Workplace risk insurance in Colombia (ARL): risk levels and how premiums are calculated

Workplace risk insurance in Colombia (ARL): risk levels and how premiums are calculated
Workplace risk insurance costs little for an office and a great deal for a plant or a construction site, and that gap is not the provider's whim: it comes from the risk level the ARL assigns to the activity and from the base the premium is calculated on. For a small business, the expensive mistake is not paying a high rate; it is declaring a lighter activity than the one it actually performs and finding out on the day of the accident. This article covers what the ARL pays for, how the five levels are assigned, what the contribution base and its caps are, how the monthly amount is calculated, and what the employer must have in place before anyone starts working.
What the ARL covers and what it does not
The ARL — the workplace risk administrator — covers two things and only two: workplace accidents and occupational diseases. When the event falls into those categories, the entity pays for medical care, incapacity, compensation and the disability pension. It is the logic of insurance: someone else absorbs the cost of an event that, paid directly by the company, could break it.
The most common confusion is treating it as a health insurer. It is not. General illness — a cold, an infection, surgery unrelated to work — is not covered by the ARL: it goes through the EPS, the health plan. If payroll files an ordinary sick leave with the ARL, it loses days and the claim comes back. And if the worker is left waiting for an answer, the fault is not the entity's.
| Situation | Who responds | What is covered |
|---|---|---|
| Workplace accident | ARL | Medical care, incapacity, compensation and disability pension |
| Certified occupational disease | ARL | The same benefits as a workplace accident |
| General illness, unrelated to the job | EPS | The ARL does not cover it |
| The worker's salary for the month | Employer | Not an ARL benefit: it is payroll |
A workplace accident is covered at 100% from the first day of registration, with no waiting period. That is why late registration is so dangerous.
The five risk levels, from the office to the construction site
The system does not classify companies by size or by accident history: it classifies activities into five levels, from I to V. Level I is minimum risk and level V is maximum. A small company can sit at level IV if its operation is heavy; a large company can sit at level I if all its staff is administrative. Size protects no one from the level.
| Level | What kind of operation it describes | Illustrative examples | How the rate behaves |
|---|---|---|---|
| I | Minimum risk | Offices, administrative services, retail without handling loads | The lowest in the system |
| II | Low risk | Support tasks with moderate exposure | Low |
| III | Medium risk | Workshops, warehouses with movement of goods | Intermediate |
| IV | High risk | Production plants, construction sites, machine operation | High |
| V | Maximum risk | Activities with severe and permanent exposure | The highest in the system |
The rate column shows direction, not the number: the exact percentage is set by the ARL. What matters is the jump. Moving from a low level to a high one can multiply the ARL line several times over, and with it the monthly cost of every exposed worker.
There is a nuance almost nobody applies well: several levels coexist inside one company. Administrative staff, warehouse staff and plant staff do not share the same exposure, and the classification can recognise that by workplace or by group of workers. Declaring everyone at the highest level means overpaying; declaring everyone at the lowest is the opposite mistake, and a far more expensive one when the review arrives.
The ARL assigns the level, not the employer
Here is a point that surprises many owners: the employer chooses the ARL, but not the level. You can switch providers if you are unhappy with the service, and it is worth comparing coverage network, response times and the quality of advice. What you cannot do is decide your operation is level I because the rate suits you. The classification is made by the entity based on the economic activity and the real exposure.
That is why the activity declared at registration is not just another form. If the company registers as a trader and in practice also installs, transports or processes, there is an exposure that has not been declared. When the ARL detects it and reclassifies, the rate rises and the cost lands abruptly in next month's payroll. And if the accident happened before the correction, the company ends up arguing whether the event matched the declared level, with the worker and their family in the middle.
Reclassification is not a punishment: it is the premium adjusting to the risk actually taken. If your operation changed — you opened a plant, added on-site installation — it is better to review the level before the entity does.
