Skip to content

Digital Advisory (Robo-Advisor) Regulations in Singapore

Back to Product Regulations

| Document Type | MAS Guideline | | Status | current | | Last Updated | 2026-05-02 | | Source | https://www.mas.gov.sg/regulation/guidelines/guidelines-on-provision-of-digital-advisory-services |

Previous Next

Overview

Digital advisory services, commonly known as robo-advisors, use automated algorithms and technology to provide investment advice and portfolio management services to clients with minimal or no human intervention. In Singapore, digital advisory services are regulated under the Securities and Futures Act 2001 (SFA) and the Financial Advisers Act (FAA), supplemented by MAS-specific guidelines on the provision of digital advisory services. MAS has adopted a technology-neutral regulatory approach -- digital advisors are subject to the same regulatory standards as traditional financial advisers, with additional requirements addressing the unique risks of algorithm-driven advice.

Regulatory Framework

MAS Guidelines on Provision of Digital Advisory Services

MAS issued the Guidelines on Provision of Digital Advisory Services in October 2018, setting out expectations for entities providing robo-advisory services. The guidelines apply to:

  1. Licensed financial advisers (FA) providing digital advisory services under the FAA
  2. Capital Markets Services (CMS) licence holders providing fund management services through digital platforms under the SFA
  3. Exempt entities operating under specific regulatory exemptions

Licensing Requirements

Digital advisory platforms must hold:

  1. Financial Adviser's Licence (FAL): For providing investment advice through automated algorithms
  2. CMS Licence for Fund Management: If the platform also manages client portfolios
  3. Both licences: Most robo-advisors hold both, as they typically advise on and manage portfolios

Regulatory Sandbox

MAS operates a regulatory sandbox that allows fintech companies, including robo-advisors, to test innovative services within defined boundaries: - Relaxation of specific regulatory requirements during the sandbox period - Time-limited (typically 6-12 months, extendable) - Must demonstrate adequate safeguards for customer protection - Graduation to full licensing upon successful sandbox completion

Algorithm Governance

Algorithm Design and Development

MAS expects digital advisory firms to implement robust governance over their algorithms:

  1. Design principles:
  2. Algorithms must be designed to provide suitable advice based on the client's investment objectives, financial situation, and risk tolerance
  3. Investment logic must be based on sound financial theory and empirical evidence

  4. The algorithm must be capable of handling a reasonable range of market conditions

  5. Development standards:

  6. Formal software development lifecycle with proper documentation
  7. Version control and change management procedures
  8. Code review processes with segregation of duties

  9. Testing environments separate from production

  10. Model validation:

  11. Independent validation of the investment algorithm before deployment
  12. Backtesting using historical data across different market conditions
  13. Stress testing under extreme market scenarios
  14. Validation must be performed by qualified individuals independent of the development team

Algorithm Monitoring and Review

  1. Ongoing monitoring:
  2. Real-time monitoring of algorithm performance against expected outcomes
  3. Automated alerts for anomalous behavior or significant deviations
  4. Regular comparison of actual portfolio performance against model portfolios

  5. Monitoring of execution quality and slippage

  6. Periodic review:

  7. Formal review of algorithm performance at least annually
  8. Assessment of whether the algorithm continues to meet its design objectives
  9. Review of assumptions and parameters for continued validity

  10. Updates to reflect changes in market structure or regulation

  11. Circuit breakers:

  12. Automated mechanisms to halt or override the algorithm in extreme market conditions
  13. Manual override capability for authorized personnel
  14. Escalation procedures for algorithm failures or unexpected behavior
  15. Documented incident response plans for algorithm-related incidents

Documentation Requirements

Firms must maintain comprehensive documentation of: - Algorithm design specifications and investment logic - Model assumptions, parameters, and data sources - Validation and testing results - Changes made to the algorithm and the rationale - Monitoring reports and performance reviews - Incident logs and remediation actions

Client Profiling

Risk Profiling Requirements

Digital advisory platforms must conduct adequate client profiling to ensure suitable recommendations:

  1. Information collection:
  2. Investment objectives (growth, income, preservation)
  3. Investment time horizon
  4. Risk tolerance and capacity
  5. Financial situation (income, assets, liabilities, existing investments)
  6. Investment knowledge and experience

  7. Age and life stage

  8. Profiling methodology:

  9. Questionnaire design must be clear, unambiguous, and comprehensive
  10. Questions must effectively differentiate between risk profiles
  11. Scoring methodology must be documented and validated
  12. The number and type of questions must be sufficient to build an accurate risk profile

