Incorporating a SAS in Colombia: 13 steps to leave it up and running

The essentials before you act

Incorporating a SAS (sociedad por acciones simplificada, Colombia's simplified stock corporation) in Colombia is much more than filling out a form at the Cámara de Comercio (the chamber of commerce, which keeps Colombia's commercial registry). The difference between a company that truly works and a certificate filed away lies in what happens before and after the paperwork: the decisions about ownership, governance, assets, cash, permits and the beneficial ownership registry.

This guide walks through the 13 steps that leave the company genuinely up and running, from defining the business to closing out the first 90 days. Each step cites the rule that supports it, the doctrine of the Superintendencia de Sociedades where it adds value and, where there is real risk, says so with names and figures.

Official resources

A map of links for actually carrying out the incorporation, not just understanding it

A guide that is genuinely useful must take the reader to the right place when it is time to act. Before starting the steps, it helps to know the portals that make each procedure possible: the commercial registry, tax identity, trademark protection, personal data and sector permits.

• VUE — Ventanilla Única Empresarial (the single business window): the official entry point for setting up a business as an individual or as a legal entity, including a SAS, according to the city and the corresponding chamber.
• Online SAS incorporation at the CCB: the Cámara de Comercio de Bogotá route for an online SAS, with warnings about template versus customized bylaws.
• Name duplication (homonimia) in RUES: a search to check whether the company name may clash with company names already registered.
• RUT registration and updating (DIAN): the tax basis for the NIT, tax responsibilities, economic activity and tax data.
• Beneficial ownership registry — RUB (DIAN): identification criteria and reporting obligation for legal entities (art. 631-5 of the Estatuto Tributario, Ley 2155 de 2021).
• Electronic invoicing enablement (DIAN): the route for the electronic invoicer: software, testing and operation.
• Trademark registration before the SIC / SIPI: the institutional page and the operational portal for searches, applications and tracking of industrial property.
• RNBD — SIC: Registro Nacional de Bases de Datos (the national database registry) for personal data controllers.
• RUP and SECOP — Colombia Compra: Registro Único de Proponentes (the bidders' registry) and public procurement platforms when the SAS aims for government contracts.
• VUE — INVIMA: registration and certification of regulated products (food, cosmetics, medicines, cleaning products).
• SAGRILAFT / PTEE — Supersociedades: resolutions and corporate compliance materials for money laundering and corruption risks.

Step 01

Before incorporating a SAS in Colombia: decisions that change the whole structure

Before incorporating a SAS in Colombia, the conversation should start with business decisions, not with form fields. If these points are settled from the outset, the incorporation document, the bylaws, the shareholders' agreement and the later procedures will hang together. If they are put off, each one becomes a source of future conflict. If you want to review them one by one, see the 9 decisions worth taking before signing.

Step 02

Choose your route according to the type of founder

Not everyone should read this guide with the same priorities. The type of founder determines which steps are critical and which can be simplified. Use these profiles as a filter before working through the 13 steps. If you currently invoice in your own name, review first when it makes sense to move from operating as an individual to a SAS.

Step 03

Define the business the SAS will actually support

Before talking about forms, define what company will actually exist. The first common mistake is to create a company with a broad corporate purpose, an attractive name and a distribution of shares, but without having defined how it will make money, which assets will be critical and who will make decisions. That omission goes unnoticed on registration day; it shows up when it is time to open a bank account, issue invoices, sign contracts, take in investment or explain the business to a corporate client.

At this stage it is worth writing on a single page what the company will sell or provide over the next 18 months, who the real client will be, what sales channel it will use, what permits could block operations and which assets will be indispensable. If the activity is going to change quickly, the bylaws must leave room; if the business is regulated, that flexibility must be combined with permits.

Separating three planes from the outset — ownership of shares, work inside the company and management — keeps everything from being mixed together under a single role. The minimum evidence is a short business-model document, a list of activities, an identification of key assets and an initial risk matrix. An abstract corporate purpose does not replace the strategic conversation. That document guides the bylaws, the CIIU code (Colombia's economic-activity classification), the RUT, contracts and permits, and it keeps the lawyer, the accountant and the shareholders from working on different assumptions.

