Registered with the CMF

We raise the quality of corporate governance, helping companies achieve their strategic objectives.

Our expertise: Corporate Governance, Business Risk Management, Strategic Control, Audit, Compliance and Sustainability.

+12

Years strengthening the corporate GRC process: risk management, internal control systems and crime prevention in public and private companies.

CMF

Firm registered with the Financial Market Commission (CMF) as External Auditors, Account Inspectors and certifiers of Crime Prevention Models under Law 20.393.

+40

Companies where we have helped protect their value: reducing risk, streamlining controls and strengthening legal compliance.

Where our expertise is put to the test.

We help raise the efficiency of administrative procedures for strategic control in mining, ports, financial services, banking and more.

  • Excavator loading a haul truck in an open-pit mine
    Mining
  • Wind turbines on a mountain ridge at sunset
    Energy
  • Two cows grazing in a green mountain meadow
    Food
  • Inside an industrial plant with process equipment and workers
    Industry
  • Excavators moving earth on a construction site
    Construction
  • Port terminal with cranes and containers
    Ports
  • Towers in the Las Condes financial district, Santiago
    Banking

About us

We are professionals dedicated to solving management and control problems in companies.

  • CMF registered
  • Registered in 2016 to certify MPDs

At NawRath Auditores Certificadores, we are experts in models that reduce corruption risk in companies, implementing or assessing Economic and Environmental Crime Prevention Models based on Law 20.393 (Corporate Criminal Liability), Law 21.595 (Economic and Environmental Crimes), the recently enacted Law 21.719 on the Protection and Processing of Personal Data, and ISO standards as a methodological reference.

We have a multidisciplinary team of professionals with more than 30 years of experience. Our style is to handle information confidentially and keep communication open and fluid, building trust and close working relationships.

Services

Ten areas, one goal: reducing your risk.

We help Boards, General Management and executive teams meet regulatory requirements with minimal bureaucracy, tailored to the reality, size and complexity of each organization.

Executive reviewing financial indicators and charts on a monitoring screen

MPD (Law 20.393)

Ensure the protection of your organization and of those who lead it.

We implement, update and assess Crime Prevention Models (MPD), identifying risks, strengthening controls and closing gaps to turn a legal requirement into an effective system of integrity, control and prevention — one that serves as a robust, auditable mitigating factor.

I need to strengthen my MPD
Printed data charts being analyzed with pens and a magnifying glass

MPI (Law 21.719)

Anticipate the new risks in personal data protection.

We assess and implement an Infringement Prevention Model (MPI) for the handling of personal data: we design the structure of responsibilities and embed controls and traceability mechanisms that provide concrete evidence, reducing regulatory, reputational and operational exposure.

We analyze your company’s processes to map the data processing it carries out, delivering the Record of Processing Activities (RAT), the Infringement Risk Matrix, and the minimum policies and documentation needed to comply with Law 21.719 (Personal Data Protection).

I want to get ahead of the personal data law
Team of professionals in discussion around a table during a work meeting

Outsourced Compliance Officer

Expert compliance, without adding structural costs.

We take on the management and oversight of your MPD and MPI as an outsourced function, working alongside Management and the Board to keep these models active, up to date and documented — reducing the operational burden and providing peace of mind about compliance with these demanding laws.

We build the risk and control matrices, run awareness and training activities on Laws 20.393, 21.595 and 21.719, deliver progress reports to the Board, and continuously audit the key crime and infringement prevention controls.

We also act as your Data Protection Officer (DPO), a role required by the Personal Data Law, covering every function required by the regulations and by the Personal Data Protection Agency (Agencia de Protección de Datos Personales).

I need compliance support for my company

AI Governance

Set clear rules for the use of Artificial Intelligence, so it does not expose you to greater risks.

We help Boards and executives establish responsibilities, policies and controls over the use of Artificial Intelligence, managing its ethical, intellectual property, regulatory and operational risks so the organization can adopt this technology responsibly and sustainably.

I want to govern our AI

Environmental Management Systems

Turn environmental obligations into control, prevention and continuous improvement.

We help companies strengthen and assess their Environmental Management Systems, identifying risks and compliance gaps against regulations, permits, environmental approvals (RCA) and authority requirements. Through independent audits and assessments, we help Management anticipate environmental contingencies, strengthen its controls and prepare for regulatory inspections and ISO 14001 certification.

