After the Speed Test: TSS SOFTWARE LTDA and the Economics of Repair in Brazil’s Noroeste

Summary

• TSS SOFTWARE LTDA is the legal operator behind the Conexão Internet brand: its website, domain registration, network registry entry, public contracts and corporate-establishment records form a consistent identity chain.
• Public routing evidence shows a real regional network—AS52745, two IPv4 allocations, an IPv6 allocation, several visible network neighbours and an operational IX.br connection in Maringá—but none of those facts proves end-to-end capacity or physically diverse restoration paths.
• Conexão’s economics are shaped by address-by-address installation, pole and field costs, included customer equipment, low-density service territory and the labour needed to repair a circuit outside a national footprint.
• The best procurement test is therefore not the advertised access speed. It is a written demonstration of physical route diversity, busy-hour performance, address policy, power resilience, escalation ownership, repair time and secure customer access.

The circuit that begins when the sale ends

A short public notice from Loanda is a better x-ray of Conexão Internet than a page of speed claims. In July 2026, the municipal chamber renewed a contract with TSS SOFTWARE LTDA for a 1 Gbps fibre circuit with a fixed IP address, installation and technical support. The notice does not describe an abstract connectivity promise. It assigns a named supplier to a working circuit and to the support obligation around it. The 2026 renewal notice follows a 2024 contract that put the annual value at R$2,170.44.

Trace that line outward. Inside the chamber, applications depend on a router, local Ethernet and Wi-Fi, power and correct addressing. Beyond the wall, a drop cable has to reach the operator’s distribution plant. That plant must join an aggregation point, which must reach TSS’s routing edge. AS52745 then has to exchange traffic with other networks, through purchased transport, direct adjacencies or the regional Internet exchange. A “1 Gbps” label describes only one property of this chain.

It says nothing by itself about the optical split, peak-hour contention, upstream headroom, route diversity, backup power, field inventory, or how long a crew takes to reach a damaged span.

That distinction matters because the sale and the service are economically different. Selling a plan can be centralised: a price, a WhatsApp conversation, a credit check and an appointment. Maintaining it is stubbornly local. Someone must know which cabinet, pole, splice tray and customer device belong to the incident. Someone must decide whether a complaint is poor indoor Wi-Fi, loss of optical signal, a cut feeder, an aggregation failure or an upstream routing problem. Someone must carry the correct replacement part and have authority to dispatch.

Conexão’s current website promises “100% fibre,” support seven days a week, specialist assistance and business-customer priority. Those are relevant claims, but they are not a service-level agreement. The public site does not state a repair-time commitment, a monthly availability figure, service-credit rules or an escalation ladder. It offers a commercial proposition; the public contracts expose the operational proposition. The difference is the centre of this company.

For a household, a slow repair can interrupt entertainment, study and remote work. For a pharmacy, accountant, farm supplier, clinic or municipality, the same fault can block card authorisation, cloud applications, voice service, tax systems, cameras and public service. In a national network, a buyer may assume a large operations centre and multiple regional depots. In a regional network, proximity can be a stronger advantage than scale—but only if local knowledge, spares and authority are organised around restoration.

Conexão should therefore be measured by the circuit after the sale: who owns each failure domain, how quickly it is isolated, and what alternative path remains while it is repaired.

TSS, Conexão, matriz and filial: the operating bridge

The legal-to-operating bridge is unusually well supported. Conexão’s own homepage names “Tss Software LTDA | Conexão Internet” and gives CNPJ 10.859.987/0001-58. The same page lists the Loanda address and telephone numbers used in other public records. A current Brazilian domain-registry query identifies TSS SOFTWARE LTDA as the owner of conexaointernet.com.br, a domain created in August 2010. PeeringDB’s network entry for AS52745 names the network “TSS SOFTWARE,” records “Conexão Internet” as its alternate name and points to the same website. LACNIC’s official RDAP entry identifies the registrant for AS52745 as TSS SOFTWARE LTDA and associates it with the root CNPJ number.

Corporate-establishment evidence fills in the geography. A public-company-data page for 10.859.987/0001-58, derived from Brazilian federal registration data, describes the Loanda establishment as the matriz, active since May 2009, with the trade name Conexão and a principal activity in multimedia communication services. It also lists secondary activities that include telecommunications-network maintenance, fixed telephony and cable subscription television. A separate record for 10.859.987/0002-39 gives the same exact legal name and trade name, but labels the establishment an active filial in Querência do Norte, opened in May 2011. Its principal activity is Internet-access provision.

The two suffixes should not be treated as two unrelated operators. /0001-58 is the Loanda head establishment; /0002-39 is the Querência do Norte branch under the same eight-digit CNPJ root and the same legal company. The network resources are registered to the head-establishment identity, and public-sector contracts in both Loanda and Querência frequently use /0001-58. For example, Querência do Norte’s 2021 tender named TSS SOFTWARE LTDA EPP with /0001-58 as the winning provider even though the company also had a local branch registration. Establishment suffixes tell a tax and operating-location story; they do not allocate separate autonomous systems, separate brands or separate public networks.

