Complii gives regulated operators and obligated entities in Colombia a complete operational stack for SARLAFT — from the inherent/residual risk matrix to KYC, list screening, transaction monitoring, and audit-ready evidence.
Colombian SARLAFT requires you to identify, measure, mitigate, and monitor LA/FT/FP risk across every counterparty relationship. Complii turns those obligations into configured workflows — not disconnected spreadsheets — with a Colombia SARLAFT methodology pack, a 17-step setup wizard, and supervisor-ready exports.
Policy manuals, training records, and UIAF SIREL ROS/AROS filing remain organizational processes — Complii operationalizes detection, diligence, monitoring, and evidence.
Colombia LA/FT pack
Inherent → residual → final risk
Weighted factors or Likelihood × Impact grid with EDD and senior-review thresholds.
One platform for the operational controls supervisors expect — not another spreadsheet.
17
Guided SARLAFT setup steps
UIAF
National LA/FT framework
1-click
Activate SARLAFT methodology template
100%
Immutable audit trail on actions
SARLAFT is not a separate product — it is how Complii's core AML platform is configured for Colombia. Every module below connects on the same UCID identity graph.
Individual and business vinculación, custom fields, import/API, duplicate detection, and customer risk summaries.
Document types, requirement trees, formato de vinculación checklists, AI validation, and expiration tracking.
Public KYC flows, document capture, liveness/face match, screening at completion, and webhook notifications.
Sanctions, PEP, adverse media, Colombia lists, custom lists, presets, explainable matches, and batch rescreening.
Colombia SARLAFT template, company rules, signals, country risk, matrix builder, and methodology assessments per customer.
Scenario library, real-time alerts, structuring/velocity/corridor rules, explainable payloads, and auto-case routing.
Alert-to-case workflow, evidence linking, analyst notes, disposition, and structured ROS preparation support.
Legal entity workspace, ownership graph, UBO calculation at 5%, enrichment, and corporate EDD reviews.
Immutable who/what/when records across screening, risk changes, case actions, and configuration updates.
Programmatic customer onboarding, transaction ingestion, screening, and webhooks for core banking or ERP integration.
Complii maps each SARLAFT obligation to a concrete module — so your compliance team can demonstrate how risk is identified, mitigated, monitored, and investigated.
The platform supports the full risk cycle expected under SARLAFT: design the methodology, apply it at onboarding, keep it current through continuous due diligence, detect unusual and suspicious operations, investigate with documented evidence, and retain records for supervisor examination.
Configurable 5×5 grid with acceptance thresholds — export CSV/JSON for board approval.
| I 1 | I 2 | I 3 | I 4 | I 5 | |
|---|---|---|---|---|---|
| L 1 | 4 | 8 | 12 | 16 | 20 |
| L 2 | 8 | 16 | 24 | 32 | 40 |
| L 3 | 12 | 24 | 36 | 48 | 60 |
| L 4 | 16 | 32 | 48 | 64 | 80 |
| L 5 | 20 | 40 | 60 | 80 | 100 |
See exactly which regulatory article each platform capability addresses — useful for supervisor examinations and internal SARLAFT documentation.
Activate the Colombia SARLAFT template with five SARLAFT dimensions, auto-assigned factor options, and control mappings (listas vinculantes, debida diligencia, DDI, monitoreo, verificación de identidad).
Company rules and signals feed observed risk; methodology computes inherent, residual (after control coverage), and final score per customer. Treatment profiles enforce EDD gates.
Schedule automatic rescreening of your customer base when lists update or on a recurring calendar — not just at onboarding.
Define required documents per customer type: ID, tax ID (NIT/RUT), source of funds declaration, powers of attorney, and legal entity supporting documents.
Screen against OFAC, UN consolidated, EU, and Colombia vinculante lists with configurable presets, match explanations, and analyst review workflow.
Remote onboarding with document capture, liveness detection, face match, and automatic screening upon IV completion.
Map ownership chains, calculate UBOs at the Ley 2155 5% threshold, screen related parties, and complete structured KYB/EDD reviews.
Velocity, amount, corridor, and pattern scenarios with explainable alert payloads tied to UCID clusters and customer context.
Investigate alerts in cases with linked transactions, screening hits, documents, and analyst disposition — evidence package for ROS preparation.
Demonstrate who verified documents, when screenings ran, how risk scores changed, and how cases were closed — supporting five-year retention requirements.
From methodology design through investigation — every step produces evidence on the same tenant-scoped identity graph.
Activate the Colombia SARLAFT template, tune dimensions, weights, and L×I matrix.
KYC/KYB, identity verification, document requirements, and onboarding.
Sanctions, PEP, Colombia lists, presets, and automatic rescreening.
Unusual/suspicious scenarios with auto-case routing.
Analyst workflow, evidence, disposition, and ROS preparation support.
Immutable logs, matrix export, methodology versioning.