I want to strengthen our environmental management

Risk Management

Reduce uncertainty to make better decisions.

We implement and assess enterprise risk management systems.

We identify and measure the risks that can genuinely affect your key objectives — training teams, strengthening controls and giving Management an efficient methodology to anticipate, decide and protect business value.

I want to manage my risks

Internal Audit

Assure your controls. More than detecting problems, we help prevent them.

We support the delivery of the Annual Internal Audit Plan with senior, independent professionals, assessing risks, controls and processes to give the Board objective assurance, actionable recommendations and concrete opportunities for improvement.

We advise on raising the quality of the Internal Audit function.

We assess conformance with international standards (The IIA.Global Standards) in internal audit strategy, planning, structure and methodology.

I want to strengthen my audit function

Financial Audit

Know your true economic position, for greater confidence in the information behind your decisions.

We independently assess the preparation of financial statements under international accounting and auditing standards, identifying risks and control weaknesses to give shareholders, Boards, Management and other stakeholders greater confidence.

I want an independent audit
Professional reviewing spreadsheets with a financial calculator

Accounting and Tax Services

Outsource your accounting and tax reporting so you can stay focused on your core business.

We support the preparation of accounting and tax books and statements in line with legal requirements. We issue monthly and annual financial statements, give special attention to the most significant accounts, file tax returns and support compliance with labor laws (employment contracts, taxes and social security contributions).

I want to optimize my accounting
Advisors walking an executive through a regulatory document during a work session

Training

Productivity rises when people do what they know.

We design practical executive training in risk, audit, compliance, ethics, crime prevention, data protection and AI, turning complex concepts into criteria that apply to each organization’s real decisions. We strengthen the skills needed for optimal performance in each role.

I want to train my team

Our fundamental ethical principles

  1. Integrity

    We act with honesty, transparency and professional courage, even under pressure from the client.

  2. Objectivity

    We remain impartial, never allowing personal interests, relationships or external pressures to affect our professional judgment.

  3. Professional competence

    We have the knowledge, skills and experience needed to perform our engagements properly.

  4. Due professional care

    We perform our engagements with the diligence, judgment and professional skepticism reasonably expected of a competent auditor.

  5. Confidentiality

    We protect the information obtained during our engagements and use it exclusively for legitimate professional purposes.

Regulatory compliance · The laws setting the agenda

December 2026: the countdown has begun.

Fully in force: December 2026 · Fines of up to 20,000 UTM

Law 21.719 (Personal Data Protection), published in December 2024, updates Chilean regulations on the processing and safeguarding of personal data. Compliance will be mandatory for all public and private companies that handle information about individuals.

This law:

  • Creates the Personal Data Protection Agency (Agencia de Protección de Datos Personales) as the supervisory authority.
  • Imposes a duty to report security breaches.
  • Requires the appointment of a Data Protection Officer (DPO).
  • Requires privacy by design and by default.
  • Introduces a new penalty regime, with fines of up to 20,000 UTM (UTM: Chilean monthly tax unit; over CLP 1.3 billion).

How we help

Our service is designed to implement the Infringement Prevention Model (MPI) under Law 21.719, integrated with the international standards ISO 27001 (Information Security) and ISO 27701 (Information Privacy) and the COSO-ERM risk management methodology.

Our methodology

  1. Initial assessment

    We assess your processes, gaps and maturity level in personal data protection.

  2. Risk management and MPI design

    We identify vulnerabilities and build a prevention plan aligned with the law and your corporate strategy.

  3. Implementation and training

    We support you through the model’s rollout, making sure your whole team takes part.

  4. Monitoring, audit and continuous improvement

    We measure the effectiveness of the proposed controls, audit the key controls and leave an evidence trail so the MPI can be audited by the Personal Data Protection Agency.

Get ahead and comply before the legal deadline. Let’s schedule a meeting: you’ll get a free initial assessment with an action plan suited to your business.

Book your free initial assessment

From three to 240 offenses: your MPD must prove it works.

Law 21.595 (Economic Crimes) · In force since September 2024

Law 20.393 (Corporate Criminal Liability) establishes the criminal liability of legal entities in Chile. Following the major amendment introduced by Law 21.595 (Economic and Environmental Crimes), the scope of required prevention grew from three offenses in its first year to 240.

