Independent Singapore VCC guidance
Direct answer
Keep a controlled authority register, not a shared gallery of signatures. For each trustee and authorised person, record the trust, capacity, governing authority, permitted actions, signing combination, effective date, review status and every bank, custodian or adviser that has accepted the mandate. Store specimen images and identity evidence separately in a restricted repository. Update counterparties through verified channels, test that revoked users cannot instruct, and reconcile the register whenever trustees, directors, powers or service providers change.
At a glance
- Link every specimen to current legal authority.
- Separate sensitive images from the control register.
- Track acceptance by each counterparty.
- Prove revocation as well as appointment.
Who this is for
- Singapore trusts, private trust companies and family-office teams coordinating trustee authority evidence
Important exclusions
- Using a specimen register as a substitute for the trust deed, resolution or counterparty mandate
Define the register and secure evidence boundary
The Ministry of Law explains that trustees hold and manage trust property for beneficiaries under the trust terms and should keep proper accounts and complete records supporting their actions. The register should identify who may sign, why, for which trust, in what capacity and under which combination rule. It should not reproduce passport numbers, full bank details or signature images in a broadly accessible tracker. Keep those items in the approved restricted repository and place only a secure evidence reference in the operational register.
Sources: Ministry of Law · Monetary Authority of Singapore · Personal Data Protection Commission| Field | Purpose | Evidence |
|---|---|---|
| Trust and legal trustee | Prevents use across the wrong trust | Deed and appointment records |
| Person and capacity | Identifies the actual acting role | Corporate or trustee records |
| Permitted action | Limits payments, contracts or instructions | Resolution, mandate or delegation |
| Signing combination | Shows sole, joint or threshold authority | Approved signing rule |
| Counterparty status | Shows where the mandate is accepted | Bank, custodian or adviser readback |
| Revocation status | Prevents stale authority continuing | Termination and access evidence |
Related guidance: VCC family-office guide
Verify authority before collecting a specimen
Start with the current trust deed, trustee appointment, corporate records, resolutions, powers of attorney and delegated mandates. Confirm the exact person, office, trust and permitted action. A familiar family member or executive does not gain signing power from involvement alone. For a corporate trustee, separate board authority from the individual user or officer authorised to operate each account. Obtain legal advice where a reserved power, protector consent, joint-trustee rule or foreign asset changes the authority analysis. Mark uncertain cases as blocked rather than provisional signatories.
Sources: Ministry of Law · Monetary Authority of Singapore · Monetary Authority of Singapore- Identify the current legal trustee and governing instrument.
- Confirm appointment, capacity and any protector or co-trustee condition.
- Record the permitted transaction types and financial limits.
- Define sole, joint, sequential or threshold signing rules.
- Check whether delegation or power of attorney is valid for the action.
- Block the specimen until the authority record is complete.
Related guidance: trust asset verification register
Control collection and distribution
Collect a specimen only through an approved process and verify the person independently. Use proportionate certification or witnessing where the counterparty requires it. Label the specimen with the trust, capacity, approved purpose and version so it cannot be lifted into another context. Encrypt or otherwise protect transfer to a verified recipient, restrict downloads and record disclosure. The PDPC summarises obligations concerning purpose, protection, retention and access. Do not circulate a signature image by ordinary group email or store it in a general family-office folder.
Sources: Personal Data Protection Commission · Ministry of Law · Monetary Authority of Singapore- Confirm the requestVerify the counterparty, account, required format and authorised recipient through an established independent channel.
- Validate the personMatch identity, appointment and capacity to current trust and corporate records before obtaining the specimen.
- Protect the evidenceStore the specimen and supporting identity material in the restricted repository with controlled access and versioning.
- Transmit securelySend only the required material to the verified recipient and retain delivery and acceptance evidence.
- Update the registerRecord the counterparty, effective date, signing rule, evidence reference and next review without exposing the specimen.
