NRIC authentication ends: 31 Dec 2026
A PDPC–CSA joint advisory requires organisations to stop using NRIC numbers to authenticate people by 31 December 2026. PDPC steps up enforcement from 1 January 2027.
From 31 December 2026, Singapore organisations must stop using NRIC numbers to authenticate people, and since 2019 the PDPC has told them not to collect full NRICs at the door by default. SingVMS replaces the logbook with a QR code — visitors scan and verify with Singpass, and you get government-verified check-ins without writing down a single NRIC. Set up in 5 minutes.
50 free check-ins included. No credit card required.
Visitors write fake names. Full NRICs sit exposed to everyone who signs in after them. Handwriting is illegible. And the NRIC itself is on the way out as an identifier at the door: the PDPC has discouraged collecting full NRICs by default since 2019, and from 31 December 2026 the NRIC number can no longer be used to authenticate people at all.
A PDPC–CSA joint advisory requires organisations to stop using NRIC numbers to authenticate people by 31 December 2026. PDPC steps up enforcement from 1 January 2027.
Two simple flows — one for your business, one for your visitors.
Create your account with just an email. No credit card needed.
Add your offices, lobbies, or facilities. Configure what data to collect.
Download and print the QR code for each location. Place it at your entrance.
See real-time verified check-ins on your dashboard. Export anytime.
Use any phone camera to scan the QR code at the entrance.
Authenticate with Singpass. Your verified identity is pulled automatically.
Check-in confirmed. No forms, no writing, no NRIC card needed.
We built the FAPI 2.0, DPoP, and MyInfo integration so you don't have to. Get government-verified identity data from day one.
Visitor names and NRICs come from Singpass MyInfo, not a form anyone can fill with fake details.
No full NRIC stored. No physical ID copied. Consent built into the check-in flow. PDPA compliant by design.
Scan QR, tap Singpass. It's the same SafeEntry flow 4 million Singaporeans used during COVID. Zero training.
No clipboard. No typing. No waiting. Visitors scan and go. First-timers get MyInfo auto-fill, repeat visitors are recognized instantly.
See who's on-site right now. Filter by location, date, or visitor. Export check-in records as CSV anytime.
Manage multiple buildings, floors, or facilities from one dashboard. Each location gets its own QR code and settings.
From condominiums to data centres, SingVMS fits wherever identity matters.
Replace guard house NRIC photocopying with Singpass verification. PDPA compliant, no physical IDs needed.
MAS Technology Risk Management guidelines require strict access logging with verified identity.
Verify every adult entering your premises. Singpass adds government-level trust for child safety.
WSHA compliance requires visitor tracking. Ensure only authorised personnel enter the site.
MAS regulations mandate access control and audit trails. Government-verified identity is a natural fit.
Modern, frictionless check-in that looks professional to clients. No clipboards at reception.
We handle the Singpass FAPI integration. You get government-verified identity fields — no API keys, no RP registration, no engineering.
We handle the Singpass integration, infrastructure, and compliance. You get verified visitor data. Start free, upgrade when you need more — plans from S$29/mo.
Test SingVMS at one location. Live in under 5 minutes, no credit card.
For small teams that need verified visitor details and predictable pricing.
For growing businesses that want their own branding and more volume.
Foreign visitors and tourists can use a manual check-in form (name, passport number, phone). These entries are clearly marked as "unverified" on your dashboard, so you always know which check-ins are Singpass-verified and which are self-reported.
No. Only the masked NRIC (e.g. S****567A) is stored for display. A SHA-256 hash is kept for recognising repeat visitors. The full NRIC only exists in memory during authentication and is never written to any database or log.
SafeEntry was a government-run, mandatory COVID check-in system that was discontinued in February 2023. SingVMS is a private commercial product for businesses that want verified visitor management — same familiar UX, but built for ongoing use with a business dashboard, data export, and multi-location support.
The Free plan includes Singpass-verified name and masked NRIC. Paid plans add date of birth, mobile number, and email. Enterprise plans unlock additional MyInfo fields (nationality, address, pass type, employment) plus custom fields like "purpose of visit" or "who are you visiting." Data minimisation is built in — each location only requests the fields you configure.
Visitor data is retained indefinitely by default so your business can always access historical records. If you need auto-purging, you can configure a retention period in your dashboard settings — records older than the set period will be automatically deleted nightly. You can export data as CSV at any time.
No. The check-in flow runs entirely in the mobile browser. Visitors scan a QR code, which opens a web page where they authenticate with Singpass. No app download required — they only need the Singpass app they already have on their phone.
Two. Since 1 September 2019, the PDPC's NRIC Advisory Guidelines have told organisations not to collect full NRIC numbers or copies by default, except where the law requires it or it is needed to verify identity to a high degree of fidelity. Separately, a June 2025 PDPC–CSA joint advisory requires organisations to stop using NRIC numbers to authenticate people by 31 December 2026, with enforcement stepping up from 1 January 2027. SingVMS addresses both: it never writes down or displays a full NRIC, and identity is verified by Singpass rather than by treating the NRIC number as proof.
SingVMS is the data controller. Visitors see a clear privacy notice before every check-in showing exactly what data will be collected and by whom. By proceeding with the Singpass check-in, visitors consent to SingVMS collecting and retaining their data. Singpass adds a second layer: visitors authorise the specific MyInfo fields being shared within the Singpass app. On the business side, by signing up, businesses acknowledge that SingVMS owns and controls the visitor data, and that it is made available to them for legitimate visitor management purposes under PDPA.
Set up your first location in under 5 minutes. 50 free check-ins, no credit card.
Start FreeQuestions? WhatsApp us