Circular 01/2025 · Assessment Criteria · Programme Reference: CBA-01
Certificate of Business Authenticity
A formal credential issued by Data Bureau (Singapore) attesting that the holder is a verified, legally registered, and credibly operating business entity in Singapore.
About This Certificate
The Certificate of Business Authenticity (Programme Reference: CBA-01) is Data Bureau (Singapore)'s foundational credential, issued to Singapore-registered entities that satisfy a structured, multi-domain assessment. Each certificate is assigned a unique Certificate ID and is valid for 12 months from the date of issuance, subject to ongoing monitoring and compliance with Data Bureau (Singapore)'s published conduct obligations.
The certificate attests that the named entity satisfied the relevant assessment criteria at the time of assessment across six published domains: Business Legitimacy, Reputation & Public Standing, Online Presence & Digital Footprint, Legal & Regulatory Compliance, Financial Standing, and Operational Credibility. Certification does not constitute an endorsement of any product, service, or future conduct.
Certificates are publicly verifiable at any time via the Data Bureau (Singapore) registry at databureau.com.sg/registry. Any party may enter a Certificate ID to confirm its authenticity and current status — Active, Conditional, Suspended, or Revoked — at no cost.
Assessment Areas
The assessment areas below correspond to the six domains of the CBA-01 standard framework. They are presented in neutral, high-level terms and do not constitute an exhaustive disclosure of all evaluative factors.
The assessment areas below are illustrative. An entity may satisfy every published area and still not receive certification where proprietary assessment factors indicate material risk. Published areas are a necessary but not sufficient condition for certification.
Domain 1
Business Legitimacy
- •Verifiable ACRA registration and UEN confirming the entity as an active, lawfully incorporated business with a minimum operating history.
- •Director and beneficial owner identities verified against official registry records, with no anonymous or unverifiable ownership arrangements.
Domain 2
Reputation & Public Standing
- •Absence of sustained adverse consumer sentiment patterns, fabricated reviews, or documented unresolved public complaints.
- •No active complaints or enforcement actions filed with CASE, PDPC, or equivalent statutory consumer or regulatory bodies.
Domain 3
Online Presence & Digital Footprint
- •Active and publicly accessible business website secured with a valid SSL certificate and consistent with the entity's declared commercial identity.
- •Verifiable domain ownership and publicly listed, reachable contact details consistent across digital channels.
Domain 4
Legal & Regulatory Compliance
- •No outstanding court judgments or history of fraud, scam, or criminal proceedings involving the business or its principals.
- •Applicable industry licences, statutory registrations, and tax obligations — including GST, CPF, and MOM licensing where applicable — current and valid.
Domain 5
Financial Standing
- •No active bankruptcy or insolvency proceedings against directors or beneficial owners, and no outstanding enforcement actions or debt judgments.
- •Business not listed on any official blacklist, debarment, or advisory registry maintained by MAS, GeBIZ, SPF, SFA, or equivalent authority.
Domain 6
Operational Credibility
- •Identifiable business premises, at least one verified active principal or full-time employee, and an active business email domain consistent with the registered or trading name.
- •Products or services offered are clearly defined, lawful, and deliverable, with no prior revocation of an Independent Authority Certificate within the preceding 36 months.
Application Process
Applications are processed by Data Bureau (Singapore) or its authorised agencies. The process covers eligibility screening, identity verification, document submission, and multi-source assessment before a determination is issued.
- 1
Eligibility confirmation
ACRA registration status, UEN validity, and minimum operating history are verified automatically before the application form is made accessible.
- 2
Entity and principal identity verification
Director and beneficial owner identities are confirmed against ACRA records. NRIC or Singpass-verified declarations are required where applicable.
- 3
Document submission
Required documentation is submitted, including ACRA BizFile extract, supporting evidence of commercial operation, and any applicable statutory licence records.
- 4
Multi-source assessment
Data Bureau (Singapore) conducts a structured assessment across all six domains using automated data checks, public record verification, and applicant-submitted evidence.
- 5
Determination and issuance
Upon a Certified determination, the certificate is issued with a unique Certificate ID and recorded in the public registry. Conditional, Not Certified, and Disqualified outcomes are communicated in writing with the basis stated.
Renewal, Revocation & Conduct
Certificate holders are subject to continuous post-certification monitoring by Data Bureau (Singapore). Adverse events — including regulatory actions, adverse intelligence flags, or material changes to the business — may trigger a review and, where warranted, suspension or revocation of the certificate.
Certified entities are required to notify Data Bureau (Singapore) within 14 calendar days of any Material Change occurring on or after 1 May 2026, in accordance with CIA-001/2026. The full conduct and renewal obligations are published in the Data Bureau (Singapore) Programme Conduct Policy.