Regnify Platform User Guide¶

Regnify is the end-to-end compliance platform for MAS-licensed Financial Institutions (FIs) in Singapore. This guide covers every role, every page, and every AI-assisted workflow — from a representative's first login through multi-party internal approval, MAS submission, ongoing CPD tracking, quarterly attestations, and incident disclosure. Whether you are a system administrator configuring a new organisation, a Compliance Officer managing the MAS submission queue, or a licensed representative checking your certification status, this guide has a dedicated path for you.

About This Guide¶

This guide documents the Regnify platform as shipped in v0.10.x. It is organized into 22 numbered sections that follow the natural sequence of work: getting started, core declaration workflows, AI assistance, administrative tools, and security. Use the Quick Start by Role table below to jump directly to the sections most relevant to your daily responsibilities, then browse the full Table of Contents for deeper reference. All section links are relative — click any link to open the corresponding file.

Quick Start by Role¶

Role	Start here	Then read
System Administrator (`SYS_ADMIN`)	02 — Getting Started	03 — Dashboard by Role → 12 — User Management → 13 — Organisation Management → 15 — Audit Logs
Organisation Administrator (`ORG_ADMIN`)	02 — Getting Started	03 — Dashboard by Role → 14 — Workflow Templates → 12 — User Management → 15 — Audit Logs
HR Administrator (`HR_ADMIN`)	02 — Getting Started	03 — Dashboard by Role → 06 — Workflow Approvals → 14 — Workflow Templates → 16 — Attestation Cycles
Compliance Officer (`COMP`)	02 — Getting Started	03 — Dashboard by Role → 07 — MAS Console → 16 — Attestation Cycles → 08 — AI Assistant
FI User / Representative (`FI_USER`)	02 — Getting Started	04 — Form 3A Wizard → 05 — Declaration Lifecycle → 06 — Workflow Approvals → 08 — AI Assistant
Representative Portal User (`REP_USER`)	02 — Getting Started	17 — Rep Portal Overview → 18 — Passport Export → 19 — CPD Log → 16 — Attestation Cycles

Table of Contents¶

Platform Foundations¶

01 — Introduction to Regnify The compliance challenge Regnify solves, the four-step digitise-automate-submit-monitor workflow, an overview of the 14 AI tools, the six user roles, and the platform architecture (React frontend, NestJS GraphQL backend, FastAPI AI backend, Keycloak SSO).
02 — Getting Started System requirements, the OIDC PKCE login flow, the sidebar and header navigation structure, navigation items by role (verified against AppLayout.tsx), the AI assistant floating button, and what each role should do on their very first session.
03 — Dashboard by Role The six distinct dashboards — Admin Dashboard (SYS_ADMIN / ORG_ADMIN), Approver Dashboard (HR_ADMIN / COMP), Representative Dashboard (FI_USER), and Rep Portal (REP_USER) — with full documentation of every metric card, chart, alert banner, and declaration table tab for each role.

Core Declaration Workflow¶

04 — Form 3A Wizard The Form 3A is a single-page scrollable declaration form with 14 numbered sections and a collapsible TOC sidebar: Introduction, General Information, Personal Information, Proposed Regulated Activities (SFA and FAA), CMFAS Modules, Overseas Representatives, Multiple Principals, Shareholdings, Business Interests, Supporting Documents, Fit & Proper Certification (approver), Required Declarations (approver), Confirmation (approver), and Review & Submit. Covers field requirements, auto-save behaviour, N/A collapse logic, and AI assistance integration.
04A — Form 3A: End-to-End Walkthrough A narrative, screen-by-screen journey of one Form 3A from a representative's first keystroke to MAS approval — across the representative, supervisor, manager, compliance, and MAS roles — explaining what each user does, what is required and why, and where AI helps. Fully illustrated with live screenshots.
04B — Fit and Proper Explained A plain-English explainer of the MAS Fit and Proper standard (FSG-G01) and how it plugs into Form 3A as the statutory s99H(1)(b)/s23F(1)(b) certificate — who fills, attaches, and certifies it, why it exists, its lifecycle, and how it disambiguates from the two other Fit-and-Proper-adjacent features in regnIFY (the rep self-declaration page and the quarterly attestation cycle). Includes a code map for engineers and a list of known implementation gaps.
05 — Declaration Lifecycle All nine declaration states from DRAFT through MAS_APPROVED / MAS_REJECTED, the state transition diagram, badge colours, the Declaration Detail page anatomy (metadata card, action card, workflow stepper, approval timeline), and PDF / DOCX export.
06 — Workflow Approvals How representatives track their submission through the approval chain, what the Workflow Stepper colour codes mean, and how approvers take the three available actions — Approve, Request Changes (Send Back), and Reject — with the confirmation modals and their consequences.
07 — MAS Approval Console The three-tab console (Ready for MAS / MAS Pending Review / Resolved) used by SYS_ADMIN and COMP to send internally-approved declarations to MAS and to record MAS approval or rejection decisions. Covers the submission confirmation modal, the irreversibility warning, and the MAS Details view.

