Surprising fact: nearly every company in the city-state must hold a private record that shows who truly controls it — a single omission can stall bank dealings and trigger fines.
The Register of Registrable Controllers (RORC) is a legal tool to record people or entities with significant interest or control in a company. It helps firms meet transparency goals and reduces misuse of corporate structures.
This short guide explains who must keep the record, who counts as a controller, and what daily admin usually looks like for a business. You will learn how to identify controllers, issue notices, record key particulars and meet statutory timelines.
There is a two-layer approach: each entity keeps an internal list and must lodge information centrally via BizFile+ with ACRA. The legal duty to keep accurate details rests with the company even when advisers handle the paperwork.
Note: non-compliance can bring penalties and operational friction when corporate actions are needed. For official filing details, consult the ACRA guidance on the RORC.
Key Takeaways
- Maintain a private RORC and lodge matching data with ACRA via BizFile+.
- Understand who qualifies as a controller and how to record their particulars.
- The business bears the legal duty even if a service provider assists.
- Timely updates are essential to avoid penalties and delays in transactions.
- The system promotes beneficial ownership transparency to protect the company and the market.
Understanding the Register of Registrable Controllers and why it exists
The register exists to make who really controls a company clear, helping to deter abuse and to bolster trust in the financial centre. The 2017 amendments to the Companies Act began this reform. Since 30 July 2020 firms must also lodge controller particulars electronically via BizFile+ in addition to keeping an internal list.
How the law frames the duty: companies must maintain an accurate internal record and update it when any relevant interest or control changes. This legal duty sits with the company even if advisers assist.
Practically, the internal register stays at the company while ACRA holds a central, non‑public record. The post‑2020 change made electronic filing and faster updates mandatory, improving audit trails and due diligence.
Why compliance matters now
Current corporate deals, bank onboarding and regulator enquiries rely on timely information. Who holds strategic control or beneficial ownership affects board appointments, veto rights and major decisions. The remainder of this guide shows how to identify a controller, issue notices, capture particulars, and meet filing timelines to stay compliant.
Which entities must comply and who is exempt
Knowing whether your firm must maintain an internal list starts with identifying the legal entity and its status at the date of incorporation or registration.
In scope: Local companies, foreign companies and LLPs must keep a private record unless they meet an exemption. For many entities this duty begins on day one after incorporation.
Special situations — dormant status, winding up, receivership or judicial management — do not automatically remove the duty. Firms in these states often still need to maintain the private list because control can remain relevant to investigations.
Practical difference: Firms must keep an internal list and, where applicable, lodge matching details centrally. Entities that have been struck off are treated differently and generally do not lodge to the central record.
- Typical exemptions include publicly listed firms and certain government-owned entities, but confirm status before assuming relief.
- If a controller exists through another exempt entity, you must still assess indirect control carefully.
- Use a quick checklist: entity type, operational status, change date, and whether central lodging is needed.
For formal terms and to check specific conditions, consult the terms and conditions.
How to determine whether someone is a registrable controller
Two tests decide who qualifies: assess significant interest first, then check for significant control.
Significant interest: share and profit thresholds
Interest usually means more than 25%. If an individual or entity holds >25% of the shares or >25% of voting power, they meet the interest test.
For companies without share capital, use entitlement to profits or capital instead.
Majority voting and member‑voted matters
Significant control can arise through majority voting rights at member meetings. This includes power over changing the constitution, appointing directors, removing auditors, renaming the company, or deciding voluntary winding up.
Appointing or removing directors
Rights to appoint remove directors often create decisive governance power. Low shareholding can still amount to control if those rights decide board composition.
Influence without share ownership
Significant influence may come from veto or final approval on business plans, borrowing, CEO appointments, profit schemes or major strategy changes.
| Test | Key trigger | Evidence |
|---|---|---|
| Interest | >25% shares or profits | Share register, dividend schedules |
| Control | Appointment/removal rights; majority voting | Constitution, shareholder agreement |
| Influence | Veto or final approval rights | Side letters, board minutes |
Exemptions and indirect chains: where control exists only through another listed entity, assess the chain and record the higher‑level entity if appropriate. Keep constitutions and agreements as the primary proof to justify your determination.
register of controllers singapore requirement: timelines you must meet
Timelines matter: firms must act quickly after incorporation to meet statutory filing windows.
Key deadlines: set up the internal list within 30 days from the date of incorporation or registration. When eligibility changes, diarise the change date and allow up to 60 days to assess and update where guidance permits.
Controller particulars become confirmed when the person (or their authorised agent) replies to a notice and supplies the required information, or when they proactively provide those details.
Practical timeline sequence
- Notice sent → 30 days for reply.
- If confirmed, enter particulars into the internal register within 7 days of confirmation.
- After updating the internal list, lodge with ACRA within 2 business days.
“Treat the change date as your compliance anchor — it starts the clock for all follow-up actions.”
