A European strategic buyer enters exclusivity on a Colombian mid-market target. The data room opens, local counsel produces a lengthy index. Additionally. The buyer's deal team. accustomed to transactions in Germany or the United States. begins mapping their standard due diligence template onto a civil law jurisdiction with its own commercial registry system, distinct labour protections, and investment registration obligations. Within weeks, unfamiliar documentary requirements, undisclosed contingent liabilities, and a closing condition tied to foreign investment registration create friction that could have been anticipated from day one.
M&A due diligence in Colombia follows a structured process governed by Colombian commercial legislation, investment legislation, and tax legislation, typically conducted over four to ten weeks depending on the target's size and sector. Foreign acquirers must verify corporate standing, review tax and labour exposure, confirm regulatory licences, and register the inbound investment with the Banco de la República (Colombia's central bank) before or immediately after closing. A well-sequenced legal checklist is the primary tool for managing complexity and protecting the buyer's position in the acuerdo de compraventa de acciones (share purchase agreement, or SPA).
This guide walks through the full due diligence process step by step: the documentary checklist, workstream sequencing, common errors by foreign clients, cost structure, and a decision framework for different acquisition scenarios in Colombia.
The Colombian M&A environment: what makes it distinct for foreign buyers
Colombia is a civil law jurisdiction. Its commercial legislation, employment legislation, and tax legislation operate on codified principles that differ meaningfully from common law systems. Foreign acquirers experienced in English or US-law transactions must recalibrate several assumptions before entering a Colombian deal process.
First, corporate records in Colombia are maintained at the relevant Cámara de Comercio (Chamber of Commerce), which functions as the commercial registry for the jurisdiction where the company is domiciled. Certificates of standing, shareholder registers, and corporate approvals are all drawn from this registry. A target with operations in multiple cities may be registered in one city but have establishments recorded in others. Each registration must be verified independently.
Second, Colombia's investment legislation requires that foreign direct investment be reported to the Banco de la República through a declaración de cambio (foreign exchange declaration). This applies to share acquisitions by non-residents. The declaration must be filed within the deadline set by the relevant foreign exchange rules. Missing this deadline creates regulatory exposure that can complicate future dividend repatriation and exit transactions.
Third, Colombian labour legislation gives employees significant protections, including severance obligations, mandatory social security contributions, and seniority-based benefits. These are frequent sources of undisclosed contingent liability in targets that have reclassified workers or relied heavily on service contractors. In practice, labour exposure is one of the most commonly underestimated risk areas in Colombian transactions involving mid-market companies.
Fourth, regulated sectors – including financial services, telecommunications, healthcare, and certain energy activities – require prior regulatory approval or notification before a change of control. The relevant authorities and timelines vary by sector. Buyers who discover sector-specific regulatory requirements only after signing frequently face delays to closing that could have been structured as conditions precedent from the outset.
Understanding these structural characteristics early shapes how the due diligence workstreams are sequenced and how the representations and warranties in the SPA are drafted. For a fuller picture of the Colombian corporate legal system underlying these transactions, our overview of corporate law in Colombia provides relevant context on entity types, governance rules, and registration requirements.
Step-by-step due diligence process and documentary checklist
Colombian M&A due diligence is typically divided into five concurrent workstreams: corporate and ownership, financial and tax, labour and employment, regulatory and licences, and litigation and contingencies. Each workstream has a distinct document set and a distinct risk profile.
Step 1: Corporate and ownership verification (weeks 1–2)
The starting point is confirming that the target exists as stated and that the seller holds the equity being sold. Required documents include the current commercial registry certificate from the relevant Cámara de Comercio, the company's bylaws (estatutos sociales). All shareholder meeting minutes for the preceding three to five years. Additionally, the shareholders' register (libro de registro de acciones). The buyer must verify that prior share transfers were properly recorded and that no pre-emption rights, pledge arrangements, or tag-along rights attach to the target shares.
A common error at this stage is accepting a single registry certificate without verifying whether the company has registered branches or establishments in other cities. Each branch may carry its own liabilities and its own registration status. Buyers who skip this check have later discovered undisclosed branches with outstanding commercial obligations.
Step 2: Financial and tax review (weeks 1–4)
Colombian tax legislation applies a range of obligations to companies, including income tax, value-added tax, industry and commerce tax, and withholding tax on certain payments. The tax workstream should cover at minimum the preceding five fiscal years and must include review of tax returns, supporting documentation for deductions. Additionally. Correspondence with the Dirección de Impuestos y Aduanas Nacionales (DIAN). Colombia's national tax and customs authority. Outstanding tax audits, pending objections, and open statute-of-limitations periods all affect the risk profile.
Transfer pricing documentation is a specific area of focus for targets that have transacted with related parties. Colombian tax legislation requires formal transfer pricing studies for certain intercompany transactions. Absence of these studies, or studies that do not withstand scrutiny, can result in material adjustments and penalties that flow through to the buyer unless properly addressed in the representations and warranties.
