What Is RORC in Singapore? The Register of Registrable Controllers Explained

The RORC (Register of Registrable Controllers) is a statutory register that every Singapore company, foreign company, and LLP must maintain to record the individuals or entities with significant ownership or control over the business. This requirement has applied since 31 March 2017, according to ACRA. The RORC is not a public document: access is restricted to law enforcement agencies.

What the RORC Actually Is

The RORC operates as a two-layer register. The first layer is a private register maintained by the company itself, kept at its registered office or with a corporate service provider. The second layer is a central register filed with ACRA via BizFile+, which became mandatory on 30 July 2020.

The private RORC must be kept accurate and available for inspection by law enforcement at all times. The central RORC filed on BizFile+ mirrors that same information. According to ACRA, the central register is not accessible to the public: it exists solely for regulatory and law enforcement purposes. There are no fees payable for lodging RORC information with ACRA.

ACRA organises RORC compliance into three distinct obligations that companies must understand separately:

1. Setting up and maintaining the private RORC: identifying your registrable controllers and keeping an accurate internal register
2. Filing with the Central RORC: lodging the same information with ACRA via BizFile+
3. Sending annual notices to registrable controllers: verifying that controller details remain accurate on at least an annual basis

Most companies encounter the RORC through one of three situations: at incorporation (when it must be set up from day one for entities registered on or after 16 June 2025), after a change in ownership or control (triggering a filing within 2 business days of updating the private register), or at the annual notice cycle (when all controllers must be contacted to confirm their details).

What Is a Registrable Controller?

A registrable controller is any individual or legal entity that meets at least one of the following conditions under Singapore’s Companies Act:

• Holds more than 25% of the shares in the company
• Controls more than 25% of the voting rights
• Has the right to appoint or remove a majority of directors
• Exercises significant influence or control over the company, even without a shareholding

The 25% threshold is the most commonly applied test. According to ACRA’s guidance on identifying registrable controllers, no distinction is made between different classes of shares: preference shares, ordinary shares, and founder shares are all counted equally against the 25% threshold.

The significant influence test is where most companies make mistakes. A party who holds no shares but has the contractual right to appoint a director (through an investor side letter, a loan agreement with governance covenants, or a management agreement) may qualify as a registrable controller. That assessment requires looking beyond the share register at the full range of contractual arrangements.

Both natural persons (individuals) and legal entities (other companies, funds, trusts) can be registrable controllers. Where the controller is itself a legal entity, the obligation is to record that entity, not to look through to its ultimate individual shareholders, unless they also independently qualify under one of the four tests.

Why Singapore Introduced the RORC

The RORC was introduced through amendments to the Companies Act, the Limited Liability Partnerships Act, and the Business Names Registration Act that came into force on 31 March 2017. The purpose is to enhance transparency of corporate ownership and control in support of Singapore’s anti-money laundering (AML) and counter-terrorism financing (CFT) obligations, according to ACRA.

The underlying driver was Singapore’s obligations under the Financial Action Task Force (FATF) recommendations, which require member jurisdictions to maintain accessible records of the beneficial owners of corporate vehicles. FATF identified gaps in beneficial ownership transparency as a key vulnerability in AML/CFT frameworks globally.

Singapore’s approach requires companies to self-maintain a register based on a defined legal threshold. The central RORC is filed with ACRA and accessible to law enforcement, but not to competitors, journalists, or the general public. This reflects Singapore’s balance between regulatory rigour and protecting legitimate business confidentiality. The RORC requirement applies even to dormant companies and entities undergoing winding up, striking off, receivership, or judicial management, unless specifically exempted.

How the RORC Differs from the Share Register

The share register and the RORC are not the same register and do not always record the same people.

The share register records legal title holders: the names of shareholders as they appear on share certificates and in company records. It reflects who holds shares in law, not necessarily who owns them in practice.

The RORC records beneficial controllers: the people or entities who actually exercise ownership or control, regardless of how shares are legally registered. A nominee shareholder, for example, holds shares on behalf of a beneficial owner. The nominee appears on the share register; the beneficial owner (if they meet the 25% or significant influence test) must appear in the RORC.