AI Assistant and Intelligent Features¶

08 — AI Compliance Assistant Complete reference for the AI assistant: how to open it, the three size modes, quick-start questions, all 14 tools with purpose, trigger conditions, and worked examples, role-specific conversation samples, PII masking rules (NRIC/FIN, phone, date of birth), AI limitations, and chat history management.
09 — Concierge Panel The Concierge Panel (Reggie) — the floating AI agent panel available throughout the main admin interface. Covers how the panel is activated, how Reggie is context-aware of the current page and Form 3A section, write-action confirmation gates, citation chips, and chat history. Note: not available in the Rep Portal (/rep/*).
10 — AI Suggestions and Notifications The AI Suggestions Bar that appears below the Form 3A progress bar, the NotificationBell AI-badge extension for distinguishing AI-initiated alerts from human-authored ones, and the AISuggestionsBar proactive-nudge patterns for deadline risk, CPD shortfall, and attestation anomaly alerts.
11 — Representative Health and Compliance The Rep Register page (/admin/rep-register), the Red/Amber/Green compliance health badges computed server-side per FAA-N26 (CPD 30/8/4 hour thresholds) and CMFAS module status, the RepHealthBadge component, and how to use the AI get_rep_register tool to retrieve a full health rollup. The Rep Register and the rep-health rollup are restricted to COMP and HR_ADMIN roles (Loop 114 WTF-1 / WTF-6).

Administrative Tools¶

12 — User Management Creating, editing, suspending, activating, unlocking, and deleting user accounts; the six roles explained with badge colours; assigning users to organisations; domain and organisation role fields for FI_USER accounts; and password reset via the Keycloak admin console or REST API.
13 — Organisation Management Registering and managing Financial Institution organisations (name, UEN, contact details, status); organisation membership counts; domain and internal role hierarchy configuration; and the data integrity warnings for editing or deleting an organisation record.
14 — Workflow Template Management Creating, editing, and deleting the approval chain blueprints that govern all Form 3A submissions; the Approval Workflow Dashboard for monitoring live instances; step sequencing rules (up to 6 steps); template-to-declaration matching logic; and best practices for chain design per MAS Form 3A requirements.
15 — Audit Logs The read-only compliance audit trail covering all 48 action types across eight categories (Declaration, Document, Workflow, User, Organisation, Fit and Proper, AI Agent); filtering by action, entity type, user, and date range; expanding entries to inspect JSON metadata payloads; and guidance for presenting audit evidence at a MAS examination.

