are exposed to fluctuations in foreign currency exchange rates and enter into derivatives transactions to manage our exposure to exchange rate risk.

We hold certain funds in non-Brazilian real currencies, and will continue to do so in the future, and our offshore operating subsidiaries generate revenue in non-Brazilian real currencies. Accordingly, our financial results are affected by the translation of these non-real currencies into reais. In addition, to the extent that we need to convert future financing proceeds into Brazilian reais for our operations, any appreciation of the Brazilian real against the relevant foreign currencies would materially reduce the Brazilian real amounts we would receive from the conversion, and any depreciation of the Brazilian real against the relevant foreign currencies could increase the amounts in Brazilian reais that we are require to convert into the relevant foreign currencies in order to service such relevant foreign currency financings. No assurance can be given that fluctuations in foreign exchange rates will not have a significant impact on our business, financial condition, results of operations and prospects. We may also have foreign exchange risk on any of our other assets and liabilities denominated in currencies, or with pricing linked to currencies, other than our functional currency, including certain contract assets. Fluctuations in the Brazilian real versus any of these foreign currencies may have a material adverse effect on our financial position and results of operations, for example as a result of overall market declines and increased market volatility due to the COVID-19 pandemic.

In addition, we enter into derivatives transactions to manage our exposure to exchange rate risk. Such derivatives transactions are designed to protect us against increases or decreases in exchange rates, but not both. If we have entered into derivatives transactions to protect against, for example, decreases in the value of the real and the real instead increases in value, we may incur financial losses. Such losses could materially and adversely affect us.

XP CCTVM is subject to liquidity risks.

XP CCTVM is subject to liquidity risks. Liquidity is the ability to meet current and future cash flow needs on a timely basis at a reasonable cost. XP CCTVM requires sufficient liquidity to meet customer and clearinghouse deposit maturities/withdrawals, payments on debt obligations as they become due and other cash commitments under both normal operating conditions and other unpredictable circumstances causing industry or general financial market stress or increased volatility, such as due to the COVID-19 pandemic. XP CCTVM’s access to funding sources in amounts adequate to finance its activities on terms that are acceptable to it could be impaired by factors that affect it specifically or the financial services industry or economy generally. To the extent XP CCTVM is unable to maintain adequate levels of liquidity, it may not be able to meet its payment obligations, which may have a material adverse effect on our business, financial condition and results of operations.

In addition, XP CCTVM invests funds held in customer accounts in fixed income financial instruments and securities that meet certain liquidity conditions. To the extent customers withdraw a substantial amount of their funds held in such customer accounts for other uses, XP CCTVM might experience liquidity constraints, requiring it to rapidly sell financial assets at a discounted price, and may be unable to obtain funding and default on its payment obligations to market counterparties and other customers, which may cause XP CCTVM to incur losses, and consequently harm our image and reputation and have a material adverse effect on our business, financial condition and results of operations.

In the past, we identified material weaknesses in our internal control over financial reporting, and if we fail to maintain effective internal controls over financial reporting, we may be unable to accurately report our results of operations, meet our reporting obligations and/or prevent fraud.

In the past, we have identified material weaknesses in our internal control over financial reporting, and we cannot assure that significant deficiencies or material weaknesses in our internal control over financial reporting will not be identified in the future. In addition, if we fail to maintain the adequacy of our internal control over financial reporting, as accounting standards are modified, supplemented or amended from time to time, we may not be able to conclude on an ongoing basis that we have effective internal control over financial reporting in accordance with Section 404 of the Sarbanes-Oxley Act of 2002. For further information, see “Item 15. Controls and Procedures—D. Changes in Internal Control Over Financial Reporting.” If we fail to maintain an effective internal control environment, we could suffer material misstatements in our financial statements, fail to meet our reporting obligations or fail to prevent fraud, which would likely cause investors to lose confidence in our reported financial information. This could, in turn, limit our access to capital markets, harm our results of operations, and lead to a decline in the trading price of our Class A common shares. Additionally, ineffective internal control over financial reporting could expose us to increased risk of fraud or misuse of corporate assets and subject us to potential delisting from Nasdaq, regulatory investigations and civil or criminal sanctions.

