MaterialMx — audit defender for Mexican SMBs

1. One-liner

Scores every CFDI for the new SAT materialidad risk and assembles the evidence packet before the 5-day audit clock starts.

2. Trend signal — why now?

Mexico’s 2026 tax reform took effect January 2026 and rewrote the rules of the game. A valid, timbrado CFDI is no longer enough. Under the new “operaciones reales” provision and rule 2.9.19 of the 2026 Resolución Miscelánea, a CFDI that doesn’t represent an actual, provable operation is treated as false — and false CFDIs now carry criminal liability for the issuer, the recipient, and any intermediary.

The teeth are in Article 49-Bis: the SAT can run an expedited home visit, suspend your Sello Digital on the spot (you can’t invoice = you can’t operate), and give you only 5 business days to present proof that the operation was real — contracts, delivery evidence, photos, financial traceability. EDOS caught using a blacklisted (EFOS, Art. 69-B) supplier get 30 days to prove materialidad or eat the disallowance. This stopped being an accountant’s footnote and hit the mainstream press: Infobae ran “La factura ya no basta: el SAT exige ‘materialidad’” on June 5, 2026 — three days ago.

The pain is structural: “integrate solid documentation within days may be materially impossible if not built from the start.” You cannot reconstruct an evidence file retroactively in 5 days. It has to exist before the requerimiento lands. SMBs don’t have a compliance officer. Their accountant is already drowning.

Provenance:

• Signal 1 (demand): “La factura ya no basta: el SAT exige ‘materialidad’ de las operaciones” — https://www.infobae.com/mexico/2026/06/05/la-factura-ya-no-basta-el-sat-exige-materialidad-de-las-operaciones/ — 2026-06-05
• Signal 2 (feasibility/regulatory): 2026 tax reform tightens CFDI rules, adds criminal sanctions; Art. 49-Bis 5-day evidence demand + seal suspension — https://www.fiscal-requirements.com/news/4536 and https://kpmg.com/us/en/taxnewsflash/news/2025/11/mexico-updates-electronic-invoicing-cfdi-2026-tax-reform.html — 2026-01
• Signal 3 (economic): Mexico raised $1.8B VC in 2025 (60% fintech); a paid materialidad tool category already exists (Audita CFDI, ContadorMx courses, facturando.mx guides) — https://blog.mean.ceo/startups-mexico-news-june-2026/ and https://contadormx.com/solucion-materialidad-de-las-operaciones-sat/ — 2026 Category: Regulatory arbitrage

3. The opportunity

The market response so far is two flavors, both weak:

1. Courses and checklists (ContadorMx, AMCP, facturando.mx). They tell you what materialidad requires. They do zero work. You still build every file by hand.
2. Passive evidence lockers (Audita CFDI). A filing cabinet — you upload PDFs, contracts, photos and attach them to a CFDI. Better than a folder of email attachments, but it’s still 100% manual data entry, and the system never tells you which invoices are actually exposed or what’s missing.

Nobody owns the part that matters: triage and assembly. A typical SMB has thousands of received CFDIs a year. Maybe 40 of them are real risk — a high-value service invoice from a supplier with no IMSS staff, a “consultoría” with no deliverable, a vendor who just hit the 69-B presunto list. The SMB has no idea which 40. MaterialMx ingests the CFDI feed, cross-checks every supplier against the public SAT 69-B (EFOS) lists and capacity red-flags, scores each operation’s audit-defensibility, and hands the owner a ranked worklist plus an auto-drafted evidence packet per exposed operation: the contract template filled, the missing-deliverable request, the SPEI traceability pulled, the photo/email prompts. Turn “build 2,000 files by hand, hope you guessed right” into “fix these 40 before the inspector calls.”

4. Target market

• Primary customer: Two beachheads. (a) Independent despachos contables (~135,000 accounting firms in Mexico, ~97% single-owner) who carry materialidad liability for every client and have no tooling for it. (b) Owner-operated PyMEs with real deduction exposure — manufacturers, construction, logistics, agencies — companies that buy services and need those deductions to survive an audit.
• Why they buy, in their words: “Armar la materialidad en días es materialmente imposible si no se construye desde el inicio.” (Building the evidence file in days is materially impossible if you didn’t build it from the start.) The accountant’s fear is personal: under the 2026 reform the contador can be named as intermediary in a criminal matter. They will pay to move that risk off their desk.
• Rough TAM reasoning: 135,525 accounting/audit firms + several hundred thousand PyMEs with material deduction exposure. Capture 3,000 firms (each managing 20–80 clients) at $80–150/mo and you’re at $3–5M ARR without touching the direct-SMB channel.
• Why now for them: The reform is live now, the press just made it front-page, and the first wave of seal suspensions under Art. 49-Bis will create visible horror stories in H2 2026. Fear is the distribution engine and it’s peaking.

