How can we help you?

Open Finance refers to the exchange of financial information not only between banks, but with any financial institution. This approach has the potential to rapidly improve financial services by stimulating competition, driving the development of new services, increasing demand, and improving business efficiency. As a result, both companies and financial institutions stand to benefit from these initiatives.

At Syntage, we offer three options:

• Create a customized external page.
• Embed a widget on your site.
• Use our API.

Through any of these solutions, your clients or prospects enter their RFC and password in a fully encrypted flow, without sharing those credentials with third parties. This opens a secure connection to access all the information you need.

More than 250,000 companies have shared their information through Syntage, trusting our platform to access better, more efficient financial services. More businesses join every day, recognizing the benefits of sharing data securely to speed up processes, cut costs, and unlock personalized financial solutions.

A good data platform should be scalable, secure, flexible, and easy to use. It should be able to integrate data from multiple sources, run advanced analytics, and deliver clear, easy-to-understand visualizations.

The CIEC (Clave de Identificación Electrónica Confidencial) is the term formerly used to refer to the combination of an RFC and a SAT access password, which is used to share transactional and financial data.

We currently extract information from 5 trusted sources:

• The Tax Administration Service (SAT)
• The Public Registry of Commerce (RPC)
• Buró de Crédito (Mexico’s credit bureau)
• The Single Registry of Movable Collateral (RUG)
• The Legal Incidents Bureau (BIL)

No. We believe in the power of data, so you can cancel your plan whenever you like — all we ask is one month’s notice.

A taxpayer is an individual or legal entity required to pay taxes under the applicable tax laws. In other words, a taxpayer is anyone obligated by tax law to fulfill the duties that derive from it. These persons are required to pay taxes as mandated by law, making them the primary debtors of the tax authority.

An extraction is the retrieval of various types of data or documents from a single source: the SAT (Mexico’s Tax Administration Service). An extraction lets us retrieve, process, and analyze data, helping our users improve their operations, streamline their processes, and make better decisions. Our product includes 9 extractors, or data types:

• Issued and received invoices
• Annual tax returns
• Monthly tax returns
• RIF tax returns
• Compliance opinions
• Tax status certificates
• Withholdings
• Electronic accounting records
• RPC (Public Registry of Commerce)

The link is the connection between Syntage’s system and the SAT, and it’s what allows us to extract taxpayer information. It is created the moment a taxpayer signs up through your Syntage registration link using their SAT credentials.

As soon as a taxpayer is added, the link becomes active. It stays active unless:

• The taxpayer changes their CIEC
• The taxpayer changes their password
• The taxpayer requests deletion of their data under their ARCO rights: the set of rights through which Mexico’s personal data protection law guarantees individuals control over their personal data.

Yes. However, individuals (personas físicas) don’t have the same tax obligations as legal entities (personas morales), so you’ll likely retrieve less information for an individual than for a company.

Syntage offers a public API that lets you perform every task available in our dashboard through API requests, including:

• Registering a taxpayer’s credentials.
• Checking the status of a taxpayer’s credentials.
• Creating extractions and tracking their status.
• Accessing the taxpayer information we retrieved from the SAT (invoices, tax returns, compliance opinions, tax status certificates, and more).
• Downloading the CFDI files for taxpayers’ invoices.
• Downloading the supporting documents (PDF and XML) for the information extracted from the SAT.
• Accessing the insights for each of your taxpayers.

An insight is generated by analyzing previously extracted raw data, giving you a holistic view of a taxpayer’s operations. These analyses power informed, forward-looking decisions about a business, reducing risk in operations such as loan origination, revolving credit, credit line approvals, and even accounting workflows. Our insights are calculated in different ways, and within each section you’ll find an “i” (information) icon that explains the logic behind that indicator.

Tags are a portfolio management tool for categorizing your taxpayers. With them, you can group taxpayers to run specific actions on each group — for example, creating recurring extractions, setting up monitoring rules, or filtering to find taxpayers quickly.

• Once access is shared, the credential is encrypted at the highest level.
• The query runs entirely in a single step after your authorization, and access is strictly read-only, so the information cannot be altered or modified.
• Only the financial institution will access the data. The data is protected under Mexico’s data protection law, and you can request its deletion at any time.
• The data we retrieve includes: issued and received invoices, provisional and annual tax returns, compliance opinions, and tax status certificates.
• Sharing your information simplifies, speeds up, and sharpens the analysis of your business so you can be offered the right product in less time.

We maintain only 2 entry points:

• Users: Access the API through CloudFront, the only resource we expose to the internet.
• Employees: Access to our infrastructure goes through a VPN managed by AWS. Once connected to the VPN, each employee has specific permissions granting access only to certain infrastructure resources.

Encryption:

• In transit: All communication between clients/employees and our entry points is encrypted with SSL/TLS, as is all internal service-to-service communication within our infrastructure.
• At rest: All information stored in services such as S3, SQS, and RDS is encrypted with the AES-256 algorithm.

Coverage:

• Cyber insurance: Covers your organization’s risks in the unlikely event of a data breach caused by a cybersecurity incident.
• Professional liability insurance: Our clients are protected against errors or omissions that cause: A) financial losses, B) damages or lost profits, C) moral damages.
• ISO 27001 certification

Yes, we are ISO 27001:2022 certified, which represents the highest standards in information security.