21

We are subject to the Sarbanes-Oxley Act, which requires, among other things, that we establish and maintain effective internal control over financial reporting and disclosure controls and procedures. Under the current rules of the SEC, we are required to perform system and process evaluation and testing of our internal controls over financial reporting to allow management to assess their effectiveness. Our testing may in the future reveal deficiencies in our internal controls that are deemed to be material weaknesses or significant deficiencies and render our internal controls over financial reporting ineffective. If we or our management identifies material weaknesses or significant deficiencies in our internal controls over financial reporting that are deemed to be additional material weaknesses, the market price of our Class A common shares may decline and we may be subject to investigations or sanctions by the SEC, the Financial Industry Regulatory Authority, Inc., or “FINRA,” or other regulatory authorities, as well as litigation.

Requirements associated with being a public company in the United States require significant company resources and management attention.

We are subject to certain reporting requirements of the Securities Exchange Act of 1934, or the “Exchange Act,” and the other rules and regulations of the SEC and Nasdaq. We are subject to various other regulatory requirements, including the Sarbanes-Oxley Act. We expect these rules and regulations to increase our legal, accounting and financial compliance costs and to make some activities more time-consuming and costly. For example, we expect these rules and regulations to make it more difficult and more expensive for us to obtain director and officer liability insurance, and we may be required to accept reduced policy limits and coverage or incur substantial costs to maintain the same or similar coverage. New rules and regulations relating to information disclosure, financial reporting and controls and corporate governance, which could be adopted by the SEC, Nasdaq or other regulatory bodies or exchange entities from time to time, could result in a significant increase in legal, accounting and other compliance costs and make certain corporate activities more time-consuming and costly, which could materially affect our business, financial condition and results of operations. These rules and regulations may also make it more difficult for us to attract and retain qualified persons to serve on our board of directors or as executive officers.

These obligations also require substantial attention from our senior management and could divert their attention away from the day-to-day management of our business. Given that most of the individuals who now constitute our management team have limited experience managing a publicly traded company and complying with the increasingly complex laws pertaining to public companies, initially, these new obligations could demand even greater attention. These cost increases and the diversion of management’s attention could materially and adversely affect our business, financial condition and results of operations.

Our business is subject to complex and evolving regulations and oversight related to our provision of financial products and services and to costs and risks associated with other increased or changing laws and regulations affecting our business, including developments in data protection and privacy laws, which could harm our business, financial condition and results of operations.

As a financial services institution in Brazil, our business is subject to Brazilian laws and regulations relating to financial services in Brazil, comprising Federal Law No. 4,595/64, Federal Law No. 6,385/76 and related rules and regulations issued by the Central Bank, the CVM, the B3 and ANBIMA, among others. In addition, our insurance business is subject to various laws and regulations in Brazil, such as Federal Law No. 4,595/64, Decree Law No. 73/66 and certain other rules and regulations issued by the National Private Insurance Council (Conselho Nacional de Seguros Privados), or “CNSP,” and SUSEP, among others.

The laws, rules, and regulations that govern our business include or may in the future include those relating to banking, deposit-taking, cross-border and domestic money transmission, foreign exchange, payments services (such as payment processing and settlement services), consumer financial protection, tax, anti-money laundering and terrorist financing and escheatment (rules relating to unclaimed property). These laws, rules, and regulations are enforced by multiple authorities and governing bodies in Brazil, including the Central Bank and the CMN. In addition, as our business continues to develop and expand, we may become subject to additional rules and regulations, which may limit or change how we conduct our business.

We are subject to anti-money laundering and terrorist financing laws and regulations in multiple jurisdictions that prohibit, among other things, involvement in transferring the proceeds of criminal or terrorist activities. We could be subject to liability and forced to change our business practices if we were found to be subject to, or in violation of, any laws or regulations impacting our ability to maintain a bank account in the countries where we operate, including the United States, or if existing or new legislation or regulations applicable to banks in the countries where we maintain a bank account, including the United States, were to result in banks in those countries being unwilling or unable to establish and maintain bank accounts for us.

