04B — Fit and Proper: What It Is, and How Regnify Implements It¶

"Fit and Proper" is the single most important — and most confusing — concept behind Form 3A. This page explains the MAS rule in plain English, shows exactly how it plugs into Form 3A, tells you who does what and why, walks through its lifecycle, and then maps it onto three separate things regnIFY has today that are easy to mix up. It ends with a file-level map for engineers and an honest list of gaps to close.

TL;DR¶

"Fit and Proper" is a MAS standard that says every representative must be honest, competent, and financially sound. The Principal (the financial institution) — not the individual — is legally on the hook to check this and certify it to MAS. That certificate is the Fit and Proper Certification section of Form 3A: it's signed by a Director or the CEO, and lying on it is a criminal offence. In regnIFY, the representative never fills this section — HR/Compliance completes it after the rep submits, using evidence the rep and the firm gathered.

1. What is "Fit and Proper"?¶

MAS publishes a guideline called FSG-G01 — Guidelines on Fit and Proper Criteria (most recently revised 30 May 2025). It sets out a simple idea: anyone who does regulated work in Singapore's financial industry — and the firms that employ them — must be:

Honest, with integrity and a good reputation — no serious dishonesty, fraud, or disciplinary history that would make someone untrustworthy in a position of financial trust.
Competent and capable — has the qualifications and exam passes the role requires (for representatives, this is the CMFAS exam framework).
Financially sound — e.g. not an undischarged bankrupt.

This isn't a strict pass/fail test. MAS explicitly says (FSG-G01 ¶9) that failing one factor doesn't automatically disqualify someone — MAS weighs how serious the issue is, how relevant it is to the actual job, and how long ago it happened. A regulatory reprimand 15 years ago for something unrelated to financial services carries very differently than an undischarged bankruptcy today.

Who does it apply to? A long list of "relevant persons" — but for our purposes: any appointed, provisional, or temporary representative under the Securities and Futures Act (SFA) or the Financial Advisers Act (FAA), and the Principal firm itself (its directors, CEO, and substantial shareholders).

The one sentence that matters most: FSG-G01 ¶3 puts the onus on the firm, not the individual — "the onus is on each relevant person to establish... fit and proper... Where a relevant person is required... to ensure that another relevant person is fit and proper, the onus is on the former [the firm] to establish to the satisfaction of MAS that the latter [the individual] is fit and proper." This is why, in regnIFY, the representative can never certify their own fitness — only the firm (via HR/Compliance, signed by a Director/CEO) can.

2. How it plugs into Form 3A¶

This is the part that's easy to miss: the Fit and Proper Certification isn't a separate compliance exercise that happens alongside Form 3A — it is the legal document that Form 3A delivers.

Two provisions make this explicit: - SFA section 99H(1)(b) (and the matching FAA section 23F(1)(b) for financial adviser representatives) require the Principal to certify the individual's fitness and propriety when notifying MAS of an appointment. - The regulations under those sections say that certificate "shall be in Form 3A" for appointed representatives (Form 3B for provisional, Form 3C for temporary).

So when HR/Compliance ticks the boxes in the Fit and Proper Certification section and a Director/CEO signs the Declaration, that is the s99H(1)(b)/s23F(1)(b) statutory certificate — not a supporting document, the thing itself.

That's also why the stakes are high: - It's a criminal offence to get it wrong. SFA s99O(1) / FAA s23L(1): a Principal that makes a false or misleading statement, or omits material information, when lodging this certificate faces a fine of up to S$50,000. - The paperwork behind it must be kept. SFA s99H(4) / FAA s23F(4): the Principal must retain every document it relied on to make the certification for 5 years from the date it was lodged. - There's a fee. Lodging the notification (of which this certificate is part) triggers a non-refundable lodgment fee under regulation 6 of the relevant regulations (SF(LCB)R / FAR).

Competency is related but separate. SFA Notice 04-N22 (and FAA-N26 for financial-adviser activities) sets the actual exam/qualification bar (the CMFAS modules). FSG-G01 folds "meets these competency notices" into its "competence and capability" criterion — so passing the CMFAS exams is evidence the Fit and Proper Certification relies on, not a separate certification track of its own.