Financial due diligence should be conducted in parallel by accounting advisers and should include normalisation of EBITDA, review of working capital mechanics, and identification of any off-balance-sheet arrangements.
Step 3: Labour and employment audit (weeks 2–4)
The labour workstream requires a complete employee census, review of employment contracts, verification of social security and pension contribution records, and confirmation of severance fund registrations (cesantías). Colombian employment legislation requires employers to make annual severance payments to a designated fund on behalf of each employee. Gaps or errors in these payments accumulate as contingent liabilities and transfer to the buyer in a share acquisition.
The workstream must also examine the use of service contractors and contratos de prestación de servicios (independent contractor agreements). Colombian courts and labour authorities frequently reclassify these relationships as employment if the economic reality of the arrangement resembles subordination. A pattern of sustained use of contractors in core operational roles is a red flag requiring quantification and, where material, SPA price adjustment or escrow structuring.
Step 4: Regulatory licences and permits (weeks 2–3)
Operating licences, environmental permits, and sector-specific authorisations must be inventoried and their validity confirmed. For targets in regulated industries, buyers must determine whether the change of control triggers a prior approval requirement. In the financial sector, the Superintendencia Financiera de Colombia (Financial Superintendency) must approve certain ownership changes before closing. In healthcare, the relevant territorial health authorities may be involved. Missing a required prior approval makes closing legally defective and can expose the buyer to regulatory sanction.
Step 5: Litigation and contingency mapping (weeks 3–5)
Colombian civil procedure rules require parties to ongoing litigation to report claims and their status. The due diligence workstream should request a full litigation schedule from the seller and independently verify open proceedings through searches of the relevant courts and the Superintendencia de Industria y Comercio (Superintendency of Industry and Commerce. The competition and consumer protection authority). Antitrust or consumer protection investigations that have not been disclosed can represent material exposure in the target.
The buyer's counsel should also verify the target's data protection compliance obligations under Colombia's data protection legislation. Consent records, data processing agreements, and registrations with the relevant data protection authority should be confirmed, particularly for targets that handle significant volumes of personal data.
To receive a tailored assessment of due diligence scope and sequencing for your Colombian acquisition, contact us at info@ferrazwhitmore.com.
Structuring the SPA: closing conditions and key protections for foreign buyers
The findings from due diligence feed directly into the structure of the share purchase agreement. Colombian commercial legislation permits considerable flexibility in SPA drafting. However, there are mandatory provisions and registration formalities that cannot be contracted away.
The transfer of shares in a Colombian sociedad anónima (corporation) or sociedad por acciones simplificada (simplified stock company, known as SAS) requires registration in the company's share register to be effective against third parties. Registration in the commercial registry at the Cámara de Comercio is also required for certain changes, including modifications to bylaws that may accompany the acquisition. Buyers who close on the basis of signed documentation alone, without completing registry formalities, have found that their ownership is vulnerable to challenge.
Closing conditions in a Colombian SPA typically include: receipt of required regulatory approvals, absence of material adverse change, accuracy of representations and warranties at closing. And. for transactions involving foreign investment. confirmation that the foreign exchange declaration has been filed or is ready for filing simultaneously with closing. The last condition is frequently underweighted by buyers. Failure to file the declaración de cambio within the applicable period can restrict the buyer's ability to repatriate dividends or sale proceeds in future.
Representations and warranties should be calibrated to the due diligence findings. Standard SPA representations in a Colombian context cover corporate existence and good standing, ownership and title to shares, financial statements accuracy, tax compliance, labour compliance, absence of undisclosed liabilities, and regulatory licence validity. Where due diligence has identified specific risks – for example, contractor reclassification exposure or a pending tax audit – targeted representations and specific indemnities are the preferred mechanism for allocating that risk contractually.
Escrow arrangements are commonly used in Colombian transactions to secure indemnity obligations for a defined post-closing period. Typical escrow periods range from twelve to thirty-six months, with the escrow amount sized to reflect the aggregate cap on the seller's indemnity exposure. Buyers should confirm that the escrow mechanics comply with Colombian currency regulations where the escrow is held offshore.
Foreign acquirers comparing the Colombian SPA process with transactions in other Latin American jurisdictions will find useful parallels and distinctions in our detailed guide to M&A due diligence in the United States. This covers comparable workstream structures under a common law regime.
Common errors by foreign buyers and how to avoid them
A consistent pattern emerges across Colombian transactions involving foreign acquirers. The errors are rarely about unfamiliarity with the substantive law. They arise from misapplied assumptions carried over from other jurisdictions.
Underestimating the labour workstream. Foreign buyers from common law jurisdictions are accustomed to employment being a secondary diligence item in asset-light businesses. In Colombia, even technology companies or professional services firms with relatively small headcounts can carry significant labour contingency if contractor reclassification risk has accumulated over years. The workstream should be scoped proportionally to the number of contractors, not just formal employees.