Every capability below is available today — configured through the in-app SARLAFT setup wizard after you subscribe.
Each card summarizes a Complii module with the specific SARLAFT controls it operationalizes. Subscribers get the full platform; the Colombia SARLAFT pack and setup wizard accelerate configuration.
MetodologíaOne-click activation of the Colombia SARLAFT global pack — dimensions, factor options, auto-assignment rules, and mapped controls aligned to SARLAFT requirements.
MatrizCustomize the methodology your board approves — weights, scores, acceptance thresholds, and exports — without leaving the platform.
KYCComplete vinculación workflow for natural and legal persons with document intelligence and optional AI-assisted extraction.
ListasPermanent list consultation with explainable matching — the operational backbone of Art. 5.6.11.2.f.
GeografíaGeographic risk scores feed the geografía dimension and EDD triggers for non-cooperative jurisdictions.
UBOKYB beyond checkbox compliance — ownership transparency required for legal entity contrapartes under Ley 2155.
MonitoreoDetect operaciones inusuales y sospechosas with explainable, real-time scenario evaluation.
CasosStructured investigation from alert to disposition — the evidence layer before filing ROS in UIAF SIREL.
Guía17-step guided configuration exclusive to subscribers — with green checks for auto-detected completion.
AuditoríaProve your SARLAFT controls work — who did what, when, and on which customer.
After subscribing, your compliance team gets a guided checklist inside Complii — not a PDF manual.
Green checks appear automatically when Complii detects completed configuration. Steps marked manual/external cover organizational requirements outside the platform (policy, Oficial de Cumplimiento, SIREL filing).
Arts. 5.6.5–5.6.10
Enable the Colombia SARLAFT template under Risk Methodology with SARLAFT dimensions and control mappings.
Set scores for Colombia, high-risk, and non-cooperative jurisdictions for the geografía factor.
Tune PEP, sanctions, KYC gap, and geographic signals that feed observed risk scores.
Art. 5.6.11
Ensure UN, OFAC, EU, and Colombia lists are in scope with appropriate match sensitivity.
Schedule automatic rescreening for continuous due diligence (debida diligencia continua).
Match formato de vinculación: ID, NIT, source of funds, and entity supporting documents.
Biometric or document-based IV for remote onboarding channels.
Corporate Intelligence with UBO threshold at 5% per Ley 2155.
Arts. 5.6.10.4, 5.6.11.6
Detect structuring, velocity, high amounts, and corridor risks — operaciones inusuales.
Open investigation cases automatically when alerts meet severity threshold.
Document analyst review, notes, and disposition before ROS escalation.
Monitor portfolio risk distribution and methodology assessments.
Arts. 5.6.8, 5.6.12
Document investigation in Cases; compliance officer files ROS immediately in UIAF SIREL.
If no ROS in the month, submit Ausencia de ROS within 10 days via SIREL.
Verify immutable logs for screenings, risk changes, and case actions (Art. 5.6.11.4).
Board-approved política LA/FT/FP, manual de procedimientos, and código de ética.
Designate Oficial de Cumplimiento, UIAF e-learning, notify competent supervisory authority.
Supervisors expect demonstrable controls — not a folder of policies without systems behind them.
Most operators activate the template and complete core configuration in days — not months.
Create your tenant and activate the Colombia SARLAFT methodology template.
Follow the in-app guide — country risk, rules, presets, TM scenarios, UBO threshold.
Import or API-create customers with KYC, documents, screening, and risk assessment.
TM scenarios detect unusual/suspicious activity; alerts route to analysts automatically.
Cases, audit logs, and exports support ROS preparation and supervisor examinations.
No. SARLAFT is operationalized through Complii's core AML platform. You subscribe to Complii, activate the Colombia SARLAFT methodology template, and follow the in-app setup wizard. No separate SARLAFT license is required.
SARLAFT obligations apply to multiple regulated sectors and activities in Colombia — not only one industry. Complii provides a Colombia SARLAFT methodology pack plus global templates you can customize. Your legal or compliance advisor can confirm which framework applies to your entity.
No. ROS, AROS, and Reportes Objetivos are filed directly by your Oficial de Cumplimiento through UIAF SIREL. Complii provides case management, investigation evidence, and audit logs to support that process.
Yes. The matrix builder exports CSV and JSON including dimensions, factor scores, L×I grid, and acceptance thresholds. You can also create immutable methodology snapshots when the board approves a version.
Most operators activate the template and complete core configuration (methodology, screening, country risk, TM scenarios) within days using the setup wizard. Full organizational items (policy, manual, officer designation) follow your internal governance timeline.
SARLAFT requires organizational elements Complii does not replace. The platform focuses on operational controls and the evidence those governance processes depend on.
Talk to our team about Colombia SARLAFT onboarding or start a subscription and activate the Colombia LA/FT pack today.