Liability of the legal representative, officers and shareholders: what must be proven before a crisis

The legal representative's liability is not settled merely by appearing on the certificado de existencia y representación (the chamber of commerce certificate). When a claim, an audit or a lawsuit among shareholders arrives, what is reviewed is something else: the decisions that were actually taken, the limits set by the bylaws, the minutes that support them, the conflicts of interest that were declared or kept quiet, and the role of shareholders who, without appearing as officers (administradores), ran the operation from the shadows.

This is terrain where intuition misleads. Many business owners believe that liability follows the org chart: the general manager answers because they sign, the shareholders do not answer because they merely invested. The Colombian reality is more demanding. The law looks at conduct before title, and it builds a system of checks and balances that protects whoever acts with diligence and leaves without a shield whoever uses the company to defraud. Understanding that system —before the problem appears— is what makes it possible to take difficult decisions without ending up personally exposed.

This guide walks through that map of liabilities: who counts as an officer and why the label carries weight, what their duties are and how they must be visible in the evidence, where defenses are lost without anyone noticing, how far a shareholder's peace of mind reaches and where it ends, and what a defensible decision looks like —in concrete documents—. It is grounded in Ley 1258 de 2008, in Ley 222 de 1995 and in what the Superintendencia de Sociedades has decided about the duties of officers and the protection of the minority shareholder.

A direct answer

Quick answers for business owners and boards

The legal representative, board members, liquidators, factors (the managers of a commercial establishment) and anyone who performs management functions owe duties of good faith, loyalty and diligence to the company and to all its associates. As a general rule, shareholders are not liable with their personal assets for the company's obligations merely because they are shareholders. But that principle reverses in specific scenarios: when they sign guarantees, when they meddle in management, when they abuse the legal personality, when they order irregular transactions or when they receive benefits that do not withstand an explanation.

Three ideas are worth settling from the outset, because they organize everything that follows:

• The formal position matters, but actual conduct is usually decisive. A title does not protect someone who acted badly, and the absence of a title does not save someone who in fact ran the company.
• The minutes are not decoration: they prove who decided, with what information and with what authorization. When they are missing, each party's own version of events fills the gap.
• A shareholder can come close to an officer's risk if they direct, order or control operations without appearing on the org chart. The law expressly provides for that figure.

The rest of this guide develops those three ideas, with the rules that support them and with examples of everyday decisions —a loan to a shareholder, a sale of assets, a personal guarantee, a hasty resignation— where the difference between being protected and being exposed turns on details that look minor on the day of signing.

The label that carries weight

Who counts as an officer and why that label carries weight

Ley 222 de 1995 defines as officers the legal representative, the liquidator, the factor, the members of boards of directors or governing councils and anyone who, under the bylaws, performs or holds those functions. In the SAS, Ley 1258 de 2008 closes the circle: article 27 provides that the liability rules for officers laid down in Ley 222 de 1995 apply to the legal representative, to the board of directors and to the other management bodies, if there are any. The label of officer is not honorary: it is what triggers the duties and the liability.

And there is an extension that surprises many people: anyone who, without being an officer, meddles in a positive activity of management, administration or direction of the company may take on the liabilities of an officer. This is the figure of the administrador de hecho, the de facto officer. Never having accepted the position, and not appearing on the certificate, is not enough to avoid it; if the person decides payments, chooses suppliers, signs contracts, handles the cash or gives the orders the company obeys, conduct can weigh more than paper.

That idea matters especially in family businesses, in startups, in companies with investors and in businesses where a strong shareholder does not appear as manager but decides what is essential: payments, suppliers, contracting, debt, cash handling. In a later dispute, the chamber of commerce certificate may fall short, because emails, instructions, approvals, chats, signatures, reports and benefits received are reviewed as well. The table below sets out the typical profiles, the risk each one runs and the document that, when the moment comes, makes the difference.

