P.07The platform · Role-based views

One platform, six perspectives.

REPSE compliance touches six different areas within a mid-sized organization: Procurement, Accounts Payable, Tax/Fiscal, Legal/Compliance, HSE and Internal Audit. Each one needs to see different things, decide different things, export different reports. Vigía Legal exposes a specific view for each role on top of the same source of truth.

R.01Role

Procurement

Onboarding and vendor master

What they see
  • Vendor registration with rule assignment
  • REPSE status by contract and category
  • Vendor base with compliance scoring
  • Pre-PO release qualification
What they decide
  • Release new vendor
  • Suspend vendor for risk
  • Assign rules by category
What they export
  • Vendor × contract matrix
  • CSV by status / quarter
  • Onboarding report
R.02Role

Accounts Payable (AP)

Pay, hold or exception upon CFDI receipt

What they see
  • CFDI UUID linked to vendor's compliance file
  • REPSE status at payment moment
  • PO + description + amount
  • Legal-approved exceptions with validity
What they decide
  • Release payment / automatic hold
  • Request exception from Legal
  • Flag invoice as held
What they export
  • Invoices on hold / quarter
  • Active exceptions report
  • Audit log of released payments
R.03Role

Tax / Fiscal

Fiscal cross-validation and compliance opinions

What they see
  • SAT 32-D, IMSS, INFONAVIT opinions (validity)
  • Weekly fiscal cross-checks with delta
  • Payroll CFDI SDI vs. IMSS/INFONAVIT SDI
  • Bank payments vs. returns
What they decide
  • Accept / object inconsistencies
  • Request additional evidence
  • Generate report for external auditor
What they export
  • 8 fiscal cross-checks with delta
  • Expired / expiring opinions
  • Monthly CFO report
R.04Role

Legal / Compliance

REPSE, LFT Art. 15-A and exception approval

What they see
  • Valid REPSE certificates with STPS folio
  • Exceptions pending approval
  • Audit log with segregation of duties
  • STPS regulatory changes notified
What they decide
  • Approve / reject documented exception
  • Request external legal opinion
  • Validate or reject file documents
What they export
  • Per-invoice evidence (PDF and ZIP)
  • Approved exceptions with justification
  • Compliance dashboard
R.05Role

HSE

Reported personnel and site access validity

What they see
  • NSS, name and status of every reported worker
  • Valid DC-3, NOM-035 per employee
  • Vendor status (compliant / not)
  • Personnel assigned per contract and site
What they decide
  • Authorize / deny site access
  • Request training refresh
  • Report unregistered personnel
What they export
  • Valid personnel by site
  • DC-3 expiring
  • Quarterly HSE report
R.06Role

Internal Audit

Universal audit log and per-invoice evidence

What they see
  • Every system action with actor, date and detail
  • Retroactive report by quarter
  • An audit log that can't be edited or deleted from the application
  • Approved exceptions with approver chain
What they decide
  • Request additional evidence
  • Flag audit finding
  • Generate report for Committee
What they export
  • Filterable audit log (CSV / JSON)
  • Historical file by vendor
  • Findings report
01Segregation of duties

Whoever requests an exception cannot approve it.

Exceptions (authorizing payment to a non-compliant vendor due to operational contingency, for example) are auditable only when there's real segregation of duties. Vigía Legal applies SoD rules hardcoded in the state machine: the role requesting an exception can never be the one approving it.

Requests

Procurement or AP requests the exception with documented justification (reason, proposed validity, affected contract, amount).

Approves

Legal/Compliance reviews, checks against internal policies, approves or rejects. Records who, when, with what rationale.

Releases

If the exception turns into a payment, the audit log records it as a payment authorized under exception, with who approved it and which reasons were overridden.

→Let's talk

Show the view of each team in a single demo.

A 45-minute demo walking through the six views: Procurement opens the registry, AP releases a payment, Tax reviews the cross-checks, Legal reviews the file, HSE controls personnel, Audit exports the log. Request it at contacto@vigialegal.mx.