Step 04

Define shareholders, percentages, contributions and the work expected

The distribution of shares must line up with economic reality. Shares create stable rights: voting, profits, information and a share in a future sale. If a shareholder receives shares for a promised contribution but the contribution is neither described nor measured, it will later be difficult to enforce performance or adjust the stake.

When there are shareholders contributing money, work, clients, a trademark, software or business contacts, it is worth translating each contribution into verifiable obligations. The SAS allows a great deal of contractual architecture through art. 10 (classes of shares) and art. 24 (shareholders' agreements), but it has to be designed before the conflict appears. A table listing each shareholder with the initial contribution, the future contribution, the operating role, the expected time commitment, the stake, special rights and the consequences of default is the starting point.

The evidence lies in supporting documents for contributions, receipts, assignment agreements, minutes and the cap table. If there are contributions in kind, describe them precisely. If founders are contributing work, define milestones and consequences. If money is involved, keep the bank trail. Handing over definitive shares in exchange for vague promises of work or contacts is the mistake this step avoids.

Step 05

Review the name, trademark, domain, activity and outward signals

The company name is not the same thing as the trademark. Nor is it enough to buy a domain or open social media accounts. The identity must be usable, protectable and provable. When incorporating a SAS in Colombia, the homonimia check is usually run for the company name, but the commercial risk often lies elsewhere: the trademark the public will see, the domain, the social media accounts, the logo, the software and the database. A company can exist under an available name and still operate under a trademark that infringes third-party rights or that is held in the name of an individual.

The economic activity chosen also calls for judgment: the CIIU code affects the RUT, tax responsibilities, banks, clients, invoicing, reports and sometimes permits. If the company is going to sell several services or products, document the main activity and the secondary ones on the basis of the actual operation, not on what looks most convenient on the form.

If the project already has a trademark, logo, software or content created before the SAS existed, prepare an assignment or a license so the company can use it without depending informally on the founder. Keep a screenshot of the homonimia check, a preliminary trademark search in SIPI, proof of domain ownership and the assignment or license documents where applicable. Creating the SAS and later discovering that the key trademark belongs to a shareholder, supplier, competitor or third party is the mistake this step avoids.

Step 06

Design bylaws that work for running the company, not just for registering it

The bylaws are the basic architecture of the SAS. Ley 1258/2008 gives it a broad freedom in the bylaws (art. 38): several prohibitions in the Código de Comercio do not apply to the SAS, which opens the door to rules that would not be possible in a traditional company. That freedom is valuable when it is used deliberately: term, corporate purpose, capital, classes of shares, management, legal representative, shareholders' meeting, quorum, majorities, transfer restrictions, dispute resolution and signing authority can all be adapted to the actual business.

The most sensitive point is usually the balance between agility and control. A legal representative needs room to operate (art. 26), but should not be able to take on debt for the company, sell significant assets, contract with relatives, open credit lines or change strategic relationships without authorization when those acts can affect shareholders or investors. Unlimited authority looks convenient until the day it is used for something the shareholders would never have approved.

The bylaws should cover the issuance of shares, transfers, approval of significant acts, remote meetings, minutes, signatures, alternates, internal reports and thresholds by amount. If there are investors or passive shareholders, it is worth reviewing special rights of information, veto or authorization over sensitive decisions. Generic bylaws may register the company, but they will not necessarily govern it. Using bare-minimum bylaws and letting everything rest on WhatsApp conversations or emails with no corporate force is the mistake this step avoids.

Step 07

Prepare a shareholders' agreement if there is more than one significant interest

A shareholders' agreement is not only for large companies. It is the tool that brings order to exit, information, deadlock, investment, sale and the conduct of shareholders. Art. 24 of Ley 1258/2008 makes it possible to agree more specific rules on staying in the company, time commitment, confidentiality, non-competition, intellectual property, rights of first refusal, tag-along, drag-along, deadlock resolution, reports, dividends and the admission of new investors, for a term of up to ten years, renewable.