This distinction matters because nominee arrangements are common in corporate structures: holding companies, trust arrangements, and investment vehicles frequently separate legal and beneficial ownership. The RORC was specifically designed to capture the layer below the share register.

What Information the RORC Must Contain

For each registrable controller, the private RORC must record the following. Where the controller is an individual:

• Full legal name
• Identity number (NRIC or passport number)
• Residential address
• Nationality
• Date of birth
• Email address and contact number (required from 16 June 2025)
• The date they became a registrable controller
• The nature of their interest or control (shares, voting rights, appointment rights, or significant influence)
• Date of cessation as a controller, if applicable

Where the controller is a legal entity:

• Entity name and registration number
• Registered or principal address
• Jurisdiction of incorporation
• Email address and contact number (required from 16 June 2025)
• The date they became a registrable controller
• The nature of their interest or control
• Date of cessation as a controller, if applicable

The addition of email address and contact number is a June 2025 update to ACRA’s requirements that many companies whose RORC was set up before that date have not yet incorporated. Any RORC established before 16 June 2025 should be reviewed to confirm these fields are captured for all existing controllers.

Who Can Access the RORC?

The private RORC (kept at the registered office or with the corporate secretary) can be inspected by law enforcement agencies. The company’s directors and authorised personnel can also access it internally.

The central RORC filed with ACRA via BizFile+ is accessible to law enforcement agencies only. It is not searchable by the public, business partners, or counterparties. The ACRA general public records — such as the company’s registered address, director names, and share capital, remain publicly searchable via BizFile+. The RORC sits outside that public layer.

How Often the RORC Must Be Updated

The RORC is not a one-time exercise at incorporation. It must reflect the actual control structure of the company at all times. According to ACRA, the obligations work as follows:

Updating the private register: When a change occurs, the internal private RORC must be updated within 7 calendar days of receiving confirmed information from the controller (updated from the previous 2-business-day internal deadline as of June 2025).

Filing with the central RORC: Any change must be lodged with ACRA via BizFile+ within 2 business days of updating the private register. The update is filed using the “Update Register of Registrable Controller” eService.

Situations that trigger an update include:

• A share transfer that takes a party above or below the 25% threshold
• A new investor acquiring a material stake
• A director appointment right being granted or extinguished
• A change in the details (address, email, or identity number) of an existing controller
• A controller ceasing to hold that status

For companies incorporated on or after 16 June 2025: The private RORC must be set up and filed with ACRA on the date of incorporation itself. For companies incorporated between 16 June and 23 November 2025, the RORC is lodged separately via the “Update Register of Registrable Controller” eService on incorporation date. For companies incorporated on or after 24 November 2025, RORC information is lodged as part of the incorporation application itself through the “Register new business entity” eService.

The Annual Notice Obligation

One of the most frequently overlooked RORC obligations is the requirement to send a verification notice to every registrable controller at least once a year, according to ACRA.

There is no fixed calendar date for sending these notices: the obligation is that each controller receives a notice at least annually. Once a notice is sent, the controller must be given 30 days to respond. If their details have changed, the RORC must be updated accordingly. ACRA provides templates for these notices, and the response from the controller must now include a signed declaration confirming their particulars.

This annual cycle is not simply an administrative formality. It is a mechanism through which companies are required to actively verify that their RORC remains accurate, not merely assume that controllers will voluntarily notify the company of changes. A company that has never sent annual notices, or that sent them once at setup and not since, has an open compliance gap regardless of whether the underlying controller information has actually changed.

Who Is Exempt from RORC Requirements?

Exemptions apply to:

• Companies listed on the SGX or an equivalent approved exchange
• MAS-regulated financial institutions (banks, insurers, capital markets services licensees, fund managers)
• Wholly-owned subsidiaries of those entities
• Government entities, statutory boards, and government ministries

Most private Singapore companies are not exempt. An entity that believes it qualifies for exemption must inform ACRA of its exemption status through the “Update Register of Registrable Controller” eService; it cannot simply elect not to file without notifying ACRA.

