Mexico has the nearshoring tailwind, and a 3% advanced-AI ceiling.

The nearshoring tailwind is structural, not a slogan. Mexico became the United States' largest goods-import partner in 2024 at $466.6B, 48.9% of it routed under USMCA preferential terms. The Bajío auto corridor, Nuevo León's steel-and-electronics cluster, Querétaro aerospace, and Estado de México consumer goods are all absorbing the manufacturing capacity that the US is reshoring out of China.

Capex is real: BBVA Research and the Dallas Fed both track double-digit FDI growth into Mexican manufacturing through 1H 2025. AI buying in this market frequently rides on top of a physical investment — a new line, a new shift, a new English-language supplier portal the US buyer demands. That is a different sales motion from EU enterprise AI, where the AI project is the project.

The advanced-AI ceiling is the wedge. INEGI's 2024 Economic Census shows ~38–40% of Mexican companies report some AI use and SME-segment adoption hits 64%. But only ~3% have reached advanced implementation and only ~7% apply AI to advanced processes. The headline number flatters because most SMEs are using free-tier ChatGPT and Mercado Libre's bundled tools rather than building owned infrastructure.

The Tier-1 consultancies (Softtek — the first LATAM company with ISO 42001, EPAM Neoris, Globant, NDS Cognitive Labs, AYESA Mexico) open enterprise envelopes above USD $250,000 with 8–20 FTE delivery teams. That price filters out exactly the mid-market that needs AI search citation, voice handling, and CFDI-aware workflow automation the most.

Three tech poles, three different patterns. CDMX (Mexico City + Estado de México) is corporate-HQ Mexico — financial services, scaleups, US-backed startups, slower committees, largest deal sizes, highest ChatGPT and Perplexity penetration. Monterrey is industrial Mexico — Cemex, FEMSA, Vitro, Alfa, Soriana — pragmatic, USD-fluent at the operator level, closer to Texas culturally than to the capital.

Guadalajara is the engineering pole — Oracle, IBM, Intel, HPE all have major centres there; English-default at the senior-engineer level; faster cycles than CDMX. One Spanish-language site does not serve all three. Areza ships per-cluster GTM motion, not a Mexico City-only narrative.

Mexican Spanish is the language of the deal, USD is often the language of the price. Operator-level B2B in Mexico defaults to `tú` faster than Spain does — Mexican SME founders hit `tú` within minutes, while Spain often holds `usted` deep into the procurement cycle. The contract still signs with `usted` formality in the cover note.

Series A and above price in USD by default; family-business mid-market expects MXN proposals with a USD reference rate. Peso volatility is not hypothetical — USD/MXN moved from 20.93 to 17.88 in 2025, a 23% swing in a single year. Any vendor priced in USD invoicing a Mexican peso buyer is having a quarterly re-pricing conversation. We invoice in MXN with a USD reference and absorb FX inside the retainer.

Areza is purpose-built for the Mexican mid-market that the Tier-1 consultancies cannot serve at price. Foundation starts at MXN $48,000 (~$2,750 USD) for a 2–4 week conversion-first build in Mexican Spanish. AI Search retainer starts at MXN $7,500/month (~$430 USD).

A typical Mexican SME engagement combines Foundation + AI Search + Knowledge Bot, landing at MXN $90,000–$130,000 setup plus MXN $13,500–$17,500/month for the first six months. Voice Agent in Mexican Spanish goes live in 14 days. None of that requires a Softtek-sized RFP cycle or a Globant-style steering committee.

The compliance map is published as part of the engagement, not added later. LFPDPPP 2025 took force on 21 March 2025 — INAI was dissolved and oversight now sits with the Secretaría Anticorrupción y Buen Gobierno (SABG). We configure Consent Mode v2 with all-denied defaults, set EU or Mexico data residency on request, sign DPAs at engagement start, and include explicit no-training-on-customer-data terms.

For fintech clients under CNBV + Banxico + CONDUSEF supervision, we add the Ley Fintech compliance line items at scoping rather than as a surprise. For SME clients above MXN $2M annual spend we invoice via a Mexico-domiciled CFDI 4.0 partner with the correct RFC, uso (G03), forma de pago, and método de pago codes so AP teams do not route the invoice to `international wire` purgatory.

We ship Mexico-first, not Madrid-first. The Spanish surfaces are Mexican Spanish — `computadora` not `ordenador`, `celular` not `móvil`, `tú` register acceptable at the operator level, `usted` for finance and family-owned patriarchs on first contact.

