Comprehensive verification guide for safe supplier onboarding in Colombia, Mexico, Peru and Chile. Covers SAGRILAFT, REPSE, SAT 32-D, SUNAT, cybersecurity and data protection in a single actionable list.
No forms. Instant download.
Regulatory risk in Latin America is dynamic and highly punitive. Operating with a sanctioned supplier or one that breaches tax regulations can result in million-dollar fines, operational blockage and irreversible reputational damage.
In Colombia, fines for breaching SAGRILAFT can reach COP 2.6 billion (Resolution 4607 of 2026). In Mexico, working with specialized services without REPSE exposes you to penalties of up to MXN 5.4 million. In Peru, contracting suppliers with "Not Found" status at SUNAT triggers serious tax contingencies and loss of VAT credit.
This checklist consolidates the critical requirements per country into a single actionable document, ready to be used by your Procurement, Compliance and Legal teams.
Full Colombia section: SARLAFT/SAGRILAFT, restrictive lists (OFAC, UN), Chamber of Commerce, RUT and PILA.
Mexico section: positive SAT 32-D opinion, valid REPSE, folio on CFDI, ICSOE and SISUB.
Peru section: SUNAT RUC validation, "Habido" status, Income/VAT compliance, SUNARP power of attorney.
Cross-cutting cybersecurity section: data protection, NDA, ISO 27001/SOC 2 and due diligence.
Detailed non-compliance risks with specific fines and penalties per jurisdiction.
Print-ready format or share digitally with your supplier qualification team.
$2.6B
COP in SAGRILAFT fines (CO)
$5.4M
MXN in REPSE fines (MX)
3-4
Weeks to qualify manually
100%
Automatable with Egixia
SAGRILAFT is the Self-Control and Comprehensive Risk Management System for Money Laundering, Terrorism Financing and Weapons of Mass Destruction Proliferation Financing, required in Colombia by the Superintendence of Companies. It applies to firms that exceed certain revenue or asset thresholds depending on the sector.
If your specialized services supplier loses its REPSE registration, the payments you make are not deductible for income tax nor creditable for VAT, and you can face fines of up to MXN 5.4 million. That is why it is critical to verify the REPSE folio on every CFDI issued.
You can check the RUC on the public SUNAT portal (sunat.gob.pe). Status must be "Active" and domicile condition must be "Habido". If it is "Not Found", you lose the VAT credit right and tax contingencies arise.
Yes. Egixia automates 100% of the checklist via AI agents: the Risk Agent queries restrictive lists (OFAC, UN) in real time, the Document Agent extracts data from the RUT/RFC using OCR and verifies validity, and the Self-Service Portal lets the supplier upload its own documents while the system blocks onboarding if anything is missing.
This version reflects regulations in force as of 2026 (Resolution 4607 in Colombia, REPSE requirements in Mexico, etc.). Follow us on LinkedIn to receive updates when we publish revised versions.
2-page PDF with 21 critical checks organized by country. Ready to print or use as a digital template.
Follow us on LinkedIn for new guides, templates and regulatory updates for procurement in LATAM.
Follow Egixia on LinkedInReplace weeks of manual verification with minutes of automated qualification using AI agents, OCR and real-time restrictive list lookups.
Request onboarding demo