Security & methodology
Every tonne of CO2e that Ecomilhas reports can be traced back to individual, GPS-verified trips. This page documents how the number is produced, who assures it, and how we protect the people behind the data.
CO2e methodology (GHG Protocol)
Avoided-emission calculations follow the GHG Protocol Corporate Accounting and Reporting Standard (WRI/WBCSD), applied to Scope 3 category 6 (business travel) and category 7 (employee commuting). The baseline assumes the trip would otherwise have been made in a conventional gasoline car; the actual modal's emission factor is subtracted from that baseline.
CO2e avoided (kg) = (Baseline factor − Modal factor) × Distance (km) × GWP
- Distance comes from the app's GPS tracking — measured, not self-reported.
- Emission factors are versioned per modal and region, using official sources (Brazilian government inventories, IPCC AR4 GWP-100) — walking and cycling count as zero-emission; public transport, ethanol and electric vehicles use modal- and grid-specific factors.
- Traceability: every reported tCO2e decomposes into its individual trips, with timestamps and modal — an MRV-style audit trail.
Independent assurance (KPMG)
The assured indicators cover:
| Topic | Indicator |
|---|---|
| GHG — operational control | Scope 3 avoided emissions: business travel and work-home commuting (tCO2e) |
| GHG intensity | Avoided-emission intensity per km, by fuel (ethanol, electric) |
| Carbon credits | Verified carbon mobility credits (VCUs) from validated personal trips |
Assurance procedures include comparing reported data to underlying sources on a sample basis and re-performing indicator calculations. Corporate-program trips are additionally validated by commercial-hours windows, a common office origin/destination, and identity confirmed via corporate e-mail with two-factor authentication.
Clients receive the assurance letter for their reporting period together with the quarterly impact report. To request a copy: contato@ecomiles.app.
Anti-fraud & trip validation
Speed vs. modal
Each trip's speed profile must be consistent with the declared modal — a "bike ride" at 70 km/h is rejected.
Spatio-temporal dedup
Overlapping or duplicated trips from the same user are collapsed; the same kilometre is never counted twice.
Human + automated review
Trips pass automated checks and can be flagged for review; only approved trips ("wasAllApproved") enter reported CO2e.
Verified identity
Corporate programs require the company e-mail and two-factor authentication in the app.
Privacy (LGPD / GDPR)
- Companies only see aggregates. Employers access emissions and engagement totals — never an individual's real-time location or route history.
- Passive, purpose-bound tracking. GPS data is used to validate trips and compute CO2e; data minimization applies throughout.
- Deletion propagation. When a user deletes their account, the deletion propagates through processing systems.
- Consent-first website. On this site, no analytics or marketing tag fires before an explicit cookie choice (Google Consent Mode v2).
Documents: Privacy policy · Data Processing Agreement (DPA) · Terms of use
Platform security
- TLS — encryption in transit everywhere, with HSTS enabled on the websites.
- Security headers — strict CSP, X-Frame-Options, nosniff and referrer policy on this portal.
- API — company keys (
x-api-key) + short-lived user tokens with refresh; rate limiting by tier; sandbox before production keys. - Mastercard MDES — card provisioning through network standards; the PAN is never exposed to partners.
- Responsible disclosure — found a vulnerability? See security.txt or write to contato@ecomiles.app.