The practical message is clear: liability is not allocated by the org chart, but by real influence over decisions. That is why whoever gives the orders must be ready to explain how and why they gave them; and whoever only invests must take care not to end up directing without realizing it.

What the evidence must show

The three duties that must be visible in the evidence

Good faith, loyalty and diligence are not ornaments for a corporate presentation. They are criteria that must be legible in the file behind every decision. Good faith shows when information is neither hidden nor manipulated. Loyalty is evident when the company's interest is not replaced by a personal or family interest, or by that of a related company. Diligence is demonstrated when the officer informs themselves, asks questions, requests supporting documents, assesses risks and leaves a traceable record. What is decisive is not the declared intention, but what the evidence makes it possible to reconstruct years later.

These duties are not an abstract creation of doctrine: they have their legal basis in article 23 of Ley 222 de 1995, which requires officers to act in good faith, with loyalty and with the diligence of a good businessman, serving the interest of the company and taking into account that of all the associates. The Superintendencia de Sociedades has developed that duty with particular depth in a case worth knowing, because it shows how it applies when a majority uses its power to expropriate a minority.

Where the defense is lost

Conflicts of interest: where the defense is lost without anyone noticing

The duty of loyalty takes shape, above all, in how conflicts of interest are handled. The Superintendencia de Sociedades has explained that the duty to abstain in the face of a conflict of interest or of competition with the company requires identifying the situation and taking it to the highest corporate body where necessary, so that it is that body —with sufficient information— that authorizes or refuses the transaction. In practice, many problems arise because the company contracts with a relative's business, sells an asset to a shareholder, approves a related-party loan or allocates a business opportunity without disclosing who really gains.

The silent mistake is not always doing the transaction. Sometimes it is doing it without complete information, without minutes, without a defensible price, without a market comparison or without recording that the officer abstained when they had to. For a business owner with assets at stake, that informality can turn into a claim for damages, an administrative investigation, a falling-out among shareholders or even a criminal reading if a hidden benefit and economic harm appear together. The table below brings together the decisions where the conflict tends to hide, the uncomfortable question worth asking and the supporting documents that protect.

There is a practical rule that sums all this up: when in doubt, disclose and document. A transaction with a conflict of interest, disclosed and approved with complete information, is usually defensible; the same transaction, carried out in silence, rarely is —even if the deal was good for the company—.

Peace of mind is not immunity

Liability of shareholders: do not confuse peace of mind with immunity

In a SAS, shareholders are liable in principle up to the amount of their contributions, except in special scenarios such as fraud or abuse, and without prejudice to the personal guarantees or the specific obligations each of them takes on. That rule in article 1 of Ley 1258 de 2008 is one of the great attractions of the SAS, but it must not be misread as absolute immunity. The shareholder who signs as co-debtor, surety or joint and several debtor has already left the territory of the limited contribution. The shareholder who directs operations without a formal position may end up in the discussion about the de facto officer. And the shareholder who uses the company to hide assets or divert resources may face far more serious claims.

Here are the two counterweights that the Colombian legislature designed precisely so that limited liability does not become a refuge for abuse. Article 42 allows the piercing of the corporate veil where the company is used in fraud of the law or to the detriment of third parties: in that case, the shareholders and the officers who carried out, took part in or facilitated the fraudulent acts are liable jointly and severally for the obligations and the harm caused, and that declaration is made by the Superintendencia de Sociedades. In turn, article 43 penalizes abuse of the right to vote —by the majority, by the minority or by parity, where the shareholding is evenly split—: whoever votes to cause harm to the company or to other shareholders, or to obtain an unjustified advantage, is liable for the harm caused, and the abusive meeting or decision may be annulled, also before the Superintendencia de Sociedades.

That is why, when a board or a business family asks about the legal representative's liability, the conduct of the shareholders should be reviewed as well. Many defenses are weakened because the company believes it only has to explain the representative's signature, when the underlying decision was taken by whoever controlled the cash, the suppliers, the inventory or the banking relationships. The peace of mind of the limited contribution is real, but it is kept through conduct, not through the mere fact of being a shareholder.

