
Align with UNE 19601 and the Spanish Criminal Code
UNE 19601 sets the requirements for criminal compliance management systems. How Naltilia Helps
- • Map your criminal risks (corruption, fraud, money laundering, tax offences, environment, workplace safety, data protection, etc.).
- • Link each risk to specific controls: policies, procedures, approvals, segregation of duties, financial controls, whistleblowing, investigations.
- • Generate structured risk assessments and gap analyses against UNE 19601 requirements.
- • Maintain a live view of your compliance level by process, business unit or subsidiary.
- Clear understanding of your exposure and priorities
- Turn fragmented obligations into a single, structured criminal risk map
- Evidence-ready for boards, auditors and prosecutors
- Show continuous improvement in your criminal compliance
Operate an Effective Criminal Compliance System
Move from paper programs to a living system that works day to day. How Naltilia Helps
- • Automate the creation and updating of key documents: Code of Ethics, crime-prevention policy, disciplinary regime, third-party clauses.
- • Centralise incidents, investigations, sanctions and remedial actions in one platform.
- • Track the functioning of your whistleblowing channel and internal investigations.
- • Document the role and activity of the Compliance Function and governing bodies.
- Faster, more consistent implementation of crime-prevention controls
- Automate documentation and tracking
- Clear traceability of decisions, investigations and corrective measures
- Stronger position to prove due control and reduce liability


Demonstrate Continuous Improvement & Readiness
UNE 19601 emphasises ongoing monitoring, review and improvement. How Naltilia Helps
- • Plan and monitor effectiveness tests of key controls (training, approvals, checks, audits).
- • Track training coverage and understanding for high-risk roles and third parties.
- • Prepare dashboards and reports for governing bodies, supervisory authorities and certification audits.
- • Document updates following incidents, regulatory changes or audit findings.
- Show that your model is not static, but actively managed
- Make certification and supervisory reviews simpler and more transparent
- Reinforce your defence in case of investigations or criminal proceedings
- Document continuous improvement and active monitoring