Do You Need AML Compliance in Colombia? A Simple Guide to SAGRILAFT
If your company operates in Colombia, you may be required to implement an anti-money laundering system called SAGRILAFT. This guide explains who must comply, what triggers the obligation, and what you actually need to do so you can operate in Colombia with clarity and avoid surprises.
What Is SAGRILAFT and Why It Matters
SAGRILAFT stands for Sistema de Autocontrol y Gestión del Riesgo Integral de Lavado de Activos y Financiación del Terrorismo. In simple terms, it is Colombia’s framework to prevent money laundering and terrorist financing inside companies.
It was created and is supervised by the Superintendence of Companies through Chapter X of Circular 100 000016 of 2020 and later updates.
If you are an international company, this is not just a formal requirement. It directly affects your ability to operate in Colombia.
Why it matters in practice
- Colombian regulators expect companies to actively manage risk, not just produce documents
- Banks and partners will often ask for proof of compliance
- Failure to comply can lead to hefty fines and serious reputational issues
Which Companies Must Implement SAGRILAFT
Not every company in Colombia must implement SAGRILAFT. The obligation depends mainly on your size and your activity.
The two main triggers are:
1. Your annual revenue and assets
2. The type of industry you operate in
Revenue Threshold
Companies supervised by the Superintendence of Companies must implement SAGRILAFT if they exceed certain revenue levels.
As a general reference:
- Companies with annual revenue or assets equal to or greater than 40,000 monthly minimum wages are required to implement a full SAGRILAFT protocol.
- Companies with annual revenue or assets equal to or greater than 9,000 and less than 40,000 monthly minimum wages are required to implement reasonable measures to screen clients and vendors.
Table 1: Monthly Minimum Wage Values for 2026
| 9,000 monthly minimum wages (COP) | 9,000 monthly minimum wages (USD) | 40,000 monthly minimum wages (COP) | 40,000 monthly minimum wages (USD) |
| $ 15,758,145,000 | $ 4,268,142 | $ 70’036,200,000 | $ 18’982,562 |
Higher Risk Industries
Even if you are below the threshold, your industry may still create exposure.
Some examples include:
- Real estate and construction
- Mining and natural resources
- International trade and logistics
- Activities involving large or cross border transactions
Table 2: Does Your Company Need to Implement SAGRILAFT?
| Factor | Trigger for SAGRILAFT obligation |
|---|---|
| Supervision | Company is under the Superintendence of Companies |
| Revenue threshold | Annual revenue or assets equal to or greater than 40,000 monthly minimum wages (or 9,000 monthly minimum wages for simplified requirement) |
| Industry risk | Operates in sectors like real estate, mining, international trade, or logistics |
| Business activity | Handles large transactions, international flows, or complex corporate structures |
| Growth stage | Rapid scaling or increasing exposure to third parties |
What Does Implementing SAGRILAFT Actually Mean
SAGRILAFT is not just a document or a template. It is a system that must work in practice inside your company, which includes hiring certified personnel who must understand how to follow protocol for all transactions.
At a high level, you need to
- Identify your risk
- Put controls in place
- Monitor what is happening
- Act when something looks unusual
Table 3: What SAGRILAFT Requires in Practice
| Requirement | What it means in practice |
|---|---|
| Risk matrix | Identify where your company is exposed based on clients, geography, and operations |
| Due diligence | Collect and verify information about clients, suppliers, and partners |
| Monitoring | Track transactions and behavior to detect unusual activity |
| Reporting | Escalate and report suspicious operations internally and report to UIAF when required |
| Internal policies | Create written rules explaining how your company manages AML risk |
| Compliance officer | Appoint a qualified person responsible responsible for overseeing- the system |
| Training | Educate employees on how to identify and report potential risks |
Common Mistakes International Companies Make
We’ve seen companies fall into trouble when the asume SAGRILAFT is:
- Just a document they can download
- Only relevant for financial institutions
- Something they can deal with later
When, in reality:
- It is actively enforced
- It is expected early
- Authorities care about how your company actually operates
Self Assessment Checklist
If you are not sure whether this applies to you, you can use this quick test.
Answer yes or no:
- Are you supervised by the Superintendence of Companies?
- Do you expect to generate significant revenue locally or purchase expensive assets?
- Do you operate in sectors like real estate, logistics, or natural resources?
- Do you work with international clients or suppliers?
- Do you handle large transactions or cross border payments?
- Do you currently lack formal AML policies?
If you answered yes to two or more, it is very likely you need to assess SAGRILAFT compliance now.
How to Approach SAGRILAFT Strategically
Table 4: Choosing the Right Approach
| Company profile | Recommended approach |
|---|---|
| Early stage foreign company | Assess risk early and implement a light KYB/KYC version |
| Scaling international company | Full SAGRILAFT implementation with structured controls |
| High risk industry operator | Immediate and robust compliance system |
| Entering Colombia | Compliance assessment before starting operations |
A simple approach:
- Confirm whether the obligation applies to you
- Understand your real exposure based on your operations
- Build a system that fits your business instead of copying templates
- Assign responsibility internally
- Implement processes that actually work day to day
Conclusion
SAGRILAFT is one of the most important compliance requirements in Colombia, but it is often misunderstood by international companies.
The key is to see it as a business tool, not just a legal obligation. Done correctly, it helps you operate smoothly, build trust, and avoid problems as you grow.
If you are entering Colombia or already operating, this is something we strongly suggest you address early.
If you are unsure whether SAGRILAFT applies to your company or want to implement it properly from the start, we can help. At Colombia Legal Edge, we work with international companies to make Colombian compliance clear, practical, and aligned with business goals. Let’s review your case together, the first call is always on us.