The company's memory

Documents worth gathering before a serious dispute

When a dispute turns serious —a claim, an audit, a fight among shareholders, an investigation—, the company does not improvise evidence: it uses what it already had. That is why it is worth keeping in order, from beforehand, the set of documents that make it possible to reconstruct who decided what, with what information and with what authorization. This is the basis on which any defense is built.

• Certificado de existencia y representación, bylaws, amendments and the shareholders' register.
• Minutes of the shareholders' meeting, the partners' meeting, the board of directors and the committees.
• The authority matrix, powers of attorney, delegations and limits by amount.
• Contracts with shareholders, relatives, related companies and officers.
• Financial statements, management reports, budgets and payment records.
• Complete emails and chats about the decision under discussion, not isolated fragments.
• A record of conflicts of interest, abstentions, dissents and negative votes.
• Personal guarantees, promissory notes, sureties, mortgages and letters of instruction.

None of these documents is gathered to fill a filing cabinet. It is gathered because, when the conflict arrives, the company needs a reliable memory —and because the absence of a key document is usually read against whoever should have had it—.

What goes unnoticed

Silent mistakes by officers and shareholders

The mistakes that cost the most are not usually scandalous. They are comfortable habits that no one questions while everything is going well and that reappear, turned into a problem, once there is money or disagreement involved. It is worth recognizing them in time:

• Approving significant transactions over WhatsApp and then trying to turn the chat into minutes.
• Using company money for personal expenses with the idea of making it up later.
• Failing to record a dissent when a board member disagrees with a decision.
• Contracting with related parties without disclosing the connections or the comparable prices.
• Resigning from the position without handing over information, passwords, books, contracts or pending matters.
• Believing that delegating to the accountant or to the operations manager removes every duty of oversight.
• Signing personal guarantees without measuring the impact on the family estate or on standing with the banks.

Each of these mistakes has a defensible version that costs only a little more discipline: approving in the minutes instead of by chat, keeping the company's cash separate from personal cash, recording the disagreement, disclosing the connection, formally handing over the position, overseeing what has been delegated and measuring the reach of a guarantee before signing it. The difference between one version and the other is not noticed on the day of the decision; it is noticed on the day of the claim.

The real standard

What a defensible decision looks like

A defensible decision is not the same as a successful decision. Businesses can lose money, and the law does not penalize commercial failure. What protects the officer is being able to show that they acted with sufficient information, reviewed alternatives, identified risks, requested the necessary authorizations, disclosed the conflicts, recorded the decision in the minutes and carried out what was approved. The defense becomes an uphill struggle when the decision appears as an informal order, an unexplained urgency or an instruction from a shareholder who preferred not to appear on paper.

For high-value decisions, the best tool is a supporting file that can be read on its own. Check, below, the items that your next significant decision should be able to show; whatever is left unchecked is exactly what is worth resolving before signing:

• The problem and its context: is it documented what was being decided and why it had to be decided?
• Alternatives reviewed: is there a record of the options considered and of why one of them was chosen?
• Figures and financial analysis: are there numbers that support the decision and measure its impact?
• Risks identified: were the risks anticipated, and how was it decided to handle them?
• Advice received: was a technical, accounting or legal opinion sought when the decision warranted it?
• Authorization from the competent corporate body: was it approved by the person who had to approve it, within their powers, and recorded in the minutes?
• Conflicts of interest declared: was every connection disclosed, and did the person who had to abstain do so?
• Follow-up afterwards: was it verified that what had been approved was carried out as decided?

