Procurement and Supplier Policy Mexico (Política de Compras y Proveedores)

A Procurement and Supplier Policy Mexico (Política de Compras y Proveedores) is a corporate governance document that establishes the rules, procedures, controls, and ethical standards governing how an organisation identifies, evaluates, selects, contracts with, and manages its suppliers (proveedores) and service providers (prestadores de servicios) — ensuring that purchasing decisions are made transparently, competitively, and in compliance with Mexican anti-corruption law, tax law, and anti-money laundering regulations.

The legal framework for procurement in Mexico derives from multiple regulatory sources depending on the type of organisation. For public sector entities — federal, state, and municipal government agencies and state-owned enterprises — procurement is governed by the Ley de Adquisiciones, Arrendamientos y Servicios del Sector Público (LAASSP, DOF 4 January 2000, as reformed) and the Ley de Obras Públicas y Servicios Relacionados con las Mismas (LOPSRM) for construction, both of which establish mandatory competitive bidding procedures (licitaciones públicas), contract award criteria, and transparency requirements. While the LAASSP directly governs only public sector entities, Article 1 LAASSP establishes principles of efficiency, effectiveness, economy, transparency, and equality that represent best-practice procurement standards applicable to private sector organisations as well.

For private sector organisations, procurement does not have a single mandatory statutory framework — but several laws create important obligations that must be integrated into a Procurement Policy. The Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (LFPIORPI) Article 17 imposes KYC (Know Your Customer/Supplier) obligations for specified high-risk procurement activities including real estate, vehicle purchases, and construction services above monetary thresholds. The Ley General de Responsabilidades Administrativas (LGRA) Article 14 prohibits private companies from participating in bid-rigging (colusión en licitaciones) or using corrupt intermediaries in their purchasing processes. The Código Fiscal de la Federación (CFF) Article 69-B imposes due diligence obligations on buyers to verify that suppliers are not on the SAT's blacklist of companies issuing false invoices (EFOS) before approving payment.

The Comisión Federal de Competencia Económica (COFECE) under the Ley Federal de Competencia Económica (LFCE) Article 53 prohibits bid-rigging (colusión en licitaciones) — coordination among suppliers competing for the same contract — and also monitors buyer-side conduct that could constitute buyer cartels or market power abuse. Private companies that participate in or facilitate bid-rigging among their suppliers may face COFECE investigation and sanctions.

For companies operating in regulated sectors, sector-specific procurement obligations apply: entities regulated by the Comisión Nacional Bancaria y de Valores (CNBV) must follow CNBV guidelines on technology and outsourcing procurement; healthcare companies regulated by the Comisión Federal para la Protección contra Riesgos Sanitarios (COFEPRIS) must observe COFEPRIS regulations on procurement of medical devices and pharmaceuticals; and energy companies regulated by the Comisión Nacional de Hidrocarburos (CNH) and Comisión Reguladora de Energía (CRE) must comply with Pemex and CFE supply chain transparency requirements under the Ley de Petróleos Mexicanos and the Ley de la Comisión Federal de Electricidad.

Mexico's accession to the Comprehensive and Progressive Agreement for Trans-Pacific Partnership (CPTPP) and the United States-Mexico-Canada Agreement (T-MEC/USMCA) includes government procurement chapters that promote transparency, non-discrimination, and fair competition in public procurement — principles that leading Mexican companies voluntarily adopt for their own private procurement as part of corporate governance best practice and supply chain due diligence.

A Procurement and Supplier Policy Mexico is needed by any organisation that regularly purchases goods, services, or works from external suppliers — establishing the controls that prevent corruption, bid-rigging, and fiscal fraud in the purchasing process under the Ley General de Responsabilidades Administrativas (LGRA) and the Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (LFPIORPI) framework.

Public sector entities — federal agencies, state governments, municipalities, and state-owned enterprises — must follow the LAASSP and LOPSRM for all procurement, with mandatory licitación pública for contracts above specified thresholds and mandatory use of the CompraNet platform (Sistema Electrónico de Información Pública Gubernamental sobre Adquisiciones, Arrendamientos, Servicios y Obras Públicas) administered by the Secretaría de la Función Pública (SFP).

Private sector companies with significant purchasing volumes — manufacturers (industria), retailers (comercio al por mayor y menudeo), service companies, and construction companies — need a Procurement Policy to standardise their purchasing process, reduce maverick spending (compras no autorizadas), implement competitive bidding for major purchases, and document the business justification for supplier selection in case of LGRA or SAT audit scrutiny.

Companies that supply to the public sector — government contractors under LAASSP — must ensure their own supply chain is clean: sub-contractors and suppliers in the chain must be verified against LGRA registers of sanctioned parties and the SAT Art. 69-B blacklist, because using a blacklisted supplier in a public contract can result in disqualification under LAASSP and LGRA sanctions.

Organisations subject to LFPIORPI Article 17 — including construction companies, real estate developers, vehicle dealers, and professional service firms — need a Procurement Policy that incorporates the mandatory KYC/beneficial owner identification requirements for high-value purchases triggering LFPIORPI reporting obligations to the UIF.