22

If any person in the Cayman Islands knows or suspects or has reasonable grounds for knowing or suspecting that another person is engaged in criminal conduct or money laundering or is involved with terrorism or terrorist financing and property and the information for that knowledge or suspicion came to their attention in the course of business in the regulated sector, or other trade, profession, business or employment, the person will be required to report such knowledge or suspicion to (1) the Financial Regulatory Authority , or “FRA,” of the Cayman Islands, pursuant to the Proceeds of Crime Act (As Revised) of the Cayman Islands, if the disclosure relates to criminal conduct or money laundering, or (2) a police officer of the rank of constable or higher, or the FRA, pursuant to the Terrorism Act (As Revised) of the Cayman Islands, if the disclosure relates to involvement with terrorism or terrorist financing and property. Such a report shall not be treated as a breach of confidence or of any restriction upon the disclosure of information imposed by any enactment or otherwise.

Certain of our subsidiaries are subject to regulation in the United States, such as our subsidiary, XP Investments US, LLC, which is registered with the SEC and FINRA as a broker-dealer, and XP Advisory US, Inc., which is registered with the SEC as an investment adviser. We do not believe that we or any of our subsidiaries engage in any financial services activities in the United States that would require a license from any U.S. federal or state banking authorities or other financial regulators, except those licenses and registrations that have already been obtained. If we are found to have engaged in a banking or other financial services business in the United States without an appropriate registration or license, we could be subject to liability, or forced to cease doing such business, change our business practices, or obtain the appropriate license or registration. If we or any of our subsidiaries obtain additional licenses or registrations in the United States, we could be subject to compliance with additional applicable laws and regulations, including anti-money laundering and terrorist financing laws and regulations, which could adversely affect our business, financial condition, or results of operations.

Although we have a compliance program focused on applicable laws, rules, and regulations (which currently is principally focused on Brazilian law) and are continually investing in this program, we may nonetheless be subject to fines or other penalties in one or more jurisdictions levied by federal, state or local regulators as well as those levied by foreign regulators. In addition to fines, penalties for failing to comply with applicable rules and regulations could include significant criminal and civil lawsuits, forfeiture of significant assets, or other enforcement actions, including loss of required licenses or approvals in a given jurisdiction. We could also be required to make changes to our business practices or compliance programs as a result of regulatory scrutiny. In addition, any perceived or actual failure to comply with applicable laws, rules, and regulations could have a significant impact on our reputation as a trusted brand and could cause us to lose existing clients, prevent us from obtaining new clients, require us to expend significant funds to remedy problems caused by breaches and to avert further breaches, and expose us to legal risk and potential liability, and we could be (1) required to pay substantial fines and disgorgement of our profits; (2) required to change our business practices; or (3) subjected to insolvency proceedings such as an intervention by the Central Bank, as well as the out-of-court liquidation of XP CCTVM, and any of our subsidiaries to whom authorizations may be granted in the future. Any disciplinary or punitive action by our regulators or failure to obtain required operating authorizations could seriously harm our business and results of operations.

In addition, the Brazilian regulatory and legal environment exposes us to other compliance and litigation risks that could materially affect our results of operations. These laws and regulations may change, sometimes significantly, as a result of political, economic or social events. Some of the federal, state or local laws and regulations in Brazil that affect us include: those relating to consumer products, product liability or consumer protection; those relating to the manner in which we advertise, market or sell products; labor and employment laws, including wage and hour laws; tax laws or interpretations thereof; bank secrecy laws, data protection and privacy laws and regulations; and securities and exchange laws and regulations. For instance, data protection and privacy laws are developing to take into account the changes in cultural and consumer attitudes towards the protection of personal data (including as a result of the LGPD). There can be no guarantee that we will have sufficient financial and personnel resources to comply with any new regulations or successfully compete in the context of a changing regulatory environment.

The laws regulating privacy rights and data protection have evolved considerably over recent years, providing for more restrictive provisions on the means through which processing of personal data by organizations is regulated. As of August 2018, when the LGPD was enacted, practices involving the processing of personal data were ruled by certain sectorial laws, such as the Consumer Defense Code (Law No. 8,078/1990) and the Brazilian Civil Rights Framework for the Internet, or “Law No. 12,965/2014.”