This point also prevents a subtler identity error. The homepage calls its subscriber application the “Grupo Vale” app. Current third-party reproductions of federal company data list Vale do Ivaí Holding LTDA as a shareholder and Marilde Barbosa Oliveira as administrator after a February 2025 change. That supports a corporate connection, but it does not disclose which employees, network assets, support systems or other brands are shared. It would be unsafe to substitute “Grupo Vale” for the assigned legal operator or to attribute every group asset to TSS.

The evidence supports a narrower statement: TSS SOFTWARE LTDA operates Conexão Internet; the site uses a group-branded customer application; and public registration data indicate a holding-company shareholder.

The bridge is also confirmed by conduct, not merely labels. TSS appears in fibre, fixed-IP, telephone-porting and distributed-connectivity procurement records across the area. The website sells those same service families. The domain owner, ASN registrant, legal supplier and trade name all converge. That is enough to analyse Conexão as the operating face of TSS SOFTWARE LTDA while keeping the branch, group and historical names in their proper places.

A regional footprint with municipal-scale geometry

The current site describes presence in “several cities” in north-west Paraná without publishing a text list of active streets or municipalities. That is a company claim about regional reach, not a guarantee that any particular address is serviceable in July 2026. Conexão’s earlier ordering flow required a technical-feasibility check, which is the more realistic unit of coverage.

The territory explains why. IBGE’s Loanda page records 23,225 residents in the 2022 census across 722.091 square kilometres, a density of 32.15 people per square kilometre. Querência do Norte had 10,685 residents over 914.763 square kilometres, only 11.68 people per square kilometre. Those are municipal averages rather than maps of premises, but they capture the regional operator’s basic problem: a dense town centre can support many drops per kilometre of distribution plant, while districts, river communities, farms and scattered public facilities can require much more route and travel time per paying connection.

That geometry turns coverage into a portfolio decision. The operator must decide where a feeder can support enough households, whether an existing pole route has space, whether a remote site needs fibre or radio, and whether a business contract can repay non-standard construction. Expansion is not simply a question of buying more upstream bandwidth. It requires permissions, pole attachments, optical components, customer devices, vehicles, skilled labour and recurring maintenance across distance.

A third-party market aggregation, Pulso Network’s Loanda page, reports 7,300 fixed-broadband accesses, 21 providers, 93.6% fibre penetration among accesses and a highly concentrated HHI of 4,662. It also displays TSS among six providers with an Anatel-derived gold quality designation and a composite score of 89.9. These figures are useful directional evidence, but they are not company disclosures. The page does not expose TSS’s subscriber count or market share, and declared-access data can lag or contain reporting differences. It is therefore fair to say that Loanda is both fibre-heavy and contested, but not to infer how many Conexão customers exist.

The municipal geometry also changes what “regional” means. Conexão does not need a national retail footprint to matter. A provider that reaches town offices, small businesses, homes and dispersed municipal facilities can become a local utility in practice. Its defensibility comes from plant already built, route knowledge, customer familiarity and a repair team close enough to act. Its risk is that the same compact organisation may have fewer spare crews, less bargaining power for equipment and transit, and a narrower pool of specialised labour. Both advantage and risk live in the same local footprint.

What AS52745 shows—and what it does not

AS52745 is the clearest public proof that TSS is more than a reseller placing another carrier’s name behind a household router. LACNIC allocated the autonomous-system number in February 2013 to TSS SOFTWARE LTDA. It also allocated two IPv4 blocks—177.85.120.0/21 and 170.0.144.0/22—and an IPv6 /32. Together, the IPv4 allocations contain 3,072 addresses. The IPv6 allocation is vastly larger in address terms, as IPv6 design intends.

At the evidence freeze, RIPEstat’s announced-prefix view saw the two IPv4 aggregates and the IPv6 /32 originated by AS52745. Its routing-status view reported the IPv4 routes visible to 323 of 325 RIS peers and the IPv6 route visible to all 320 IPv6 peers in that observation. That is strong evidence of global route propagation at that moment. It is not an uptime percentage: route collectors can continue to see a prefix while access equipment, regional transport or customer circuits are impaired.

The same snapshot reported three observed neighbours. RIPEstat’s routing-consistency result identified AS262355, VSX Networks; AS271253, Link Brasil Telecomunicações; and AS53062, ALT/Grupo Brasil TecPar in visible import and export relationships. IPinfo’s AS52745 page also displayed three upstreams but substituted AS52544, Ivatel Redes e Internet, for Link Brasil in its view. That discrepancy is not necessarily an error by either operator. Routing observations vary by time, collector and selected best path. It is a reminder that an Internet map assembled from public BGP observations is a partial view of policy, not a copy of private contracts.