This law:

  • Establishes the criminal liability of legal entities.
  • Was amended by Law 21.595 (Economic and Environmental Crimes), in force since September 2024.
  • Expanded prevention from three offenses in its first year to 240.
  • Recognizes the Crime Prevention Model (MPD) as a mitigating factor, provided it can reliably prove the due diligence of senior management.

How we help

We are an audit and consulting firm registered with the Financial Market Commission (CMF) and, since 2016, also registered to certify, update or implement Crime Prevention Models under Law 20.393. We complement this with our Outsourced Compliance Officer service and training on Laws 20.393 and 21.595.

The keys to a successful model

In our experience, a successful model rests mainly on three elements:

  1. The commitment and support of the board

  2. Ethics training for staff

  3. A control style and culture grounded in risk management

Many medium-sized and large companies in Chile already have an MPD; the real question is whether it is actually reducing risk. Let’s talk.

Let’s talk about your MPD

NawRath – VARIO Alliance

Technology that detects + Experts who interpret = Controls that improve.

In alliance with the legaltech firm VARIO, we combine advanced technology with our experience in audit, compliance and internal control to help organizations anticipate risks, detect early warning signs and strengthen their controls on an ongoing basis.

  1. VARIO

    VARIO uses technology and artificial intelligence to monitor corporate communications and identify signals and patterns associated with potential compliance risks.

  2. NawRath

    NawRath brings the professional judgment to interpret those signals, assess their impact and turn them into concrete actions for prevention, detection, control and continuous improvement in the face of potentially sanctionable or criminal conduct.

  3. NawRath × VARIO

    The result is a more dynamic view of risk: rather than waiting for an audit, investigation or incident to reveal a gap, you build in the capabilities to detect it, analyze it and act in time.

Why trust an alliance like this

Technology finds signals. Experience turns them into decisions.

True innovation lies not only in detecting more information, but in knowing what to do with it.

Combining technology-driven monitoring with professional judgment makes it possible to focus compliance efforts where they truly matter, strengthen controls and give Management and the Board greater visibility and foresight into their risks.

Discover our communications monitoring service for crime prevention

In the words of Antonio Nawrath and Joaquín Nawrath

Antonio Nawrath Managing Partner

A great many companies (medium-sized and large) in Chile already have Crime Prevention Models (MPD). The real question is whether these systems are actually reducing risk and can reliably prove that they are a mitigating factor demonstrating the due diligence of senior management. In our experience, the key to a successful model lies mainly in three key elements:

  1. The commitment and support of the board,
  2. the ethical training of its staff, and
  3. a control style and culture grounded in risk management.
Joaquín Nawrath General Manager

Cultures of integrity are built by contagion. When those who lead an organization make ethics and transparency an everyday way of acting, that standard begins to replicate itself in every decision and at every level of the company.

Our challenge as Auditors is to keep that conversation alive, to train people continuously and, of course, to back it with efficient controls that give senior leadership peace of mind.

Because better companies build stronger markets and, ultimately, a better country.

Team

Professionals with more than 30 years of experience.

  • Portrait of Antonio Nawrath

    Antonio Nawrath

    Managing Partner

    Business Engineer (Ingeniero Comercial), Universidad de Chile, and MBA, Universidad Adolfo Ibáñez. Executive with extensive experience in audit, comptrollership, compliance, finance and risk management. Has led these functions at Codelco, EFE and in the financial sector, and also advises Boards and organizations.

  • Portrait of Joaquín Nawrath

    Joaquín Nawrath

    General Manager

    Business Engineer (Ingeniero Comercial) and Master in Marketing Administration, Universidad Adolfo Ibáñez, with a Diploma in Corporate Governance from Universidad Católica. Specialist in strategy, business development, marketing and organizational transformation, with experience leading companies, startups, sales teams and strategic alliances in Chile and Germany.

  • Portrait of Tomás Nawrath

    Tomás Nawrath

    Director of Environmental Affairs

    Veterinarian with a Master’s in Applied Environmental Engineering and specialized training in waste management, circular economy and Life Cycle Assessment. ISO 14001 Lead Auditor, with experience in environmental management, regulatory compliance, industrial and hazardous waste, the REP Law (Extended Producer Responsibility) and sustainability projects.

