Vendor governance means setting clear expectations for a provider and checking that it meets them. When your business operates in Mexico, that includes reviewing the employment and tax records behind the provider’s monthly invoice.
For nearshoring, placing business operations in a nearby country, this review requires some translation. U.S. executives need to understand what Mexican institutions do, which documents to request, and how those documents relate to the people supporting their business.
A monthly review gives those questions a regular place in the provider relationship. Start with the terminology. Then examine employee registration, payroll receipts, and the provider’s compliance status.
Which Mexican compliance terms should you understand first?
Familiar U.S. concepts can help explain the functions of Mexican institutions and employment obligations. These comparisons provide a starting point; Mexican rules govern the local requirements.
| Mexican Term | Meaning in Plain English | Familiar U.S. Reference |
|---|---|---|
| SAT — Servicio de Administración Tributaria | Mexico’s tax authority. It oversees corporate tax compliance and tax invoicing. | The Internal Revenue Service, or IRS. |
| IMSS — Instituto Mexicano del Seguro Social | Mexico’s social security institution. Its coverage includes medical care, disability, pensions, and maternity benefits. | Functions spanning Social Security, workers’ compensation, and healthcare. |
| PTU — Participación de los Trabajadores en las Utilidades | Mandatory annual employee profit sharing under applicable Mexican rules. | Employee profit sharing. |
PTU involves an annual distribution of 10% of net taxable profits—the baseline used for tax calculations under applicable rules. This percentage references the company’s profit-sharing allocation, not an individual employee’s salary.
Keep annual obligations separate from monthly vendor governance checks. PTU concerns annual profit sharing. The document checks below follow the monthly invoice cycle and focus on registration, payroll, and compliance opinions.
What should a monthly vendor governance review include?
Request three groups of evidence with each monthly billing cycle:
- Employee registration records and wage information from IMSS.
- Certified digital payroll receipts for the personnel included in the invoice.
- Positive compliance opinions from SAT, IMSS, and INFONAVIT, Mexico’s worker housing institution.
Each group answers a different question. Registration records show how the provider reports employees and their wages. Payroll receipts document compensation and deductions. Compliance opinions report the provider’s status with the issuing institutions.
Compare what the provider supplies with the employees and periods in its invoice. This checks the provider’s explanation against the records.
1. Do reported wages reflect employees’ actual compensation?
Start with the records supporting employee registration with IMSS. Request Avisos de Alta (employee registration notices) along with output files from SUA, the system used to calculate social security contributions.
Also ask about Salario Diario Integrado, an integrated daily wage measure that includes salary and applicable benefits. Ask the provider to explain how the reported wage relates to each assigned employee’s full compensation.
A daily wage figure and a monthly compensation amount use different measures. Your review needs a clear explanation connecting them. Ask how the provider calculated the reported amount and which compensation records support it.
The central question is whether the provider reports compensation fully and accurately. An employee registration record alone leaves that question open if you cannot understand the wage it contains.
This part of vendor governance helps identify reporting gaps that could trigger back-tax liabilities for prior periods. Request a clear explanation for any unexplained discrepancies found during your record comparison.
2. Do certified payroll receipts match the personnel being billed?
Next, request CFDI payroll receipts, Mexico’s official digital tax records for employee pay. The Spanish term Recibos de Nómina means payroll receipts.
The checklist calls for both XML and PDF versions. XML contains structured data that software can read; PDF provides a document people can read. Requesting both gives the reviewer access to the payroll data and its readable presentation.
Check for Timbrado Fiscal, the digital tax certification applied to the receipt. Think of it as the receipt’s certification mark within Mexico’s tax invoicing system.
The payroll record should document gross wages, ISR (income tax withheld from employees), and employee social security contributions. Each line item must be clearly itemized to verify proper withholding.
Then match those records to the personnel included in the provider’s invoice. Check the employees and pay periods they cover. A certified receipt for a different person or period does not support the payroll you are trying to review.
This directly impacts tax deductibility. Properly documented expenses reduce the net profit used to calculate corporate taxes. Matching the records supports that review. It also gives your team specific documents to examine when questions arise about how the provider handled payroll.
3. Does each institution report a positive compliance status?
Request an Opinión del Cumplimiento Positiva, an official letter reporting a positive assessment of compliance, from each of the three institutions: SAT, IMSS, and INFONAVIT.
Each institution issues its own opinion. A letter from SAT does not replace one from IMSS or INFONAVIT. Your monthly document request should therefore identify all three separately. Check the issuing institution, the provider identified, the document date, and the reported status. Obtain current opinions as part of the billing-cycle review rather than relying on documents collected during an earlier assessment.
These letters serve a different purpose from the employee records. A positive opinion reports the provider’s compliance status. Payroll receipts and registration records connect the review to particular employees and pay periods.
For vendor governance, examine the three groups together. Follow up on missing documents so each part of the review has the evidence it needs.
How do you make vendor governance a monthly routine?
Use the invoice cycle as the point for requesting and reviewing evidence.
This gives the provider a consistent expectation and gives your company a repeatable process.
- Request the three document groups with the monthly invoice.
- Confirm that the records identify the relevant provider, employees, and periods.
- Compare reported wage information with the compensation it should represent.
- Match certified payroll receipts to the personnel included in the bill.
- Check that SAT, IMSS, and INFONAVIT each report a current positive status.
- Ask the provider to explain missing documents or differences you cannot account for.
Keep a record of the questions and the provider’s responses. If an explanation leaves a gap, identify the document or calculation needed to resolve it. This makes follow-up specific and gives the next review a clear starting point.
The key to monthly payroll reviews is applying the same evidence requirements every cycle. A consistent process makes it easy to track what the provider supplied, what your team reviewed, and which questions remain open.
Make the evidence part of your provider relationship.
Before the next invoice cycle, establish which registration records, certified payroll receipts, and compliance opinions the provider must supply. Require them to explain how those records map directly to the employees supporting your business. Vendor governance becomes practical when both parties know what the monthly review requires. A document request, a comparison, and a clear explanation give your company a basis for assessing the provider’s compliance practices.
Enterprise-Grade security for nearshore teams
Learn More