5. Product sketch (MVP)

• CFDI ingestion — connect the SMB’s SAT credentials / CSD or import the XML feed; pull all issued and received CFDIs (SAT keeps 5 years).
• EFOS / 69-B cross-check — match every supplier RFC against the public SAT presunto/definitivo blacklists and flag any CFDI from a listed or recently-listed vendor.
• Materialidad risk score per operation — rank each CFDI by exposure (amount, concept like “servicios/consultoría” with no tangible deliverable, supplier capacity signals, cash-vs-SPEI payment, round numbers).
• Auto-assembled evidence packet — for each exposed operation, generate the rule-2.9.19 file skeleton: contract draft, purchase order, deliverable-request email, SPEI/payment traceability, photo/log upload slots — pre-filled with what we already know.
• Missing-evidence worklist — a ranked “fix these first” queue with exactly what’s absent per file, not a generic checklist.
• 5-day response mode — when a requerimiento lands, one button compiles the complete defense file for a given operation into a submission-ready PDF bundle.
• Despacho multi-client console — one accountant view across all clients, sorted by aggregate exposure.

6. AI angle — what’s load-bearing

AI does the judgment a junior never has time for. (1) It reads each CFDI concept and classifies whether the operation is materializable by document alone or needs physical evidence (a “consultoría estratégica” needs deliverables; a freight invoice needs a carta porte + GPS log) — that classification drives the whole packet. (2) It drafts the contract, the deliverable-request email, and the operation narrative (“razón de negocios”) in correct fiscal Spanish, tuned to what a TFJA-defensible file looks like. (3) It scores exposure across thousands of invoices in seconds — the triage no human does. Remove the AI and you’re back to Audita CFDI: a manual locker. The scoring + drafting is the product.

7. Localization angle

This is a localization play by definition — it’s unbuildable anywhere but Mexico. It’s bound to the SAT CFDI XML schema, the 69-B EFOS list format, rule 2.9.19, Art. 49-Bis procedure, Spanish-language fiscal drafting, and SPEI payment rails. A generic global compliance tool cannot touch it. Pricing in pesos: a $1,500–2,500 MXN/mo tier works where a $149 USD tier would scare a single-owner despacho. The same engine extends later to Colombia (DIAN) and Peru (SUNAT), which are tightening their own e-invoice/nómina regimes — but Mexico first, alone, is a real business.

8. Business model — path to $1M–$5M ARR

• Pricing: Despacho tier $99/mo base + $4/client/mo (a 30-client firm = ~$219/mo). Direct-PyME tier $79/mo. 5-day “emergency defense” one-shot at $199 as a paid-acquisition trap.
• ACV: ~$2,000–2,600/yr for an active despacho; ~$950/yr direct PyME.
• Math to $1M ARR: ~450 despachos at ~$2,200 ACV = ~$1M. Reachable inside the first ~9 months given 135K firms and acute fear.
• Math to $5M ARR: ~2,000 despachos (each carrying many client RFCs) + a few thousand direct PyMEs. Still <2% of the accounting-firm market.
• Expansion path: ACV grows with client count per despacho, then with add-ons — automated monthly materialidad “health report” per client, EFOS-list watch alerts, and an extension into nómina/IMSS capacity evidence. Land on materialidad fear, expand into being the despacho’s compliance layer.

9. Go-to-market wedge — first 100 customers

• Colegios de contadores + AMCP chapters. The accounting colleges are running materialidad seminars right now (AMCP, Contadores de México, ISEF). Sponsor or co-present a 45-min “live materialidad audit of your own client list” webinar; the demo is the product. These rooms hold hundreds of liable accountants. Close 5–10% on the spot.
• Ride the fear content. Infobae, ContadorMx, ISEF, elconta.mx, dsoft are pumping out materialidad explainers weekly. Run Spanish-language ads and a free “¿Cuántos de tus CFDI están en riesgo?” tool against those exact keywords; the free scan (upload XMLs → see your top-40 exposed) converts to paid.
• Despacho cold outreach. ~135K firms, ~97% single-owner — RFC + contact data is scrapable from the SAT directory and pymes.org.mx. Send a personalized “we ran the first 50 of your received CFDIs, here are 6 that would fail a 49-Bis visit” teaser. Fear-led, specific, high reply.
• EFOS-list trigger. Each time SAT publishes a new 69-B presunto list (it’s periodic and public), any business that paid that vendor is now on a 30-day clock. Monitor the list, alert affected RFCs cold. Perfect-timing outreach.

10. Build complexity — justification

Medium. Off-the-shelf: CFDI XML parsing, SAT-credential ingestion (well-documented, PAC integrations exist), LLM for classification and drafting, standard web stack. Custom work: the materialidad scoring logic and the rule-2.9.19 packet templates need real fiscal-domain expertise to be defensible — get it wrong and you give false comfort. A technical founder paired with a Mexican fiscal advisor ships a credible v1 in ~3–4 months. The 69-B cross-check and CFDI ingestion are the only genuinely fiddly integrations.

