Tax withheld from others
What formats 1001 and 2276 say the company withheld, against what it declared on the withholding returns.
C1 · 1001 and 2276 against form 350
Colombia exógena checker · Free tool
The checker reconciles the 2025 exógena XML files you already filed with the income tax return (form 110), the VAT returns (form 300) and the withholding tax returns (form 350) for the same year, and shows you with a traffic light where they disagree.
Free. It works offline, with no AI and no sign-up, on Windows or Mac. The tool is in Spanish, like the DIAN forms it reads.
It opens as a page of this site, in a new tab: nothing to download or install. To use it offline, the ZIP file, under 300 KB, is at the end of the page.
Every year, companies in Colombia report to DIAN, the tax authority, what they paid, withheld, bought, sold and owed to each third party, in a set of XML files known as the información exógena. DIAN then cross-checks those files against the company's own tax returns for the same year and contacts the companies where the figures disagree.
The checker is for whoever files the exógena for several Colombian companies: the finance team of a foreign group with subsidiaries in Colombia, or the outsourced accounting firm that works for them. It runs the same cross-check first, one company at a time, with the files you already have. For each company you load the XML files, type or paste from Excel about twenty figures from the returns, and get a one-page report.
Each check compares what the exógena says with what the return says. When the unexplained difference reaches 1 UVT, Colombia's tax value unit, it turns amber; from 20 UVT, red. The threshold can be changed on the page.
What formats 1001 and 2276 say the company withheld, against what it declared on the withholding returns.
C1 · 1001 and 2276 against form 350
The VAT withheld according to formats 1001 and 2276, against box 134 of the withholding returns.
C2 · 1001 and 2276 against form 350
The VAT on purchases in format 1005, against the deductible VAT on the VAT returns.
C3 · 1005 against form 300
The VAT on sales in format 1006, against the VAT charged on the VAT returns.
C4 · 1006 against form 300
The income reported in format 1007, against gross income and returns on the income tax return.
C5 · 1007 against form 110
Deductible payments in format 1001 and payroll payments in format 2276, against costs and expenses on the income tax return.
C6 · 1001 and 2276 against form 110
What format 1003 says others withheld from the company, against the withholdings it credited on its income tax and VAT returns.
C7 · 1003 against forms 110 and 300
Receivables in format 1008, liabilities in 1009, and bank accounts and investments in 1012, against the balance sheet on the income tax return.
C8 · 1008, 1009 and 1012 against form 110
For every check that disagrees, the report says what to look at and which ten third parties weigh most in the figure. It also checks the XML files themselves: structure against DIAN's official schemas, tax ID check digits, document types, duplicate records, small-amount aggregates and the bank transaction tax, among other things.
It is a single page that runs in your browser, opened from here or downloaded. It has no server, and its security policy forbids it from connecting anywhere: open it, switch off the internet and carry on. What you load exists only while the tab is open.
The arithmetic is done by rules written one by one from DIAN's resolutions and its validation software, and every rule says which regulation it comes from.
Opening or downloading it asks for no name and no email, installs nothing and asks for no passwords. I count how many times it is opened and downloaded, without recording who.
How to check: open the checker, switch off the internet and load an XML file; it keeps working. Anyone who can read a web page can view its source: everything is there, with nothing loaded from outside. The SHA-256 fingerprints of the page and of the ZIP are in the download section.
Andrés Briñez. Colombian, working with data and artificial intelligence from Quito, Ecuador. I built the checker with DIAN's resolutions and its validation software at hand, and I give it away because it is the first part of what I do for accounting teams: leaving the exógena done and reconciled before DIAN cross-checks it.
If you want to know who you are dealing with before opening anything: my LinkedIn profile, my background and the data processing policy, with my address. WhatsApp and email are answered by me.
Windows or Mac, with a current browser: Edge, Chrome, Firefox or Safari. Nothing to install.
As filed: formats 1001, 1003, 1005, 1006, 1007, 1008, 1009, 1010, 1012 and 2276, whichever the company has.
The 2025 income tax, VAT and withholding returns, in their latest version: about twenty figures using the annual totals.
Tested on the engines behind Chrome and Edge, Firefox and Safari: on all three it opens offline, prints the report on one sheet and downloads the CSV.
The judgement of the accountant who signs. The checker shows differences and their likely causes; whether a difference is explained, corrected or left as it is remains their call.
It does not correct or file anything, it does not query DIAN and it gives no tax opinion. It does not cross-check against what third parties reported, against electronic invoices or against the banks. And it covers the 2025 tax year only.
The same page that ships in the ZIP, served from andresbrinez.com. It opens in a new tab and connects to nothing: you can switch off the internet once it is open.
Open the checkerIt contains the same page, verificador-exogena.html, and the two-page guide «Cómo usar el verificador», in PDF and in Spanish. On Windows: right-click the ZIP, choose «Extract All» and double-click the page. On a Mac: double-click the ZIP and then the page.
Download the ZIPSHA-256 fingerprint of the ZIP: 4f1142c610fe8dbe7ef7394a32a7fbb42c716f0d8b0cb9cc51bf7e4e6e832ffa. Of the page: c98d81a2597200fc83732df5a3b3a6f267bf9c63065a4bcb990fb9ae4e24a8bf. To check that what you have is this, compare the fingerprint.
Open source, under the MIT licence: the code is at github.com/ACBRI/verificador-exogena, for anyone to read, audit or improve. No warranty.
09 /
If a company comes out red and you want its 2026 exógena done and reconciled for you, write to me.
contacto@andresbrinez.com