How to set up practical AI governance using the Model AI Governance Framework, AI Verify and existing privacy and sector law.
dgm is an independent osFoundry integration partner — not affiliated with osFoundry’s maker (OS LLC), and dgm has no completed client integrations yet.
Responsible AI governance in Singapore does not require a new compliance department — it means applying the Model AI Governance Framework, AI Verify and existing law in a practical way. Here is how.
Start with the frameworks
The Model AI Governance Framework (and its GenAI and Agentic-AI editions) and AI Verify are ready-made, voluntary governance tools: accountability, data governance, testing, transparency, human oversight and incident management. They are voluntary, but they map to obligations you already have.
Tie it to existing law
As of 2026 Singapore has no standalone, binding AI Act. Its horizontal AI-governance instruments are voluntary: the Model AI Governance Framework (2019, updated 2020), the Model AI Governance Framework for Generative AI (finalised 30 May 2024), the newer Model AI Governance Framework for Agentic AI (launched 22 January 2026), and the AI Verify testing framework and toolkit. The binding constraints on business AI are existing sectoral laws — chiefly the Personal Data Protection Act 2012 (PDPA) and, for critical-infrastructure operators, the Cybersecurity Act 2018 — plus MAS supervisory expectations for financial institutions. Good governance means meeting these deliberately — privacy by design under the PDPA, security under the Cybersecurity Act where relevant, and FEAT-aligned fairness if you are a financial institution.
Make it practical
Assign an owner, keep an AI inventory, document risk for significant uses, keep humans in the loop, and log decisions — and consider running higher-stakes systems through AI Verify. osFoundry is a model-agnostic, bring-your-own-key (BYOK) AI orchestration platform — usage-based pricing with no per-seat fees, local-first and self-hostable, with per-region data pinning (US, EU or Japan) or deployment into your own cloud. Its audit logging and configuration controls support several governance dimensions. osFoundry’s managed cloud pins data to the US, EU or Japan — it does not currently offer a Singapore managed region (its nearest managed region is Japan). For data that must stay in Singapore, the honest path is self-hosting osFoundry (BYO Cloud) inside a Singapore cloud region such as AWS Asia Pacific (Singapore) ap-southeast-1, Microsoft Azure Southeast Asia (Singapore) or Google Cloud asia-southeast1 (Singapore), or running models locally on-device.
Where dgm fits
dgm is an independent integration partner that helps Singapore businesses adopt osFoundry — scoping a first use case, handling the build, and connecting AI to the systems you already run. dgm is independent of osFoundry’s maker (OS LLC) and has no completed client integrations yet, so everything described here is a service offered, not a past result. If you want to scope a practical first project, dgm can help you map it out.