Registered with the CMF
We raise the quality of corporate governance, helping companies achieve their strategic objectives.
Our expertise: Corporate Governance, Business Risk Management, Strategic Control, Audit, Compliance and Sustainability.
+12
Years strengthening the corporate GRC process: risk management, internal control systems and crime prevention in public and private companies.
CMF
Firm registered with the Financial Market Commission (CMF) as External Auditors, Account Inspectors and certifiers of Crime Prevention Models under Law 20.393.
+40
Companies where we have helped protect their value: reducing risk, streamlining controls and strengthening legal compliance.
Where our expertise is put to the test.
We help raise the efficiency of administrative procedures for strategic control in mining, ports, financial services, banking and more.

Mining 
Energy 
Food 
Industry 
Construction 
Ports 
Banking
About us
We are professionals dedicated to solving management and control problems in companies.
- CMF registered
- Registered in 2016 to certify MPDs
At NawRath Auditores Certificadores, we are experts in models that reduce corruption risk in companies, implementing or assessing Economic and Environmental Crime Prevention Models based on Law 20.393 (Corporate Criminal Liability), Law 21.595 (Economic and Environmental Crimes), the recently enacted Law 21.719 on the Protection and Processing of Personal Data, and ISO standards as a methodological reference.
We have a multidisciplinary team of professionals with more than 30 years of experience. Our style is to handle information confidentially and keep communication open and fluid, building trust and close working relationships.
Services
Ten areas, one goal: reducing your risk.
We help Boards, General Management and executive teams meet regulatory requirements with minimal bureaucracy, tailored to the reality, size and complexity of each organization.
MPD (Law 20.393)
Ensure the protection of your organization and of those who lead it.
We implement, update and assess Crime Prevention Models (MPD), identifying risks, strengthening controls and closing gaps to turn a legal requirement into an effective system of integrity, control and prevention — one that serves as a robust, auditable mitigating factor.
I need to strengthen my MPD
MPI (Law 21.719)
Anticipate the new risks in personal data protection.
We assess and implement an Infringement Prevention Model (MPI) for the handling of personal data: we design the structure of responsibilities and embed controls and traceability mechanisms that provide concrete evidence, reducing regulatory, reputational and operational exposure.
We analyze your company’s processes to map the data processing it carries out, delivering the Record of Processing Activities (RAT), the Infringement Risk Matrix, and the minimum policies and documentation needed to comply with Law 21.719 (Personal Data Protection).
I want to get ahead of the personal data law
Outsourced Compliance Officer
Expert compliance, without adding structural costs.
We take on the management and oversight of your MPD and MPI as an outsourced function, working alongside Management and the Board to keep these models active, up to date and documented — reducing the operational burden and providing peace of mind about compliance with these demanding laws.
We build the risk and control matrices, run awareness and training activities on Laws 20.393, 21.595 and 21.719, deliver progress reports to the Board, and continuously audit the key crime and infringement prevention controls.
We also act as your Data Protection Officer (DPO), a role required by the Personal Data Law, covering every function required by the regulations and by the Personal Data Protection Agency (Agencia de Protección de Datos Personales).
I need compliance support for my companyAI Governance
Set clear rules for the use of Artificial Intelligence, so it does not expose you to greater risks.
We help Boards and executives establish responsibilities, policies and controls over the use of Artificial Intelligence, managing its ethical, intellectual property, regulatory and operational risks so the organization can adopt this technology responsibly and sustainably.
I want to govern our AIEnvironmental Management Systems
Turn environmental obligations into control, prevention and continuous improvement.
We help companies strengthen and assess their Environmental Management Systems, identifying risks and compliance gaps against regulations, permits, environmental approvals (RCA) and authority requirements. Through independent audits and assessments, we help Management anticipate environmental contingencies, strengthen its controls and prepare for regulatory inspections and ISO 14001 certification.
I want to strengthen our environmental managementRisk Management
Reduce uncertainty to make better decisions.
We implement and assess enterprise risk management systems.
We identify and measure the risks that can genuinely affect your key objectives — training teams, strengthening controls and giving Management an efficient methodology to anticipate, decide and protect business value.
I want to manage my risksInternal Audit
Assure your controls. More than detecting problems, we help prevent them.
We support the delivery of the Annual Internal Audit Plan with senior, independent professionals, assessing risks, controls and processes to give the Board objective assurance, actionable recommendations and concrete opportunities for improvement.
We advise on raising the quality of the Internal Audit function.
We assess conformance with international standards (The IIA.Global Standards) in internal audit strategy, planning, structure and methodology.
I want to strengthen my audit functionFinancial Audit
Know your true economic position, for greater confidence in the information behind your decisions.
We independently assess the preparation of financial statements under international accounting and auditing standards, identifying risks and control weaknesses to give shareholders, Boards, Management and other stakeholders greater confidence.
I want an independent audit
Accounting and Tax Services
Outsource your accounting and tax reporting so you can stay focused on your core business.
We support the preparation of accounting and tax books and statements in line with legal requirements. We issue monthly and annual financial statements, give special attention to the most significant accounts, file tax returns and support compliance with labor laws (employment contracts, taxes and social security contributions).
I want to optimize my accounting
Training
Productivity rises when people do what they know.
