Why Verifying Your Providers Protects Your Business

Under Mexico's outsourcing reform, the legal responsibility for compliance does not fall solely on the specialized service provider — it extends to the beneficiary company (contratante) that hires those services. If you engage a provider that lacks valid REPSE registration, your company can face:

  • Loss of tax deductibility for payments made to that provider.
  • Joint liability (responsabilidad solidaria) for workers' unpaid wages and social security contributions.
  • Regulatory sanctions from STPS for contracting with unregistered entities.
  • IVA credit disqualification on invoices from non-compliant providers.

Verification is therefore not just a procedural formality — it is a core risk management activity.

Step 1: Consult the REPSE Public Registry

The STPS maintains a publicly accessible registry that allows any company or individual to verify whether a service provider holds a valid REPSE registration. You can search the registry at the official STPS portal using the provider's:

  • RFC (tax ID)
  • Company name (razón social)
  • REPSE folio number (if the provider has already shared it with you)

The registry will confirm whether registration is active, expired, or suspended. Make this check a standard part of your vendor onboarding process.

Step 2: Request Key Compliance Documents

Beyond the registry check, you should formally request the following documents from any specialized service provider before signing a contract:

  1. REPSE registration certificate — showing the folio number and expiration date.
  2. Positive SAT compliance opinion (Opinión de Cumplimiento SAT) — dated within the last 30 days.
  3. Positive IMSS compliance opinion — confirming current social security obligations are met.
  4. Positive INFONAVIT compliance opinion — if the provider has workers with INFONAVIT obligations.
  5. Constitutive Act (Acta Constitutiva) — to verify the provider's corporate purpose aligns with the services being contracted.

Step 3: Verify the Contract Includes Required Elements

Once you have confirmed the provider's REPSE status, ensure your service agreement includes all legally required elements:

  • The provider's REPSE folio number.
  • A clear description of the specialized services or work to be performed.
  • The approximate number of workers that will be involved.
  • The location(s) where services will be carried out.
  • A clause requiring the provider to deliver monthly compliance reports to your company.

Step 4: Establish a Monthly Compliance Review Process

Your obligations do not end when the contract is signed. You must implement an ongoing process to receive and review monthly compliance reports from each of your specialized service providers. These reports should include:

  • A list of workers assigned to your projects.
  • Proof of IMSS contribution payments for those workers (e.g., SUA payment receipts).
  • Updated compliance opinions if previously issued ones have expired.

Retain all received reports in an organized file. These records are your primary defense in the event of an audit or a worker claim.

Step 5: Set Up REPSE Renewal Alerts

REPSE registrations expire every three years. A provider whose registration lapses mid-contract is in violation — and so is the client company that continues to engage them. To prevent this:

  • Record the expiration date of each provider's REPSE folio in your vendor management system.
  • Set automated alerts at 90 and 30 days before expiration.
  • Contact providers proactively to confirm they have initiated the renewal process.

Building an Internal REPSE Compliance Process

For companies with multiple specialized service providers, managing compliance manually is impractical. Consider these structural improvements:

Centralize Vendor Compliance Records

Maintain a dedicated folder or system for each provider containing all compliance documents, contract copies, and monthly reports. Many companies use shared drives or contract management software for this purpose.

Designate a Compliance Owner

Assign a specific person in HR, Legal, or Finance to own the REPSE compliance process — including monthly document collection, registry verification, and renewal tracking.

Include REPSE Compliance in Procurement Criteria

Make valid REPSE registration a prerequisite for any new specialized service provider before procurement or legal will approve an engagement.

Red Flags to Watch For

Be alert to these warning signs when evaluating a specialized service provider:

  • Reluctance to share REPSE folio number or compliance opinions.
  • Services that appear to mirror your own core corporate activity (which would not qualify as "specialized").
  • Very low pricing that may indicate the provider is not fulfilling IMSS obligations.
  • Workers who appear to be directed and managed by your own supervisors rather than the provider's.