Treating the commercial registry as a secondary source. In Colombian transactions, the Cámara de Comercio certificate is a primary legal document. It governs what third parties can rely upon. Buyers who rely exclusively on internal company records without cross-referencing registry entries have closed transactions where undisclosed liens or prior corporate approvals created post-closing disputes.
Delaying foreign investment registration. The foreign exchange declaration is not a post-closing administrative formality. It is a legal prerequisite for the buyer's ability to exercise key economic rights in the target. Engaging with the foreign exchange registration process in parallel with due diligence – rather than after closing – is standard practice among experienced acquirers in the Colombian market.
Using an unadapted international SPA template. A standard US or English-law SPA does not map cleanly onto Colombian commercial legislation. Governing law clauses, indemnity structures, and dispute resolution provisions all require local law review. In particular, Colombian courts apply their own conflict-of-laws analysis when determining the enforceability of choice-of-law clauses in contracts where the target and its assets are located in Colombia.
Skipping environmental due diligence for industrial targets. Environmental liability in Colombia attaches to the operator of a licensed activity, regardless of corporate form. A buyer acquiring shares in a company that holds an environmental licence inherits any conditions, remediation obligations, or enforcement actions attached to that licence. Environmental workstreams are frequently omitted in mid-market deals and represent a material source of unpriced risk.
For a comprehensive view of the M&A transaction process from signing through to post-closing integration in Colombia. The firm's service overview of M&A transactions in Colombia sets out the full range of advisory support available to foreign acquirers.
Self-assessment checklist before initiating due diligence in Colombia
This checklist is designed to help foreign buyers confirm readiness before opening a data room and committing to an exclusivity period.
This due diligence process is applicable if:
- The target is a Colombian-domiciled entity and the transaction involves acquisition of equity interests (shares or cuotas)
- The buyer is a non-Colombian resident or entity subject to foreign investment registration requirements
- The target operates in a sector where regulatory approval or notification may be required for a change of control
- The transaction value or the target's scale warrants formal workstream structuring with local and international counsel
Before opening the data room, verify:
- Local Colombian counsel has been engaged and has received the transaction term sheet or heads of terms
- A data room index has been requested from the seller covering all five workstreams: corporate, tax, labour, regulatory, and litigation
- The foreign exchange registration process has been discussed with counsel and a timeline has been mapped
- Any sector-specific regulatory approvals have been identified and their lead times factored into the proposed closing schedule
- The SPA governing law and dispute resolution clauses have been reviewed for compatibility with Colombian mandatory rules
Decision framework – matching due diligence depth to scenario:
- Small, closely held operating company with no regulated activity: streamlined four-to-six week process; primary focus on corporate, tax, and labour workstreams
- Mid-market company with employees, contractors, and real property: full five-workstream process over six to ten weeks; environmental and litigation workstreams should be scoped in detail
- Target in a regulated sector (financial, telecom, healthcare, energy): regulatory workstream should begin before or concurrently with other workstreams; closing timeline must accommodate regulatory approval lead times, which can extend to several months
- Target with cross-border related-party transactions: transfer pricing review and foreign exchange compliance workstream to be added; engagement of specialist tax counsel is recommended
Frequently asked questions
Q: How long does M&A due diligence typically take in Colombia?
A: A standard due diligence process in Colombia runs between four and ten weeks, depending on the size and complexity of the target. Smaller closely held companies can be reviewed in four to six weeks. Targets with regulated activities, multiple subsidiaries, or significant real estate holdings often require eight to ten weeks or more.
Q: Is a share purchase agreement in Colombia subject to any mandatory local form requirements?
A: A common misconception is that an SPA in Colombia can follow any standard international template without local adaptation. In practice, Colombian commercial legislation imposes specific requirements on the transfer of equity interests, including registration with the relevant commercial registry. Failure to observe these formalities can render the transfer unenforceable against third parties.
Q: What are the main cost components of M&A due diligence in Colombia?
A: Costs include legal fees for local and international counsel, accounting and tax advisory fees, and regulatory filing costs. Engaging a lawyer in Colombia with cross-border M&A experience is a primary budget item for any foreign acquirer. Legal fees for a mid-market transaction typically run into the thousands to tens of thousands of US dollars, depending on scope. Government registration fees and notarial costs are additional and vary with the transaction value.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our team combines Portuguese civil law expertise with English common law tradition to deliver cross-border legal solutions in M&A transactions, including due diligence, SPA structuring, and post-closing integration for deals involving Colombian targets. As a law firm in Colombia and Iberian markets, we support international entrepreneurs, institutional investors, and in-house legal teams who require results-oriented counsel across multiple legal systems. Our M&A practice covers both civil law and common law regimes, and our Americas team has advised on commercial litigation, investment disputes, and cross-border contract enforcement across Latin American jurisdictions. The firm's Lisbon base provides direct access to EU regulatory rules, while our international network supports execution in Bogotá and across the region. To discuss your Colombian acquisition and how we can support your due diligence process, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.