Voice Agent uses Mexican Spanish phonology and intonation; Castilian Spanish accents are filtered out of the standard configuration because Mexican buyers hear them as foreign. Sector-specific scripts cover CNBV-regulated fintech, CONDUSEF-supervised consumer finance, SAT-validated invoicing flows, and AMIA-aligned Tier-1 supplier portals for automotive.

Mexico-specific timezone coverage is built in. The team operates with overlap to CST (UTC-6) and PST (UTC-8) — the dominant working hours for CDMX, Monterrey, Guadalajara, and the US nearshoring buyers most Mexican clients answer to. That means same-business-day async response during the Mexican workday rather than the 8-hour Europe-Mexico lag that EU-only agencies impose.

For US-buyer-facing flows (the supplier portal use case), we configure bilingual ES-EN content with hreflang `es-MX` + `en-US` set correctly, so the US buyer searching for a nearshore supplier finds the English page and the Mexican operator finds the Spanish page without either rendering the wrong locale.

LFPDPPP 2025 + SABG set the floor; there is no standalone AI law yet. The Ley Federal de Protección de Datos Personales en Posesión de los Particulares took force on 21 March 2025, replacing the dissolved INAI with the Secretaría Anticorrupción y Buen Gobierno (SABG) as the federal supervisor.

Cross-border transfers to the US, EU, China, or Singapore require explicit international-transfer treatment in the privacy notice and contract. Cookie consent is opt-in for non-essential trackers.

There is no Mexican equivalent of the EU AI Act yet — a federal AI bill has been in committee since 2023 — but the Agencia de Transformación Digital y Telecomunicaciones (ATDT) announced `the largest AI training centre in Latin America` in 2025 and Softtek became the first LATAM tech company to obtain ISO 42001 certification. The compliance map is therefore clear for data, deliberately soft for AI itself, and we configure both at engagement start.

CFDI 4.0 is the procurement gate. Non-compliance carries per-invoice fines of MXN $19,700 to $112,650. Every B2B / B2C / B2G invoice in Mexico must be SAT-validated CFDI 4.0 XML, digitally signed via SAT e.Firma, PAC-validated, and stamped in real time.

Monthly contabilidad electrónica is due by the 25th of the following month and invoices archive for 5 years. From 1 May 2026, digital platforms must grant SAT permanent online access to platform-user tax data.

A vendor that cannot issue a CFDI 4.0 invoice with the correct RFC, uso (G03), forma de pago, and método de pago codes does not get paid by a Mexican mid-market AP team — the invoice routes to `international wire` purgatory and finance pushes back. We invoice via a Mexico-domiciled CFDI partner on request for clients above MXN $2M annual spend.

Mexican Spanish, not Castilian. The lexical differences matter for SEO and AI search. `Computadora` ranks in Mexico; `ordenador` reads as Iberian. `Celular` is Mexican; `móvil` is Iberian. Operator-level B2B defaults to `tú` faster than Spain — a Mexican SME founder will hit `tú` within minutes of meeting; the contract still signs with `usted` formality in the cover note.

PROFECO (Procuraduría Federal del Consumidor) requires consumer-facing contracts in Spanish and privacy notices under LFPDPPP must be Mexican Spanish in practice. We default to `usted` on first contact and follow the buyer's lead within one exchange.

Mid-market Mexico is grupos territory. Outbound without referral is mostly noise. Much of mid-market Mexico is held inside family-owned conglomerates (`grupos`) built across two or three generations — packaging, food, agro, construction, much of the auto-parts ecosystem. The decision-maker is the patriarch plus a US-educated next-gen operator. The next-gen buys AI work.

Cold outbound into a grupo without an introduction is a non-starter; events (Hannover Messe Mexico, Talent Land Guadalajara, INA PAACE Mexico, Expo ANTAD, AMITI summits, Mexico Business Forum) are where mid-market trust gets built. We pair Foundation + AI Search to compound long-tail inbound while warm-introducing via sector events for the named-account work.

Decision cycles: faster than España, slower than US. SME cycles run 45–90 days, mid-market 60–120 days, enterprise 4–7 months under CNBV / Banxico / CONDUSEF supervision. The first-decision phase is faster than Spain because the patriarch decides faster than a Spanish CFO committee, but the contract-language phase is similar — every clause gets re-read in Spanish for the family-business lawyer.

We start with Foundation engagements so the buyer sees output before committing to a longer arc, and we structure retainers in MXN with a USD reference rate so the peso swing does not blow up the quarterly P&L.