Representative Compliance Management¶

16 — Attestation Cycles Launching and tracking quarterly fit-and-proper attestation cycles (admin side: cycle creation, progress tracking, chasing non-completers via AI); completing attestation declarations (rep side: five FSG-G01 questions, submission flow); and the detect_attestation_anomaly AI tool with severity definitions and MAS escalation guidance.
17 — Representative Portal Overview The Rep Portal at /rep — its five-tab navigation (Dashboard, My Passport, Attestations, CPD Log, Incident Disclosure), the separation from the main application, data scoping to the individual representative, and the comparison table between the main application and the Rep Portal.
18 — Passport Export The regulatory passport — how a representative views their CMFAS module history and licence records at /rep/passport, how to mint or rotate a passport export token via the generate_passport AI tool, the public share URL and verification URL structure, what data is included (licensed activities, exam passes, appointment date, principal FI) versus what is excluded (NRIC, date of birth, residential address), and the token lifecycle (not generated, active, revoked).
19 — CPD Log Viewing and entering Continuing Professional Development records in the Rep Portal at /rep/cpd; CPD hour totals broken down by category (Ethics, Product Knowledge, Other); FAA-N26 annual thresholds (30 total / 8 ethics / 4 product knowledge); the Add CPD Entry form with optional IBF course code and 0.5-hour step increments; and how the AI get_cpd_status and draft_cpd_reminder tools interact with CPD data.
20 — Incident Disclosure The three-step incident disclosure wizard in the Rep Portal at /rep/incidents; the five incident types (gift received, client complaint, third-party report, conflict of interest, other) with their MAS regulatory grounding; narrative constraints (50–4,000 characters); how a submitted incident creates a DECLARATION_INCIDENT_DISCLOSURE record and enters the approval workflow; and AI-assisted filing via the create_incident_declaration tool with escalation cases.
21 — Advanced AI Features Deep reference for power users: the spawn_agent parallel sub-agent pattern (up to 10 concurrent per turn, 300-second cap, zero nesting), the analyze_cert_gap rule-based CMFAS gap engine and persistence to CmfasModuleStatus, the detect_attestation_anomaly LLM-based anomaly judge with three evidence slices and severity levels, the seven skill playbooks and their proactive trigger schedules, the ToolPolicyPipeline five-filter chain, and the permission gate pub/sub approval flow for human-in-the-loop write confirmations.

Platform Security¶

22 — Security and Privacy Keycloak SSO, OIDC PKCE S256 flow, JWT RS256 token validation, token lifetime and auto-refresh, multi-factor authentication, password policy, role-based access control with the full feature access matrix, PII masking in AI responses, organisation-level data isolation, document signed URLs, and AI security controls (no raw PII in AI context, all AI actions logged, AI cannot exceed user permissions).

Glossary¶

Appointed Representative — A licensed representative permanently appointed by a Financial Institution principal under Section 99B of the SFA or Section 23(1) of the FAA. Appointed using Form 3A. Must hold the required CMFAS modules before appointment commences.

Attestation — A periodic declaration in which a licensed representative confirms that they continue to meet the MAS fit-and-proper criteria (honesty and integrity, no criminal record, no bankruptcy, no regulatory action, CPD on track). Regnify operationalises this as a DECLARATION_ATTESTATION_QUARTERLY record type.

Audit Log — The platform's immutable compliance trail. Every user action, system event, and AI tool call is recorded as an audit log entry. Entries are never deleted. Accessible to SYS_ADMIN and ORG_ADMIN at /audit-logs.

CMFAS — Capital Markets and Financial Advisory Services examination programme administered by the Institute of Banking and Finance (IBF) Singapore. Representatives must pass designated CMFAS modules before they are eligible to carry out specific regulated activities. Module examples: M1A (Rules and Regulations for Financial Advisory Services), M5 (Rules and Regulations for Financial Advisory Services), M6/M6A (Securities), M8 (Collective Investment Schemes), M9/M9A (Life Insurance and Investment-Linked Policies).

COMP — Compliance Officer role in Regnify. Has access to the MAS Approval Console, attestation cycle management, and the representative register. Is typically the final internal approver in a three-step workflow chain.

Concierge Panel — The floating AI agent panel (branded "Reggie") accessible via the orange button in the bottom-right corner of the main admin interface. When used in Form 3A, it is context-aware of the current section and declaration ID and can wire write-action confirmations back to the running agent. Not available in the Rep Portal (/rep/*).

CPD — Continuing Professional Development. MAS requires licensed representatives to complete a minimum of 30 CPD hours per annual cycle under FAA-N26 / SFA04-N22, of which at least 8 hours must cover ethics and regulations and at least 4 hours must cover product knowledge.

Declaration — The formal record created when a representative files Form 3A (or Form 3B / 3C), an attestation, or an incident disclosure. Each declaration has a type, a status, a linked workflow instance, and supporting documents.

