What sections should a corporate website have?

There's no fixed mandatory list — it depends on what you're trying to accomplish. In practice, most sites include a homepage with a clear value proposition, services or products, company information (when it builds trust), contact with a clear call-to-action, social proof elements, and whatever legal pages your data handling or industry requires.

Why does page speed matter for a corporate website?

Performance is part of the page experience Google evaluates. The Core Web Vitals thresholds are LCP of 2.5 seconds or less, CLS below 0.1, and INP at 200 milliseconds or less. You can audit these for free with Google PageSpeed Insights on both mobile and desktop.

What's the difference between a corporate site and a landing page?

A landing page is a single page built to convert a visitor into a lead — it has one specific goal, like getting them to download a PDF or fill out a form. A corporate site is a set of interconnected pages that represents your business. It has sections like services, company information, and contact, and it's designed to help visitors understand your full offering.

Do I have to display my RUC on a website in Paraguay?

Not as a general requirement for your website. The DNIT (Paraguay's national tax authority) regulation—Resolution 79/2021—requires businesses to have a RUC and display the RUC certificate in a visible public place at their physical location. Publishing it on your website is optional, not a legal requirement for corporate websites.

Does every business website need SIFEN?

No. SIFEN is a tax obligation under the DNIT for businesses in the electronic invoicing regime—it's not a feature your website needs to have. If your company is subject to it and your site generates tax documents, your backend processes need to handle them correctly, but that's separate from what your website's frontend does.

Is the 2025 data protection law already in effect?

No. Law 7593/2025 was enacted and published on November 27, 2025, with a 24-month transition period. It takes effect on November 27, 2027. As of August 2026, Paraguay is still in the transition phase.

What Core Web Vitals should my website meet?

Google's benchmarks are LCP at 2.5 seconds or less, CLS below 0.1, and INP at 200 milliseconds or less. These are part of a broader set of page experience signals, not the only thing that determines your ranking.

Back to blog

What a Corporate Website Needs in Paraguay: 2026 Guide

August 27, 2026

corporate websites
SEO Paraguay
web design
SIFEN
electronic invoicing Paraguay
Core Web Vitals
web accessibility
web development Paraguay
data protection Paraguay

SummaryA solid corporate website in Paraguay should clearly explain what your company does, make it easy to get in touch, work properly on mobile and desktop, use HTTPS, deliver decent performance, and get the SEO fundamentals right. Some additional requirements—like electronic invoicing, personal data handling, or specific legal disclosures—depend on your industry and how your site operates.

Before you hire someone to build or redesign a site, it helps to separate what’s technically non-negotiable from what’s recommended practice and what depends on your specific situation. This guide walks through the technical, content, and local compliance factors that typically define a corporate website in Paraguay—and explains which rules apply to everyone and which are conditional.

What does a corporate website in Paraguay actually need? At the core: a clear structure that explains what your company does, HTTPS, mobile-responsive design, reasonable performance, and solid SEO fundamentals. Beyond that you’ll want to add accessibility, analytics, and—depending on your industry, how you handle data, or whether you issue electronic tax documents—additional compliance requirements.

Element	Required for all corporate sites?	When it applies
HTTPS	Yes, always	—
Mobile-responsive design	Yes, always	—
Basic technical SEO	Recommended	If you want organic search visibility
WCAG 2.2	Recommended as a reference	Specific obligations depend on your sector and location
Privacy notice	Depends on data handling	When you collect personal data and applicable law requires it
RUC displayed on site	Not a general requirement	Optional, or per industry rules
SIFEN	Not a site requirement	When your business is subject to electronic invoicing and the operation creates tax documents
Qualified electronic signature certificate	No, for a typical website	Only if you use electronic invoicing systems that require a CCFE (Certificado Cualificado de Firma Electrónica)

Structure and content

Not every business needs the same pages. Site architecture depends on what you’re trying to accomplish. In practice, most sites benefit from:

A homepage with a clear value proposition.
Services or products page.
Company information, when it builds trust (your track record, team, customers).
Contact information with a visible call-to-action.
Social proof elements (real testimonials, customer logos, current certifications).
Legal pages that match your specific data handling, cookies, e-commerce, or industry requirements—not every site needs the same legal pages.

Make contact information—phone, email, address if applicable—easy to find. Reducing friction when someone wants to reach out matters.