To prepare the agreement, it is worth holding a specific meeting to talk about exit: resignation, default, death, divorce, sale to third parties, deadlock and incapacity. And defining what minimum information each shareholder will receive monthly or quarterly: cash, sales, contracts, debts, taxes, risks, filings and decisions that require a vote. Waiting until there is a conflict to negotiate exit rules — when each side is already negotiating out of fear or pressure — is the mistake this step avoids.

Step 08

File the incorporation with the VUE or the Cámara de Comercio

Registration turns the design into a legal entity. Under art. 5 of Ley 1258/2008, a SAS is incorporated by a private document registered in the Registro Mercantil of the Cámara de Comercio for the company's domicile; art. 2 confirms that it acquires its own legal personality from that moment. The filing must reflect what was decided in the earlier steps, not simplify it to the point of losing what matters.

Before filing, check full names, identification numbers, address, notification email, activities, capital, shares, acceptance of appointments and powers. A small error can lead to rejections or inconsistencies that later carry over into the RUT, the bank, invoicing and contracts. Subscribed capital must be paid in within a maximum of two years (art. 9); setting out that plan from the start avoids defaults.

Keep the filing receipts, the payment receipts, the signed documents, the acceptance of appointments, the certificate issued and the correspondence with the chamber. Do not delegate the procedure without reviewing its content: the fact that someone can fill in forms does not mean they have understood the corporate structure the company needs. Turning a complex corporate decision into a form filled in quickly, with no final check by the shareholders or the legal representative, is the mistake this step avoids.

Step 09

Activate the RUT, the NIT and tax responsibilities with judgment

A registered SAS is still not ready to operate if it has no tax identification, no clear tax responsibilities and no consistent data. The RUT identifies the company before the DIAN and gathers information on its activity, its responsibilities and its data. If it is badly put together, the company may have trouble invoicing, opening a bank account, contracting with clients or filing its obligations.

Activation must line up with the business model. A professional services company, a distributor, a business with regulated products, a firm that will contract with the State and a company that will receive foreign investment are not the same thing. That is why it is worth reviewing the economic activity, the tax responsibilities and the notification data before using the company commercially.

Decide who will be internally responsible for updating the data when the address, the activity, the legal representative, the obligations, the beneficial owners or the contact information change. Keep the RUT up to date, along with proof of filings, responsibilities and supporting documents for any changes. Treating the RUT and tax responsibilities as an accountant's errand, disconnected from contracts, banks, invoicing and clients, is the mistake this step avoids.

Step 10

Report beneficial owners and document actual control

The beneficial owner is not a formality. It is the way to explain who controls or benefits from the company when the DIAN, banks or clients ask. The Registro Único de Beneficiarios Finales (RUB), created by art. 631-5 of the Estatuto Tributario (Ley 2155 de 2021) and Resolución DIAN 000164 de 2021, requires looking beyond the certificate of existence: the central question is who, as an individual, holds a significant stake in, control over or benefit from the SAS.

In simple structures it may be obvious; in family businesses, corporate shareholders, foreign investors or control agreements, more analysis is needed. The company should keep an ownership and control chart, supporting documents for the stakes held, documents explaining special rights and one person responsible for keeping them updated. Answering banks or clients from memory, with no clear supporting documents on who controls the company, is the mistake this step avoids.

Step 11

Enable invoicing, a bank account and cash rules

The separation of assets is proved in day-to-day operations. A SAS can exist legally and still operate as an informal business if sales go into personal accounts, expenses are paid without supporting documents, or the shareholders use the company's cash as household cash. That disorder affects the accounts, taxes, banks, investors and the evidence available in a dispute. Art. 42 of Ley 1258/2008 allows the company's legal personality to be disregarded where there is fraud or harm to third parties; mixing cash is the first warning sign.

Electronic invoicing enablement, the business bank account and a basic cash policy are part of the same system. The company must know who can approve payments, which expenses are reimbursable, how shareholder loans are documented, when profits are distributed and how customer advances are handled. If urgency meant payments were made from personal accounts before activation, document whether they were contributions, loans or reimbursements. Assuming that limited liability works well even when the cash is mixed and there are no documents is the mistake this step avoids.