3. Who does what¶

Who	What they do	Why them
The Representative	Provides personal/employment history, activity selections, supporting documents, and consents (PDPA) to background checks. Does not certify their own fitness.	They're the subject of the check, not the one accountable for it.
HR / Compliance (the Principal's staff)	Runs due diligence — credit bureau report, criminal-record check, bankruptcy check, CMFAS verification, conflict-of-interest review — and completes the Fit and Proper Certification section based on that evidence.	FSG-G01 puts the onus on the firm; HR/Compliance is who actually does the checking.
A Director or the CEO of the Principal	Signs the Declaration — the named legal signatory certifying, on the Principal's behalf, that due diligence was done and the individual is believed fit and proper.	SFA s99H(1)(b)/FAA s23F(1)(b) require a specific senior signatory, not just "compliance ticked a box" — this is who bears the legal exposure if the certificate is false.
MAS	Reviews the lodged notification (which includes this certificate). May query it, refuse the appointment, or — later, if something goes wrong — issue a prohibition order.	The regulator, and the ultimate check on the whole system.

Who attaches the evidence? In practice, both the rep (their own documents — résumé, ID, CMFAS certs) and HR/Compliance (the things only the firm can obtain — credit bureau report, internal disciplinary history) contribute the supporting file. The certification itself, though, is completed and owned entirely by HR/Compliance/the signatory — never the rep.

4. Why it exists¶

Three reasons, all traceable back to FSG-G01 and the surrounding SFA/FAA provisions:

Investor and market protection. The whole point of a representative regime is that the public can trust the person handling their money or advice. Fit and Proper is the gate that keeps unsuitable people out.
The firm is accountable, not just the individual. By putting the onus on the Principal (¶3) and requiring a named Director/CEO signature with criminal liability for a false statement, MAS deliberately makes the gatekeeper — not just the representative — legally answerable. A firm can't shrug and say "we didn't know"; it has to actively establish fitness before it appoints someone.
Market integrity. FSG-G01's "relevant person" definition is deliberately broad (covering exchanges, clearing houses, benchmark administrators, and more) — representatives are one piece of a single umbrella mechanism MAS uses to keep the whole regulated financial system trustworthy.

5. Lifecycle¶

Fit and Proper isn't a one-time checkbox — it has a life:

   Appointment                MAS Review           Ongoing / ongoing monitoring        Cessation
  ┌──────────────┐          ┌───────────┐         ┌───────────────────────────┐    ┌──────────────┐
  │ Due diligence│  lodge   │MAS reviews│  approve │ Firm keeps internal       │    │ Firm notifies │
  │ → certify    │ ───────> │ the notif.│ ───────> │ controls; CPD tracked;    │───>│ MAS; records  │
  │ (Form 3A)    │          │(may query)│         │ rep + firm must flag       │    │ kept 5 yrs    │
  └──────────────┘          └───────────┘         │ adverse developments      │    └──────────────┘
                                                    └───────────────────────────┘

At appointment — due diligence, then certification via Form 3A, as described above.
MAS review — MAS may accept, query, or refuse the notification.
Ongoing — this is a continuing obligation, not a one-off. FSG-G01 ¶10(c) requires the Principal to maintain "appropriate recruitment policies [and] adequate internal control systems" to keep confirming its people stay fit and proper. SFA 04-N22 Part 8 ties Continuing Professional Development (CPD) directly to this: a firm must factor a rep's CPD completion into whether they remain fit and proper.

Note on cadence: neither FSG-G01 nor SFA 04-N22 states a fixed "re-certify every N months" rule for the certificate itself — the obligation is continuous, not calendar-driven. regnIFY's own product answer to "how do we operationalize 'continuous'?" is a quarterly attestation cycle — see 16 — Attestation Cycles. Treat the quarterly cadence as regnIFY's design choice, not a MAS-mandated number.
Cessation — if the representative leaves or the appointment ends, the Principal must notify MAS, and the retained records (5 years) continue to matter as the paper trail of why the appointment was made.

6. How regnIFY implements this today (and where it's easy to get confused)¶

Here's the part that trips people up: there are three different "Fit and Proper" things in this codebase, and they are not the same thing wearing different names.

