SAGRILAFT - Colombia

Comprehensive ML/FT/FPADM Self-Control and Risk Management System (External Circular 100-000016 of 2020)

Module functionalities

• Linking: when creating a res.partner, the officer assigns it SAGRILAFT type and requests the initial DD. The system clones the checklist of the active template.
• UIAF report: if an unusual operation is confirmed suspicious, ROS is generated in SIREL XML, sent to UIAF and kept under absolute confidentiality.
• Annual training: employees and contractors complete the eLearning course with 80% approval test, certificate issued.
• Audit: all actions are recorded in the log with a chained SHA-256 hash — complete traceability for external auditors.
• Counterparts and knowledge
• SAGRILAFT Counterparts
• Dynamic risk Smart buttons Typology
• Final Beneficiaries (BF)
• DIAN Res. 164/2021 ≥ 5% ORM Validation
• Politically Exposed Persons (PEPs)
• Decree 830/2021 2nd degree Validity
• Risk Assessments
• Weighted matrix Score 0-100 Re-evaluation
• Due Diligence
• Due Diligence (DD/DDI)
• 7 states External portal SLA Checklist
• DD Templates
• DD vs DDI Mandatory Items Versionable
• Screening and restrictive lists
• Restrictive Lists
• OFAC UN EU UK OFSI UIAF
• Mass screening
• rapidfuzz Normalization ES Cron Score 0-100
• SLA 4 severities Workflow
• Screenings (historical)
• Historical Auditable Coverage
• Unusual operations and reports
• Unusual operations
• Auto-detection Workflow Origin Odoo
• ROS — UIAF Report (SIREL XML)
• SIREL XML UIAF Law 526/1999 lxml Validation
• Detection Rules
• Configurable DSL Cron Multi-model
• UIAF Typologies
• UIAF FATF Indicators
• Training and audit
• Training + native eLearning
• website_slides 5 modules Quiz 80% In-person
• Immutable audit (SHA-256 hash chain)
• SHA-256 Hash chain 5 years Tamper-evident
• Configuration and master data
• Types of Counterparty / Risk Factors
• Multi-factor weighting
• High risk jurisdictions
• FATF DIAN Auto-score
• Decoupled, testable and reusable code. Each service solves a specific problem and is invoked from the models via dependency injection.
• EncryptionService
• Wrapper Fernet (cryptography) for sensitive fields: document number, PEP declaration, BF data. Managed key via ir.config_parameter.
• RiskCalculator
• NameMatcher
• ListDownloader
• Stubs to sync OFAC SDN, ONU, EU, UK OFSI and UIAF from your official sources. Incremental diff and change log.
• DetectionEngine
• Rules engine that walks through Odoo documents and applies _rule_* declared. Sale / purchase / payment / invoice. Create unusual operations and alerts.
• RosXmlBuilder
• Builds the SIREL UIAF XML with lxml, validates structure, serializes dates and amounts according to spec, supports multiple operations per report.
• Executive dashboard with 8 KPI cards and 4 graphs
• Alerts by month + severity
• Bars with alerts from the last 6 months and horizontal bars by severity (critical / high / medium / low), with colors by level and 3D shadow.
• Unusual operations + Heatmap type x risk
• Footer of unusual trades by status and heatmap counterparty type x risk level — visualize risk concentrations at a glance.
• Top 10 high risk counterparties
• Table ordered by descending score with badge by level, PEP indicator, DD status and country. Clicking on any row opens the counterparty file.
• Politically Exposed People
• PEPs with type, position, validity and declaration. Decree 830 of 2021 applied: family members up to the 2nd degree.
• BFs with percentage of participation, type of control and country. Automatic validation of the 5% threshold (Res. DIAN 164/2021).
• Evaluations with code RA/YYYY/NNNNN, date, counterpart, score and resulting level. Click to see the details of the weighted factors.
• Due Diligence — 7 states + DDI
• DD tab — checklist + token portal
• Catalog of binding lists: OFAC SDN, UN Security Council, EU Sanctions, UK OFSI, UIAF, Public Service.
• Screening history
• Each execution saved with date, counterparty, validated lists, fuzzy score and analyst decision. Auditable.
• Alerts with SLA + severity
• Alerts with severity (critical / high / medium / low), SLA with escalation, assignment to the officer, complete log.
• High risk jurisdictions
• FATF high risk countries, DIAN tax havens and jurisdictions with strategic deficiencies — with ISO code and reason.
• Operations detected by the rules engine or recorded manually. States: detected / under analysis / justified / escalated to ROS.
• UIAF Reports (ROS) — SIREL XML
• Statuses: draft / under review / sent / acknowledgment received. Absolute legal reserve in accordance with Law 526/1999.
• UIAF / FATF Typologies
• Catalog of ML/FT/FPADM typologies with code, indicators and applicable sector. Referenceable from each ROS.
• Configurable rules on ERP operations: thresholds, fractionation, new client, high-risk counterparty, cash.
• Annual SAGRILAFT Course — 5 modules + quiz
• eLearning Catalog
• The SAGRILAFT course appears along with the rest of the company's courses on the public eLearning portal. Public registration for employees.
• In-person training
• Classroom training with assistants, date, duration, instructor and certification. Optionally linked to the eLearning course.
• Immutable audit log
• Types of counterparty
• Client, supplier, employee, shareholder, advisor, contractor, intermediary. Each one with its base risk profile.
• Risk factors
• Jurisdiction, sector, product, channel, amount, frequency — each with weighted values ​​for the risk matrix.
• Risk matrices
• Configure factor/value/weight combinations. The calculator applies the active matrix when evaluating counterparties.
• Pestania SAGRILAFT in counterpart
• Each res.partner enables a SAGRILAFT tab with type, level, BFs, PEPs, last DD and smart-buttons to history.
• Each standard translates into a specific behavior of the module — it is not marketing.
• MI ERP SAS GROUP · NIT 901.950.475-9 · Colombia Jose Luis Vizcaya Lopez [email protected] · www.mi-erp.app
• MI ERP SAS GROUP — Jose Luis Vizcaya Lopez
• www.mi-erp.app

On screen

Specs

What is included with Mi-ERP