We design practical executive training in risk, audit, compliance, ethics, crime prevention, data protection and AI, turning complex concepts into criteria that apply to each organization’s real decisions. We strengthen the skills needed for optimal performance in each role.
I want to train my teamOur fundamental ethical principles
-
Integrity
We act with honesty, transparency and professional courage, even under pressure from the client.
-
Objectivity
We remain impartial, never allowing personal interests, relationships or external pressures to affect our professional judgment.
-
Professional competence
We have the knowledge, skills and experience needed to perform our engagements properly.
-
Due professional care
We perform our engagements with the diligence, judgment and professional skepticism reasonably expected of a competent auditor.
-
Confidentiality
We protect the information obtained during our engagements and use it exclusively for legitimate professional purposes.
Regulatory compliance · The laws setting the agenda
December 2026: the countdown has begun.
Fully in force: December 2026 · Fines of up to 20,000 UTM
Law 21.719 (Personal Data Protection), published in December 2024, updates Chilean regulations on the processing and safeguarding of personal data. Compliance will be mandatory for all public and private companies that handle information about individuals.
This law:
- Creates the Personal Data Protection Agency (Agencia de Protección de Datos Personales) as the supervisory authority.
- Imposes a duty to report security breaches.
- Requires the appointment of a Data Protection Officer (DPO).
- Requires privacy by design and by default.
- Introduces a new penalty regime, with fines of up to 20,000 UTM (UTM: Chilean monthly tax unit; over CLP 1.3 billion).
How we help
Our service is designed to implement the Infringement Prevention Model (MPI) under Law 21.719, integrated with the international standards ISO 27001 (Information Security) and ISO 27701 (Information Privacy) and the COSO-ERM risk management methodology.
Our methodology
-
Initial assessment
We assess your processes, gaps and maturity level in personal data protection.
-
Risk management and MPI design
We identify vulnerabilities and build a prevention plan aligned with the law and your corporate strategy.
-
Implementation and training
We support you through the model’s rollout, making sure your whole team takes part.
-
Monitoring, audit and continuous improvement
We measure the effectiveness of the proposed controls, audit the key controls and leave an evidence trail so the MPI can be audited by the Personal Data Protection Agency.
Get ahead and comply before the legal deadline. Let’s schedule a meeting: you’ll get a free initial assessment with an action plan suited to your business.
Book your free initial assessmentFrom three to 240 offenses: your MPD must prove it works.
Law 21.595 (Economic Crimes) · In force since September 2024
Law 20.393 (Corporate Criminal Liability) establishes the criminal liability of legal entities in Chile. Following the major amendment introduced by Law 21.595 (Economic and Environmental Crimes), the scope of required prevention grew from three offenses in its first year to 240.
This law:
- Establishes the criminal liability of legal entities.
- Was amended by Law 21.595 (Economic and Environmental Crimes), in force since September 2024.
- Expanded prevention from three offenses in its first year to 240.
- Recognizes the Crime Prevention Model (MPD) as a mitigating factor, provided it can reliably prove the due diligence of senior management.
How we help
We are an audit and consulting firm registered with the Financial Market Commission (CMF) and, since 2016, also registered to certify, update or implement Crime Prevention Models under Law 20.393. We complement this with our Outsourced Compliance Officer service and training on Laws 20.393 and 21.595.
The keys to a successful model
In our experience, a successful model rests mainly on three elements:
-
The commitment and support of the board
-
Ethics training for staff
-
A control style and culture grounded in risk management
Many medium-sized and large companies in Chile already have an MPD; the real question is whether it is actually reducing risk. Let’s talk.
Let’s talk about your MPDNawRath – VARIO Alliance
Technology that detects + Experts who interpret = Controls that improve.
In alliance with the legaltech firm VARIO, we combine advanced technology with our experience in audit, compliance and internal control to help organizations anticipate risks, detect early warning signs and strengthen their controls on an ongoing basis.
-
VARIO
VARIO uses technology and artificial intelligence to monitor corporate communications and identify signals and patterns associated with potential compliance risks.
-
NawRath
NawRath brings the professional judgment to interpret those signals, assess their impact and turn them into concrete actions for prevention, detection, control and continuous improvement in the face of potentially sanctionable or criminal conduct.
-
NawRath × VARIO
The result is a more dynamic view of risk: rather than waiting for an audit, investigation or incident to reveal a gap, you build in the capabilities to detect it, analyze it and act in time.
Why trust an alliance like this
Technology finds signals. Experience turns them into decisions.
True innovation lies not only in detecting more information, but in knowing what to do with it.
Combining technology-driven monitoring with professional judgment makes it possible to focus compliance efforts where they truly matter, strengthen controls and give Management and the Board greater visibility and foresight into their risks.
In the words of Antonio Nawrath and Joaquín Nawrath
A great many companies (medium-sized and large) in Chile already have Crime Prevention Models (MPD). The real question is whether these systems are actually reducing risk and can reliably prove that they are a mitigating factor demonstrating the due diligence of senior management. In our experience, the key to a successful model lies mainly in three key elements:
- The commitment and support of the board,
- the ethical training of its staff, and
- a control style and culture grounded in risk management.
Cultures of integrity are built by contagion. When those who lead an organization make ethics and transparency an everyday way of acting, that standard begins to replicate itself in every decision and at every level of the company.
Our challenge as Auditors is to keep that conversation alive, to train people continuously and, of course, to back it with efficient controls that give senior leadership peace of mind.
Because better companies build stronger markets and, ultimately, a better country.
Team
Professionals with more than 30 years of experience.
-

