Ana Paula Ferreira Bueno

Strategic professional with solid experience in Corporate Governance, Compliance, Risk Management and Internal Controls, focused on business protection, value creation and decision-making support in highly regulated and complex environments. Responsible for the design and implementation of the Compliance Program from scratch (end-to-end), including corporate policies, Code of Ethics and Conduct, whistleblowing channel, compliance training, regulatory monitoring and internal controls, aligned with legal requirements and global best practices. Led the development of Due Diligence processes, including KYC (Know Your Customer) and KYP (Know Your Partner), applying a risk-based approach to clients, partners and third parties, with defined governance, controls and continuous monitoring. Strong involvement in IPO and Mergers & Acquisitions (M&A) projects, supporting corporate governance structures, internal controls, risk management, due diligence and compliance with CVM and Central Bank of Brazil (BACEN) regulations, contributing to capital markets readiness and strategic transactions. Maintains direct reporting and close interaction with senior leadership, including the Audit Committee and Board of Directors, actively participating in Board meetings and supporting strategic decisions. Experienced in corporate investigations, handling cases related to fraud, bribery, corruption, conflicts of interest and money laundering, with a pragmatic, independent and solution-oriented approach. Acts as a strategic business partner, positioning compliance as an enabler for business areas, strengthening ethical culture, improving governance maturity and aligning the organization with market and regulatory expectations. Active contributor to ESG initiatives and innovation projects, supporting sustainable growth, efficiency and long-term value creation.

Worked as a Compliance Specialist at Mobyan, an affiliate of Santander Group, in a highly regulated environment with direct exposure to financial and logistics risks. Responsible for international regulatory compliance, ensuring alignment with global policies and standards set by the bank’s headquarters in Spain, including direct interaction with global teams and participation in Spanish-language meetings. Strong experience in Anti-Money Laundering (AML/PLD) activities, including KYC (Know Your Customer) and KYP/KYS (Know Your Partner/Supplier) reviews for clients, partners, and strategic suppliers. Handled corporate risk management, supporting the implementation of the company’s risk matrix and the development of action plans to address and mitigate key identified risks. Led the design and implementation of the due diligence process at Mobyan, establishing risk-based criteria, workflows, and controls to mitigate regulatory, financial, and reputational risks. Collaborated with IT governance, supporting LGPD implementation and strengthening cybersecurity processes, with a focus on data protection and technology risk management. Active participation in corporate investigations, handling cases related to fraud, bribery, corruption, and money laundering, in close coordination with legal, compliance, and audit teams, in accordance with Santander Group policies. Acted as a strategic partner to business and support areas, strengthening the compliance culture and supporting risk prevention, regulatory adherence, and ethical decision-making.

Created the partnership area at Clara, with all processes and procedures well defined, such as attracting partners and their development in relation to Leads generated in acquisition partnerships. Generated a form of remuneration via benefit partnership, creating the Partners Club to develop customer loyalty, in addition to generating with these partnerships the extension of these benefits to the company's employees. Created the Clara Pontos program, developed with the best points and miles generation companies in the market, including the development with one of them of the first exchange of points via CNPJ for corporate cards and quota payments in general using these points. Prepared the entire contractual part of the partnerships, both benefits and acquisition, including the regulation on granting and exchanging Clara points. Developed products together with some partners to create the Advantage Club for the company's Prime Cards line. Developed a mechanism for checking the performance of acquisition partners.

Negotiations and customer assistance support. Together with the team, I carried out improvements in the onboarding process and verification of fraud on new customer documentation and application and training of LGPD standards in the process. Assist the commercial team with training on initial onboarding for credit analysis. Collaborated with the credit analysis team in the Due diligence, AML and fraud verification phase.

Created the compliance project and improvements in the Due diligence and AML process, to verify purchase and sales contracts and partnerships for land negotiated in the Franca/SP Regional Office. After the development of the project, this Regional was considered the best in terms of agility and productivity at the Company. Coordinated the company's internal compliance structuring project. Together with the Legal team, coordinated all contractual analyzes and their typologies, verifying irregularities, both in the contractual structure, as well as in the format of the negotiations carried out. Assisted on adaptations of the Data Protection Law, mainly in the adaptation of the law to contracts prior to this one. Developed solutions for strategic contracts with some type of impediment pointed out regarding verification in Due diligence.

Analyzed demands and needs to define scope and evaluate new businesses; I studied trends, competition and the market in search of the best opportunities aligned with the company's strategy. Collaborated in the development of a new company in the urban sector, from business structuring to the payment format, commission and product development. Verification and drafting of real estate contracts, "Due diligence" document analysis. Conducts business compliance to be carried out jointly with the Legal team. Assistance in opening companies, such as SPE and SCP and their tax regimes following partnership contracts for the creation of new real estate products.

Led two teams in the M&A sector, one located in the city of Ribeirão Preto/SP on the Mining and Health sectors and another in the city of Campo Grande/MS on the Agribusiness and Health sectors. Conducted and coordinated M&A activities and fostered new business, seeking partnerships with investment funds or groups of investors; Coordinated the company's due diligence process, Developed an investigative compliance project involving KYC, AML and the LGPD adherence procedure. Prepared all contracts for the M&A operation, such as NDA, MoU, LOI, Pre-contract and final contract for the purchase and sale of projects, reports and memos. Performed business management of corporate restructuring.

Performed business and corporate consulting with emphasis on asset protection; Elaboration and analysis of various business contracts Performed due diligence on future contracts to be carried out that were under negotiation. Elaboration of business management and business management projects.

Performed litigation and advisory activities as an outsourced lawyer for companies in various sectors. Held hearings in all spheres, oral support in courts, mediations and negotiations, preparation of documents, contracts, agreements, notifications, documentation and reports in the areas of Civil, Labor, Tax and Administrative Law.