Compliance

Colombian regulatory compliance, built into every message

More than 23 years running messaging in Colombia have made us a reference in the sector’s regulation. We make sure your communications comply with the CRC, the SIC and the Financial Superintendence, so you can focus on your business.

Our compliance framework

Excluded Numbers Registry (RNE)

The RNE, managed by the Communications Regulation Commission, lists the numbers of people who do not want to receive commercial or advertising messages. Our platform automatically excludes those numbers before every campaign and keeps a full audit trail.

Law 2300 of 2023

Known as the “Dejen de fregar” (“Stop bothering”) law, it regulates contact with consumers for collections and advertising: only Monday to Friday from 7:00 am to 7:00 pm and Saturdays from 8:00 am to 3:00 pm, never on Sundays or public holidays, and with frequency limits. We schedule and hold sends to respect those windows.

Data protection (Law 1581 of 2012)

We process personal data under Law 1581 of 2012 and Decree 1074 of 2015, supervised by the Superintendence of Industry and Commerce. We act as Data Processor for our customers’ data and help them manage consent and opt-outs. For collections we also apply the principles of Law 1266 of 2008.

CRC regulation

We operate as a registered Content and Application Provider (PCA) and manage short codes before the CRC, under CRC Resolution 5050 of 2016 and its amendments. We take an active part in the industry’s regulatory consultations, including measures to curb cyber fraud through mobile services.

ISO/IEC 27001:2022

Our ISMS is certified under ISO/IEC 27001:2022, ensuring the confidentiality, integrity and availability of our customers’ and their users’ information.

Financial Superintendence

We meet the minimum information security and quality requirements of Colombian Financial Superintendence Circular 052, required of vendors to supervised entities.

CRC Resolution 8308 of 2026

We align with the measures against call and text fraud: registered senders, authorized short codes and approved message formats. Under CRC Circular 181 of 2026, we run quarterly educational campaigns for users (the first in the fourth quarter of 2026), half-yearly internal training and compliance reporting to the CRC.

Fraud prevention

We analyze links, domains and patterns before delivering each message. Suspicious messages are blocked and reported to the authorities along with the sender’s data. With dedicated short codes and verified RCS senders, your customers can recognize your legitimate messages.

Compliance at every stage of the message

  1. 1

    Before sending

    • Number format validation
    • RNE screening
    • Send-window checks
    • Anti-fraud analysis of content and links
  2. 2

    During sending

    • Separate routes for OTP and bulk traffic
    • Redundant connections to every operator
    • Short codes and verified senders
  3. 3

    After sending

    • Per-message delivery reports
    • Campaign traceability and auditing
    • Opt-out and data subject request handling

Documents and policies

The information on this page is general and does not constitute legal advice. Regulations change; our team keeps you up to date.

Ready to communicate better with your customers?

Tell us about your needs and we’ll design the right solution with you, backed by more than 23 years of experience in Colombia.