11. Gating checklist

Gate	Pass?	Note
Legal in target market	✅	Helps compliance; uses public 69-B lists and the taxpayer’s own CFDIs
Ethical — no harm / dark patterns	✅	Fear-led marketing must stay factual, not scaremongering; tool genuinely reduces risk
Market exists (evidence above)	✅	Live reform, paid incumbents, mainstream press, 135K liable firms
1–5 person team can build this	✅	Tech founder + fiscal advisor, ~3–4 months
Launchable with <$50K / ~$500K MXN	✅	Off-the-shelf APIs, no heavy infra

All five pass.

12. Feasibility score

Axis	Weight	Score	Notes
Problem intensity	20	17/20	Seal suspension + criminal liability + 5-day clock = hair-on-fire. Personal liability for the contador.
Demand evidence	15	13/15	Live reform, paid incumbents already selling, front-page press 3 days ago, 135K liable firms. Strong, multi-source.
Build feasibility	15	11/15	Off-the-shelf stack but scoring/templates need real fiscal expertise to be defensible; CFDI + 69-B integrations are fiddly.
Distribution clarity	15	11/15	Named channels (colegios, EFOS-trigger, scrapable directory) but conversion math is estimated, not proven.
Revenue mechanics	15	12/15	Peso pricing works, ACV realistic, $1M needs only ~450 despachos. One churn assumption unproven.
Time to first revenue	10	7/10	Webinar/free-scan funnel can close in 4–8 weeks; some onboarding friction with SAT credentials.
Defensibility	10	5/10	Execution + accumulating fiscal-template quality + despacho workflow lock-in. Audita CFDI and a funded fintech could copy the locker; the scoring quality is the moat.
Total	100	76/100

13. Qualitative modifiers

Founder-fit tags

domain-expertise-required · technical-heavy — needs a Mexican fiscal/contador advisor on the founding team to make the materialidad logic defensible, plus solid engineering for CFDI ingestion and LLM drafting.

Key assumptions to validate (3–5)

1. Assumption: Despachos will pay $99+/mo + per-client fees to move criminal-intermediary risk off their desk. How to test: 30 interviews with single-owner despachos in CDMX/EdoMéx after showing a live scan of their own client’s CFDIs; measure stated willingness-to-pay and pre-sell intent.
2. Assumption: The free “¿Cuántos de tus CFDI están en riesgo?” scan converts to paid at ≥8%. How to test: ship the scan-only tool against materialidad keyword ads; measure scan→trial→paid.
3. Assumption: Auto-drafted evidence packets are defensible enough that an accountant trusts them. How to test: have 5 independent fiscal advisors red-team 20 generated packets against TFJA criteria; need ≥80% “would submit with minor edits.”
4. Assumption: SAT credential / CFDI ingestion onboarding isn’t a fatal friction point. How to test: measure completion rate of the connect-and-scan flow in the first 50 signups.

Risk flags

1. Regulatory risk: The SAT could clarify or soften the 49-Bis procedure, or formalize an official materialidad portal that eats the category. Mitigant: the manual burden won’t vanish; the SAT building a portal is unlikely and slow.
2. Platform dependency: Hard reliance on SAT CFDI access and the 69-B list format. A schema change forces rework. Mitigant: PAC ecosystem absorbs most schema churn.
3. Liability / trust risk: If a generated packet fails an audit, the blame lands on us. Must position as “assistive, accountant-reviewed,” never “guaranteed defense,” and keep a human in the loop.
4. Copycat risk: Audita CFDI or a funded Mexican fintech (gigstack-adjacent) bolts scoring onto an existing locker. Head start + template quality + despacho lock-in is the only moat.

14. Structured verdict

Score:                  76/100
Verdict:                GO
Confidence:             Medium
Best-fit builder:       Technical founder + Mexican fiscal/contador advisor (domain-expertise-required)
Time to revenue:        4–8 weeks (webinar + free-scan funnel)
Capital to launch:      $15–25K USD (~$300–500K MXN)
Top 3 assumptions to validate first:
  1. Despacho willingness-to-pay — 30 interviews with live scans of their own client CFDIs
  2. Free-scan → paid conversion ≥8% — ship scan-only tool against materialidad keyword ads
  3. Packet defensibility ≥80% "would submit" — 5 fiscal advisors red-team 20 generated packets
Kill criteria:
  - Abandon if <15% of 50 despachos shown a live scan express paid intent
  - Abandon if generated packets fail fiscal-advisor red-team below 60% "would submit"
  - Abandon if the SAT launches an official materialidad assembly portal before v1

15. Next step — 1-week validation sprint

• Day 1–2: Build the scan-only wedge — ingest a sample of CFDIs, cross-check against the public 69-B list, output a ranked top-40 exposure list. No packet generation yet, just the triage.
• Day 3–4: Run it live in front of 8–10 single-owner despachos (warm intros + AMCP/colegio contacts). Show them their own client’s exposed invoices. Record reaction and stated willingness-to-pay.
• Day 5: Go / no-go. Falsifiable bar: ≥4 of 10 despachos say “I’d pay for this now” and at least 2 sign a pre-sell LOI or pay a deposit. Below that, the fear isn’t converting to wallet — kill or reshape toward the direct-PyME channel.