Contact usGet started

Frameworks · Singapore

AI governance frameworks and regulation in Singapore

Singapore governs AI without a standalone AI law. The Personal Data Protection Act applies to AI that uses personal data, with PDPC guidance on how. IMDA and the AI Verify Foundation publish voluntary model frameworks and testing tools for traditional, generative and agentic AI, and MAS sets supervisory expectations for financial institutions through its AI Risk Management Guidelines.

Who regulates AI here

Singapore

Singapore publishes voluntary model frameworks for AI, generative AI and agentic AI, with supervisory expectations for financial institutions from MAS.

Voluntary frameworkModel AI Governance FrameworkSingapore Model AI Governance FrameworkSingapore's voluntary Model AI Governance Framework from IMDA and the PDPC. Its four areas, the human involvement matrix, the ISAGO guide and who uses it.Voluntary. Second edition in use since January 2020.In Aicura from EnterpriseVoluntary frameworkAgentic AI frameworkSingapore Model AI Governance Framework for Agentic AIIMDA's Model AI Governance Framework for Agentic AI, version 1.5. Its four dimensions, agent identity and permissions, human checkpoints and agent monitoring.Voluntary guidance. Version 1.5 published 20 May 2026, updated 5 June 2026.Regulator guidanceMAS AI Risk Management GuidelinesMAS Guidelines on Artificial Intelligence Risk ManagementMAS's AI Risk Management Guidelines for financial institutions, issued 7 October 2026 and in effect from 7 October 2027. Inventory, risk ratings, controls.Issued 7 October 2026. Takes effect 7 October 2027, with lifecycle and capability expectations due by 7 October 2028.Voluntary frameworkGenerative AI frameworkSingapore Model AI Governance Framework for Generative AISingapore's Model AI Governance Framework for Generative AI, released May 2024 by IMDA and the AI Verify Foundation. Its nine dimensions and how it is used.Non-binding model framework. Released 30 May 2024.In Aicura from EnterpriseVoluntary frameworkAI VerifyAI Verify Testing Framework and ToolkitAI Verify is Singapore's AI governance testing framework and open-source toolkit. Its 11 principles, process checks and technical tests, and what it is not.Voluntary. Framework updated for generative AI on 29 May 2025.Regulator guidanceMAS FEAT PrinciplesMAS FEAT Principles for AI and Data AnalyticsMAS's FEAT Principles for AI and data analytics in Singapore finance. The 14 principles, the Veritas assessment methodology and the link to MAS AI guidelines.Published 12 November 2018. Continues to apply alongside the MAS AI Risk Management Guidelines.Regulator guidancePDPC AI advisory guidelinesPDPC Advisory Guidelines on Use of Personal Data in AI Recommendation and Decision SystemsSingapore PDPC advisory guidelines on personal data in AI recommendation and decision systems. Consent, exceptions, notification, accountability, vendors.Issued 1 March 2024. Advisory and not legally binding. The PDPA itself applies.

All Singapore frameworks

International

Standards and frameworks that apply across borders. Most organisations use one of these as the backbone of their AI governance, whatever their jurisdiction.

StandardISO/IEC 42001ISO/IEC 42001:2023 AI management systemsISO/IEC 42001 is the certifiable international standard for an AI management system. What it requires, how Annex A works and how to get ready to certify.Published December 2023, current editionIn Aicura from ProStandardISO/IEC 42005ISO/IEC 42005:2025 AI system impact assessmentISO/IEC 42005 is international guidance on assessing how an AI system affects people and society, when to assess, what to record and how it links to 42001.Published May 2025, current editionVoluntary frameworkNIST AI RMFNIST AI Risk Management Framework (AI RMF 1.0)The NIST AI RMF is a voluntary framework for managing AI risk through four functions, Govern, Map, Measure and Manage. What it asks and who uses it worldwide.Version 1.0 current, revision under wayIn Aicura from ProVoluntary frameworkNIST Generative AI ProfileNIST AI RMF Generative AI Profile (NIST AI 600-1)NIST AI 600-1 applies the AI Risk Management Framework to generative AI. Its 12 risks, the suggested actions behind them and who uses the profile and why.Final, published July 2024StandardISO/IEC 23894ISO/IEC 23894:2023 Guidance on AI risk managementISO/IEC 23894 adapts the ISO 31000 risk process to AI. What the guidance covers, its AI risk sources and lifecycle mapping, and how it fits with ISO 42001.Published February 2023, current editionStandardISO/IEC 38507ISO/IEC 38507:2022 Governance implications of the use of AI by organizationsISO/IEC 38507 is guidance for boards on governing an organisation's use of AI. What it asks of directors, how it links to ISO/IEC 38500 and who uses it.Published April 2022, current editionVoluntary frameworkOECD AI PrinciplesOECD Recommendation of the Council on Artificial Intelligence (OECD AI Principles)The OECD AI Principles are the intergovernmental standard for trustworthy AI, adopted 2019 and revised 2024. The five principles and how to apply them.Adopted May 2019, revised May 2024Voluntary frameworkHUDERIAHUDERIA: Risk and impact assessment of AI systems for human rights, democracy and the rule of lawHUDERIA is the Council of Europe's method for assessing AI risks to human rights, democracy and the rule of law. Its four elements, scoring and who uses it.Methodology and Model adopted, non-bindingLawCouncil of Europe AI ConventionCouncil of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law (CETS No. 225)The Council of Europe AI Convention is the first binding international treaty on AI. Who has signed and ratified, what it asks of parties and when it applies.Open for signature, not yet in forceVoluntary frameworkG7 Hiroshima Code of ConductHiroshima Process International Code of Conduct for Organizations Developing Advanced AI SystemsThe G7 Hiroshima Code of Conduct sets 11 voluntary actions for advanced AI developers, with OECD HAIP reporting. What it asks and who reports under HAIP 2.0.Voluntary, reporting framework v2.0 liveVoluntary frameworkUNESCO AI Ethics RecommendationUNESCO Recommendation on the Ethics of Artificial IntelligenceUNESCO's Recommendation on the Ethics of AI is the global standard its member states adopted in 2021. Its values, principles and Ethical Impact Assessment.Adopted November 2021

All International frameworks

Aicura in Singapore

Frameworks elsewhere

Guides

Questions

Does Singapore have an AI law?

No. Singapore has no standalone AI law. It relies on the Personal Data Protection Act, sector regulation such as MAS's AI Risk Management Guidelines, and voluntary frameworks including the Model AI Governance Frameworks and AI Verify.

Are the MAS AI Risk Management Guidelines mandatory?

They are guidelines setting MAS's supervisory expectations rather than a statute. They take effect on 7 October 2027 and apply to all financial institutions in proportion to their size and risk profile, with lifecycle controls due by 7 October 2028.

Is AI Verify mandatory?

No. AI Verify is a voluntary testing framework and open-source toolkit. Organisations use it to test and document their AI systems against 11 governance principles.

Which Singapore framework covers AI agents?

IMDA's Model AI Governance Framework for Agentic AI, first launched in January 2026, with version 1.5 published in May 2026. MAS refers financial institutions to it for agent-specific practices.

Start with the AI you run.

Every framework begins with knowing which AI systems and agents you have. The AI register is free to start.

Sign upContact us