The file STPS wants to see.
For every vendor with personnel in Mexico, Vigía Legal maintains a live REPSE file: sixteen critical documents, twelve recommended optional documents, expiries monitored day by day and a log of every action, with who and when.
What STPS asks for when they arrive — ready and valid.
There's no single "REPSE manual": STPS combines obligations from LFT, IMSS, INFONAVIT and SAT. Vigía Legal consolidates the 16 critical documents that show up in every inspection and keeps them valid, with source and refresh cadence.
Plus 12 recommended optional documents (liability insurance, annual internal audit program, training matrix, etc.) configurable by contract or risk level.
Automatic capture, cross-validation, a log of every action.
Capture
The vendor uploads their PDF from the portal, one at a time or in a ZIP. Vigía classifies it, extracts folio, RFC and expiry, and checks it for signs of tampering.
Cross-check
Each document is read and cross-checked. Against the SAT: CFDI status, tax certificate and lists 69 and 69-B. Against the STPS Public Registry of Contractors: folio, expiry and registered activities, checked periodically. SAT, IMSS and INFONAVIT compliance opinions are validated automatically on upload. One issued before its period doesn't cover it.
Audit log
Every upload, validation and rejection goes into the audit log, with who and when. The log can't be edited or deleted from the application.
Green, amber, red — and seven shades in between.
Every vendor holds a real-time status calculated against configurable rules. The traffic light is the public face — behind it nine statuses cover the entire cycle from onboarding to offboarding.
Complete file, valid, no findings. Eligible for new POs and payments.
Document expiring in 30/14/7 days or a minor remediable item. Provisionally approved, soft hold.
Mandatory document missing or REPSE expired. Automatic AP hold. No new POs until resolved.
Eight cross-checks that STPS will also run.
REPSE compliance isn't reviewing documents one by one — it's cross-checking them against each other. Vigía runs eight automatic validations weekly to detect inconsistencies before the auditor does.
IMSS worksheets ↔ Payroll CFDI
IMSS employer-employee contribution worksheets vs. the period's payroll CFDIs
Payroll CFDI SDI ↔ IMSS/INFONAVIT SDI
Integrated daily salary on CFDI vs. reported to IMSS and INFONAVIT
Payroll CFDI ↔ ISR S&S return
Sum of payroll CFDIs vs. ISR return for salaries and wages
ISR S&S ↔ IMSS/INFONAVIT
Monthly ISR return vs. bipartite contributions to IMSS/INFONAVIT
Bank payments ↔ Returns
Bank receipts vs. amounts reported to authority
Positive opinions
SAT 32-D + IMSS + INFONAVIT — all three positive and valid
REPSE certificate validity
Expiry read from the certificate, watched every day
Employees ↔ Contract
Personnel reported in SISUB vs. personnel assigned to contract
Each cross-check runs weekly and is recorded in the audit log with result and delta. What doesn't match is escalated to the relevant role — Tax for fiscal, AP for payments, Legal for REPSE, HSE for personnel.
SISUB isn't a spreadsheet. It's every person with NSS and validity.
REPSE isn't fulfilled at the vendor level — it's fulfilled at the level of each reported worker. Vigía maintains a live record per NSS: name, assigned contract, hire date, IMSS status, DC-3 coverage, NOM-035 training validity. When STPS asks for "the personnel report for contract X during quarter Y", the signed PDF comes out in less than a minute.
Your rules, not ours.
Base REPSE is standard — the 16 critical documents are the same for everyone. But every organization has different policies: optional documentation by service category, risk levels, vendor segmentation, contract-specific requirements. Vigía exposes those rules in a configurable layer your legal team owns — no code changes.
By client / entity
Different rules per contracting entity. The same vendor may have different requirements at Pemex than at an IPP.
By category / service
High-risk services (heights, confined spaces) require specific DC-3, extra insurance, etc. Configurable without development.
By risk level
A/B/C segmentation with different review cadences and extra documents for high risk.
By contract
Over-rules at the individual contract level. Specific annexes required by particular negotiations.
Your vendor base against the STPS, kept current.
Assisted onboarding: we import your current vendor base and configure rules per entity and contract. Vigía checks each vendor against the STPS Public Registry of Contractors and keeps it current; from the vendor's page you can verify on the spot. If you turn it on, a vendor missing from the registry also has its payment held.