SingVMS is the visitor-management product of LEETLABS PTE. LTD., a Singapore-registered software company (UEN 202609035K). We built it because getting government-verified identity into a check-in should not require every business to become a Singpass developer.
Most Singapore businesses still register visitors with a paper logbook or a photocopied IC. That was never a good idea, and the rules have caught up with it. Since 1 September 2019, the PDPC's NRIC Advisory Guidelines have told organisations not to collect full NRIC numbers or keep copies of the physical card by default, unless the law requires it or they genuinely need it to confirm who someone is. On top of that, a June 2025 PDPC and CSA joint advisory requires organisations to stop using NRIC numbers to authenticate people by 31 December 2026, with enforcement stepping up from 1 January 2027.
The clean alternative is Singpass. A visitor proves who they are with the government's own identity system, and the business gets verified details without ever handling a raw NRIC. The catch is that doing this properly is real engineering: FAPI 2.0, DPoP, encrypted ID tokens, MyInfo scopes, and a security review you would not want to get wrong. We had already built that stack. SingVMS packages it so a reception desk can go live in an afternoon instead of a quarter.
That is the whole product. We handle the Singpass integration and the compliance-sensitive parts, you get a QR code and a dashboard of verified check-ins, and no full NRIC is ever written down at your door.
SingVMS is a product of LEETLABS PTE. LTD.. The company is registered in Singapore and you can verify it with ACRA. Everything on this site is operated by that entity, not an anonymous brand.
SingVMS is built and run by Said Betmurzaev, founder of LEETLABS PTE. LTD..
Said has spent 10 years building software with modern tech stacks. He's the founder and CEO of Leetlabs, and the co-founder and CTO of ROSHI, a loan marketplace in Singapore, where he owns the systems that handle real customer financial data every day.
That's the reason SingVMS looks the way it does. When you run production systems that hold personal data, you learn to treat identity and compliance as load-bearing, not as a checkbox. SingVMS keeps the full NRIC out of the database entirely, leans on Singpass for the parts that actually prove identity, and says plainly what it does and doesn't store.