Building a compliance calendar
Translate statutory windows into recurring tasks: an annual verification, periodic ownership reviews after investment rounds, and ad-hoc checks when transfer dates or other change dates occur.
| Milestone | Trigger | Action | Timing |
|---|---|---|---|
| Initial set up | Incorporation date | Create internal list | Within 30 days |
| Confirmed particulars | Controller reply | Enter details in internal list | Within 7 days |
| ACRA lodging | Internal update complete | Lodge via BizFile+ | Within 2 business days |
Note on days: the 2-day ACRA window is business days. Other windows are calendar days unless stated. Maintain register as an ongoing task — most lapses follow share transfers, investor rounds or missed change dates.
Setting up and maintaining the register in practice
Set up the internal list so it works for daily checks and swift updates when ownership or voting rights shift.
Choose the right format. An electronic system gives clear version control, audit trails and quick searches. A paper copy can work for small firms that prefer simplicity.
Either format must meet statutory layout and contain complete information. Keep a single, authoritative file so updates do not diverge between records.
Where to keep the file
The list may be held at the entity’s registered office. If secretarial work is outsourced, it can be authorised to remain at the registered filing agent’s registered office.
Important: appoint the agent formally in writing so the location and access rights are clear.
Roles and legal responsibility
Directors must ensure notices are sent and entries are accurate. The company secretary usually handles day-to-day collection and updates.
When a filing agent assists, the company still bears legal responsibility for any errors or delays. Outsourcing does not transfer liability.
- Use controlled access and document retention rules.
- Define who may add, approve or audit entries.
- Log every change with date, reason and authorising officer.
| Aspect | Best practice | Why it matters |
|---|---|---|
| Format | Electronic with backups | Versioning and speed |
| Location | Registered office or registered filing agent office | Compliance and access |
| Controls | Access, retention, change workflow | Prevents discrepancies |
Maintain a rhythm. Align annual verification with the annual return, and run event-driven checks after share issues, transfers or constitution changes.
Reconcile the internal file with any central filing to keep a single source of truth. For detailed procedural guidance, see setting up and maintaining the RORC.
Identifying controllers using notices and “reasonable steps”
Adopt a systematic approach to issuing notices so the company can show it acted reasonably to identify key parties. A formal process beats informal emails because it creates an audit trail and clear evidence of compliance.
Who to send notices to: known controllers, persons likely to be controllers and anyone who may know identity details. At minimum send annual notices to directors and shareholders to confirm current information.
Annual and event-driven cycles: run a yearly confirmation and trigger extra notices after share transfers, constitution changes or public reports that suggest ownership changes. This reduces the risk of stale data.
Digital versus paper: use the prescribed format and keep delivery proofs. Electronic notices with read receipts or signed PDF replies provide faster evidence, while hard copy posts need tracking and scanned acknowledgements.
When notices are unnecessary: you may skip sending if particulars are already provided and verified, or when documented checks show a person is not a controller and does not know any. Keep a notice log with dates, follow-ups and responses so the register can be updated within statutory timelines.
Handling non-responses and situations where no controller is identified
If nobody confirms details, the firm still needs to record best-available particulars and note their status.
Step-by-step playbook for non-responses
- Track the 30 days from the notice date and log each follow-up.
- If there is no reply, record the latest available information within the required timeframe.
- Enter that entry into the internal register within two business days after the 30 days have elapsed.
What to record and why annotation matters
For a non-responsive possible controller, keep full name, last known contact, role and any documentary evidence you hold. Add a clear note that the particulars are unconfirmed.
Annotating entries shows you took reasonable steps. It strengthens the company’s defence if enquiries follow.
Fallback rule and how to apply it
Since 2022, if you cannot identify a registrable controller, treat individuals with executive control — typically the CEO and any directors who direct management — as registrable controllers.
Decide who has executive control by asking: who directs daily strategy, signs major contracts, or hires senior management? Record those names and the date you made the assessment.
Wording when there are genuinely no registrable controllers
If the company believes there are none, enter a dated statement such as:
“As of [date], the company knows or has reasonable cause to believe that there are no registrable controllers in relation to the company.”
| Action | Trigger | Timing |
|---|---|---|
| Send notice | Identify possible controller | Day 0 |
| Follow-up and log | No reply within 14 days | Within 14 days |
| Record best-available information | No reply at 30 days | Enter within two business days after 30 days |
| Apply fallback | No registrable controller identified | Assess and record directors with executive control on the date |
Why this reduces enforcement risk
Keeping dated entries and clear annotations proves the company acted reasonably. It ensures the register is not left empty and helps the company meet statutory timelines even when a controller is uncooperative.
What information must be entered for individuals and corporate entities
Capture clear, point-in-time details for each individual and corporate party that holds decisive influence. Accurate fields make the internal file defensible and usable for audits.
Required particulars for individual controllers
- Full name (include aliases where applicable).
- Residential address and nationality.
- Identity card or passport number and date of birth.
- Dates: when they became a controller and when they ceased to be one (date entries).
Practical tips: match names exactly to identity documents, store the verified residential address, and keep nationality and birthdate in consistent formats. If a name varies, keep a short alias log with source documents.
Required particulars for entity controllers
- Name or Unique Entity Number (UEN) where applicable.
- Registered office address, legal form and jurisdiction or statute of formation.
- Relevant register name (if any) and identification/registration number.