The contribution base: what the IBC is and where it stops
The rate applies to the IBC, the contribution base income. It is not simply the salary: it is the salary and salary payments for the period. Commissions, surcharges and variable payments of a salary nature go into the base; some items are excluded by law and should be reviewed with your accountant before the settlement is built, because a badly built IBC drags health, pension, ARL and payroll levies along at the same time.
The IBC has a floor and a ceiling: it cannot be below 1 minimum wage (SMMLV) or above 25. The minimum wage changes every year, so both caps change with it; check the current year's figure before settling and do not work with last year's. The ceiling has a practical effect many overlook: a manager on a very high salary does not contribute on the full amount, but on the 25 SMMLV cap.
A badly built IBC produces two opposite errors, and both are expensive. If you contribute below what is due, the worker ends up underinsured: on the day of the accident the benefit is calculated on a smaller base and the difference becomes a claim. If you contribute above it, the company overpays every month, and that surcharge is silent because it never shows up as an error in any report.
Why the rate varies so much between an office and a plant
The rate is expressed as a percentage of the IBC and rises with the risk level. That is the whole mechanism, and it explains why the ARL line in an administrative payroll looks like a detail while in a plant it is a figure discussed in the cost meeting.
Two things the rate is not. It is not a price the company negotiates with the ARL: the entity applies it according to the level the activity carries. And it is not the total cost of safety: it is the insurance premium. What the company invests in prevention — protective equipment, training, machine maintenance, signage, medical exams — does not replace the contribution, and the contribution does not replace prevention.
On the payroll filing, the ARL is paid together with health, pension and payroll levies. That has a practical consequence: an error in the base or in the level does not stay inside the ARL. It contaminates the whole settlement and usually surfaces as a discrepancy in the filing review, months later, when nobody remembers why it was declared that way.
What the employer must have ready before day one
ARL registration does not allow "I'll fix it later". The worker must be registered before starting work, not on the day the contract is signed and not at the end of the period. Four obligations hold that rule up:
- Register before the first day, including short contracts and replacements. Exposure starts when the person walks in, not when the system records them.
- Declare the activity accurately, with the real tasks and not just the corporate purpose.
- Report the accident when it happens, through the channel the entity requires.
- Pay the contribution in the filing, within the calendar deadlines.
The cost of failing at the first one is the harshest. If the worker has an accident while unregistered or misclassified, the company absorbs the cost of the event and the penalties. It is not a minor fine: it means paying out of pocket for medical care, incapacity and, in the worst case, the compensation or pension the ARL would have covered.
A workplace accident: what to do the same day
First, immediate medical care, without waiting for authorisations or arguing about whose fault it was. That argument happens later, with the clinical record in hand.
Second, report the accident to the ARL through the channel set up for it. The report is not paperwork to cover your back: it is what triggers coverage and leaves the record that later supports the incapacity, the compensation and any claim. An accident without a report is an accident the entity does not know about, and what is not known is not paid.
Third, keep the evidence: the worker's account, witnesses, the time, the place, the task being performed, the conditions of the workstation. Fourth, if the accident looked minor, do not play it down. A backache reported the same day is a clinical case; the same backache reported three weeks later is an argument about whether it happened at work. The difference between the two is almost always the timely report.
And one clarification that prevents filing errors: a workplace accident is covered at 100% from day one, but general illness does not go through the ARL. Filing at the wrong window delays care.
ARL and SG-SST: one pays for the event, the other prevents it
The ARL pays for the event; the SG-SST, the occupational health and safety management system, prevents it. They are complementary and neither replaces the other. A company can have its contributions up to date and no management system at all: in that case the insurance responds to the accident, but the exposure remains intact and the penalty for the missing system arrives too.
The reverse case fails just as fast. A flawless SG-SST on paper covers nothing if the worker is not registered, is misclassified, or the contribution was suspended for non-payment. Prevention reduces the probability of the event; the ARL reduces its economic impact. Neither does the other's job.