#	What it is	Where it lives	Who owns it	Goes to MAS?
1	The Fit and Proper Certification — the actual statutory certificate described in §2 above	Inside the Form 3A itself, in the "Fit and Proper Certification" + "Declaration / Confirmation" sections	HR / Compliance (locked to the rep)	Yes — this is exported as part of the Form 3A lodgment
2	The representative's Fit and Proper self-declaration — a 33-question reference form mirroring FSG-G01's own criteria, that a rep can optionally fill in on their own profile	A standalone page at `/fit-and-proper`, separate from Form 3A entirely	The representative	No — reference-only. It exists to give HR/Compliance a head start and evidence to certify against; it is never itself sent to MAS.
3	The quarterly attestation cycle — a periodic "I still meet the Fit and Proper criteria" check-in, separate from any single Form 3A	Its own record type (`DECLARATION_ATTESTATION_QUARTERLY`), documented in 16 — Attestation Cycles	The representative (submits), Compliance (monitors)	No — this is regnIFY's ongoing-monitoring feature, operationally distinct from the Form 3A certificate

Picture it as one legal certificate (#1) supported by two internal tools that feed into it (#2 gives HR a head start; #3 keeps checking after the fact) — none of the three is a duplicate of another.

What the rep sees¶

When a representative opens their Form 3A, the Fit and Proper Certification and Declaration/Confirmation sections are visibly locked (a padlock icon) with a banner explaining that HR/Compliance will complete them after submission. The rep is invited to fill in their own self-declaration (#2 above) beforehand — not because it's required, but because it gives HR/Compliance something concrete to certify against, which speeds up the review.

What HR/Compliance sees¶

Once the rep submits, HR/Compliance opens the declaration in review mode. The rep's sections are now locked; the Fit and Proper Certification and Declaration/Confirmation sections unlock for them, badged "HR & Compliance · You." If the rep filled in their self-declaration (#2), it appears alongside as reference evidence. An AI Pre-Approval Check also runs here — a set of automated cross-checks (completeness, CMFAS competency gaps, cross-reference consistency, a fit-and-proper red-flag scan, and more) that give the officer a one-click second opinion before they certify. (See the End-to-End Walkthrough for a full screen-by-screen tour of this step.)

The 8 certification items, in plain English¶

Item	In plain English
Not bankrupt	The individual isn't an undischarged bankrupt.
No conflict of interest	No shareholdings/directorships/multi-principal arrangement that creates a conflict.
Meets SFA competency (SFA 04-N22)	Passed the required CMFAS modules for SFA activities — shown only if an SFA activity was selected.
Meets FAA competency (FAA-N26)	Same, for financial-adviser activities — with a carve-out (FAA-G07 exemption) for specialised units serving high-net-worth clients.
Adverse information	Either "not aware of any adverse information," or "aware — but assessed it, still consider them fit and proper, and undertake to supervise them closely."
Meets FSG-G01	A catch-all confirming the individual meets the full Fit and Proper Guidelines, not just the items itemised above.
Due diligence documented	Confirms the checks were done and the paperwork was kept (the s99H(4)/s23F(4) 5-year retention rule).
CPF not in arrears	A financial-soundness check for self-employed individuals.

7. Where the code lives (for engineers)¶

Piece	File
The certification section UI	`client/src/pages/form3a/sections/DeclarationsSection.tsx`
The Declaration/Confirmation signature block	`client/src/pages/form3a/sections/DeclarationConfirmationSection.tsx`
Section ownership rules (rep vs. approver)	`client/src/pages/form3a/ValidationSchema.ts` (`APPROVER_SECTION_IDS`, `getSectionOwner`)
Lock/unlock UI logic + AI panels	`client/src/pages/form3a/Form3AContainer.tsx`
The rep's reference card shown to the approver	`client/src/components/form3a/RepFitProperReference.tsx`
The rep's standalone self-declaration page	`client/src/pages/FitAndProperPage.tsx` (backed by the `FitAndProperCheck` Prisma model)
Server-side "which statuses allow HR/Compliance to edit"	`services/nestjs/src/domain/declaration/declaration-status.ts` (`APPROVER_EDITABLE_STATUSES`)
Server-side guard against a rep forging these fields	`services/nestjs/src/domain/declaration/declaration.resolver.ts` (`APPROVER_OWNED_FORMDATA_KEYS`)
AI Pre-Approval Check pipeline	`services/fastapi/app/agents/workflow/checks/` (see below)
Export to the actual MAS-format document	`services/fastapi/app/services/form3a_export.py`
Seed/demo data	`services/nestjs/prisma/seed/form-data-builder.ts`, `services/nestjs/prisma/seed/fit-and-proper.ts`

The AI Pre-Approval Check pipeline has one check specifically for this area:

fnp_red_flag.py ("Fit & Proper Red Flag Scan") — meant to scan the certification for adverse-info flags raised without an explanation. (See the Known Gaps section below — this one currently doesn't fire on real data.)

