SOFIPO Levels I — IV

For SOFIPOs that need to modernize without throwing out the core.

Popular Financial Entities supervised by CNBV, with a federation, a depositor protection fund and a regulatory calendar that does not forgive. We design the technology layer that sits on top of your current core — without replacing it — to automate SITI, field KYC, distributed collections and auditable AML training.

Request a DTX Audit for your SOFIPO

Your SOFIPO in 2026

The SOFIPO operates under the most demanding framework in the popular sector. Capital, corporate governance, federation, reporting and depositor protection — five fronts active at the same time.

Unlike the SOFOM, which registers with CONDUSEF and is subject to CNBV only in AML matters, the SOFIPO operates under an integral framework. Regulatory pressure keeps rising: the FATF evaluation cycle on Mexico, new reporting requirements and more frequent inspections. Operating manually is no longer an option.

12 — 18m

Typical CNBV authorization timeline
2.6M UDIs

Minimum capital Level I
4

Operating levels (I to IV)
9+

Recurring regulatory reports

Sound familiar?

The five pain points we see in every SOFIPO that arrives at a DTX Audit.

01
Monthly SITI and 24-hour reports built by hand.

RO, RI, OIP and 24-hour reports depend on the strictest calendar in the sector. Every error or omission triggers direct regulatory consequences, from observation to fine.
02
Core system over 10 years old, hard to extract from.

Pulling information in regulatory format takes person-weeks every close. External auditors find inconsistencies between core, accounting and regulatory reports.
03
Collections scattered across branches, agents and door-to-door.

Paper receipts, slow reconciliation, fragmented traceability. When the risk committee asks for IMOR by region, no one has the exact answer.
04
KYC in the field, file on paper.

Client onboarding with ID card and physical evidence; digitization pending, costly and often partial. The CNBV visit reviews files that are incomplete.
05
AML training distributed without individual evidence.

Teams across multiple regions that require documented and auditable AML training, with individual evidence per employee. The monthly R28 report becomes a recurring pain.

How we help, level by level

The 3-level method, adapted to SOFIPO.

Origination for SOFIPO

Capture, popular savings and credit

Digital capture of savers and credit applicants. KYC onboarding in the field and at the branch with an electronic file. Product design by authorized level: popular savings, microcredit, consumer credit, factoring, leasing.

Digital capture

Funnel for popular savings and by authorized credit product, with traceability by channel and region.

02 · PLD

Field KYC for SOFIPO

Mobile capture with INE/CURP/RENAPO validation, biometrics, client signature and unified electronic file.

Calibrated underwriting

Scoring for microcredit and consumer, assisted underwriting for higher-ticket credit.

Credit committee

Packet built from file data, generated proposal, documented decision for internal audit review.

Operation for SOFIPO

Contract, disbursement and registration

Electronic contracts per product, disbursement integrated with accounting under CNBV criteria, automated reconciliation against the core. Collections orchestrated via WhatsApp, SMS and calls with a queryable audit trail.

Electronic contracts

Automated generation by authorized product with advanced electronic signature.

Disbursement and booking

SPEI integration and automated core reconciliation, aligned with CNBV accounting criteria.

Distributed collections

Multi-channel orchestration with audit trail and core reconciliation across regions and agents.

Administration for SOFIPO

Portfolio, SITI and monitoring

Portfolio staging, R01/R04/R12/R13/R28 reporting automated from the live portfolio. SITI reports on relevant, unusual and 24-hour operations with full audit trail. AML training with auditable individual evidence.

Portfolio staging

By stage, with methodology adapted to your credit product and CNBV criteria.

CNBV reporting

R01, R04, R12, R13, R28 generated automatically from the live portfolio.

10 · PLD

SITI RO/RI/24h

Pre-populated and auto-triggered with full evidence trail, ready for UIF submission.

11 · PLD

Auditable training

Individual evidence per employee, R28 with no surprises at month-end.

DTX services for SOFIPO

Three featured services for SOFIPO.

DTX Audit gives you the map, DTX Upgrade modernizes without replacing the core, DTX Compliance automates SITI and AML monitoring.

Typical result in 90 days

SOFIPO Level III · Microcredit and popular savings

"We went from assembling SITI reports by brute force each month to having the file ready with full audit trail for compliance officer review. The CNBV visit closed without substantive observations." — Operations director

Typical results: -85% hours in generating and validating monthly SITI reports · +30% productivity of the compliance team without adding headcount · 0 substantive findings in the CNBV visit after deployment · Cleaner external audit with fewer inconsistencies.

Leer caso completo

SOFIPO frequently asked questions

What SOFIPO executives ask us most.

Which SOFIPO levels do you serve?

We work with SOFIPOs Levels I to IV. The DTX layer is calibrated to volume, authorized products and operational geography. For SOFIPOs in formation or moving up a level we design the technology architecture to support the next stage.

Do we have to replace our core?

No. The DTX approach is layered on top of the existing core — proprietary or licensed — and adds intelligence, automation and compliance layers. Replacing the core of an operating SOFIPO is an 18–24 month project with high regulatory risk during migration.

How do you handle SITI and 24-hour reports?

DTX Compliance ingests core events, evaluates them against regulatory thresholds and generates the SITI file with a complete audit trail. The 24-hour reports trigger automatically when the criterion is met, with evidence and traceability for the compliance officer to review before submission to UIF.

Do you work with our federation?

Yes. Auxiliary supervision by the federation is part of the SOFIPO regime. Our implementation includes the documentation, review cadence and evidence format each recognized federation requires.

How long does a typical implementation take?

A DTX Launch or Upgrade in SOFIPO takes between 2 and 6 months, depending on the state of the current core and the authorized products. The first step is the DTX Audit — 45 complimentary minutes with a senior consultant and an executive report with the 90-day plan.

Your SOFIPO deserves architecture, not patches.

45 minutes with a senior consultant. Executive report with maturity scoring of your SOFIPO, sector benchmark and 90-day plan. No cost, no commitment.

Request a DTX Audit Pre-screened for SOFIPO Levels I — IV