Multiple visible neighbours are still meaningful. They indicate that AS52745 is not publicly observed behind only one adjacent autonomous system. That creates the possibility of traffic engineering, failover and commercial choice. Yet “three neighbours” is not the same as “three independent paths.” Two purchased services can ride the same carrier fibre, enter the same building, share the same pole corridor, depend on the same power feed or converge on the same regional transport provider. BGP can route around a logical withdrawal; it cannot repair a backhoe cut that severs every service in the same duct.

Address resources reveal another mix of strength and uncertainty. Owning a portable IPv4 allocation and an IPv6 /32 gives TSS more control than a small provider using only addresses loaned by one transit carrier. It can announce the same resources through different neighbours and build a stable addressing identity. But 3,072 IPv4 addresses do not disclose the number of subscribers. The company may assign public addresses directly, use carrier-grade NAT, reserve addresses for infrastructure, sell fixed addresses to businesses, or combine those practices.

The current retail site says nothing about CGNAT, inbound connectivity, port forwarding or whether IPv6 is delegated to every customer.

Nor does an announced IPv6 /32 prove an end-to-end IPv6 retail service. It proves that AS52745 originated the aggregate into the public routing system. A purchaser still needs to test whether the ordered circuit receives a stable IPv6 prefix, what delegation size is used, whether the customer router supports it, and whether support staff can diagnose it. PeeringDB’s own entry illustrates the danger of taking fields literally: it lists IPv4 and IPv6 exchange addresses, but its network information simultaneously marks IPv6 support false and self-reports 20 IPv4 and 20 IPv6 prefixes, far more than the three aggregates in the frozen RIPE view.

PeeringDB is valuable operator-maintained evidence, not an audited capacity inventory.

The correct conclusion is neither “the network is redundant” nor “the data are unreliable.” It is that AS52745 establishes real routing autonomy, address ownership and more than one visible external relationship. Those are prerequisites for a resilient regional ISP. The missing evidence—contracted capacity, physical path maps, utilisation, failover behaviour and customer-level address delivery—determines whether the prerequisites become reliable service.

Maringá: one exchange port, not a redundancy certificate

PeeringDB records TSS as operational at IX.br Maringá with IPv4 address 187.16.201.65, IPv6 address 2001:12f8:0:24::65, route-server participation and a 1,000 Mbps port. The network describes its peering policy as open, its traffic balance as balanced and its overall traffic level as 5–10 Gbps. The exchange connection was last updated in September 2024, while the broader network entry received an update in June 2026.

This is strategically sensible for a north-west Paraná operator. An Internet exchange lets participating networks exchange eligible routes without sending every packet through paid transit or a distant interconnection point. Local or regional paths can reduce transit cost and sometimes latency. Route-server participation can make it easier to reach many other entities without negotiating and maintaining a separate bilateral session with each one. IX.br’s national importance is substantial: NIC.br reported 50 Tbit/s of aggregate IX.br traffic in March 2026.

None of that national scale should be attributed to Conexão’s port. The 1 Gbps figure is the configured PeeringDB speed for one Maringá exchange attachment. It is not TSS’s total Internet capacity, and it cannot be reconciled directly with the self-reported 5–10 Gbps traffic band. The remainder could use purchased transit, private interconnection, other unlisted arrangements or measurements made at different times. Conversely, the presence of a 1 Gbps exchange port does not establish that it is full, lightly used or available as a backup for every transit failure.

The port is also not a physical-diversity certificate. Public records do not show the route from Loanda or Querência do Norte to Maringá, the carrier providing that transport, the points where it shares infrastructure with other links, or the power resilience at either end. PeeringDB lists no interconnection facility for TSS. That may simply reflect an incomplete voluntary entry; it leaves a procurement question unanswered.

For latency-sensitive traffic, the value of the exchange depends on which destinations are actually learned and preferred there. A route-server session can expose many entity routes, but large content platforms may use private links, caches, transit paths or another city. A public BGP adjacency also shows reachability rather than traffic volume. The route table cannot tell a buyer what share of evening video, software updates, payment traffic or cloud applications takes the IX path.

The practical test is a failure exercise. An SME should ask TSS to identify the primary and secondary egress paths for its service class, then explain what happens when the Maringá attachment fails, when one transit neighbour withdraws routes, and when the regional transport circuit remains electrically up but stops forwarding packets. A stronger answer includes physically distinct carriers or corridors, monitored failover, capacity on the surviving path and an escalation contact who can act. A weaker answer simply repeats the number of upstream names.

This distinction is particularly important for a provider selling “stability.” Logical diversity can protect against a carrier policy failure. Physical diversity can protect against a cut. Spare capacity can protect performance after failover. Operational discipline can detect and correct a partial failure. These are different assets. Public network evidence confirms the first in limited form and says little about the other three.

