Brazilian postal codes (CEP) with IBGE coordinates, addresses and the companies registered there.
PontoFato API is a free Geocoding API that requires no API key, is served over HTTPS and does not support CORS, so it should be called from a server.
Details from pontofato.com.

Unified API suite · now live
Geocode an address, validate an email, track a flight or pull stock data with one account, one dashboard and one API key.
The PontoFato API is provided by PontoFato (pontofato.com).
Yes. The PontoFato API is listed in the Geocoding category of the public-apis directory, which only includes APIs that are free or have a free tier. Check its documentation for rate limits and paid plans.
No. The PontoFato API requires no authentication, so you can start making requests without signing up.
Not directly. The PontoFato API does not allow CORS, so call it from a server, serverless function or proxy instead of front-end JavaScript.
Yes. The PontoFato API is served over HTTPS, so it's safe to use in production.