23

On August 14, 2018, the President of Brazil approved the LGPD, a comprehensive personal data protection law establishing general principles and obligations that apply across multiple economic sectors and contractual relationships. The LGPD establishes detailed rules for the collection, use, processing and storage of personal data and will affect all economic sectors, including the relationship between customers and suppliers of goods and services, employees and employers and other relationships in which personal data is collected, whether in a digital or physical environment. The penalties and fines for violations of the LGPD, which became applicable as of August 1, 2021, include: (1) warnings, with the imposition of a deadline for the adoption of corrective measures; (2) a one-time fine of up to 2% of gross sales of the company or a group of companies or a maximum amount of R$50,000,000 per violation; (3) a daily fine, up to a maximum amount of R$50,000,000 per violation; (4) public disclosure of the violation; (5) the restriction of access to the personal data to which the violation relates, until corrective measures are implemented; (6) deletion of the personal data to which the violation relates; (7) partial suspension of the databases to which the violation relates for up to 12 months, until corrective measures are implemented; (8) suspension of the personal data processing activities to which the violation relates for up to 12 months; and (9) partial or full prohibition on personal data processing activities.

Compliance with the LGPD is required since the date it became effective, and even though the enforceability of administrative fines and sanctions was postponed to August 1, 2021 by Law No. 14,010/20, it does not prevent other means of enforcing the LGPD, as data subjects, the public prosecutor’s offices and private associations, for example, will still be able to file lawsuits in courts to enforce the provisions of the LGPD and seek redress. Moreover, the fact that the administrative sanctions of the LGPD will become enforceable only in August 2021 does not preclude the enforcement of administrative sanctions set forth in other laws dealing with privacy and data protection matters, such as the Consumer Defense Code and the Brazilian Internet Law (Marco Civil da Internet). These administrative sanctions could be enforced by other public authorities, such as the public prosecutor’s offices and consumer protection agencies.

We cannot assure you that our LGPD compliance efforts will be deemed appropriate or sufficient by regulatory authorities or by courts. Moreover, as the LGPD requires further regulation from the National Data Protection Authority (Autoridade Nacional de Proteção de Dados), or “ANPD” regarding several aspects of the law, which are yet unknown, we could be required to change our business practices and implement additional measures to adapt our personal data processing activities. This could adversely affect our business, financial condition, or results of operations.

Any additional privacy laws or regulations enacted or approved in Brazil or in other jurisdictions in which we operate could cause us to incur costs to correct the breaches or failures, expose us to uninsured liability, increase our risk of regulatory scrutiny, subject us to lawsuits, and result in the imposition of material penalties and fines under state and federal laws or regulations, which could seriously harm our business, financial condition or results of operations.

We are subject to regulatory activity and antitrust litigation under competition laws.

We are subject to scrutiny from governmental agencies under competition laws in countries in which we operate. Some jurisdictions also provide private rights of action for competitors or consumers to assert claims of anticompetitive conduct. Other companies or governmental agencies may allege that our actions violate antitrust or competition laws, or otherwise constitute unfair competition. Contractual agreements with clients or companies, as well as our unilateral business practices, could give rise to regulatory action or antitrust investigations or litigation. Some regulators may perceive our business to have such significant market power that otherwise uncontroversial business practices could be deemed anticompetitive. Any such claims and investigations, even if they are unfounded, may be expensive to defend, involve negative publicity and substantial diversion of management time and effort, and result in significant judgments against us.

In order to obtain antitrust regulatory approvals from Brazil’s Administrative Council for Economic Defense (Conselho Administrativo de Defesa Econômica), or “CADE,” and the Central Bank for the Itaú Transaction, we entered into agreements with CADE and the Central Bank (the latter of which was terminated and is no longer in force). Pursuant to our agreement with CADE, which is valid until December 31, 2022, we agreed, among other measures, to: (1) adopt equal treatment practices in our relationships with suppliers of financial products; (2) refrain from entering into exclusive relationships with independent financial advisors (except as permitted by applicable regulations); (3) facilitate transferability of clients’ financial products to competing platforms; and (4) maintain a “no fee” policy for specific types of financial products. A breach by us of any of the aforementioned measures could result in financial penalties, antitrust investigations and the revision of the agreement with CADE.

24

We are subject to anti-corruption, anti-bribery, anti-money laundering and sanctions laws and regulations.