Fibre in the brochure, mixed access in the field

Conexão’s current residential and business offers all say “100% fibre optic.” That is a clear statement about the marketed access service. The site also advertises Wi-Fi 6 on higher tiers and includes customer Wi-Fi equipment. It does not disclose the passive-optical technology, equipment vendor, split ratio, optical budget, aggregation design or whether the same architecture applies to every historic customer.

Public procurement shows why architecture should be discussed by contract and date. Querência do Norte’s 2021 winning tender record awarded TSS a R$133,560 service package. The associated published contract described roughly 40 municipal points, external equipment, towers and antennas supplied by the company in comodato, including 37 ordinary points specified at 60 Mbps down and 15 Mbps up. The contract called for Internet supply and maintenance.

That document does not contradict the 2026 fibre offer. It describes a customer-specific municipal network five years earlier, spread across many facilities, some of which may have been uneconomic or impractical to reach with a fibre drop at the time. It does prove that TSS has operated a mixed physical service environment and assumed responsibility for remote equipment. A buyer should therefore avoid converting a homepage phrase into an assumption about every circuit. The relevant question is what medium reaches the exact address now, what backup medium exists, and who maintains each component.

Even within a fibre service, “fibre” is not a complete architecture. A typical regional access network must connect customer premises through some combination of drop fibre, passive splitters, feeder fibre, active optical termination equipment, aggregation switches and a routing edge. Conexão has not publicly identified those choices, so it would be speculation to name a specific passive-optical generation or vendor. The commercial consequences are nevertheless clear. Higher split ratios lower capital cost per home passed but share capacity and optical margin among more endpoints.

More feeder routes and smaller failure domains improve isolation but cost more. Spare ports, clean connectors and accurate plant records shorten repair. Backup power keeps active equipment alive only as long as its batteries or generation arrangement lasts.

An earlier version of the company site advertised 600/300 Mbps, 750/350 Mbps and 950/500 Mbps packages. Those historical upload figures show that at least one offer set was asymmetric. The current site gives only the headline plan speeds, without separate upload rates. That omission matters to SMEs. Cloud backups, camera uploads, remote desktops, video calls and replicated point-of-sale data can hit the upstream ceiling long before a download test looks poor. A procurement worksheet should record both directions, not assume that a “950 MB” label is symmetrical.

Indoor performance is another boundary. A Wi-Fi 6 router can improve radio efficiency and device handling, but it cannot guarantee 950 Mbps in a distant room through reinforced walls. A test over Wi-Fi measures the access circuit, customer device, channel selection, interference and building layout at once. The included router and company assistance can be valuable precisely because they give the provider a known device to support. The contract should still define where performance is measured—usually a wired handoff—and who pays for extra access points or structured cabling.

The outside plant has its own history. A 2012 federal publication records the homologation of a pole-attachment agreement between Copel Distribuição and TSS SOFTWARE LTDA, documented in the official gazette. It does not prove the current terms or extent of TSS’s pole use. It does establish that shared electric-utility infrastructure was part of its early network build.

Pole attachment is not administrative trivia. Rental and make-ready work affect the cost of every route. Crowded poles can delay expansion. Vehicle impacts, storms, tree work and third-party cabling can damage several services at once. The electric utility owns the pole; the ISP owns or is responsible for its communications plant under the applicable agreement; neither fact alone tells the customer who will coordinate a repair. This is why regional broadband becomes an economics-of-repair business. The network earns its margin gradually, but one damaged span can require immediate labour, materials, permits and coordination.

Installation is a capital decision at each address

The earlier official ordering page described a five-business-day installation target after documents were validated, subject to technical feasibility. It said a technician could assess feasibility without the customer present, while installation required someone at the premises. It also said the included router remained supported while the subscriber was a customer and that a new order underwent a CPF credit check. Those details are more informative than the word “coverage”: they describe a workflow designed to decide whether a serviceable address can become an economic connection.

The current site has simplified the journey. Residential prices are public and the call to action goes to WhatsApp; business prices require consultation. The public page does not state the installation fee, minimum term, early-cancellation charge, construction allowance, equipment-return terms or current installation deadline. The historical five-day statement should therefore be treated as evidence of process, not as a binding July 2026 promise.

At an easy urban address, the calculation may include an available distribution port, a short drop, one technician visit and a standard router. At a harder address it may require a new span, pole work, a road crossing, a longer drop, a new splitter, radio equipment, extra travel or landlord approval. A regional operator can absorb some of that cost in return for expected subscriber tenure. It may charge construction for the rest, decline the address, or quote a business service. Without published construction rules, the buyer cannot know which treatment applies until the survey.

The Querência municipal contract makes those hidden costs visible. External units, towers and antennas remained company-supplied equipment under comodato. That structure lets the customer use a network without buying every radio or mount, while the provider recovers capital through recurring service revenue. It also makes maintenance allocation essential: the supplier must stock compatible parts and decide when a failure is repair, replacement or customer damage.