Multinational company subsidiaries and joint ventures in Mexico need a local Procurement Policy that translates global procurement standards into the Mexican regulatory context — ensuring CFDI documentation requirements, SAT blacklist verification, LGRA anti-corruption compliance, and LFPIORPI KYC procedures are embedded in the local purchasing process.

Under LAASSP art. 1 principles and LGRA art. 14 anti-corruption requirements, any Mexican company that seeks to demonstrate transparent and ethical procurement practices — for purposes of SFP Programa de Integridad certification, investor due diligence, or audit defence — should maintain a written, implemented Procurement Policy.

An effective Procurement and Supplier Policy Mexico compliant with the Ley de Adquisiciones, Arrendamientos y Servicios del Sector Público (LAASSP) principles, the Ley General de Responsabilidades Administrativas (LGRA), the Código Fiscal de la Federación (CFF), and the Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (LFPIORPI) must contain the following essential elements:

Procurement Authority Levels: A delegation of authority matrix (matriz de delegación de autoridad) specifying who in the organisation is authorised to approve purchases at each spending level — for example: purchases up to $50,000 MXN approved by department manager; $50,001 to $500,000 MXN approved by Director of Finance; above $500,000 MXN approved by Director General or board of directors. The authority matrix prevents maverick spending (compras no autorizadas) and creates a documented audit trail for all purchasing decisions.

Competitive Bidding Requirements: Minimum competitive quotation requirements by purchase value: informal quotation (cotización informal) for purchases under $25,000 MXN — at least two verbal or email quotes; formal written competitive bidding (concurso formal) for purchases $25,000 to $500,000 MXN — at least three written quotes with identical specifications; formal tender process (licitación simplificada) for purchases above $500,000 MXN — structured RFP (Request for Proposal) process with written evaluation criteria published to all bidders before submission. Exceptions to competitive bidding — for sole-source situations, emergency purchases, or framework agreement orders — must be documented with written justification approved by the relevant authority level.

Supplier Qualification and Registration: A supplier registration process (registro de proveedores) requiring all suppliers to provide: RFC and SAT verification of tax status; Registro Público de Comercio registration for companies (personas morales); identification of the legal representative (representante legal) and their authority to contract; bank account details in the supplier's name for payment (CLABE interbancaria); IMSS and INFONAVIT compliance certificates (Opinión de Cumplimiento) under Ley del Seguro Social Article 15 and Ley del INFONAVIT Article 29; and LFPDPPP-compliant data protection acknowledgement.

SAT Blacklist Verification: Mandatory verification of every supplier's RFC against the SAT's Art. 69-B lista definitiva before approving payment of any invoice — to prevent acquisition of CFDIs from EFOS (Empresas que Facturan Operaciones Simuladas) that would disqualify the expense as deductible under CFF Article 69-B paragraph 8 and expose the company to SAT sanctions. Verification must be documented in the payment approval workflow.

LGRA Sanctioned Parties Check: Verification of suppliers against the SFP's Registro de Servidores Públicos Sancionados and the list of companies inhabilitadas para contratar con el Estado (debarred from government contracting) under LGRA Article 25 — essential for companies that sell to the government and need to avoid sub-contractor taint.

Beneficial Owner Identification (LFPIORPI): For purchases of goods or services in categories designated as actividades vulnerables under LFPIORPI Article 17 — including real estate, vehicles, construction services, and precious materials — mandatory identification and verification of the supplier's beneficial owner (beneficiario controlador) per CFF Articles 32-B Ter and 32-B Quater before completing the transaction.

Conflict of Interest Declaration: A mandatory declaration requirement for all procurement participants — purchasing officers, committee members, and approving managers — to disclose any personal, financial, or family relationship with any supplier bidding for the contract, before participating in the evaluation or approval. Conflicts must be disclosed to the Compliance Officer who will determine appropriate recusal.

Supplier Contracts and CFDI Requirements: All supplier relationships above a minimum threshold must be governed by a written contract (contrato de suministro, servicios, u obras) specifying: goods/services description, price in MXN, payment terms, CFDI 4.0 delivery requirements, confidentiality obligations, anti-corruption representations and warranties, AML compliance obligations, termination rights, and jurisdiction (Mexican courts, applicable law). All payments must be supported by a valid CFDI 4.0 in the company's name under CFF Article 29.

Anti-Corruption Supplier Representations: All suppliers must contractually represent that: they will not offer or pay any bribe or improper benefit to the company's employees or government officials in connection with the contract; they comply with the LGRA, the LGSNA, and applicable anti-corruption law; they are not on any government debarment list; and they consent to audit of their compliance with contract anti-corruption terms.

Forms-legal.com provides this Procurement and Supplier Policy Mexico template as a practical starting point. Government contractors, regulated entities, and companies with complex supply chains should have their procurement policy reviewed by a Licenciado en Derecho specialised in contratación pública, cumplimiento normativo, or comercio exterior to confirm alignment with LAASSP, LGRA, LFPIORPI, and applicable sector regulations.