On-page SEO basics

These are the technical signals Google uses to understand and index your pages:

Unique, descriptive title tag that matches what someone would actually search for, without repeating the same title across different pages.
Specific, useful meta description: Google doesn’t enforce a character limit and will truncate or rewrite it based on the device and search query, so write for the reader, not a character count.
Clear main heading and logical hierarchy (H2, H3, etc.) that organizes your content. Using a single H1 per page is a reasonable internal convention, but Google doesn’t require it.
Descriptive alt text for images when the image conveys important information—don’t confuse this with link anchor text, which serves a different purpose.
Internal links with descriptive anchor text help Google understand what the linked page is about. A well-built corporate site naturally links to its corporate website services page from related content, not just from the main menu.
Content written for humans, backed by verifiable information: Google describes experience, expertise, authoritativeness, and trustworthiness (E-E-A-T) as qualities its systems try to recognize when evaluating useful content—not as an isolated ranking factor.

Audit your page speed on both mobile and desktop using Google PageSpeed Insights or Chrome DevTools before you finalize a project.

Performance and Core Web Vitals

Page load speed is part of the page experience Google considers, alongside a broader set of signals. Google’s benchmarks for “good” experience are:

LCP (Largest Contentful Paint) of 2.5 seconds or less: how fast your main content loads.
CLS (Cumulative Layout Shift) below 0.1: elements on the page don’t shift around while it’s loading.
INP (Interaction to Next Paint) at 200 milliseconds or less: how responsive the page is when someone interacts with it. (This replaced FID as part of Core Web Vitals.)

Test these on both mobile and desktop with Google PageSpeed Insights or Chrome DevTools before you consider a project done.

Mobile-first responsive design

Your site should work properly at any screen size. Google uses the mobile version of your content for indexing and ranking (mobile-first indexing) and recommends responsive design as the straightforward way to handle it—simpler to build and maintain than dynamic content or separate mobile URLs. Designing for mobile first and then expanding to desktop is common practice, not a requirement Google imposes.

Security: HTTPS and reliable hosting

HTTPS encrypts information visitors enter on your site (form submissions, for example) in transit and prevents the “not secure” warnings browsers show for unencrypted sites. It’s part of a good page experience. “SSL” is the old name; the current technology is TLS, though people still say “SSL certificate” in conversation. Keep an eye on your certificate’s renewal date so it doesn’t expire without warning.

For hosting, automated backups and solid uptime are smart operational practices worth having in a B2B context—not a universal requirement or a standard with a specific percentage mandated anywhere.

Accessibility (WCAG)

The W3C’s latest technical standard is WCAG 2.2, published as a W3C Recommendation in October 2023. In Paraguay, WCAG 2.2 can serve as a technical reference for building accessible websites. Paraguay has broader accessibility laws and disability rights protections, including provisions that cover information and communication services. That doesn’t automatically make WCAG 2.2 a blanket requirement for all private websites, though.

In practice, aiming for WCAG level AA usually means:

Sufficient color contrast between text and background.
Full keyboard navigation—no mouse-only interactions.
Visible focus on interactive elements.
Form labels properly associated with their fields.
Text alternatives (alt text) for images that convey meaning.
Captions for audio/video content and text alternatives for audio-only content, where applicable.

Keep your contact form fields to what you actually need. A first-contact form usually benefits from being short, but there’s no magic number of fields that works for every situation.

Near your form, social proof elements help reduce friction for visitors who don’t know you yet: genuine, verifiable testimonials; customer logos (with permission), or current certifications. Don’t include testimonials, photos, or logos without real evidence or explicit permission to use them.

Local compliance: what actually applies to your website

Not every legal or tax rule that applies to a Paraguayan business translates into a website requirement. It helps to separate these into three buckets.

A. Requirements that actually touch your website

If your site collects personal data through forms, user accounts, cookies, or other technologies, review what currently applies and get ready for the Law 7593/2025 regime (see below). Once it’s in effect, your data handling will need to rest on an appropriate legal basis—consent is one option, not the only one. Not every analytics tool necessarily processes personal data; it depends on what and how you’re collecting.
If your site sells things or directly generates tax documents, the business and tax processes behind your site need to issue them correctly. That doesn’t mean your website’s frontend has to directly connect to SIFEN.

B. Business obligations that don’t necessarily belong on your site

RUC: The DNIT rule—Resolution 79/2021—requires businesses to have a RUC and to display the RUC certificate visibly at their main physical location and other offices. That’s a physical-location requirement, not a blanket rule to put your RUC in your website footer or on every page. You can choose to publish it on your site if you want, but it’s not a website requirement.
SIFEN: It’s a tax obligation for businesses in the DNIT’s electronic invoicing regime—not a feature every corporate website needs. The pool of required businesses has grown steadily through 2024, 2025, and 2026 according to the DNIT’s schedule—Resolution 52/2026 continued that expansion—so verify your current status rather than assuming a fixed cutoff date.