The Loanda and Querência establishments plausibly improve dispatch and inventory economics. A branch address can shorten travel and provide a local point of presence. It does not prove a staffed depot, a 24-hour field crew or a particular headcount. No reliable public source in the frozen evidence set gives TSS’s number of technicians, shift coverage or spare-equipment policy. “Local” should therefore be tested operationally: where does the on-call technician start, which faults trigger an immediate dispatch, and what parts are held within the service region?

For an SME, installation should end with acceptance evidence rather than a celebratory speed test. The buyer should retain optical readings where applicable, wired download and upload results, latency and packet-loss samples, the assigned address details, router credentials under an agreed security process, the support number, the demarcation point and photographs or diagrams of equipment. These records reduce argument during the first fault and make switching possible later.

Pricing is an argument about utilisation, not raw megabits

Conexão’s current residential ladder is unusually dense: 350 Mbps for R$89.99 a month, 600 Mbps for R$99.99, 700 Mbps for R$109.99, 800 Mbps for R$129.99 and 950 Mbps for R$149.99. The 350 Mbps tier includes fibre, Wi-Fi coverage language and seven-day support. The four higher tiers add Wi-Fi 6 Premium and more than 90 television channels. Business offers use the same headline speeds but say “consult” for price and add priority service.

The marginal pricing tells the commercial story. Moving from 350 to 600 Mbps costs only R$10 a month; moving from 600 to 700 costs another R$10. The implied price per advertised megabit falls sharply from about R$0.26 at 350 Mbps to roughly R$0.16 around the upper tiers. That does not mean the network’s cost per customer falls in the same way. Access networks are built around shared infrastructure and usage patterns. Most subscribers do not consume their headline rate continuously, so selling a higher access ceiling can add perceived value without requiring an equal increment of dedicated upstream capacity for every account.

The operator’s costs sit elsewhere: fibre construction and pole rental, optical and routing equipment, transit, exchange transport, customer routers, television inputs, taxes, billing, support and truck rolls. Peak concurrency matters more than the sum of advertised rates. A local content path or exchange route can lower the cost of popular traffic. A difficult repair can erase months of margin on one line. A high-tier subscriber may be profitable because of tenure and bundle value, not because 950 Mbps is cheap to manufacture.

This is why a retail speed must not be read as a committed information rate. The site does not claim that each 950 Mbps plan receives 950 Mbps of dedicated Internet capacity at all hours. A business that needs committed bandwidth, symmetric performance or an uptime guarantee should ask for a distinct proposal and contract. The quote-only business tier gives TSS room to price installation risk, fixed addressing, support priority and service commitments rather than pretending every address costs the same.

Public-sector prices provide useful, imperfect comparisons. COMAFEN’s 2024 contract bought 100 Mbps fibre with a fixed IP for R$1,499.88 a year. A 2025 renewal kept the annual amount, or R$124.99 a month. Loanda’s chamber paid the equivalent of about R$180.87 a month under the 2024 1 Gbps contract. These are procurement outcomes with their own locations, legal terms and tax treatment; they are not a hidden public tariff. They do show that fixed IP, support and institutional service have been packaged at prices not far above residential offers in specific cases.

Several important price variables remain concealed. The current page does not state upload rate, public-address treatment, installation charge, fidelity term, inflation adjustment, television lineup, additional-device fees or whether all advertised plans are available in every town. The close spacing of plans may also reflect different campaigns or service areas rather than one universal ladder. A buyer should obtain a dated proposal tied to a street address and preserve it with the contract.

Pricing ultimately tests utilisation and risk allocation. Conexão is offering a household a high access ceiling and a bundle, betting that aggregate use stays within engineered capacity and that most support can be resolved without an expensive visit. The customer is betting that the provider will not let the shared nature of the network overwhelm the circuit when everyone needs it. Busy-hour evidence, not arithmetic on headline megabits, settles that argument.

Support is the product: from app triage to a field repair

The support surface is broader than a telephone number. The current site advertises seven-day support, WhatsApp, an 0800 line and a Grupo Vale application. The app is described as offering connection-status checks, online bill payment, second copies of invoices and a “trust unlock” function. Business plans add priority service. This design can reduce avoidable calls: a subscriber can distinguish billing suspension from a line fault, check account status and complete routine tasks without waiting for an attendant.

Self-service does not restore a damaged outside plant. A useful incident flow has several stages. First, support confirms the affected account and whether the problem is one device, one premise, one distribution segment or a wider region. Second, it separates indoor Wi-Fi from the provider handoff. Third, network staff check optical or access alarms, aggregation, addressing, DNS and upstream reachability. Fourth, if remote work cannot restore service, dispatch receives the correct location, equipment and failure hypothesis. Finally, the operator communicates an estimate and closes only after the circuit is stable.

