The honest picture of Singapore data residency for AI — where keeping data in Singapore is a requirement versus a risk and procurement preference, given MAS does not mandate general localisation.
dgm is an independent osFoundry integration partner — not affiliated with osFoundry’s maker (OS LLC), and dgm has no completed client integrations yet.
‘Keep our data in Singapore’ is a common AI requirement, but the legal reality is more nuanced than many assume. Here is when Singapore data residency is actually required versus a sensible preference.
| Item | Detail |
|---|---|
| General rule | MAS does not mandate general data localisation |
| PDPA position | Transfer Limitation Obligation governs cross-border, not a ban |
| Practical driver | Sensitive data, MAS audit expectations, procurement |
| Hub context | Singapore is a major in-region cloud and data-centre location |
What the rules actually say
Singapore does not impose a general data-localisation mandate. MAS treats cloud as a form of outsourcing under its Technology Risk Management and outsourcing frameworks and ‘has no objections to financial institutions adopting cloud services’ provided they retain accountability, audit rights and controls. The PDPA’s Transfer Limitation Obligation governs sending personal data abroad (requiring comparable protection) rather than forbidding it.
When residency really matters
Even without a mandate, regulated buyers — banks, government-linked work, healthcare — often require data to physically remain in Singapore to satisfy audit, encryption and risk requirements. For those workloads, in-country processing is a genuine control; for others it is a reasonable preference. Singapore’s strength as a cloud and data-centre hub makes in-region deployment straightforward.
How to achieve it
osFoundry’s managed cloud pins data to the US, EU or Japan — it does not currently offer a Singapore managed region (its nearest managed region is Japan). For data that must stay in Singapore, the honest path is self-hosting osFoundry (BYO Cloud) inside a Singapore cloud region such as AWS Asia Pacific (Singapore) ap-southeast-1, Microsoft Azure Southeast Asia (Singapore) or Google Cloud asia-southeast1 (Singapore), or running models locally on-device. That gives you a real Singapore-residency option for sensitive workloads while keeping model choice. Be precise in your claims — overstating a legal mandate that does not exist undermines trust.
Where dgm fits
dgm is an independent integration partner that helps Singapore businesses adopt osFoundry — scoping a first use case, handling the build, and connecting AI to the systems you already run. dgm is independent of osFoundry’s maker (OS LLC) and has no completed client integrations yet, so everything described here is a service offered, not a past result. If you want to scope a practical first project, dgm can help you map it out.