C. Conditional requirements if your site sells, invoices, or processes data

Electronic signature: If a business needs to digitally sign documents with legal force within processes like e-Kuatia, the current rules reference a Qualified Electronic Signature Certificate (CCFE), issued by a Qualified Trust Services Provider (PCSC) authorized by the Ministry of Industry and Commerce (MIC). Don’t say “PSC authorized by DINATIC/SET”—DINATIC is not the authorizing body, and the list of authorized PCSCs comes from the MIC’s Root Certification Authority. How you get a CCFE varies: in e-Kuatia you get it through an authorized PCSC; in e-Kuatia’i there’s also a free CCFE management option through the DNIT.
72-hour transmission window: That’s the window electronic invoicers have to send their tax document (XML) to SIFEN for validation, counted from the date and time in the digital signature—not a generic timeframe for any corporate website.

Personal data privacy

Paraguay now has the Law 7593/2025 for Personal Data Protection, enacted and published on November 27, 2025. The law itself sets its effective date for 24 months after publication, so it takes effect on November 27, 2027. As of August 2026, you’re still in the transition period.

If your site collects data through forms, user accounts, analytics, or other means, review what obligations apply right now and get ready for the new regime. Not all cookies need the same consent mechanism—the specific handling needs to be analyzed based on its purpose and what applies at any given time.

This guide is informational and does not substitute for legal or tax advice for your specific situation.

Final checklist

Technically essential: HTTPS, responsive design, clear navigation structure, accessible contact information, reasonable performance.

Strongly recommended: accessibility following WCAG 2.2, basic technical SEO, analytics that respects privacy law, genuine social proof, hosting backups and monitoring.

Depends on your situation: personal data privacy and processing, cookie management, e-commerce, SIFEN, qualified electronic signature certificate, company-specific or industry-specific information.

How we can help

At Flexora we build corporate websites with performance, accessibility, SEO, security, and appropriate technical requirements in mind from the start. Learn more about our corporate website services.

Regulatory information reviewed as of August 28, 2026.

Sources

Frequently asked questions

What sections should a corporate website have?: There's no fixed mandatory list — it depends on what you're trying to accomplish. In practice, most sites include a homepage with a clear value proposition, services or products, company information (when it builds trust), contact with a clear call-to-action, social proof elements, and whatever legal pages your data handling or industry requires.
Why does page speed matter for a corporate website?: Performance is part of the page experience Google evaluates. The Core Web Vitals thresholds are LCP of 2.5 seconds or less, CLS below 0.1, and INP at 200 milliseconds or less. You can audit these for free with Google PageSpeed Insights on both mobile and desktop.
What's the difference between a corporate site and a landing page?: A landing page is a single page built to convert a visitor into a lead — it has one specific goal, like getting them to download a PDF or fill out a form. A corporate site is a set of interconnected pages that represents your business. It has sections like services, company information, and contact, and it's designed to help visitors understand your full offering.
Do I have to display my RUC on a website in Paraguay?: Not as a general requirement for your website. The DNIT (Paraguay's national tax authority) regulation—Resolution 79/2021—requires businesses to have a RUC and display the RUC certificate in a visible public place at their physical location. Publishing it on your website is optional, not a legal requirement for corporate websites.
Does every business website need SIFEN?: No. SIFEN is a tax obligation under the DNIT for businesses in the electronic invoicing regime—it's not a feature your website needs to have. If your company is subject to it and your site generates tax documents, your backend processes need to handle them correctly, but that's separate from what your website's frontend does.
Is the 2025 data protection law already in effect?: No. Law 7593/2025 was enacted and published on November 27, 2025, with a 24-month transition period. It takes effect on November 27, 2027. As of August 2026, Paraguay is still in the transition phase.
What Core Web Vitals should my website meet?: Google's benchmarks are LCP at 2.5 seconds or less, CLS below 0.1, and INP at 200 milliseconds or less. These are part of a broader set of page experience signals, not the only thing that determines your ranking.
Is WCAG mandatory for private companies in Paraguay?: WCAG 2.2 isn't identified in this guide as a blanket requirement for all private companies in Paraguay. That said, Paraguay does have general accessibility standards and disability rights protections that cover information and communication services, and in certain cases, private services open to the public. WCAG 2.2 is a useful technical reference for implementing those principles; what specifically applies depends on your service and context.