  13. Leading or biased questions must be avoided

  14. Risk profile categories:

  15. Profiles must be meaningful and correspond to distinct investment strategies
  16. Typically range from conservative to aggressive (e.g., 5-7 categories)
  17. Each profile must have a clear definition and corresponding asset allocation
  18. The mapping between risk profile and portfolio allocation must be documented and justified

Limitations of Digital Profiling

MAS recognizes that digital profiling has limitations compared to face-to-face advisory: - Digital platforms may not capture nuanced personal circumstances - Clients may not fully understand the implications of their questionnaire responses - Self-reported information may not be accurate or complete

To address these limitations, digital advisors should: - Design questionnaires with consistency checks and validation logic - Provide clear explanations of what each question is assessing - Allow clients to review and modify their profile - Implement periodic re-profiling (at least annually or upon significant life events)

Portfolio Rebalancing

Rebalancing Requirements

Digital advisory platforms that manage portfolios must implement disciplined rebalancing:

  1. Rebalancing triggers:
  2. Calendar-based: Rebalancing at fixed intervals (monthly, quarterly, annually)
  3. Threshold-based: Rebalancing when asset allocation deviates beyond prescribed bands (e.g., +/- 5% from target)
  4. Hybrid: Combination of calendar and threshold triggers

  5. The chosen approach must be documented and disclosed to clients

  6. Rebalancing execution:

  7. Must be executed in accordance with best execution obligations
  8. Transaction costs must be considered -- rebalancing should not be excessive
  9. Tax implications should be considered where relevant

  10. Client notification of rebalancing activity (at least in periodic statements)

  11. Rebalancing governance:

  12. Clear policies on when and how rebalancing is conducted
  13. Monitoring of rebalancing outcomes to ensure alignment with target allocations
  14. Documentation of rebalancing decisions and rationale
  15. Review of rebalancing frequency and thresholds for continued appropriateness

Drift Management

  • Define acceptable drift ranges for each asset class
  • Implement automated drift monitoring and alerts
  • Document the rationale for chosen drift tolerance levels
  • Consider the impact of market conditions on appropriate drift ranges

Human Oversight Requirements

MAS Expectations

MAS requires that digital advisory services maintain adequate human oversight:

  1. Board and senior management responsibility:
  2. The board of directors is ultimately responsible for the digital advisory service
  3. Senior management must understand the algorithm's investment logic and risks
  4. Clear accountability for algorithm performance and customer outcomes

  5. Regular reporting to the board on algorithm performance and incidents

  6. Qualified personnel:

  7. The firm must employ individuals with sufficient expertise in investment management, technology, and risk management
  8. A designated person must be responsible for overseeing the algorithm

  9. Investment professionals must be available to review algorithm output and intervene when necessary

  10. Human escalation:

  11. Clear criteria for when human intervention is required
  12. Clients must have access to a human representative for queries and complaints
  13. Complex client situations (e.g., unusual risk profiles, significant life events) should be escalated to human advisors

  14. Contact information for human support must be prominently displayed

  15. Override authority:

  16. Designated individuals must have the authority to override algorithm decisions
  17. Override events must be documented with clear rationale
  18. Review of override frequency and patterns to identify systemic issues

Minimum Human Touchpoints

While the service is primarily automated, MAS expects human involvement at: - Onboarding: Verification of client identity and suitability assessment review - Material life events: Marriage, divorce, retirement, inheritance, or other significant changes - Market stress: Periods of extreme volatility or unusual market conditions - Complaints and disputes: All complaints must be handled by qualified human staff - Account closure: Ensuring orderly liquidation and settlement

Disclosure Requirements

Pre-Engagement Disclosure

Before a client subscribes to a digital advisory service, the platform must disclose:

  1. Service description: Clear explanation of what the digital advisory service does and does not do
  2. Algorithm disclosure: General description of the investment methodology and logic (not proprietary details, but sufficient for the client to understand the approach)
  3. Limitations: Explicit disclosure that the service is algorithm-driven and may not capture all personal circumstances
  4. Risks: Specific risks of using an automated advisory service, including technology risks, model risks, and the risk of unsuitable recommendations
  5. Fees and charges: All fees, including management fees, platform fees, transaction costs, and any performance fees
  6. Conflicts of interest: Any conflicts arising from the platform's business model (e.g., revenue from specific product recommendations)
  7. Human support: Availability and contact information for human advisory support
  8. Regulatory status: Licensing status and regulatory oversight