Step 12

Register the corporate books, draw up the initial minutes and organize the corporate records file

The company must be able to prove who its shareholders are, what decisions were taken and who was authorized to act. The corporate books and minutes are not corporate decoration: in a SAS they make it possible to reconstruct ownership, decisions, appointments, authorizations, amendments, the issuance or transfer of shares and the approval of significant contracts. When they do not exist, disputes turn into arguments from memory.

The corporate records file should be created in the first month, not when an investor or a problem arrives. Include the incorporation document, the certificate, the RUT, the RUB, the corporate books, minutes, contracts, trademark, data, invoicing, powers of attorney, reports, taxes and supporting documents for contributions. Ideally, a serious third party should be able to review the company without depending on scattered chats. Prepare initial minutes covering acceptance of appointments, who is responsible for filings, the bank, the accountant, signing limits, a calendar of meetings and the creation of the document file. Reconstructing minutes after a dispute or a due diligence review almost always shows, and it reduces trust.

Step 13

Transfer the trademark, software, data, domain and contracts to the SAS

The value of a modern business usually lies in intangibles. Many companies are born with assets created before incorporation: trade name, logo, website, domain, software repository, database, photographs, texts, methodology, pilot contracts, social media accounts or supplier agreements. If those assets stay in personal accounts, the business can legally depend on one person even though it invoices through the SAS.

The solution depends on the asset. A trademark may require a search and registration before the SIC; software, a development contract or an assignment; a database, consents and a data processing policy; a domain, a transfer of ownership or control of access credentials; a contract, an assignment or a new contract in the company's name. The practical question for each asset: who has the password? who is listed as the owner? who can block it? what document proves it? Formalize assignments, licenses or contracts; if there are technical or creative shareholders, take particular care with intellectual property and future development. The company selling under a trademark, website or software that legally remains in the name of a founder or a supplier is the mistake this step avoids.

Cross-cutting review

Review permits, registrations and compliance before selling in earnest

The chamber, the RUT and invoicing do not authorize every activity. The type of business determines additional obligations: food, health, cosmetics, tourism, construction, real estate, government contracting, technology handling personal data, foreign investment or activities carrying LA/FT risk (money laundering and terrorist financing) may require permits, registrations, policies, reports or enhanced due diligence.

The permit matrix should be drawn up before selling at scale. One missing requirement can hold up inventory, contracts, banks, advertising, payment platforms or bids. Turn each permit into a tracking line: authority, procedure, person responsible, status, expiry date, supporting document and risk. INVIMA for regulated products; RUP/SECOP if the company will contract with the State; the SIC for data and trademarks; Supersociedades where corporate compliance applies; Banco de la República (the central bank) if there is foreign investment. Starting to sell and finding out too late that the product, the channel or the client required prior authorization is the mistake this step avoids.

Closing the process

Close the first 90 days with minimum governance

The SAS is up and running when it has documents, people responsible, separate cash, assets under its control and a calendar of decisions. The first 90 days are the window for putting in order what later becomes habit. If the company is born without minutes, without cash rules, without base contracts, without control of its assets and without a calendar of obligations, every new client or shareholder adds to the documentary debt.

The 90-day close should produce a formal meeting: what has been completed, what has changed in the business, what new obligation has appeared, what risk has been detected, what permit is missing and what decisions require minutes. This exercise turns the incorporation into a system of governance, not a certificate filed away. If there are shareholders or investors, provide a simple report on cash, sales, contracts, filings, risks and the decisions required. Believing that the incorporation ended with the certificate is the mistake this step avoids.

Quick reference

The corporate records file that should exist from the first month

After incorporating a SAS in Colombia, the corporate records file is the company's legal memory. It serves banks, large clients, shareholders, investors, authorities, accountants and lawyers. If someone asks for supporting documents tomorrow, the SAS should be able to answer in hours, not weeks.