Reconcile every counterparty mandate
Banks, custodians, brokers, property managers and advisers may maintain separate mandates and accept changes at different times. The trust-wide register should show the last verified state at each counterparty rather than assuming one resolution updates everyone. Compare legal authority, counterparty forms, online users, approval limits and recovery contacts. Test one non-destructive view or approval path where possible. An acknowledged form is not enough if the old signatory can still operate or the new signatory cannot complete the required combination.
Sources: Ministry of Law · Monetary Authority of Singapore · Monetary Authority of Singapore| State | Meaning | Required action |
|---|---|---|
| Prepared | Authority and evidence pack is ready | Verify recipient and submit securely |
| Submitted | Counterparty has received the pack | Track reviewer, questions and restrictions |
| Accepted | Counterparty confirms the mandate | Test access and signing combination |
| Restricted | Only specified actions are available | Record limits and remediation owner |
| Revoked | Old authority is terminated | Prove access and instruction routes are disabled |
Related guidance: VCC compliance checklist
Review changes and prove revocation
Trigger a review when a trustee, director, protector, authorised person, bank, custodian, deed, resolution, account or signing rule changes. Also perform periodic recertification based on the trust's risk and transaction profile. Revocation needs a controlled notice, counterparty acknowledgement, disabled access, recovered tokens or devices and monitoring for attempted use. Preserve the historical authority record so prior transactions remain explainable, but prevent obsolete specimens from appearing current. Escalate any counterparty that cannot confirm closure of old access.
Sources: Ministry of Law · Monetary Authority of Singapore · Monetary Authority of Singapore · Personal Data Protection Commission- Change identifiedOpen one case linking the affected person, trust, authority, counterparties and effective date.
- Replacement authority approvedComplete the governing decision and prepare the new specimen or mandate under secure controls.
- Counterparties updatedSubmit through verified channels and track acceptance, restrictions and rejected documents individually.
- Old authority disabledRemove portal access, tokens, call-back lists and instruction rights, then verify the result independently.
- Register certifiedConfirm the live legal, counterparty and system records agree and preserve the historical evidence separately.
Related guidance: trustee change control plan
Frequently asked questions
Should the register contain an image of every signature?
Usually the operational register should reference the restricted evidence rather than display sensitive specimen images. Access, purpose and retention should be controlled. Provide the actual specimen only through the verified process required by an authorised counterparty.
Can one resolution update every bank and custodian?
The resolution may establish internal authority, but each counterparty can have its own form, review and acceptance process. Track submission, acceptance, access and signing rules separately for each account and provider.
How often should authority be recertified?
Use a frequency that reflects the trust, assets, transaction risk and counterparty requirements, and trigger immediate review for relevant changes. A calendar review does not replace event-driven updates when authority or personnel change.
What proves a former signatory has been removed?
Retain the revocation decision, counterparty acknowledgement, portal and token deactivation, changed call-back records and a verified readback. A sent instruction alone does not prove the old route can no longer be used.
Official sources and further reading
- Express trusts (Ministry of Law)
- FAQs on Trust Companies Act and Trust Companies Regulations (Monetary Authority of Singapore)
- Trust Companies Regulations (Monetary Authority of Singapore)
- Data protection obligations under the PDPA (Personal Data Protection Commission)
- Operational resilience (Monetary Authority of Singapore)
Discuss your fund, family office or trust structure
Contact Raffles Corporate Services about Singapore VCC setup, fund structures, family offices and corporate administration.
- Email: hello@rafflescorporateservices.com
- WhatsApp: +65 8501 7133
- WhatsApp: +65 9018 0072
Where legal assistance is required, we can coordinate an introduction to an associate independent law firm, with your consent. The law firm advises you under a separate engagement. Raffles Corporate Services is not a law firm. Tax, investment management and trustee services, where needed, require appropriately qualified or authorised providers.
General information only. This article is not legal, tax, regulatory or investment advice and does not imply affiliation with or endorsement by ACRA, MAS or IRAS.