Ongoing Disclosure

  • Regular portfolio statements (at least quarterly)
  • Performance reports comparing actual returns to benchmarks
  • Notification of material changes to the algorithm or investment strategy
  • Notification of rebalancing activity
  • Annual fee summary

Technology and Cybersecurity Requirements

MAS Technology Risk Management (TRM) Guidelines

Digital advisory platforms must comply with MAS TRM Guidelines:

  1. System availability: High availability architecture with redundancy and failover
  2. Data protection: Encryption of client data at rest and in transit
  3. Access controls: Multi-factor authentication, role-based access, principle of least privilege
  4. Incident management: Documented incident response procedures, mandatory breach notification to MAS
  5. Business continuity: BCP and disaster recovery plans tested regularly
  6. Third-party risk: Due diligence and ongoing monitoring of technology vendors and service providers

Data Privacy

  • Compliance with the Personal Data Protection Act (PDPA) for collection, use, and disclosure of personal data
  • Client consent for data collection and use in algorithm-driven advice
  • Data retention policies aligned with regulatory requirements (minimum 5 years)
  • Right of access: Clients must be able to access their personal data held by the platform

Cybersecurity

  • Penetration testing at least annually
  • Vulnerability assessments conducted regularly
  • Security monitoring and logging
  • Employee cybersecurity training
  • Incident notification to MAS within specified timeframes

Specific Regulatory Considerations

Suitability in a Digital Context

The FAA S.27 suitability obligation applies equally to digital advisory services: - The algorithm must provide recommendations that are suitable based on the client's profile - Suitability logic must be documented and testable - Regular validation that algorithm recommendations are consistent with suitability obligations - Post-trade suitability monitoring to detect drift from client's stated objectives

Product Governance

Digital advisors must: - Conduct due diligence on underlying investment products (e.g., ETFs, unit trusts) - Ensure products used in portfolios are appropriate for the target client segment - Monitor product performance and suitability on an ongoing basis - Have a process for replacing underperforming or unsuitable products

Cross-Border Considerations

  • Digital advisory services offered to Singapore residents must be licensed in Singapore
  • Platforms based overseas offering services to Singapore clients must comply with SFA and FAA
  • MAS has enforcement jurisdiction over digital services accessible from Singapore

Representative Obligations for Digital Advisory

Licensing

Even in a digital advisory context, representatives must: 1. Hold appropriate licences under the employing firm's FA licence or CMS licence 2. Pass relevant CMFAS examinations (Module 5, Module 6, and/or Module 8A depending on activities) 3. Meet ongoing CPD requirements, including training on technology-related risks

Oversight Role

Representatives in digital advisory firms may serve oversight functions: 1. Reviewing algorithm outputs for suitability and reasonableness 2. Handling client escalations and complaints 3. Monitoring portfolio performance against client objectives 4. Providing human advisory support when clients request it 5. Participating in algorithm review and validation processes

Conduct Standards

Representatives must: - Not override the algorithm to provide unsuitable recommendations - Ensure clients understand the nature and limitations of the digital advisory service - Report any algorithm anomalies or suspected malfunctions - Maintain proficiency in both investment management and the technology platform

Key Regulatory References

Reference Title Key Requirement
SFA Part IV CMS Licensing Fund management licence
FAA Part II FA Licensing Financial advisory licence
FAA S.27 Suitability Basis of recommendation
MAS Guidelines on Digital Advisory Digital advisory standards Algorithm governance, disclosure
MAS TRM Guidelines Technology risk management IT security and resilience
PDPA Data protection Personal data handling
MAS Notice on Outsourcing Third-party risk Vendor management

Compliance Considerations for Regnify

When processing Form 3A declarations for representatives in digital advisory firms:

  1. Verify the representative holds relevant CMFAS modules appropriate to their role (advisory oversight, fund management, or both)
  2. Confirm the representative's employing firm holds both FA licence and CMS licence (fund management) as applicable
  3. Assess the representative's competency in both investment management and technology oversight
  4. Review any history of algorithm-related incidents or client complaints at previous employers
  5. Verify CPD records include technology risk and digital advisory-specific training
  6. Check for any regulatory actions related to suitability failures in automated advice
  7. Assess whether the representative has adequate understanding of the algorithmic investment process they oversee

Previous Next

Back to Product Regulations