What we do

Compliance and data protection programs that work in the company's day-to-day operations.

Design, implementation and review of AML/CTF systems (SAGRILAFT).
Business transparency and ethics programs (PTEE) to prevent foreign bribery and corruption.
Personal data processing policies, consents and registration of databases with the Superintendence of Industry and Commerce.
Handling of information security incidents, complaints and requests from the authorities.
Updating programs when the company enters a new market, takes on an investor or acquires another company.
Support in dealings with the Superintendence of Companies and the Superintendence of Industry and Commerce.

Experience

View all experience

Cartama
Review of internal processes and AML/CFT risks.
Advice to Cartama on reviewing its internal processes and identifying money laundering, terrorist financing and proliferation financing risks, and support in implementing the resulting measures.
Comfama
Identity management and governance contract.
Advice to Comfama on drafting and negotiating an identity management and governance services contract, including the design of the technical requirements, the definition of service levels and alignment with security and regulatory compliance policies.
Congregación Mariana
Code of ethics and good governance.
Advice to Congregación Mariana (Organización VID) on drafting a code of ethics and good governance that sets out the organisation's guiding principles and creates a procurement procedure.
Contacto
Personal data system update and National Database Registry filings.
Advice to Contacto on updating its personal data protection system and support with its filings before the National Database Registry (RNBD).
Demetalicos
Personal data protection system.
Advice to Demetalicos on preparing all the documents required for its personal data protection system.
Demetalicos
AML/CFT risk prevention and transparency programme.
Advice to Demetalicos on the measures required to prevent money laundering, terrorist financing and proliferation financing risks, and on implementing business transparency and ethics programmes.
Finaktiva
Personal data system update and advice on new projects.
Advice to Finaktiva on updating its personal data protection system and ongoing advice on the personal data used in developing new projects.
Griffith Foods
Personal data protection system.
Advice to Griffith Foods on structuring its personal data protection system, including updating its data processing policy, consents and management manual, and support on personal data transfer agreements.
Grupo Nutresa
Personal data system update and manuals.
Advice to Grupo Nutresa on updating its personal data protection system and drafting its personal data management manual and its information security manual.
Kristal Malls
Personal data protection system.
Advice to Kristal Malls on preparing the documents required for its personal data protection system.
Línea Directa
Business transparency and ethics programme.
Advice to Línea Directa, a textile company, on structuring a business transparency and ethics programme with a robust policy that fully covers the guidelines required by the Superintendency of Companies.
miPaquete.com
Personal data protection system.
Advice to miPaquete.com on preparing all the documents required for its personal data protection system.
Óptima Vivienda y Construcción
Personal data and AML risk management system (SARLAFT).
Advice to Óptima Vivienda y Construcción on preparing the documents required by the personal data protection regime, training for its implementation, and drafting its AML risk management (SARLAFT) manual, risk matrix and procedures.
Solla
Personal data system update and AI guidelines.
Advice to Solla on updating its personal data protection system, including guidelines for the use of AI and support in responding to an inquiry from the Superintendency of Industry and Commerce (SIC), as well as training.
STLTH
Personal data protection system.
Advice to STLTH on preparing all the documents required for its personal data protection system.
Topasa
Personal data protection system.
Advice to Topasa on preparing all the documents required for its personal data protection system.
Unigem
Personal data protection system.
Advice to Unigem on building its personal data system for the handling of sensitive data, and drafting personal data transfer and transmission agreements.