Conexão’s public materials support some pieces of that flow but do not expose its measurements. The site says its team is trained and promises agile solutions. The municipal contracts assign TSS installation, support or maintenance. The 2021 Querência arrangement placed company equipment at roughly 40 points, which would require inventory, configuration and field responsibility. Yet there is no public mean time to repair, first-contact-resolution rate, outage history, status page, staffing schedule or escalation chart in the frozen evidence.

That absence is not evidence of poor performance. It is evidence that a buyer cannot infer performance from public records. Searches did not locate a reliable, company-specific incident archive. A route that remained visible in BGP would not capture an optical access outage, and a handful of testimonials on the company site cannot substitute for a measured distribution. Pulso’s Anatel-derived gold designation is encouraging, but an aggregate quality score cannot tell one pharmacy how long its own cut drop will take to repair on a Saturday.

Local labour is where the proposition becomes distinctive. A technician who recognises the town’s pole routes, older customer installations and recurring trouble spots can diagnose faster than a distant contractor working from a generic ticket. A local branch can shorten travel. Direct access to decision-makers can reduce hand-offs. But a small labour pool can also create queue risk when a storm causes many simultaneous faults or when the only specialist for a platform is unavailable.

An SME should therefore contract the support chain, not merely the opening hours. It should ask what “seven days” means: call reception, remote diagnosis or field dispatch? It should define severity levels, response and restoration targets, update frequency, after-hours authority, service credits and escalation contacts. It should ask whether the business-priority promise creates a separate queue and whether residential-scale equipment is used at the handoff.

Responsibility also needs a physical boundary. If the optical signal is good but the included router fails, TSS’s equipment-support claim suggests a provider role. If a customer-owned mesh system is misconfigured, the customer may own the fix. If a pole is broken, the electric utility and communications operators may have to coordinate. If an upstream route fails, TSS remains the customer’s contractual contact even though another network may perform the repair. A well-written service document makes that complexity invisible to the buyer by keeping one accountable owner.

Television and telephony deepen value—and switching cost

Conexão is not selling a bare data pipe. Higher residential tiers include more than 90 television channels, and the site promotes fixed calling to fixed and mobile numbers across Brazil. Its earlier page emphasised number portability. These additions can improve household value and spread customer-acquisition and support costs across several services.

The legal telephony evidence is strong. Anatel’s Act 4,672, published in the federal gazette in August 2019, authorised TSS SOFTWARE LTDA to provide fixed switched telephone service in local, national long-distance and international long-distance modes across the three regions of the national grant plan. A 2025 Rio Bom procurement file contains TSS’s proposal for ten digital fixed lines, unlimited national fixed and mobile calls, and responsibility for porting existing Oi numbers, at R$10,200 for twelve months.

That proposal demonstrates an operating workflow beyond marketing: port numbers, provision lines, bill them and support them continuously. It does not disclose whether every voice component is owned directly by TSS, which switching platform is used or how emergency calling behaves during a power or broadband failure. Those are appropriate due-diligence questions, especially where the telephone is a business lifeline.

The television offer is less transparent. Corporate activity records include cable subscription television, and the site states a channel count, but the public evidence does not provide a current channel list, content supplier, delivery method, device limit or separate cancellation terms. A prospective subscriber should verify the actual lineup and whether viewing depends on the same router, an application or another device.

Bundles also raise switching costs. A broadband change can now require returning the router, replacing television access, porting a telephone number, changing a static IP, reconfiguring cameras or firewalls, and coordinating downtime. For the provider, those frictions improve retention. For the customer, they make an exit plan important. The contract should say who owns each device, how number porting is handled, when billing stops, and what happens to service if one part of the bundle fails.

Security and compliance: concrete strengths, concrete gaps

TSS has a long regulatory trail. Public sources place its SCM authorisation in 2011, the 2012 pole-sharing agreement shows formal infrastructure use, and the 2019 act grants fixed-telephony authority. Current Anatel guidance makes clear that fixed broadband is a regulated multimedia communication service and that smaller providers carry obligations covering authorisation, station records, access reporting, customer rights and operational compliance. The agency’s 2025 guide for small telecommunications providers also explains why accurate access reporting, lawful infrastructure and equipment traceability matter.

Compliance is not equivalent to security assurance. The public network has a specific routing-security gap. RIPEstat returned “unknown” for route-origin validation on all three current announcements: 170.0.144.0/22, 177.85.120.0/21 and 2804:cb4::/32. “Unknown” is not “invalid,” and it does not show a hijack or incident. It means the validator found no route-origin authorisation covering those origin-and-prefix combinations at the freeze. Publishing correct ROAs would let networks that perform origin validation cryptographically check that AS52745 is authorised to originate them.