Interactive timeline

A 30-60-90 timeline to get the SAS up and running

Creating the company is a milestone. A serious operation is built in the first 90 days, with people responsible, documents and dates. Check off each task as you complete it.

• Days 1–30 — Registration: Incorporation at the Cámara de Comercio and registration certificate.
• Days 1–30 — Tax: RUT/NIT active, with tax responsibilities consistent with the business.
• Days 1–30 — Transparency: RUB report to the DIAN (art. 631-5 E.T.).
• Days 1–30 — Invoicing and bank: Electronic invoicer enablement and business bank account.
• Days 1–30 — Initial governance: Corporate books registered, initial minutes, list of positions and signing limits.
• Days 31–60 — Assets: Trademark, domain, software, data and social media accounts under the company's control.
• Days 31–60 — Base contracts: Templates for clients, suppliers, confidentiality and the provision of services.
• Days 31–60 — Personal data Data processing policy, consents and the RNBD where applicable.
• Days 61–90 — Governance and compliance: First formal meeting, sector permits, reports and risk matrix.
• Days 61–90 — Budget and growth: Financial plan, strategic contracts and investment decisions.
• Days 61–90 — Report to shareholders: A report on cash, sales, pending filings and upcoming decisions.

If outside capital comes in

Minimum due diligence if investment, credit or a large client is coming

If the goal in incorporating a SAS in Colombia is to receive investment, credit or significant contracts, the company must be able to show who controls it, what it sells, who signs, what assets it holds, what risks it carries and whether the documents match the actual operation. This table works as a maturity test ahead of an external review.

By type of business

Special routes according to the type of business

First the SAS is incorporated properly; then it is adjusted to the actual risk of the business. The basic structure of the 13 steps is the same for everyone, but the emphasis varies. These scenarios help you know where to look more carefully.

The ones that show up late

Costly mistakes that tend to appear once the company has already grown

Incorporation mistakes rarely blow up on day one. They become costly when there are sales, debt, employees, tired shareholders, investors, large clients or a chance to sell. The advantage of reviewing these points from the outset is that they can still be corrected without negotiating under pressure.

The Gyptec case (Sentencia 800-52/2016) illustrates this clearly: 368 days of proceedings, 250 volumes, expert reports from PwC and Deloitte, and an order of restitution exceeding 2.6 billion pesos, all because no one required express authorization from the shareholders' meeting for loans to the controlling shareholders. What looked like “standard practice” in the family company turned out to be absolute nullity.

Before signing

A practical script for the shareholders' conversation before signing

A good incorporation requires an uncomfortable but orderly conversation. If the shareholders cannot talk about exit, contributions, cash, power and conflict before signing, it will be harder to do so once there is money, debt, clients or fatigue. These questions are designed to end up in a shareholders' agreement, not in anyone's memory.

• Ownership: Does the percentage reflect money, work, contacts, assets, risk or a mix of these? What supporting document proves each contribution?
• Work: What must each shareholder do during the first 90 days? What happens if one of them defaults or reduces their time commitment?
• Cash: When are profits reinvested, when are they distributed, which expenses require approval, and how are shareholder loans documented?
• Signing: What can a single person sign? What requires authorization from the shareholders? Are there limits by amount or by type of act (art. 26)?
• Information: What reports are delivered, how often, in what level of detail, and what happens if a shareholder does not receive information?
• Exit: How is the stake bought out from someone who leaves, defaults, blocks decisions, divorces, dies or wants to sell to a third party (arts. 13 and 39)?
• Assets: Who will own the trademark, the domain, the software, the social media accounts, the database, the methodology, the contracts and the commercial content?
• Conflicts: What mechanism is used before filing a lawsuit, blocking payments, suspending work or paralyzing essential decisions?
• Future investment: What rights will an investor have, what percentage can be diluted, and what decisions cannot be taken without approval?

The meeting is not there to settle every detail forever. It is there so that the important rules do not depend on memory or goodwill. After that conversation, the bylaws and the shareholders' agreement stop being templates and start reflecting the actual business.

