Free Kit · Colombia · XLSX

    Colombia Supplier Compliance Kit: SAGRILAFT, PTEE & RADIAN

    The actionable checklist to onboard and monitor suppliers in Colombia without exposure to money-laundering risk, anti-corruption penalties or loss of tax deductibility. Covers SAGRILAFT/SARLAFT and restricted lists, PTEE (Law 2195), RUT and RADIAN events at the DIAN, social security (PILA) and beneficial owner (RUB) — ready for your procurement, compliance and accounts-payable teams.

    Download the Colombia Compliance KitSee the Supplier Portal for Colombia →

    Why you need this kit

    Contracting a supplier that appears on a restricted list (OFAC/UN) exposes your company to reputational risk and money-laundering penalties; failing to require social-security payments compromises the deductibility of those costs; and if you do not generate RADIAN events at the DIAN, those invoices are not consolidated as negotiable instruments nor eligible for factoring. A single poorly vetted supplier can trigger an alert with the UIAF or the Superintendency. This kit gathers, in one list, the checks that prevent that exposure.

    SAGRILAFT
    AML/CFT risk self-control (Supersociedades)
    PTEE
    Business transparency and ethics (Law 2195)
    RADIAN
    Electronic-invoice events at the DIAN
    RUB
    Ultimate Beneficial Owner registry

    What the kit verifies

    Four verification blocks, ready to apply in your onboarding process and in the continuous monitoring of every supplier.

    1. SAGRILAFT / SARLAFT and restricted lists (AML/CFT)

    • Screen the supplier and its partners/representatives against binding restricted lists: OFAC (OFAC SDN), UN (Security Council), and national lists (Contraloría, Procuraduría, Police).
    • Identify Politically Exposed Persons (PEP) and check adverse media.
    • Due diligence under SAGRILAFT (Superintendency of Companies) or SARLAFT (Financial Superintendency) depending on the sector.
    • Blocking protocol and suspicious-operation report (ROS) to the UIAF where applicable.
    • Recurring re-screening: lists and risk factors change over time.

    2. PTEE and bribery prevention (Law 2195)

    • Counterparty due-diligence questionnaire aligned with the Business Transparency and Ethics Program (PTEE).
    • Verify the supplier's anti-bribery and anti-corruption policy when the risk level requires it.
    • Identify conflicts of interest and relationships with the public sector.
    • Documentary traceability of the process, auditable before the Superintendency of Companies.

    3. DIAN: RUT, electronic invoicing and RADIAN events

    • Valid RUT with the correct tax responsibilities (regime, economic activity, VAT/withholding responsibility).
    • Prior validation of the electronic sales invoice at the DIAN (CUFE and current technical annex).
    • Generation of RADIAN events: invoice acknowledgment, receipt of goods or services, and acceptance (express or tacit).
    • Operating rule: without receipt of goods/services and acceptance, the invoice is not consolidated as a negotiable instrument nor eligible for factoring.
    • Support document for purchases from non-invoicing parties and correct application of withholding tax.

    4. Legal, labor and beneficial-owner eligibility

    • Valid certificate of existence and legal representation (Chamber of Commerce / RUES).
    • Social-security payments (PILA) up to date — a requirement for cost/expense deductibility.
    • Ultimate Beneficial Owner Registry (RUB) at the DIAN identified and consistent.
    • Valid performance bonds and guarantees for service and recurring contracts.
    • Single digital file: chamber of commerce, RUT, RUB, certifications and bonds with expiry control.

    Download the Colombia Compliance Kit

    Leave your corporate email and download the Excel checklist instantly. It is 100% free — we only use it to send you regulatory updates and useful procurement content, no spam.

    Frequently asked questions

    What is SAGRILAFT and who does it apply to?

    SAGRILAFT is Colombia's Integrated Money-Laundering, Terrorism-Financing and Proliferation-Financing Risk Self-Control and Management System, required by the Superintendency of Companies for real-sector companies above certain thresholds. In the financial sector the equivalent is SARLAFT, supervised by the Financial Superintendency. Both require due diligence on suppliers and counterparties, screening against restricted lists and reporting suspicious operations to the UIAF.

    What are RADIAN events and why do they affect my payments?

    RADIAN is the DIAN registry that lets an electronic invoice circulate as a negotiable instrument (título valor). For a credit invoice to become negotiable —and usable in factoring— its events must be generated: invoice acknowledgment, receipt of goods or services, and acceptance (express or tacit). If they are not registered, the invoice is not negotiable and its traceability suffers, so it is best to automate them and sync them with the ERP.

    How do SAGRILAFT, SARLAFT and PTEE differ?

    SAGRILAFT and SARLAFT manage money-laundering and terrorism-financing risk (real and financial sectors, respectively). The PTEE (Business Transparency and Ethics Program), tied to Law 2195 of 2022, focuses on preventing bribery and corruption, including transnational bribery. Many companies integrate them into a single supplier due-diligence flow, which is exactly what this kit structures.

    Does this kit replace my compliance officer or legal advisor?

    No. It is an operational checklist for your supplier onboarding and monitoring process, based on regulations in force as of 2026. For designing SAGRILAFT/SARLAFT, the PTEE or for specific tax decisions, consult your compliance officer or advisor. Egixia automates these checks in its supplier portal if you want to move from the checklist to continuous validation.

    Related resources

    Colombia
    See the Supplier Portal for Colombia