We operate in jurisdictions that have a high risk of corruption, and we are subject to anticorruption, anti-bribery, anti-money laundering and sanctions laws and regulations, including Brazilian Federal Law No. 12,846/2013, or the “Clean Company Act,” the United States Foreign Corrupt Practices Act of 1977, as amended, or the “FCPA” and the Bribery Act 2010 of the United Kingdom, or the Bribery Act. Each of the Clean Company Act, the FCPA and the Bribery Act impose liability against companies who engage in bribery of government officials, either directly or through intermediaries. We have a compliance program that is designed to manage the risks of doing business in light of these new and existing legal and regulatory requirements. Violations of the anticorruption, anti-bribery, anti-money laundering and sanctions laws and regulations could result in criminal liability, administrative and civil lawsuits, significant fines and penalties, forfeiture of significant assets, as well as reputational harm.

Regulators may increase enforcement of these obligations, which may require us to adjust our compliance and anti-money laundering programs, including the procedures we use to verify the identity of our clients and to monitor our transactions and transactions made through our platform. Regulators regularly reexamine the transaction volume thresholds at which we must obtain and keep applicable records, verify identities of customers, and report any change in such thresholds to the applicable regulatory authorities, which could result in increased costs in order to comply with these legal and regulatory requirements. Costs associated with fines or enforcement actions, changes in compliance requirements, or limitations on our ability to grow could harm our business, and any new requirements or changes to existing requirements could impose significant costs, result in delays to planned product improvements, make it more difficult for new customers to join our network and reduce the attractiveness of our products and services.

Changes in tax laws, tax incentives, benefits or differing interpretations of tax laws may adversely affect our results of operations.

Changes in tax laws, regulations, related interpretations and tax accounting standards in Brazil, the United States, the United Kingdom, Portugal or Switzerland (countries where we operate), or the Cayman Islands, may result in a higher tax rate on our earnings, which may significantly reduce our profits and cash flows from operations. For example, social contribution on net profits, or “CSLL,” are typically levied in Brazil at a rate of 9%. However, financial institutions (i.e., XP CCTVM) and insurance companies (i.e., XP Vida e Previdência) are subject to a higher CSLL rate of 15%, while as of March 2020, Brazilian banks (i.e., Banco XP) are subject to a CSLL rate of 20%. In July 2021, Law No. 13,148/2021 increased the CSLL rate by 5% for all Brazilian financial entities until December 2021 (Brazilian banks were subject to a CSLL rate of 25% until December 31, 2021) and for all other financial entities, including insurance companies (these companies were subject to a CSLL rate of 20%, until December 31, 2021). During the period in which the 5% rate increase was in effect, the combined rate of taxes of income, which includes corporate income tax, or “IRPJ,” was 50% for banks and 45% for all other financial institutions. As of January 1, 2022, the aggregate income tax rate (IRPJ and CSLL) applied specifically to Brazilian banks returned to 45% while the combined income tax rate for other financial institutions (i.e., XP CCTVM and XP Vida e Previdência) returned to 40%.

In addition, our financial condition and results of operations may decline if certain tax incentives are not retained or renewed. For example, Brazilian Law No. 11,196 currently grants tax benefits to companies that invest in research and development, provided that some requirements are met, which significantly reduces our annual corporate income tax expense. If the taxes applicable to our business increase or any tax benefits are revoked and we cannot alter our cost structure to pass our tax increases on to clients, our financial condition, results of operations and cash flows could be adversely affected. Our activities are also subject to a Municipal Tax on Services (Imposto Sobre Serviços), or “ISS.” Any increases in ISS rates could also harm our profitability.

Furthermore, Brazilian governmental authorities at the federal, state and local levels are considering changes in tax laws in order to cover budgetary shortfalls resulting from the recent economic downturn in Brazil. If these proposals are enacted they may harm our profitability by increasing our tax liabilities, increasing our tax compliance costs, or otherwise affecting our financial condition, results of operations and cash flows. Tax rules in Brazil, particularly at the local level, can change without notice. We may not always be aware of all such changes that affect our business and we may therefore fail to pay the applicable taxes or otherwise comply with tax regulations, which may result in additional tax assessments and penalties for our company.