- Dates when the entity became and ceased to be a controller (date stamps).
Use the UEN for local entity records. For foreign entities, capture the foreign registration details and the jurisdiction so filings are complete and traceable.
Key dates and evidence
Why dates matter: the point-in-time status for shares, voting rights or agreements must align with the recorded date. Record the specific date a change occurred, not when it was discovered.
“Keep supporting documents securely and link them to each entry to show provenance and timing.”
Store evidence (IDs, corporate extracts, agreements) securely and limit access. For further guidance on confidentiality and data handling see our privacy policy.
Lodging and updating controller information with ACRA via BizFile+
Timely lodging on BizFile+ keeps a company’s controller details aligned with its internal records.
Two-business-day rule: once the internal register is set up or updated, the company must lodge matching particulars on BizFile+ within two business days. This short window keeps records current and reduces compliance risk.
Who may file: authorised persons include directors, the company secretary, group secretaries and an authorised registered filing agent. Permission matters because only these roles can complete the central filing and confirm the date on BizFile+.
Practical workflow to manage changes efficiently:
- Trigger event (share transfer, new investor allotment, constitution amendment).
- Internal assessment and update to the internal register.
- BizFile+ lodging within two business days.
Common pitfalls: updating internal records but forgetting the central lodging, or lodging before confirmation. Use a change log, dual review by a director and secretary, and clear responsibility matrices when an agent files.
| Step | Actor | Timing |
|---|---|---|
| Internal update | Secretary / directors | Immediate after event |
| Central lodging | Director / RFA | Within two business days |
| Audit control | Director + secretary | Monthly or event-driven |
Boundary note: certain entity types, such as VCCs or struck-off entities, follow different central lodging treatment. Confirm status and office procedures before filing. Timely filings ease banking, investor due diligence and other corporate actions.
Access, confidentiality and enforcement risks
Companies must keep sensitive controller information secure while still being ready to disclose it to authorised agencies.
Who can view the internal list and why it is private
Access is limited. Only directors and secretaries with responsibility for the file may inspect it. Ordinary shareholders who do not hold office and external auditors are not entitled to view these details.
This privacy protects personal data and lowers misuse risk. The document is intentionally not open for public inspection to preserve legitimate confidentiality.
When law enforcement can request access
Competent authorities may request the file and supporting evidence when enforcing laws or investigating serious matters. Disclosure is lawful and compulsory in those circumstances.
“Maintain dated notices and confirmations to show you acted reasonably.”
Penalties and practical consequences
Failing to maintain the register can attract fines up to S$5,000. Beyond fines, expect delays in banking and transactions, inspection problems and reputational harm.
- Restrict access and log every change.
- Store the file securely at the office or with a registered filing agent.
- Keep copies of notices and confirmations linked to each entry.
| Risk | Trigger | Mitigation |
|---|---|---|
| Unauthorised access | Weak controls | Restricted permissions, audit trail |
| Regulatory request | Investigation | Provide documents promptly, keep records |
| Non-compliance | Missing updates | Regular checks, diarised reviews |
Conclusion
Conclusion
Below are clear, practical next steps to ensure your firm meets its duties on controller records and filings.
Identify each controller and collect verified information promptly. Confirm details with a notice, log the reply, then store supporting documents securely.
Keep the internal register current and complete. After internal update, complete central filing within the statutory days to avoid penalties and delays.
Key checklist: determine significant interest or control, issue notices, manage non‑responses, record correct particulars, and lodge via BizFile+ on time.
Remember: the company retains legal accountability even when a service provider handles work. Treat tracking as ongoing governance, review after structural change, and keep documents ready for queries.
FAQ
What is the purpose of the register of registrable controllers and how does it fit into Singapore law?
How did the regime change when ACRA introduced the central register in 2020?
Which entities must keep a register of registrable controllers?
Do dormant companies or those in receivership still need to comply?
How do I decide if a person is a registrable controller because of shareholding?
How is significant control determined where voting rights are involved?
Does the right to appoint or remove directors make someone a registrable controller?
Can someone be a controller without holding shares?
How do I treat controllers that are themselves corporate entities?
What are the timelines for entering controller particulars after incorporation?
When are controller particulars considered confirmed?
Where can the internal register be kept and in what format?
Who is responsible for maintaining the register when a filing agent is engaged?
How should companies identify controllers when information is incomplete?
What if a person does not reply to a controller notice?
How do I record a statement that there are no registrable controllers?
What specific particulars must be entered for individual controllers?
What particulars are required for entity controllers?
What are the filing obligations with ACRA via BizFile+?
Who may file controller information on behalf of the company?
Who can access the internal register and is it public?
What are the penalties for failing to maintain or file controller information?
Dean Cheong is a Singapore-based commercial growth architect and CEO of VOffice, known for helping B2B companies turn fragmented sales efforts into predictable revenue systems. He specializes in sales process optimisation, CRM-driven visibility, and market entry strategy, combining execution discipline with a strong academic grounding in business banking and finance from Nanyang Technological University. His focus is on building repeatable, data-backed growth frameworks that companies can scale with confidence.