Every figure we publish about authorization times: where it comes from, what it means, and how to check it yourself against the Diario Oficial de la Federación.
An authorization timeline is a fact about a process that already ended. It is not a deadline the regulator promises, and it is not a result a law firm can guarantee. This page explains how the Legal Paradox® Regulatory Intelligence Index is built, where every number comes from, what it can and cannot tell you, and how to check it yourself. The index is published at mapafintech.com/dashboard; it is maintained by Legal Paradox® and is not an official statistic of the Comisión Nacional Bancaria y de Valores (CNBV).
The index documents authorizations of Financial Technology Institutions (ITF) in Mexico since the Fintech Law took effect in 2018: Electronic Payment Fund Institutions (IFPE) and Crowdfunding Institutions (IFC), together with SOFIPO and banking authorizations relevant to the same market. Each row is one authorization published in the Diario Oficial de la Federación (DOF). Withdrawn or denied applications, and conditional authorizations that were never published, are not rows, because the DOF is the only public act that fixes an end date. The index therefore describes what the regulator authorized, not everything that was applied for.
At the current build the dataset holds 97 authorization records. Of these, 88 are ITF authorizations (61 IFPE and 27 IFC through the end of 2025); the rest are SOFIPO and banking entries. The ITF records were reconciled against every edition of the DOF published from 1 January 2019 to 30 September 2026: each record matches one initial authorization, with none missing and none duplicated. Each institution is counted once: an entity that later changed its name keeps a single record under its current name. No Innovative Model (regulatory sandbox) authorization has been granted to date.
Every row is built from the DOF publication, the CNBV registry of supervised entities and, where relevant, Banco de México materials and the compliance matrices we maintain for each entity type. Each record links to its DOF publication so that any reader can check the end date without relying on our presentation.
The index is rebuilt whenever a new authorization is published in the DOF or a record is corrected. Each build is dated, and the latest authorization recorded is shown next to it, so you always know which version you are reading. Current build: 30 September 2026. Latest authorization recorded: 15 October 2025 (Moneki, IFPE). No initial ITF authorization was published in the DOF between that date and the build date; the DOF entries in that window concern amendments to, or revocations of, existing authorizations.
You will find other averages in circulation. None of them contradicts the index. They differ because the universe (IFPE only, or all ITF), the observation window and the definition of the start date differ.
A single case can also sit far from any average: Finco Pay was authorized in 566 days (DOF 16 June 2025) and Moneki in 574 (October 2025).
The most useful independent reference is the audit of the CNBV by the Auditoría Superior de la Federación (audit 2023-5-06B00-07-0080-2024, Cuenta Pública 2023, “Regulación y Supervisión de las Instituciones de Fondos de Pago Electrónico”). The ASF reviewed the 23 IFPE authorizations granted in 2023: thirteen took between 1,248 and 1,542 days, nine between 405 and 445, and one 30 days; it also records that no resolution deadline existed until the CNBV’s November 2023 manual introduced a 180-calendar-day term. The audit covers IFPE only and does not name the entities in each group, so it is a reference for the IFPE market, not a validation of our index or of any individual file.
Three clocks run in every authorization, and only one of them is the regulator’s.
None of this is a forecast. A well-prepared file shortens the parts of the process that depend on the applicant; it does not control the regulator’s calendar, its workload or a change of administration.
The index depends on the filing date stated in each authorization document; where sources disagree, the DOF publication governs and the discrepancy is noted in the record. It does not adjust for the number or length of observation letters, and it does not separate periods under different CNBV administrations, although those periods are visible in the data. It cannot describe how long unsuccessful or withdrawn applications took, because they never reach the DOF. And the two results we publish for our own work are exactly that: two results, dated, not a statistical sample.
No. It is an index maintained by Legal Paradox® from public records: the DOF, the CNBV registry and Banco de México materials. Public sources do not make it an official figure, and the CNBV has not endorsed it.
Because the calculations use different universes, windows and start-date definitions. The 809 figure comes from a CNBV communication reported by Latam Fintech Hub; the 815 from El Economista’s own count in August 2024. The index uses every IFPE authorization published in the DOF since 2018, counted from the first application filing to DOF publication. Compare universe, cut-off and start date before comparing the numbers.
One. The 416-day figure is the most recent IFPE authorization we prepared, Sylon, published in the DOF on 10 April 2023; the 418-day figure is the most recent IFC, Inverteca, same date. We publish them as dated results, not as averages, because that is what they are.
Yes. The dataset is downloadable, every row links to its DOF publication, and the definitions above are the ones applied. If you find a row that does not match its source, write to us and we will correct the record in the next build.
Whenever a new authorization is published in the DOF. Each build carries its date and the latest authorization it contains.
We map your entity type against the index and show you which parts of the clock depend on you, and which depend on the regulator.