25

At the municipal level, the Brazilian government enacted Supplementary Law No. 157/16, which imposed changes regarding the ISS collection applied to the rendering of part of our services. These changes created new obligations, as ISS will now be due in the municipality in which the acquirer of our services is located rather than in the municipality in which the service provider’s facilities are located. This obligation took force in January 2018, but has been delayed by Direct Unconstitutionality Action No. 5835, or the “ADI,” filed by taxpayers. The ADI challenges the constitutionality of Supplementary Law No. 157/16 before the Brazilian Supreme Court, arguing that the new legislation would adversely affect companies’ activities due to the increase of costs and bureaucracy related to the ISS payment to several municipalities and the compliance with tax reporting obligations connected therewith. As a result, the Brazilian Supreme Court granted an injunction to suspend the enforcement of Supplementary Law No. 157/16. In June 2020, the ADI was included in the judgment agenda of the Brazilian Supreme Court but, as of the date of this annual report, a final decision on this matter is currently pending.

Moreover, we are subject to tax laws and regulations that may be interpreted differently by tax authorities and us. The application of indirect taxes, such as sales and use tax, value-added tax, or “VAT,” provincial taxes, goods and services tax, business tax and gross receipt tax, to businesses such as ours is complex and continues to evolve. We are required to use significant judgment in order to evaluate applicable tax obligations. In many cases, the ultimate tax determination is uncertain because it is not clear how existing statutes apply to our business. One or more states or municipalities, the federal government or other countries may seek to challenge the taxation or procedures applied to our transactions, which could impose the charge of taxes or additional reporting, record keeping or indirect tax collection obligations on businesses like ours. New taxes could also require us to incur substantial costs to capture data and collect and remit taxes. If such obligations were imposed, the additional costs associated with tax collection, remittance and audit requirements could have a material adverse effect on our business and financial results.

The costs and effects of pending and future litigation, investigations or similar matters, or adverse facts and developments related thereto, could materially affect our business, financial position and results of operations.

We are, and may be in the future, party to legal, arbitration and administrative investigations, inspections and proceedings arising in the ordinary course of our business or from extraordinary corporate, tax or regulatory events, involving our clients, suppliers, customers, investors, as well as competition, government agencies, tax and environmental authorities, particularly with respect to civil, tax and labor claims. Indemnity rights that we seek to negotiate in certain transactions may not cover all claims that may be asserted against us, and any claims asserted against us, regardless of merit or eventual outcome, may harm our reputation. Also, we currently are, and may in the future be, party to one or more securities class actions regarding our registration statement on Form F-1 in connection with our initial public offering and other related reports. Furthermore, there is no guarantee that we will be successful in defending ourselves in pending or future litigation or similar matters under various laws. Should the ultimate judgments or settlements in any pending or future litigation or investigation significantly exceed any amounts we are able to recover under any indemnity arrangements, such judgments or settlements could have a material adverse effect on our business, financial condition and results of operations and the price of our Class A common shares. Further, even if we adequately address issues raised by an inspection conducted by an agency or successfully defend our case in an administrative proceeding or court action, we may have to set aside significant financial and management resources to settle issues raised by such proceedings or those lawsuits or claims, which could adversely affect our business. See “Item 8. Financial Information—A. Consolidated Statements and Other Financial Information—Legal Proceedings.”

26

We may not be able to successfully manage our intellectual property and may be subject to infringement claims.

We rely on a combination of contractual rights, trademarks and trade secrets to establish and protect our proprietary technology. Third parties may challenge, invalidate, circumvent, infringe or misappropriate our intellectual property, including at the administrative or judicial level, or such intellectual property may not be sufficient to permit us to take advantage of current market trends or otherwise to provide competitive advantages, which could result in costly redesign efforts, the discontinuance of certain service offerings or other competitive harm. Others, including our competitors, may independently develop similar technology, duplicate our services or design around our intellectual property, and in such cases, we could not assert our intellectual property rights against such parties. Further, our contractual arrangements may not effectively prevent disclosure of our confidential information or provide an adequate remedy in the event of unauthorized disclosure of our confidential information. We may have to litigate to enforce or determine the scope and enforceability of our intellectual property rights, trade secrets and know-how, which is expensive, could cause a diversion of resources and may not prove successful. Also, because of the rapid pace of technological change in our industry, aspects of our business and our services rely on technologies developed or licensed by third parties, and we may not be able to obtain or continue to obtain licenses and technologies from these third parties on reasonable terms or at all. The loss of intellectual property protection, the inability to obtain third-party intellectual property or delay or refusal by relevant regulatory authorities to approve pending intellectual property registration applications could harm our business and ability to compete. With respect to trademarks, loss of rights may result from term expirations, owner abandonment and forfeiture or cancellation proceedings before the Brazilian Patent and Trademark Office (Instituto Nacional da Propriedade Industrial), or the “INPI.” In addition, if we lose rights over registered trademarks, we would not be entitled to use such trademarks on an exclusive basis, and therefore, third parties would be able to use similar or identical trademarks to identify their products or services, which could adversely affect our business.

