P.06The platform · Integrations

If REPSE lapses, the PO doesn't ship.

Your procurement system or ERP asks Vigía Legal before issuing a purchase order or releasing a payment. If the vendor is out of compliance, the answer is hold or rejected, with the reason, until the file is back in good standing.

vigialegal.mx / integrations / canvas
API REST · Webhooks · Layouts
Regulatory sources
  • REPSE
    STPS Registry · REPSE
    Public Registry of Contractors, checked periodically
  • SAT
    SAT
    CFDI, tax certificate, lists 69 and 69-B
  • IMSS
    IMSS opinion · SISUB
    Validated automatically on upload
  • INFON
    INFONAVIT opinion
    Validated automatically on upload
Vigía
Core
Every decision, logged
Your ERP and procurement
  • GATE
    Payment gate
    Your Coupa, Oracle, Ariba or SAP asks
  • HOOK
    Signed webhooks
    HMAC-SHA256 · within minutes
  • FILE
    File layouts
    POs in · payment out
  • S4
    SAP S/4HANA
    Service entry sheet · OData
Payment gate API · signed webhooks · file layoutsOne key per integration · scopes
01Ways to connect

Your ERP asks. Vigía Legal answers.

Payment gate API

REST

POST /api/v1/decisions/invoice · /po

Your Coupa, Oracle, Ariba or SAP asks before issuing the PO or releasing the payment. Vigía Legal answers approved, hold or rejected, with typed reasons.

Signed webhooks

HMAC-SHA256

X-Vigia-Signature

Your system learns within minutes that a vendor or an invoice changed status, without polling.

File layouts

Layout

Purchase orders in · payment out

Purchase orders come in by file or by API. The payment proposal goes out in your bank's layout.

Service entry sheet in SAP

OData

SAP S/4HANA

When a service record is approved, the service entry sheet is created in your SAP and the document number comes back to Vigía Legal. Set up during onboarding.

02How it connects

Scoped API keys, signed events, no data migration.

A

Keys with scopes

Each key declares what it can do: ask the payment gate, read vendor status, send invoices, load purchase orders. One key per integration; deactivating one leaves the others untouched.

B

Signed events

Vendor status changed, invoice on hold or released, stage changed, payment proposal exported, service record posted to the ERP. Each delivery is HMAC-SHA256 signed, with up to three attempts.

C

No migration

The vendor master and the purchase orders stay in your ERP. Vigía Legal receives what it needs to answer; it doesn't ask you to replace your procurement system.

Authentication
Bearer · one key per integration
Rate limit
600 calls / min per key
Vendor identity
Email sign-in link
Staff SSO
Google · Microsoft Entra ID · on request
03CFDI ↔ File ↔ AP

Payment is released when the file permits it.

The vendor's invoice reaches AP. Vigía Legal matches it against the SAT, the purchase order and the REPSE file for the period; the order comes in by file or by API. Your team sees "compliant" or the reason for the hold. An invoice on hold doesn't reach the payment proposal. See accounts payable →

Step 01

CFDI receipt

The CFDI 4.0 comes in through the portal or the API. Vigía Legal checks its status with the SAT and matches it with the purchase order it declares.

Step 02

REPSE validation

Checks the vendor at that moment: valid REPSE, positive compliance opinions, complete file for the period.

Step 03

Decision

Approved: it moves on to authorization. Hold: a reason that can be fixed. Rejected: it isn't paid. A Legal-approved exception with an expiry date releases the hold.

Step 04

Audit trail

Every invoice keeps its UUID, amount, decision, reason, who and when. The evidence downloads as a PDF or ZIP for the SAT or the STPS.

→Let's talk

Your quality environment first, production after.

Onboarding is done with your IT team: API key, signed webhook and, where it applies, the OData service-entry service. The API reference (OpenAPI) lives inside the application; to review it before signing, ask for it in the demo.