A second finding is closer to the subscriber. At the evidence freeze, the official homepage linked its subscriber centre to an http:// address on port 8080. The endpoint returned an HTTP 200 response without redirecting to HTTPS, and the page contained a password form posting to a relative path. No login was attempted. This observation is not evidence that credentials have been stolen or that the access network is compromised. It is a transport-security concern: customers should not be asked to submit passwords over a plaintext web session. TSS should place the subscriber portal behind valid HTTPS, redirect HTTP before any authentication page is served, and apply modern browser-security controls.

The distinction between site security and network security is important. A weak customer-portal transport choice does not prove weak router configuration, and a secure marketing site does not prove safe customer equipment. Public materials do not state the Wi-Fi encryption baseline, customer-router patch policy, remote-management controls, DNS practice, DDoS response, incident-notification process, retention of connection records or privacy contact. “Wi-Fi 6” is a radio-generation label, not a security guarantee.

Business buyers should ask directly. Does the supplied router support current encryption and receive managed updates? Are management interfaces reachable from the public Internet? How are support credentials handled? Is the customer behind CGNAT, and can a fixed public address be ordered? Is IPv6 enabled with an appropriate firewall? Does TSS filter spoofed source addresses at the customer edge? Are routing registries maintained, and is there a timetable for RPKI? How are security incidents communicated, and what customer data enter the billing and support application?

Anatel’s quality framework adds useful operational measures: speed compliance, latency, jitter, packet loss, availability and appointment fulfilment. Its official measurement guidance points consumers to ESAQ and Brasil Banda Larga tools. These controls help establish delivered service; they do not replace a security assessment or a business continuity plan.

The fair reading is mixed. TSS presents a genuine licensed operator with registered resources and sustained public-sector work. It also leaves important security and transparency questions unanswered, including a directly observable plaintext subscriber-login path and absent RPKI coverage in the frozen view. Those are repairable weaknesses, and the quality of the response would itself be evidence about operational maturity.

Competition is fought street by street

Loanda is not an uncontested local franchise. Pulso’s Anatel-derived summary lists 21 reporting providers and names VSW Telecom, V F Riva Fibranet, Torres & Anselmi, Solução Network and TSS among gold-designated providers. The exact choice at one address may be much smaller than 21, because a company can report municipal access without passing every street. Even so, the figures show that Conexão competes within a fibre-rich local market rather than against only a distant national incumbent.

Querência do Norte adds another set of signals. A user-test ranking names Skaynet and Flashnet in its October 2025 results, while Unifique’s public city selector includes Querência do Norte. Satellite and mobile services can also provide backup or substitution, especially outside an economical wired route. These sources do not establish serviceability at a given farm, shop or street, but they widen the competitive frame.

Regional competition is unusually granular. One provider may have a spare fibre port on a block where another faces expensive construction. One may offer a public IPv4 address, another CGNAT. One may answer locally on a weekend, another may have a stronger backbone and a slower field queue. A household comparison page tends to compress all of this into price and download speed. An SME procurement should do the opposite.

Public contracts reveal several tests that institutional customers already value: fixed IP, installation, ongoing support, number porting, equipment provision and maintenance across distributed sites. Querência’s approximately 40-point arrangement is especially instructive because it prices an operating system, not a single speed. A competitor could undercut one residential tier and still be unable to support a dispersed municipal estate.

Conexão’s local advantage is accumulated knowledge. Its domain dates to 2010, its ASN to 2013, its pole-sharing evidence to 2012, and its municipal service relationships span years. Existing plant and local technicians can lower incremental cost and repair time. Its disadvantage is scale. Larger regional consolidators may buy equipment and transit more cheaply, staff broader operations coverage and spread specialist roles across a larger subscriber base. Satellite can reach places where new terrestrial construction is difficult. Mobile can provide rapid backup, although with different performance and addressing characteristics.

The strongest competitive response is transparency. A regional provider cannot always outspend a national one, but it can show the exact route, name the accountable technician, document failover, publish realistic restoration targets and explain the bill. Conexão’s public network resources give it a credible foundation for that position. Its current marketing does not yet expose enough operational detail to make the case fully.

The procurement test for an SME circuit

An SME deciding whether Conexão can carry a critical workload should require a short, practical acceptance programme. It need not demand carrier-scale paperwork from a regional supplier. It should make the risks visible before the business depends on the line.

First, bind the quote to the address. The document should state access medium, advertised and minimum contractual speeds in both directions, installation scope, equipment ownership, all recurring and one-off charges, term, cancellation conditions, and whether the account receives a public IPv4 address, CGNAT, IPv6 delegation or a fixed address.

Second, draw the failure domains. TSS should identify the customer demarcation, access segment, local aggregation, regional transport and external egress at a level that protects sensitive details while showing responsibility. If redundancy is sold, the supplier should state whether alternate links use distinct poles, ducts, carriers, buildings, power feeds and routing neighbours. Two logical sessions over one cable are not two restoration paths.

