Third-party lifecycle management for Colombia operations
Last updated: August 19, 2026
Verdana is a third-party lifecycle management platform built for global companies with suppliers, contractors, or a subsidiary in Colombia, where companies above regulatory thresholds must run SAGRILAFT — the mandated system for managing money-laundering, terrorism-financing, and proliferation risk — and, where applicable, a Transparency and Business Ethics Program (PTEE).
Law 2195 of 2022 reinforced corporate liability and supervisory powers on corruption, widening the reach of these obligations. Verdana operates SAGRILAFT and PTEE end to end on the third-party side: due diligence at onboarding, beneficial-ownership identification, screening against binding and restricted lists, politically-exposed-person detection, risk-factor segmentation, enhanced due diligence where required, and periodic monitoring of the whole base at the frequency each profile demands. Every check and every decision is documented for the compliance officer's report.
On top of that base runs daily operations: contracts with terms and clauses, third-party training on the code of ethics with acceptance records, conflict-of-interest declarations by form, periodic controls with evidence, and contractor documentation aligned with the occupational health and safety management system when people enter facilities.
For groups operating across the region, the same instance manages Colombia under SAGRILAFT and every other jurisdiction under its own framework, with consolidated reporting for headquarters in English.
Frequently asked questions
Who is required to implement SAGRILAFT?
Companies supervised by the Superintendencia de Sociedades that exceed the thresholds set by regulation. The system requires risk-based due diligence on counterparties, beneficial-ownership identification, list screening, and documented periodic monitoring — obligations that concern the third-party base directly.
What is a PTEE and when does it apply?
The Transparency and Business Ethics Program is the anti-corruption compliance program required from companies meeting regulatory criteria, reinforced by Law 2195 of 2022 — it covers, among other elements, due diligence on third parties and intermediaries acting for the company.
Can one platform run SAGRILAFT in Colombia and other frameworks elsewhere?
Yes — that is the core design: Colombia runs under SAGRILAFT/PTEE configuration while other countries run under their own local frameworks, with one consolidated view and reporting layer for the parent company.