There is a date on the Brazilian regulatory calendar that almost nothing has been written about in English. July 21, 2026. That’s the day every CRAF — Certificado de Registro de Arma de Fogo — issued under the prior administration’s rules expires. CACs (collectors, sport shooters, hunters) who fail to migrate to the new SINARM-CAC framework before that date lose their CR and the firearms registered to them go into irregularity in the same motion. The Polícia Federal has been issuing renewal guidance through April. The cliff is not theoretical and not subject to a quiet 60-day extension.
Here is why I am writing about it from a Vanguard Attaché account rather than just emailing it to clients: most of the EP details operating in Brazil for foreign principals lean — quietly, but really — on Brazilian-registered CAC personnel for the lawful-carry layer. Many will not have audited the cliff. Some that have audited it will discover, in late June, that one or two of their key local protective staff are not on track to renew. That is a posture change, not a paperwork change. A detail that operationally counted on three armed locals and discovers in week 11 that two of them won’t be regular until October is a different detail.
Three things I believe about this
- The cliff is real even if the politics are messy. The CREDN approved on April 8 a legislative decree project to suspend a separate Army norm (Portaria COLOG 260/2025) on CAC weapons management — that proposal still needs CCJ, Plenary, and Senate. People will conflate the two stories. They are not the same regulatory thread, and the July 21 cliff runs on its own clock.
- The English-language Brazil EP firms have not flagged this publicly. I read ETS Risk Management, Black Mountain, ExecSecure, and the boutique-tier Portuguese sites every two weeks for the competitive monitor. As of today none of them carry a public CRAF-cliff note. That’s not because they don’t know — it’s because public regulatory writing is editorial work most security firms structurally avoid. Vanguard does not avoid it. That is the lane.
- The action is unsexy and immediate. Audit your local CAC-registered staff by name by June 30. Confirm renewal status. Where renewal is uncertain, treat that staffer’s lawful-carry capacity as offline for the August window and re-plan around it. Don’t outsource the audit to the partner firm without a name-by-name confirm-back. This is the kind of operational hygiene that, six weeks later, separates the details that handled the cliff from the ones that bluffed through it.
If your detail in Brazil includes lawful-carry by Brazilian CACs and your firm hasn’t sent you a CRAF-status note by mid-June, I would treat that as a signal about the firm.
Request the audit template
If you’d like a one-page audit template for confirming your local protective staff’s CRAF/CR status before the cliff, reply to this post or email Arthur direct — we’ll send the same internal template Vanguard uses with our partner firms. No newsletter sign-up wall.