Antonio Nawrath
Managing Partner
Business Engineer (Ingeniero Comercial), Universidad de Chile, and MBA, Universidad Adolfo Ibáñez. Executive with extensive experience in audit, comptrollership, compliance, finance and risk management. Has led these functions at Codelco, EFE and in the financial sector, and also advises Boards and organizations.
-

Joaquín Nawrath
General Manager
Business Engineer (Ingeniero Comercial) and Master in Marketing Administration, Universidad Adolfo Ibáñez, with a Diploma in Corporate Governance from Universidad Católica. Specialist in strategy, business development, marketing and organizational transformation, with experience leading companies, startups, sales teams and strategic alliances in Chile and Germany.
-

Tomás Nawrath
Director of Environmental Affairs
Veterinarian with a Master’s in Applied Environmental Engineering and specialized training in waste management, circular economy and Life Cycle Assessment. ISO 14001 Lead Auditor, with experience in environmental management, regulatory compliance, industrial and hazardous waste, the REP Law (Extended Producer Responsibility) and sustainability projects.
-

Carlos Eisendecher
Director of Training
Business Engineer (Ingeniero Comercial), Pontificia Universidad Católica de Chile. Executive with more than 40 years of experience in compliance, risk management, internal control and internal audit, gained mainly at domestic and international financial institutions.
-

Guillermo Paredes
IT Director
Systems Engineer, MBA and Master in Human Factor, with international certifications in risk, audit, business continuity, anti-bribery and privacy. Executive with more than 25 years of experience in audit and risk management, specializing in technology, cybersecurity, compliance, crime prevention and data protection.
-

Carolina Aguayo
Compliance Manager
Public Accountant and Auditor (Contador Público y Auditor), Universidad de Valparaíso, with more than 20 years of experience. Specialist in corporate governance, risk management, internal control, audit and finance, with a track record advising Boards and leading administration, compliance and crime prevention processes.
-

Ted Montoya
Audit Manager
Business Engineer (Ingeniero Comercial) and Public Accountant and Auditor (Contador Público y Auditor), with postgraduate training in finance, enterprise risk management and leadership. Executive with more than 30 years in the financial sector, specializing in credit, collections, liquidity and market risk, with extensive management experience at financial cooperatives.
-

Cristián Carvajal
Business Risk & AI Manager
Public Accountant and Auditor (Contador Auditor), with postgraduate studies and diplomas in Artificial Intelligence, Corporate Governance, Risk and Compliance. Executive specializing in risk management, internal audit and compliance, with experience in banking, mining and the Big Four, currently integrating Artificial Intelligence into control and risk assessment processes.
-

Marcelo Navarrete
Compliance Attorney
-

Jorge Davis
Senior Auditor
Statistician and Public Accountant and Auditor (Contador Auditor), with diplomas in Operations Management and Integrated Risk Management. Executive with an extensive career in the financial sector, specializing in internal audit, risk, compliance, internal control and crime prevention, leading comptrollership functions and professional teams, mainly in banking.
-

Mauricio Salvo
Senior Auditor
Public Accountant and Auditor (Contador Auditor) and General Accountant, DUOC UC. Specialist in financial audit, IFRS, internal control and financial statement analysis, with experience at PwC, BDO and Banco Santander. Career combining audit execution, control assessment, reconciliations and reporting results to management.
Clients
They have trusted us
Our team and its professionals have contributed to risk management, internal control, audit and compliance at more than 40 companies. Here are some of them.
Contact
Let’s talk about how to meet your company’s needs.
We offer a remote meeting to understand your most pressing needs and propose solutions drawing on our extensive experience. Let’s schedule a short video call: leave us a message and we’ll get in touch.
Contact details
- Address Monjitas 392, Santiago
- Phone +56 9 9503 7517
- Email contacto@nawrath.cl



























































