We may also be subject to costly litigation in the event our services and technology infringe upon or otherwise violate a third party’s proprietary rights. Third parties may have, or may eventually be issued, patents that could be infringed by our services or technology. Any of these third parties could make a claim of infringement against us with respect to our services or technology, and we have been subject to such claims in the past. Also, we currently are, and may in the future be, party to one or more claims by third parties for breach of copyleft, trademark, license usage or other intellectual property rights. Any claim from third parties may result in a limitation on our ability to use the intellectual property subject to these claims or could prevent us from registering our brands as trademarks. Additionally, in recent years, individuals and groups have been purchasing intellectual property assets for the sole purpose of making claims of infringement and attempting to extract settlements from companies like ours. Even if we believe that intellectual property-related claims are without merit, defending against such claims is time-consuming and expensive and could result in the diversion of the time and attention of our management and employees. Claims of intellectual property infringement also might require us to redesign affected services, enter into costly settlement or license agreements, pay costly damage awards, change our brands, or face a temporary or permanent injunction prohibiting us from marketing or selling certain services or using certain brands. Even if we have an agreement for indemnification against such costs, the party providing such indemnification may be unwilling or unable to comply with its indemnification obligations. If we cannot or do not license the infringed technology on reasonable terms or substitute similar technology from another source, our revenues and earnings could be adversely impacted.

Our use of open-source software could negatively affect our ability to sell our solutions and subject us to possible litigation.

Our solutions incorporate, and are dependent to some extent, on the use and development of open-source software and we intend to continue our use and development of open-source software in the future. Such open-source software is generally licensed by its authors or other third parties under open-source licenses and is typically freely accessible, usable and modifiable. Pursuant to such open-source licenses, we may be subject to certain conditions, including requirements that we offer our proprietary software that incorporates the open-source software for no cost, that we make available source code for modifications or derivative works we create based upon, incorporating or using the open-source software and that we license such modifications or derivative works under the terms of the particular open-source license. If an author or other third party that uses or distributes such open-source software were to allege that we had not complied with the conditions of one or more of these licenses, we could be required to incur significant legal expenses defending against such allegations and could be subject to significant damages, enjoined from the use or sale of our solutions that contained or are dependent upon the open-source software and required to comply with the foregoing conditions, which could disrupt the distribution and sale of some of our products and services. Litigation could be costly for us to defend, have a negative effect on our financial condition and results of operations or require us to devote additional research and development resources to change our platform. The terms of many open-source licenses to which we are subject have not been interpreted by courts. As there is little or no legal precedent governing the interpretation of many of the terms of certain of these licenses, the potential impact of these terms on our business is uncertain and may result in unanticipated obligations regarding our solutions and technologies.

27

Any requirement to disclose our proprietary source code, termination of open-source license rights or payments of damages for breach of contract could be harmful to our business, financial condition or results of operations, and could make it easier for our competitors to develop products and services that are similar to or better than ours.

In addition to risks related to license requirements, use of open-source software can lead to greater risks than use of third-party commercial software, as open-source licensors generally do not provide warranties, controls on the origin or development of the software, or remedies against the licensors. Many of the risks associated with usage of open-source software cannot be eliminated and could adversely affect our business.

Although we believe that we have complied with our obligations under the various applicable licenses for open-source software, it is possible that we may not be aware of all instances where open-source software has been incorporated into our proprietary software or used in connection with our solutions or our corresponding obligations under open-source licenses. We do not have open-source software usage policies or monitoring procedures in place. We rely on multiple software programmers to design our proprietary software, and we cannot be certain that our programmers have not incorporated open-source software licensed under copyright license or similar provisions into our proprietary software that we intend to maintain as confidential or that they will not do so in the future. To the extent that we are required to discl