If the company already exists

If the SAS already exists: how to fix things without starting over

If the company has already been created, it does not necessarily have to be shut down in order to fix mistakes. Many corrections can be made through an amendment to the bylaws, a shareholders' agreement, minutes, an update to the RUT, the RUB report, registration of the corporate books, assignment agreements, internal policies, a permit matrix and a reorganization of the documents. The rule is to identify what is missing, document from now on, amend where necessary and leave an honest trail of the regularization. Dressing up documents or reconstructing decisions that never happened is not advisable.

To understand the documents

A practical glossary for reading a SAS's documents

These terms appear at chambers of commerce, in bylaws, at banks, with investors and before the authorities. What matters is not memorizing them, but understanding the practical decision behind each one.

To go deeper

Cafore readings to close off the risks around the SAS

Incorporating a SAS usually touches several areas at once. These internal links help you move from the general guide to the specific risk: shareholders, trademarks, contracts, taxes, human talent, personal assets, business families, corporate criminal liability or real-estate assets.

• Corporate Lawyer — support with bylaws, corporate disputes, shareholders' agreements, board meetings and shareholder decisions.
• Company law guide — additional context for understanding corporate rules, governance and business protection.
• Commercial law and business companies — complementary reading on companies, commercial obligations and corporate structure.

Official sources to verify

Official pages for carrying out or checking the procedures

To incorporate a SAS in Colombia without relying on hearsay, use these sources as a starting point. Requirements, fees, forms and criteria can change; it is worth confirming the procedure on the official page before filing, selling, contracting or receiving investment.

• Ley 1258 de 2008 (Función Pública, the government's official legal-text database) — the official text on the SAS.
• The booklet “Cien preguntas y respuestas sobre la SAS” — a hundred questions and answers on the SAS (Supersociedades) — an official reference source.
• Registro Único de Beneficiarios Finales — DIAN — the official presentation of the RUB.
• VUE — Ventanilla Única Empresarial (the single business window): business creation, online SAS incorporation and integrated procedures by city.
• RUES: homonimia check, company name search and registration status.
• DIAN: registration and updating of the RUT, electronic invoicing enablement and frequently asked questions about the RUB.
• SIC — SIPI: trademark registration, industrial property searches and the RNBD for personal data.
• Colombia Compra — SECOP: RUP, public procurement platforms and interoperability.
• VUE — INVIMA: registration and certification of regulated products.
• Supersociedades — SAGRILAFT/PTEE: resolutions and corporate compliance materials.

So you can check it yourself

Sources and legislation cited

• Law 1258 of 2008 — sociedad por acciones simplificada (official text, Función Pública): arts. 1, 2, 4, 5, 9, 10, 13, 20, 22, 24, 26, 27, 38, 39, 42 and 43.
• Superintendencia de Sociedades, Sentencia n.° 800-52 of June 9, 2016 — the Gyptec S.A. case; absolute nullity of loans to controlling shareholders without express authorization from the shareholders' meeting; the duties in art. 23 of Ley 222/1995, applicable to the SAS through art. 45 of Ley 1258/2008.
• Superintendencia de Sociedades, Oficio 220-099807 of May 16, 2023 — a shareholders' agreement cannot disregard the majority-vote regime or the rules laid down in the bylaws (general concepto, art. 28 of the CPACA).
• Corte Constitucional, Sentencia C-090 de 2014 (M.P. Mauricio González Cuervo) — the shareholder's limited liability and the piercing of the corporate veil.
• Corte Constitucional (Colombia's Constitutional Court), Sentencia C-038 de 2025 (M.P. Cristina Pardo Schlesinger) — a SAS does not trade its shares on the stock exchange; the prohibition in art. 4 remains in force.
• Estatuto Tributario, art. 631-5 (Ley 2155 de 2021) and Registro Único de Beneficiarios Finales — DIAN, Resolución DIAN 000164 de 2021.
• Superintendencia de Sociedades — Cien preguntas y respuestas sobre la SAS.

Content prepared by Cafore Abogados for general guidance in Colombia. It does not replace a review of documents, shareholders, investment, bylaws, tax obligations, assets, permits or the particular circumstances of each case. Last editorial review: June 2026.