Gradiente Jurídico

Practice

Compliance and risk management

Design of policies, matrices, protocols and compliance programs in contracting, corporate governance, consumer, competition, privacy and risk prevention.

In Colombia

Consumer, competition and personal-data rules (Law 1581 of 2012), corporate governance and internal measures the company size can sustain. The program has to be proportional and demonstrable.

How we help

An authority request or an investor due diligence asks for real policies, not intention. We leave a trail: who approves, who accesses, what is recorded.

We prioritize risks already in operation: third-party contracts, data processing, advertising claims and board minutes.

When it makes sense

  • You are going into a round, a large client or a supplier that asks for compliance
  • There are no data, contracting or conflict-of-interest policies
  • There was an incident and no response protocol exists
  • Growth outpaced the controls from when there were three people

How we work it

  1. 01Map of risks and of the rules that actually apply
  2. 02Executable policies, matrices and protocols
  3. 03Short training of who decides and who documents
  4. 04Periodic review and adjustment when the business changes

What usually arrives

  • There is a copied policy nobody applies
  • Client data sits in a spreadsheet with no owner
  • Contracts are signed without a checklist or approval
  • An incident was handled on WhatsApp and left no trail

Who it is for

Companies that need a compliance program proportional to their operation, not a decorative manual.

This text describes the general framework in Colombia. It is not legal advice and does not replace an engagement on specific facts.

What it covers

  • Policies and risk matrices
  • Contracting and governance protocols
  • Consumer, competition and privacy
  • Prevention and incident response
All areas