Every Singapore company has to know who really controls it — and ACRA has to know too. The mechanism is the Register of Registrable Controllers (RORC), a statutory record of beneficial owners that has existed since 2017 but has been actively enforced and tightened in recent years. Under the Companies Act 1967, every company (with limited exemptions) must keep a RORC and lodge the same particulars with ACRA’s central register.
The compliance burden looks light on paper — fewer fields than an annual return — but the penalty structure is anything but light. Failures attract fines of up to S$25,000, and missed filings have triggered enforcement action against company secretaries and directors who treated RORC as a one-off task. This guide walks through the 2026 rules, the 25% threshold, the lodgement process via Bizfile, and the most common mistakes.
For companies that prefer a hands-off compliance regime, Raffles Corporate Services maintains RORC, ROND, RONS and the full statutory register suite for hundreds of Singapore entities.
What the RORC Is and Why It Exists
The RORC is a register of “registrable controllers” — natural persons or legal entities that ultimately own or control a Singapore company. The regime was introduced in 2017 as part of Singapore’s commitment to global anti-money-laundering standards (FATF Recommendation 24) and was significantly strengthened in 2020 (centralisation of the register at ACRA) and again in 2022 (public-facing controller information for certain entities).
The policy goal is straightforward: regulators, law enforcement and other government agencies should be able to identify the natural person standing behind a Singapore corporate structure quickly. RORC sits alongside the Register of Nominee Directors and Shareholders as part of the same beneficial-ownership transparency package — for the parallel rules on nominees, see our updated 2026 nominee director guide.
Who Counts as a Registrable Controller
The Fourteenth Schedule to the Companies Act sets the test. A person is a registrable controller of a company if any one of the following is true:
- Significant interest: the person directly or indirectly holds more than 25% of the issued shares (for companies with share capital) or more than 25% of the rights to share in capital or profits (for companies without share capital);
- Significant control over voting: the person directly or indirectly holds more than 25% of the voting rights;
- Power to appoint or remove directors: the person has the right to appoint or remove a majority of the board;
- Significant influence or control: the person has the right to exercise, or actually exercises, significant influence or control over the company.
Joint holdings, indirect chains through holding companies, trusts, partnerships and contractual arrangements are all in scope. The “more than 25%” test is what most groups use as the practical entry point, but the influence-and-control limb means a beneficial owner with a smaller stake but a controlling shareholders’ agreement still has to be entered.
What Information the RORC Must Record
For each registrable controller who is a natural person, the RORC must capture:
- full name (and any aliases);
- residential address;
- nationality;
- identification number (NRIC, FIN or passport);
- date of birth;
- date the person became a registrable controller;
- date the person ceased to be a registrable controller (if applicable);
- the nature of the person’s control (significant interest, voting rights, power to appoint, or significant influence/control).
For corporate registrable controllers, you record the entity’s name, registered office, place of incorporation, registration number, the date it became a registrable controller, and the nature of control.
How RORC Filings Work in Bizfile
The internal RORC is held by the company (often in the custody of the company secretary). The matching central register is held at ACRA. Filings are made via the Bizfile portal using the “Update Register of Registrable Controller” eService. There is no fee. The filing must be made within 2 business days of any change to the underlying internal register, and the internal register itself must be updated within 7 days of the company becoming aware of a change.
The “becoming aware” trigger is what catches most companies out. A change of beneficial ownership upstream — for example, where a corporate shareholder undergoes a change of control — does not always come to the Singapore subsidiary’s attention promptly. Best practice is to issue a controller-confirmation notice to all known controllers at least once a year, typically alongside the AGM cycle. See our AGM compliance guide for how to integrate this into the annual workflow.
Penalties for Non-Compliance
Section 386AL of the Companies Act and related provisions impose penalties of up to S$25,000 per breach for failures to maintain the RORC, lodge with ACRA’s central register, or respond to control-confirmation notices. The fines apply to the company and to every officer in default — meaning the company secretary, the directors, and (depending on the breach) the controllers themselves can each be exposed.
ACRA’s enforcement posture has moved from advisory to active. Spot-checks, follow-up notices, and targeted prosecutions have all increased since 2024. A clean RORC is now a baseline expectation in due diligence on any Singapore company, including by banks under their AML obligations.
Exemptions From the RORC Requirement
A company is exempt from the RORC obligation if it is:
- a public company listed on the Singapore Exchange (SGX) or another approved stock exchange;
- a Singapore financial institution;
- a wholly-owned subsidiary of any of the above; or
- a Singapore government entity, statutory body or international organisation as listed in the relevant order.
Note: most private exempt companies, family holding companies, fund vehicles (including most VCC sub-funds), and SME operating companies are NOT exempt. If you operate a Variable Capital Company, see our VCC primer for an overview of the structure, then come back to this guide for the controller-register angle.
Common RORC Mistakes
- Treating it as one-and-done. The RORC is a live register. Any share transfer, capital reorganisation or upstream change can trigger a 7-day update obligation.
- Stopping at the legal shareholder. Where the registered shareholder is a corporate entity, you must trace through to the natural-person controller. Stopping at the immediate holding company is a breach.
- Forgetting the “significant influence” limb. A founder who has dropped below 25% economically but who still controls the board through a shareholders’ agreement remains a registrable controller.
- Late lodgement after the internal register is updated. The 2-business-day clock runs from the internal update — not from the date you finally get around to logging into Bizfile.
- Missing the annual controller-confirmation step. Sending an annual notice and keeping the responses on file is the standard defence to an ACRA enquiry.
Practical Workflow for Your Company Secretary
- Map the ownership chain at incorporation. Capture every person above the 25% threshold and every person with significant influence or control.
- Record the controller particulars in the internal RORC and lodge with ACRA via Bizfile within 2 business days.
- Issue a confirmation notice annually (typically alongside the AGM) to every recorded controller and to any other person the company has reasonable grounds to believe may be a controller.
- Capture every change-of-control event — share transfers, allotments, redemptions, conversion of convertibles — and update both registers.
- Retain documentary evidence (board resolutions, share transfer forms, controller responses) for at least five years.
For broader compliance scaffolding, our Singapore compliance calendar sequences RORC alongside annual returns, AGMs, ECI filings and XBRL.
How Raffles Corporate Services Can Help
RORC sits at the intersection of corporate secretarial work, AML compliance and beneficial ownership transparency. Getting it right requires a clean internal register, a disciplined update process, and a paper trail that can withstand an ACRA review. Raffles Corporate Services manages RORC for clients ranging from single-shareholder SMEs to multi-tier family-owned groups with overseas controllers. Reach out to us if you would like a review of your current controller register or assistance with a remediation filing.
— The Editorial Team, Raffles Corporate Services