What Happens If a Company Does Not Comply?

Failure to maintain or lodge RORC information is a criminal offence under the Companies Act. The maximum fine upon conviction is S$25,000, according to ACRA. Directors and officers face individual liability, not just the entity.

The most common compliance gaps that arise in practice are: (1) failing to send annual notices to controllers, (2) not updating the RORC following share transfers or structural changes, (3) failing to capture the new email address and contact number fields for existing controllers, and (4) not identifying controllers who qualify under the significant influence test rather than the shareholding threshold.

FAQs About the RORC

What does RORC stand for?

RORC stands for Register of Registrable Controllers. It is a statutory register maintained by Singapore companies, foreign companies, and LLPs to record individuals or entities with significant ownership or control. The requirement has applied since 31 March 2017, according to ACRA.

Is the RORC the same as the share register?

No. The share register records legal title holders: the names on share certificates. The RORC records beneficial controllers: those who actually own or exercise control, which may differ from the legal record. Nominee shareholders appear on the share register; the beneficial owner behind them must appear in the RORC if they meet the control threshold.

Is the RORC publicly accessible?

No. The central RORC filed with ACRA is not a public document. Access is restricted to law enforcement agencies. The private RORC kept at the company level is accessible to law enforcement and internally by directors.

Do I need to send annual notices even if nothing has changed?

Yes. The annual notice obligation applies regardless of whether you expect any changes. The purpose is active verification, not passive assumption. Each controller must receive a notice at least once a year and be given 30 days to respond. If a company has not been sending annual notices, that is an open compliance gap.

What is the penalty for not maintaining a RORC?

Failure to maintain or lodge RORC information is a criminal offence. The maximum fine upon conviction is S$25,000, with directors and officers facing individual liability under the Companies Act.

How Three Squared Nine Can Help

Maintaining an accurate RORC requires more than a one-time setup. Ownership and control structures change (shares transfer, investors enter and exit, contractual control rights are granted or extinguished), and each change triggers filing obligations. The annual notice cycle adds a recurring compliance obligation that sits outside most companies’ standard corporate calendar.

Three Squared Nine’s Corporate Secretary and Governance services cover RORC identification, internal register maintenance, BizFile+ lodgement, annual notice preparation and dispatch, and ongoing monitoring so that changes are captured and filed within the statutory window.

For companies with complex structures (multiple investors, cross-border holdings, nominee arrangements, or investor side letters), Three Squared Nine’s Regulatory Compliance Advisory provides ongoing guidance on identifying registrable controllers and assessing significant influence scenarios.

For a full guide to the compliance obligations (deadlines, penalties, and the filing process), see ACRA RORC Compliance: What Every Singapore Company Must Know and Do.

Conclusion

The RORC is a beneficial ownership register, not a share register. It records who actually controls a Singapore company (through shares, voting rights, appointment powers, or significant influence), regardless of how ownership is legally structured. Keeping it accurate is a continuous obligation with three distinct components: maintaining the private register, filing with ACRA’s central register within 2 business days of any update, and sending annual verification notices to every controller. Companies whose RORC was set up before June 2025 should also confirm that the updated particulars requirements (including email address and contact number) have been captured for all existing controllers.

Disclaimer: This article is provided by Three Squared Nine for general informational purposes only and reflects publicly available information as at the date of publication. It does not constitute legal, regulatory, or compliance advice, and should not be relied upon as a substitute for professional advice tailored to your specific circumstances. Three Squared Nine provides in-house compliance and legal support services for internal and business purposes. It is not a law firm, and its services do not constitute legal advice or create a solicitor-client relationship. ACRA’s RORC requirements, filing procedures, deadlines, and penalty structures are subject to change without notice. All information should be independently verified with the Accounting and Corporate Regulatory Authority (ACRA) before acting upon it. Three Squared Nine accepts no liability for any loss or damage arising from reliance on the information contained in this article.