FAA — Financial Advisers Act (Cap. 110). One of the two primary regulatory Acts governing licensed representatives in Singapore. Representatives carrying out financial advisory activities (advising on investment products, issuing investment analyses) under the FAA must be appointed by a licensed Financial Adviser.

FAA-N26 — MAS Notice FAA-N26, "Minimum Entry and Examination Requirements for Representatives of Licensed Financial Advisers and Exempt Financial Advisers." Specifies CMFAS module requirements and the CPD regime (30/8/4 hour thresholds) for FAA representatives.

FI — Financial Institution. An organisation registered on Regnify that holds a Capital Markets Services licence or a Financial Adviser licence from MAS and is the principal that appoints licensed representatives.

FI_USER — Financial Institution User role in Regnify. Covers both licensed representatives (who create and submit declarations) and their approvers (supervisors, managers, CEOs with isApprover = true) within the FI. Approvers in this role see the Approver Dashboard; non-approvers see the Representative Dashboard.

FIN — Foreign Identification Number. The identity document number issued by the Immigration and Checkpoints Authority of Singapore to foreigners with long-term passes. Used in Form 3A in lieu of an NRIC for non-Singapore residents.

Fit and Proper — A regulatory standard defined in MAS Guidelines FSG-G01 requiring that every licensed representative be honest, competent, financially sound, and free of disqualifying events (criminal convictions, regulatory prohibitions, bankruptcy). Section 11 of Form 3A (Fit & Proper Certification) is completed by the approver during the review process. The quarterly attestation operationalises the ongoing obligation.

Form 3A — The MAS form for the appointment (or re-appointment) of a licensed representative by a principal Financial Institution. Captured in Regnify as a single-page scrollable declaration form with 14 numbered sections and a collapsible TOC sidebar. Formal name: "Notification for the Appointment / Re-Appointment of a Representative."

FSG-G01 — MAS Guidelines on Fit and Proper Criteria. The primary regulatory reference for the honesty, integrity, and competence standards that licensed representatives must meet at the time of appointment and on an ongoing basis.

HR_ADMIN — Human Resources Administrator role in Regnify. Manages workflow templates, reviews declarations from an HR perspective, and has access to the representative register and attestation cycles. Does not have access to the MAS Approval Console.

Keycloak — The open-source identity and access management system that handles authentication for Regnify. All user credentials, SSO sessions, and role assignments are managed in Keycloak. Regnify never stores passwords.

MAS — Monetary Authority of Singapore. Singapore's central bank and integrated financial regulator. The MAS approves the appointment of licensed representatives after the internal approval chain has been completed.

NRIC — National Registration Identity Card. The national identity document for Singapore Citizens and Permanent Residents. Format: one letter prefix (S for citizens, T for recent citizens, F or G for permanent residents), six digits, and a checksum letter (for example, S1234567D). Required in Form 3A for Singapore Citizens and PRs.

OIDC — OpenID Connect. The identity protocol used by Keycloak and Regnify. Regnify implements the Authorization Code flow with PKCE (Proof Key for Code Exchange, S256 method), which prevents token interception and is the industry standard for browser-based applications.

ORG_ADMIN — Organisation Administrator role in Regnify. Manages users, workflows, declarations, and audit logs within their own organisation. Cannot create other organisations (SYS_ADMIN only) and cannot access the MAS Approval Console (COMP only).

Passport (Regulatory Passport) — A shareable, Ed25519-signed record of a representative's licence, CMFAS examination history, and regulatory standing. Accessible to REP_USER accounts at /rep/passport. An export token can be generated via the AI generate_passport tool to produce a public verification URL and a downloadable PDF. Raw PII (NRIC, date of birth, address) is never included in the passport export.

PII — Personally Identifiable Information. In Regnify's AI layer, PII fields in declaration data are masked server-side at the tool boundary before any data enters the AI model's context: NRIC and passport numbers are masked to first and last character only (S****D), phone numbers show only the last four digits (****1234), and dates of birth show only the year (1985-**-**).

Principal — The Financial Institution that employs or contracts with a licensed representative and is responsible for that representative's MAS appointment. Named in Section 1 of Form 3A.