Third, test at the right time and point. Acceptance should use a wired device at the provider handoff, record upload as well as download, and measure latency, jitter and packet loss to several relevant destinations. A second test during the local busy period is more informative than a single morning result. Wi-Fi coverage should be assessed separately, room by room, if the provider is responsible for it.

Fourth, witness failover. For a dual-link design, the buyer should see what happens when the primary handoff or route is withdrawn. How many seconds or minutes pass before applications recover? Does the backup have enough capacity for card payments, voice, virtual private networking and cloud systems? Does a fixed address change? Who receives the alarm?

Fifth, contract restoration. Define severity, support reception, remote response, field dispatch and service-restoration targets. Name the escalation roles and update interval. Ask where replacement routers, optical units, power supplies and radio equipment are stored. Clarify whether “seven days” includes a field crew and whether business priority changes the target.

Sixth, test power assumptions. The circuit can remain optically intact while active equipment loses electricity. Ask how long customer equipment, local aggregation and critical network sites remain operational during an outage. If telephony is essential, confirm what happens to calling and emergency access when premises power fails.

Seventh, close the security gap. Require HTTPS for every billing and support login before credentials are entered. Ask for the supplied router’s update and encryption policy, management-access controls, incident contact, customer-data handling, route-origin protection and a plan for any open finding. A buyer should not conduct intrusive testing; it should ask the supplier to demonstrate controls.

Eighth, design the exit. Record device-return requirements, number-porting responsibilities, address changes and configuration dependencies. Back up customer-owned router and firewall settings. If the business uses a fixed IP for cameras, mail allowlists or remote access, prepare the migration before cancellation.

Finally, buy independent continuity where the loss matters. A second service is most useful when it differs physically and commercially from the first. A mobile or satellite backup may be slower but survive a local pole cut; a second fibre may be faster but share the same route. The correct mix follows the business impact, not a slogan about redundancy.

These tests do not presume that Conexão will fail them. They translate the public evidence into questions the public evidence cannot answer. A responsive supplier that can document these points turns local knowledge into a measurable advantage.

What the public network reveals—and conceals

Public evidence reveals a substantial amount about TSS SOFTWARE LTDA. It proves the Conexão identity bridge. It distinguishes the Loanda matriz from the Querência do Norte filial. It shows a licensed operator with its own ASN, portable IPv4 space and a large IPv6 allocation. It shows globally visible routes, several observed external neighbours and an operational regional exchange connection. It shows fibre and bundled retail offers, business priority language, fixed telephony authority, public-sector customers, fixed-IP delivery and a history of supporting distributed equipment.

It also reveals the shape of the economics. Loanda and Querência are small municipalities spread over large areas. A historical pole agreement anchors the physical cost of building. A forty-point municipal contract shows that some service designs require towers, antennas, company equipment and maintenance. Included routers and close residential price tiers imply recovery of installation and equipment over time. The branch and local support channels suggest proximity is part of the proposition.

The same evidence conceals almost everything needed to calculate resilience. It does not publish subscriber count, TSS’s municipal market share, busy-hour utilisation, purchased transit capacity, optical topology, split ratios, physical route diversity, backup-power duration, network-operations staffing, spare inventory, mean repair time or incident history. It does not say whether retail customers receive IPv6, public IPv4 or CGNAT. It does not give current upload rates, construction charges, fidelity terms or a business SLA.

The route-origin records lacked RPKI validation at the freeze, and the public subscriber-centre link presented a plaintext password path.

This is the central limit of network-resource evidence. Registries are excellent at answering “who is authorised to originate this address space?” Route collectors are good at answering “which paths were visible from these observation points?” Peering records can answer “where does the operator say it interconnects?” None can answer “how long will this shop be offline after a truck takes down the pole on its street?”

For Conexão, that limit is also an opportunity. Its durable advantage is unlikely to be an exclusive speed tier; competitors can advertise similar numbers. It is the ability to combine regional plant, routing autonomy, local labour and accountable repair into a service that a remote national footprint cannot easily imitate. To make that advantage investable or procurable, TSS must expose more of the operating contract: secure customer access, exact address policy, realistic performance, physical diversity and restoration evidence.

The qualification verdict is therefore to keep and expand the company’s coverage, but with discipline. AS52745 and IX.br participation demonstrate credible network agency, not guaranteed capacity. Multiple neighbours demonstrate logical options, not independent trenches. A fibre claim demonstrates the marketed access medium, not the survival of the whole path. A seven-day support claim demonstrates availability of a channel, not a repair clock.

The regional ISP is finally measured at the point where marketing runs out: after the customer has paid, after the installer has left, and after a dependency fails. Conexão’s public record shows that TSS SOFTWARE LTDA has spent more than a decade building the pieces of that responsibility in north-west Paraná. The next test is whether it can make the repair chain as visible, secure and measurable as the speed on the plan.