That file is not put together to please an auditor. It is put together because, if years later a lawsuit, an audit, an investigation or a fight among shareholders arrives, the company needs a memory that speaks for it. As a mental shortcut, it is worth classifying each decision by its level of risk:

Exits and reshuffles

Resigning, removing or reappointing: decisions that also create risk

When tension appears, some officers want to resign immediately and some shareholders want to remove someone without leaving a file. Both reactions, taken in a rush, create their own risk. Resignation handled well leaves a record of the date, the handover of information, the pending matters, the passwords, the contracts and any relevant warnings; an abrupt exit, by contrast, can be read as flight from a problem that was already known. Removal must comply with the bylaws, the notice of meeting, the quorum and the registration, and must avoid messages that look like retaliation or a cover-up; otherwise, the removal itself becomes another front of conflict.

Reappointing an officer also calls for judgment. If serious warning signs already exist, simply keeping them in the position can expose those who reappoint them. The prudent course is to document what was reviewed, what corrective measures were adopted and how the risk will be monitored from then on. Ignoring the signals can be as problematic as reacting with improvisation: in both cases, what is judged later is whether those who had the power to decide acted with the diligence required of them.

Further reading

Related reading and services

If you want to put your company's governance in order before a conflict appears —or if the discussion has already begun—, these readings and services can help you make better decisions:

• Corporate Lawyer to review bylaws, minutes, the authority matrix, conflicts of interest and decisions by shareholders and officers.
• Corporate law: an essential guide for companies and entrepreneurs, when the business needs to put governance, shareholders and management in order.
• Commercial law and business entities in Colombia, to place these liabilities within the general framework of corporate law.
• Support in defense when the corporate dispute already includes accusations of fraud, forgery or disloyal administration, so that the corporate and the criminal strategies advance in step.

Prudence without paralysis

How to reduce exposure without paralyzing the business

A legal representative cannot turn every decision into an endless authorization procedure; a company that seizes up from excess caution also fails. But they can leave a minimum trace of prudence, proportionate to the size of each decision: identifying the power they are using, keeping the financial documentation, asking for approval when the act goes beyond ordinary operations, declaring conflicts of interest, documenting the alternatives and separating urgent decisions from strategic ones. That discipline counts for a great deal when, later on, someone asks why something was signed, why it was paid, why it was sold, why debt was taken on or why it was delegated.

For shareholders and officers, the key is that corporate governance must not be decorative. If the minutes say only "approved unanimously", without explaining the information available, the warnings, the abstentions or the conditions agreed, the defense ends up poorer than it looks. In family or closely held companies, best practice is not to turn every board meeting into a documentary war, but to leave sober, understandable records: enough to reconstruct the decision, without suffocating operations. Prudence, not paralysis: that is the balance that protects without slowing the business down.

So you can check it yourself

Sources and legislation cited

• Law 1258 of 2008 — sociedad por acciones simplificada (official text, Función Pública): arts. 1 (limited liability of the shareholder), 26 (legal representation and its powers), 27 (liability of officers, referring to Ley 222 de 1995), 42 (piercing of the corporate veil) and 43 (abuse of the right to vote).
• Ley 222 de 1995 — the regime governing officers: article 22 lists them (legal representative, liquidator, factor, board members and anyone who performs those functions) and article 23 sets out their duties of good faith, loyalty and the diligence of a good businessman, in the interest of the company and of all the associates.
• Superintendencia de Sociedades, Sentencia n.° 800-52 of June 9, 2016 (Delegatura de Procedimientos Mercantiles, the "Gyptec S.A." case) — duties of officers (art. 23 of Ley 222 de 1995) and protection of the minority shareholder.
• Corte Constitucional, Sentencia C-090 de 2014 — limited liability of the shareholder and piercing of the corporate veil as a counterweight (arts. 42 and 43).
• Superintendencia de Sociedades — Cien preguntas y respuestas sobre la SAS (one hundred questions and answers on the SAS) (official handbook, for general reference).

Content prepared by Cafore Abogados with a corporate, executive and asset-protection focus, for general guidance in Colombia. It does not replace advice on bylaws, minutes, powers of attorney, contracts, guarantees, the shareholding structure and specific decisions. The strategy depends on the documents, the city of registration, the shareholders, the economic activity and the facts of each case. Last editorial review: June 2026.