Provisional Representative — A licensed representative appointed under Form 3B for a three-month grace period, typically for individuals relocating to Singapore who have three years of overseas experience and are required to pass the CMFAS modules within three months.

R/A/G — Red / Amber / Green. The three-tier compliance health flag computed server-side for each representative based on their CMFAS module status and CPD hours against FAA-N26 thresholds. Green = fully compliant; Amber = one signal acceptable, the other needs attention; Red = material gaps requiring immediate action. Displayed in the Rep Register, Admin Dashboard, and Rep Portal Passport page.

REP_USER — Representative Portal User role in Regnify. Grants access only to the Rep Portal (/rep/*). Used for licensed representatives who need self-service access to their own passport, CPD log, attestations, and incident disclosures. Cannot access the main application sidebar or any admin features. Assigned in the Keycloak Admin Console.

SFA — Securities and Futures Act (Cap. 289). One of the two primary regulatory Acts governing licensed representatives in Singapore. Representatives dealing in capital markets products (securities, derivatives, collective investment schemes) must be appointed under the SFA.

SFA04-N22 — MAS Notice SFA 04-N22, "Minimum Entry and Examination Requirements for Representatives of Holders of Capital Markets Services Licences and Exempt Persons." Specifies CMFAS module requirements and the CPD regime for SFA representatives (counterpart to FAA-N26).

spawn_agent — An AI tool available to the Regnify compliance assistant that launches up to 10 parallel sub-agents to handle independent research tasks simultaneously. Used automatically by the AI for complex multi-part queries (for example, comparing CMFAS requirements across two regulatory regimes).

SSO — Single Sign-On. The authentication model used by Regnify, implemented via Keycloak OIDC. Users authenticate once in Keycloak and receive a session token that grants access to the platform without re-entering credentials.

SYS_ADMIN — System Administrator role in Regnify. Full platform access across all organisations and all features. Typically used by Regnify staff rather than by FI staff. The only role that can create organisations and view cross-organisation data.

Temporary Representative — A licensed representative appointed under Form 3C for a maximum of 6 months (extendable to 24 months in some cases), typically for overseas employees seconded to Singapore who have five years of relevant experience.

UEN — Unique Entity Number. Singapore's company registration number issued by the Accounting and Corporate Regulatory Authority (ACRA). Format: 9–10 digits followed by a letter (for example, 196800306E). Required when registering an organisation in Regnify.

Workflow Instance — The live in-progress execution of a workflow template for a specific declaration. Created automatically when a representative submits a declaration. Tracks the current step, each approver's decision, and the time each step has been waiting.

Workflow Template — The blueprint that defines the ordered sequence of approvers (up to 6 steps) for a given organisation and form type. Templates are created and managed at /workflows by SYS_ADMIN, ORG_ADMIN, and HR_ADMIN. Each organisation should have one template per form type.

Platform at a Glance¶

Regnify automates the end-to-end lifecycle of MAS representative licensing for Financial Institutions in Singapore. At its core it is a structured workflow engine: a representative completes Form 3A (a single-page scrollable 14-section declaration form), the declaration routes automatically through a configurable internal approval chain (up to six sequential approvers), and the Compliance team submits the approved declaration to MAS — all with a complete, unmodifiable audit trail.

Built on top of this workflow layer is an AI compliance assistant with access to 182 indexed MAS regulatory documents and 14 specialised tools. The assistant can answer regulatory questions with verbatim document citations, perform CMFAS certification gap analysis, retrieve live declaration and workflow state, draft CPD reminder emails, launch attestation cycles, detect attestation anomalies, file incident declarations, and generate regulatory passport export tokens. Every tool call is logged in the audit trail.

The platform serves six roles: SYS_ADMIN for platform-wide administration, ORG_ADMIN for organisation-scoped management, HR_ADMIN for workflow and HR-level approvals, COMP for MAS submission and compliance monitoring, FI_USER for declaration filing and FI-internal approvals, and REP_USER for the self-service representative portal covering passport, CPD, attestations, and incident disclosure. Each role renders a distinct navigation and dashboard; role boundaries are enforced at both the frontend routing layer and every backend GraphQL resolver.

URL: https://regnify.regnify.dev