  • Portrait of Carlos Eisendecher

    Carlos Eisendecher

    Director of Training

    Business Engineer (Ingeniero Comercial), Pontificia Universidad Católica de Chile. Executive with more than 40 years of experience in compliance, risk management, internal control and internal audit, gained mainly at domestic and international financial institutions.

  • Portrait of Guillermo Paredes

    Guillermo Paredes

    IT Director

    Systems Engineer, MBA and Master in Human Factor, with international certifications in risk, audit, business continuity, anti-bribery and privacy. Executive with more than 25 years of experience in audit and risk management, specializing in technology, cybersecurity, compliance, crime prevention and data protection.

  • Portrait of Carolina Aguayo

    Carolina Aguayo

    Compliance Manager

    Public Accountant and Auditor (Contador Público y Auditor), Universidad de Valparaíso, with more than 20 years of experience. Specialist in corporate governance, risk management, internal control, audit and finance, with a track record advising Boards and leading administration, compliance and crime prevention processes.

  • Portrait of Ted Montoya

    Ted Montoya

    Audit Manager

    Business Engineer (Ingeniero Comercial) and Public Accountant and Auditor (Contador Público y Auditor), with postgraduate training in finance, enterprise risk management and leadership. Executive with more than 30 years in the financial sector, specializing in credit, collections, liquidity and market risk, with extensive management experience at financial cooperatives.

  • Portrait of Cristián Carvajal

    Cristián Carvajal

    Business Risk & AI Manager

    Public Accountant and Auditor (Contador Auditor), with postgraduate studies and diplomas in Artificial Intelligence, Corporate Governance, Risk and Compliance. Executive specializing in risk management, internal audit and compliance, with experience in banking, mining and the Big Four, currently integrating Artificial Intelligence into control and risk assessment processes.

  • Portrait of Marcelo Navarrete

    Marcelo Navarrete

    Compliance Attorney

    Attorney with a degree in Legal and Social Sciences from Universidad Diego Portales. Experience focused on compliance and corporate law, including projects analyzing and updating Crime Prevention Models in response to regulatory changes, as well as litigation experience.

  • Portrait of Jorge Davis

    Jorge Davis

    Senior Auditor

    Statistician and Public Accountant and Auditor (Contador Auditor), with diplomas in Operations Management and Integrated Risk Management. Executive with an extensive career in the financial sector, specializing in internal audit, risk, compliance, internal control and crime prevention, leading comptrollership functions and professional teams, mainly in banking.

  • Portrait of Mauricio Salvo

    Mauricio Salvo

    Senior Auditor

    Public Accountant and Auditor (Contador Auditor) and General Accountant, DUOC UC. Specialist in financial audit, IFRS, internal control and financial statement analysis, with experience at PwC, BDO and Banco Santander. Career combining audit execution, control assessment, reconciliations and reporting results to management.

Clients

They have trusted us

Our team and its professionals have contributed to risk management, internal control, audit and compliance at more than 40 companies. Here are some of them.

  • Banco Santander
  • ACF Capital Servicios Financieros
  • CorpBanca
  • Cabify
  • Scotiabank
  • Empormontt
  • Codelco
  • AquaChile
  • Molymet
  • Desert King
  • Enel
  • IN Groupe
  • Gasmar
  • Puerto Antofagasta
  • Embotelladora Andina
  • Agrosuper
  • Colun
  • FID Seguros
  • Friosur
  • Polla Chilena de Beneficencia
  • Kabsa
  • Moody’s
  • ICI
  • Puerto Chacabuco
  • Construction company
  • Isalud
  • Empresa Portuaria Austral
  • Puerto San Antonio
  • Sasipa
  • Puertos de Talcahuano
  • EFE
  • Wenco
  • ACHS
  • AHK Chile
  • Telefónica
  • Industriales de Iquique
  • INACAP
  • Universidad Austral de Chile
  • Universidad Mayor
  • UDLA
  • UAHC

Contact

Let’s talk about how to meet your company’s needs.

We offer a remote meeting to understand your most pressing needs and propose solutions drawing on our extensive experience. Let’s schedule a short video call: leave us a message and we’ll get in touch.

Contact details

Message us on WhatsApp

Having trouble with the form? Write to us at contacto@nawrath.cl.

Your information is always handled confidentially. Learn how we protect your personal data.