8. Known gaps (flagged, not yet fixed)¶

This section exists so the team can implement Fit and Proper correctly — these are real inconsistencies found while researching this page, not yet corrected:

The AI red-flag check reads the wrong field. fnp_red_flag.py looks for form_data["fit_proper"], but every real writer (the form, the seed data, the export) uses fit_proper_cert. The check silently does nothing on real declarations — its own tests only pass because they hand-construct the old field shape. Fix location: services/fastapi/app/agents/workflow/checks/fnp_red_flag.py.
A different AI check reads a field that no longer exists in real data. completeness.py's advisory warnings look for form_data["declaration"], but real declarations use declaration_confirmation with different field names. This means the warning fires on essentially every real declaration, even complete ones. Fix location: services/fastapi/app/agents/workflow/checks/completeness.py.
Two fields never make it into the exported MAS document. faa_g07_exempt (the reasoning for the HNWI exemption) and adverse_info_undertaking (the required written supervision undertaking when adverse info is disclosed) are captured in the form but missing from the export mapping — so what's lodged with MAS doesn't show this reasoning, even though the code comments cite the specific regulations that require it. Fix location: services/fastapi/app/services/form3a_export.py.
The backend never validates the certification's contents. The server only checks that the fit_proper_cert object isn't empty before locking the form — it doesn't check that the actual required items are filled in correctly. All real validation happens client-side. Relevant file: services/nestjs/src/domain/declaration/form3a-validator.ts.
Two docs describe an older, three-section structure ("Fit and Proper Certification" / "Required Declarations" / "Confirmation" as three separate sections) that was consolidated into two sections a while back. These need a refresh: docs/user-guide/04-form3a-wizard.md and docs/nyp-backend-specification.md.
A notice-number discrepancy worth double-checking. The knowledge-base copy of FSG-G01 cites competency notices "SFA 04-N09 / FAA-N13" while the live Form 3A UI cites "SFA 04-N22 / FAA-N26" for the same competency concept. Both notice numbers exist in the knowledge base — this may simply be an older vs. newer version of the same guideline, but it should be verified before being treated as settled.
No dedicated test scenario. None of the chatbot, AI-agent, or page test suites currently exercise Fit and Proper specifically — worth adding one.

None of these are fixed by this document — they're flagged here so whoever picks up this area next knows exactly where to look.

9. Quick reference / glossary¶

Term	Meaning
FSG-G01	MAS "Guidelines on Fit and Proper Criteria" — the source guideline for the whole concept.
SFA s99H(1)(b) / FAA s23F(1)(b)	The provisions requiring the Principal to certify fitness-and-propriety, delivered via Form 3A.
SFA s99O(1) / FAA s23L(1)	The offence provision — a false certification is a crime (fine up to S$50,000).
SFA s99H(4) / FAA s23F(4)	The 5-year document-retention requirement for the evidence behind the certificate.
SFA 04-N22 / FAA-N26	The competency notices (CMFAS exam requirements) that feed the "competence and capability" criterion.
FAA-G07	The exemption guideline (Guidelines for Exemption for Specialised Units Serving High Net Worth Individuals, under s.100(2) FAA) referenced by the `faa_g07_exempt` field.
`fit_proper_cert`	The canonical field in `Declaration.formData` holding the actual certification — the one that matters for MAS.
`FitAndProperCheck`	The separate database model backing the rep's optional self-declaration page — reference only.
Attestation	The quarterly ongoing-obligation check-in — see 16 — Attestation Cycles.

Related pages: 04 — Form 3A · 04A — Form 3A: End-to-End Walkthrough · 05 — Declaration Lifecycle · 16 — Attestation Cycles · docs/nyp-backend-specification.md (the implementation bible, outside this guide)