Your First 90 Days

The directive arrives with little ceremony. A board resolution, a strategic planning memo, an executive briefing that concludes with six words: "We are expanding into Colombia." For the CFO or VP Finance tasked with making it operational, what follows is a 90-day window that will determine whether the Colombian entity becomes a strategic asset or a compliance liability. The difference, almost without exception, lies in the sequencing.

Colombia has emerged as the preferred entry point for North American companies seeking Latin American operations. The reasons are structural: a USD 350 billion economy growing at 3.2%, a bilingual professional workforce concentrated in Bogotá and Medellín, and a regulatory framework that, while rigorous, is navigable for those who understand its architecture. The country holds bilateral investment treaties with both the United States and Canada, providing protections under international arbitration that many peer jurisdictions in the region cannot match.

Yet the regulatory landscape is meaningfully different from what most North American finance teams expect. Colombia operates under a civil law system, not common law. Tax obligations are granular and calendar-driven. Labor protections are constitutional, not merely statutory. And the tax authority — the Dirección de Impuestos y Aduanas Nacionales, or DIAN — operates with a level of transactional visibility that surprises companies accustomed to the IRS model of periodic self-assessment.

What follows is a strategic framework for the first 90 days, organized into three phases. It is not exhaustive — each company's circumstances will introduce variables — but it represents the critical path that, when executed in sequence, positions the Colombian operation on solid institutional ground from inception.

Day 1–30: The Foundation

The first decision — and arguably the most consequential — is entity structure. Colombia offers three primary vehicles for foreign investment: a branch office (sucursal de sociedad extranjera), a locally incorporated subsidiary (typically a simplified stock corporation, or S.A.S.), and a free trade zone entity. Each carries distinct implications for tax exposure, liability containment, and operational flexibility.

The branch office is a direct extension of the foreign parent. It files financial statements in Colombia, pays Colombian taxes, and operates under the supervision of the Superintendencia de Sociedades, but it does not create a separate legal personality. For the parent company, this means Colombian operations sit on the consolidated balance sheet without the liability firewall that a subsidiary provides. Branches are common among oil and gas companies and infrastructure firms operating under concession agreements, but they are rarely the optimal structure for companies seeking long-term commercial operations.

The S.A.S. — Sociedad por Acciones Simplificada — has become the dominant vehicle for foreign direct investment in Colombia, and for good reason. It requires a single shareholder, permits flexible governance structures, limits shareholder liability to contributed capital, and can be formed in approximately ten business days. For US and Canadian parent companies, the S.A.S. provides familiar corporate governance mechanics within a Colombian legal wrapper.

Free trade zone entities occupy a specialized niche. Companies that qualify — generally those meeting investment and employment thresholds — benefit from a reduced corporate income tax rate of 20% (compared to the standard 35%) and VAT exemptions on certain imports. The trade-off is geographic and operational constraint: the entity must operate primarily within the designated free trade zone. For manufacturing, logistics, and certain BPO operations, the economics are compelling. For professional services or commercial activities dispersed across multiple Colombian cities, the constraints typically outweigh the tax benefit.

"The entity structure decision is irreversible in practice if not in law. Restructuring a Colombian operation post-formation introduces tax friction, regulatory delays, and labor complications that the initial choice was meant to avoid."

With the entity structure resolved, the incorporation sequence proceeds through the Bogotá Chamber of Commerce — or the relevant local chamber, depending on the principal place of business. The process yields a NIT (Número de Identificación Tributaria), which functions as the entity's tax identification number and is required for virtually every subsequent interaction with Colombian authorities, banks, and counterparties.

Simultaneous to incorporation, the entity must appoint a legal representative (representante legal). This is not a ceremonial role. Under Colombian law, the legal representative carries personal liability for certain tax and labor obligations. Foreign nationals can serve in this capacity, but they must hold a valid Colombian visa and, in practice, must be resident or readily available. Many foreign companies appoint a Colombian national to the role, supported by a power of attorney structure that preserves parent-company oversight while satisfying the statutory requirement.

DIAN registration follows incorporation and activates the entity's tax obligations. This step is more than administrative: the DIAN registration determines the entity's tax regime, reporting calendar, and withholding obligations. Errors or omissions at this stage — particularly in the classification of economic activities under the CIIU code system — can create cascading compliance issues that surface months later, typically during the first tax filing cycle.

Day 31–60: The Infrastructure

With the legal entity established, the second phase builds the operational infrastructure — banking, payroll, and labor compliance — that allows the entity to transact, employ, and operate.

Corporate banking in Colombia requires patience that North American finance teams rarely anticipate. Opening a corporate account at a major Colombian bank — Bancolombia, Davivienda, Banco de Bogotá — typically takes four to eight weeks from initial application. The due diligence requirements are substantial: apostilled incorporation documents of the parent company, financial statements of both parent and local entity, beneficial ownership declarations, and a detailed description of the entity's projected transaction patterns. For companies accustomed to opening a US corporate account in five business days, this timeline represents a significant planning variable.

Foreign exchange considerations add a layer of strategic complexity. The Colombian peso (COP) trades at approximately 3,710 to the US dollar as of early 2026, within a band that has fluctuated between 3,400 and 4,800 over the past three years. Colombia's central bank, Banco de la República, maintains a floating exchange rate regime, meaning the COP/USD rate is market-determined. For companies funding Colombian operations from North America, this introduces both transactional and translational currency exposure that should be addressed in the treasury framework from day one.