For a small business this translates into a simple division of tasks: the ARL is reviewed in payroll and in the filing, every month; the SG-SST is reviewed in the operation, with a risk matrix, a work plan and named owners. If the company only has the first, it has insurance, not management.
Example: the same payroll at risk level I and risk level IV
Take a worker with an IBC of $2,500,000. The contribution is the base multiplied by the rate. With an example rate of 0.522% for level I and 4.35% for level IV — illustrative percentages, the real rate is set by the ARL — the calculation runs like this:
- Level I: $2,500,000 × 0.00522 = $13,050 per month.
- Level IV: $2,500,000 × 0.0435 = $108,750 per month.
- Monthly difference: $108,750 − $13,050 = $95,700.
- Annual difference: $95,700 × 12 = $1,148,400.
| Item | Level I | Level IV |
|---|---|---|
| Monthly IBC | $2,500,000 | $2,500,000 |
| Example rate | 0.522% | 4.35% |
| Monthly contribution | $13,050 | $108,750 |
| Annual contribution | $156,600 | $1,305,000 |
| Annual difference against level I | — | $1,148,400 |
The number lands when you multiply it across the payroll. Ten workers with that same IBC at level IV cost $1,087,500 a month in ARL alone, against $130,500 at level I: almost a million pesos a month apart, $11,484,000 a year. For a small business that is a fixed charge paid every month, whether or not anything is produced, and one that rarely appears in the budget under its own name.
Now the effect of a reclassification. If the ARL reviews the activity and moves the company from level I to level IV, the change does not touch the rest of the payroll: health, pension and levies stay the same, because the base is the same. What changes is the premium. With ten workers, moving from one level to the other adds $957,000 a month to labour cost, and that surcharge is not recovered: it is budgeted. That is why the classification is settled at the start, with the real operation on the table, and not corrected once an accident is already on the books.
Common mistakes and how to spot them in time
Almost every ARL problem in a small business starts from the same five points. The table sorts them by symptom, which is how they are found in practice: nobody reviews the classification for fun, it gets reviewed when something does not add up.
| Mistake | Symptom that gives it away | Consequence |
|---|---|---|
| Registering after the first day of work | The worker is already on site and the registration carries a later date | If an accident happens in that gap, the company absorbs the cost and the penalties |
| Declaring a lighter activity than the real one | The rate is noticeably lower than that of companies in the same sector | Reclassification, higher retroactive cost and a disputed claim |
| Filing a general illness with the ARL | The claim comes back or goes unanswered | Lost days and delayed care; the case belonged to the EPS |
| Not reporting the accident to "keep the statistics clean" | The event exists at the clinic but not in the ARL's system | Coverage is compromised and the company is exposed |
| Believing the SG-SST replaces the ARL, or the other way round | There is a risk matrix but the contribution is suspended | Prevention without financial backing, or insurance without prevention |
The second mistake is the costliest and the hardest to admit. Nobody declares less exposure on purpose; they declare what the company registry said on the day of incorporation, and the operation changed without anyone updating the paper. The review should happen every time the business adds a line of business, a workplace or a new task.
An honest closing before you hire
This text explains the mechanism; it does not resolve your case. The exact rate, the level your activity carries and how to declare a specific workplace are defined by the ARL, and the contribution base is confirmed with your accountant, because it depends on how your payments are classified. If the company has several sites, agency staff, permanent contractors on its premises or activities that change by project, the level analysis is a separate job and should be done with the operation documented, not from memory.
What you can do today, unaided: verify that every worker is registered before their first day, check that the declared activity describes what the company actually does, and confirm that the payroll IBC matches what is reported in the filing. Those three checks prevent most of the problems described here, and they cost nothing.
If payroll and the filing are also settled in the same system, with the base and the changes recorded in one place, the monthly review stops being a hunt. Kardex Tauro brings together inventory, invoicing and payroll for Colombian small businesses, and that is precisely where a mistyped figure stops spreading unnoticed. None of this replaces labour advice: it is a guide to asking the right questions before the problem shows up.