All foreign exchange transactions must be reported to Banco de la República through the banking system. Capital contributions to the Colombian entity, intercompany loans, service payments, and dividend repatriations each carry specific reporting requirements and, in some cases, registration obligations. The foreign investment registration (registro de inversión extranjera) is particularly critical: without it, repatriating dividends to the parent company becomes procedurally complex and potentially subject to higher withholding rates.

Payroll compliance in Colombia operates under a framework that is structurally different from the US or Canadian model. Beyond base salary, Colombian employers bear mandatory contributions that collectively add approximately 52% to the cost of a base salary. These include health insurance (EPS), pension contributions, occupational risk insurance (ARL), a family welfare contribution (ICBF), a training contribution (SENA), and a family compensation fund (caja de compensación). Additionally, employees are entitled to a statutory bonus (prima de servicios) equivalent to one month's salary per year, paid in two installments, and cesantías — a severance-like deposit that accrues monthly and must be deposited annually with a certified fund.

"The most common error foreign employers make in Colombia is budgeting for headcount using base salary alone. The true employment cost — including mandatory benefits, parafiscal contributions, and statutory bonuses — runs approximately 1.52 times the base figure."

Labor law in Colombia is constitutionally grounded and strongly protective of employees. Termination without just cause triggers a statutory severance payment that increases with tenure. Non-compete clauses are generally unenforceable unless the employer provides compensation during the restriction period. And employment contracts — whether fixed-term or indefinite — carry specific renewal and termination mechanics that differ materially from at-will employment norms in the United States.

Companies that plan to hire more than a handful of employees should also be aware that Colombian law requires employers with 50 or more workers to establish a labor coexistence committee (comité de convivencia laboral) and a joint occupational health and safety committee (COPASST). These are not optional governance features; they are legal obligations with specific composition requirements and documented meeting cadences.

Day 61–90: The Compliance Architecture

The final phase of the 90-day framework establishes the tax and audit compliance infrastructure that will govern the entity's ongoing obligations. In Colombia, this infrastructure is not something that can be deferred until the first tax season approaches. The obligations begin accumulating from the date of DIAN registration, and the penalty regime for late or inaccurate filings is both mechanical and unforgiving.

Colombia's tax calendar is dense. Corporate income tax is filed annually but paid in two installments (April and June for most entities). VAT is filed bimonthly or quarterly depending on revenue thresholds. Withholding tax (retención en la fuente) — a system in which the payer withholds income tax on behalf of the recipient for virtually every type of payment — is filed monthly. Industry and commerce tax (ICA) is filed bimonthly in Bogotá and on varying schedules in other municipalities. And informational returns — including the exogéna, a detailed transactional report submitted to the DIAN annually — require granular, transaction-level data that must be captured from the entity's first day of operations.

Transfer pricing deserves particular attention for any entity with related-party transactions. Colombia's transfer pricing regime, aligned with OECD guidelines, requires entities that exceed certain revenue and transaction thresholds to prepare and file annual transfer pricing documentation, including a local file and, for larger groups, a master file and country-by-country report. The documentation must be prepared contemporaneously — not reconstructed after the fact — which means the transfer pricing policy and documentation framework should be established during this 90-day window, not deferred to the first filing deadline.

Statutory audit requirements round out the compliance architecture. Colombian entities that exceed specific asset or revenue thresholds must appoint a fiscal auditor (revisor fiscal), a role that combines elements of external audit and regulatory oversight. The fiscal auditor reviews financial statements, tax returns, and internal controls, and issues opinions that are filed with the Superintendencia de Sociedades. For many foreign-owned S.A.S. entities, the threshold is met from inception if the parent company's investment exceeds approximately COP 13.7 billion (roughly USD 3.7 million at current rates). Appointing a qualified fiscal auditor early — rather than scrambling to comply when the first annual filing approaches — avoids both regulatory risk and the governance gap that comes from operating without independent financial oversight.

The Patterns of Failure

Observing foreign companies enter the Colombian market over more than three decades reveals consistent patterns in what goes wrong. The failures are rarely dramatic. They are incremental — small missteps in the first 90 days that compound into material problems by month twelve.

The most frequent error is sequencing: opening a bank account before completing the foreign investment registration, hiring employees before establishing payroll infrastructure, or signing a lease before the entity is legally constituted. Each of these creates workarounds that introduce risk and cost.

The second pattern is underestimating the Colombian regulatory cadence. North American companies are accustomed to quarterly reporting rhythms and annual tax filings. Colombia operates on a monthly and bimonthly cycle, with withholding tax returns, social security contributions, and municipal tax filings recurring with a frequency that demands dedicated accounting resources from day one.

The third is neglecting the bilateral investment treaty framework. Both the US-Colombia Trade Promotion Agreement and the Canada-Colombia Free Trade Agreement provide investment protections — including fair and equitable treatment standards, expropriation protections, and investor-state dispute settlement mechanisms — that must be properly invoked at the time of investment registration. Companies that fail to register their investment through the correct channels may find these protections difficult to activate if a dispute arises.

The Strategic Position

Colombia's regulatory environment is demanding, but it is not hostile to foreign investment. The framework is comprehensive, and its complexity reflects a jurisdiction that takes institutional governance seriously. For companies that approach the first 90 days with discipline — sequencing correctly, budgeting accurately, and building compliance infrastructure before obligations begin to accrue — Colombia offers a platform for Latin American operations that is stable, institutionally mature, and strategically positioned.

The companies that thrive in Colombia are not those that found shortcuts through the regulatory framework. They are those that understood its architecture from the beginning, built their operations within it, and treated compliance not as an overhead cost but as the foundation on which operational credibility is constructed. In a market where institutional trust is the currency of long-term success, the first 90 days are not a formality. They are the foundation.