SERVICES › TOOLKIT › SINGAPORE SME WORKING KIT · COMPLETE
Govern AI use.
Protect personal data.
Keep people accountable.

Editable policies, practical procedures and working registers for Singapore SMEs adopting third-party AI — without an in-house compliance team.

For owner-managers, operations leads and DPOs outside healthcare and other sector-specific regimes.

See the actual samples

Singapore AI Governance & PDPA Toolkit

COMPLETE · AVAILABLE NOW

Markdown + Word + PDF
CSV + Excel registers

Licence: one organisation, internal use only, with 12 months of updates from purchase.

I wrote and personally reviewed every document in the toolkit.

▶ Get the toolkit: DM @alewyl1 on X

The toolkit is complete and available now. Access is arranged by DM on X. DM me on X to buy. Once payment is confirmed, I'll email you the toolkit ZIP.
  • Editable, not one-size-fits-all
  • Singapore sources, cited clause by clause
  • No compliance or certification guarantee
A connected set of working documents

WHAT YOU GET

11 PDPA items, 6 core AI items, an additional AI Verify applicability checklist and a non-exhaustive ISO/IEC 42001 topic-level crosswalk. A source register lists the official documents each clause draws on, so you can check them yourself.

PDPA pack

  • Data protection policy
  • DPO appointment letter
  • Consent and notification clauses
  • Do Not Call campaign checklist
  • Data breach management plan
  • Data protection impact assessment
  • Vendor and data intermediary agreement clauses
  • Access and correction request procedure
  • Staff training deck outline
  • Personal data inventory — register guidance
  • Retention schedule — guidance

AI governance pack

  • AI risk assessment
  • Human oversight policy
  • Model and vendor due diligence questionnaire
  • Board and management AI report
  • AI use-case register — guidance
  • AI incident log — guidance and response
  • AI Verify applicability and evidence checklist

Alignment aid

  • ISO/IEC 42001 — non-exhaustive alignment aid

Every narrative and register guidance companion has editable DOCX and reading-copy PDF exports. Registers include CSV and XLSX with Read Me guidance. Synthetic worked examples, a start guide, source notes, an adoption checklist and the internal-use licence are included. This is not a completed audit, implemented management system or AI test report.
Start with your actual operations

HOW TO USE IT

  1. Map. List your data flows, AI uses, suppliers and accountable people.
  2. Adapt. Replace placeholders, select relevant clauses and justify local choices.
  3. Check. Check sources and applicability; get qualified advice where needed.
  4. Operate. Approve, train, implement, keep evidence and revisit changes.
Two real excerpts. Fictional details.

LOOK INSIDE

Each preview is one clause taken from the toolkit’s editable templates, filled in for a fictional company. They are not the full toolkit and are not approved policies for any real organisation.

Privacy Policy

First page of the synthetic privacy policy sample

One template excerpt, with fictional values. Read sample PDF.

Human Oversight

First page of the synthetic human oversight sample

One template excerpt, with fictional values. Read sample PDF.
Practical documents, with accountable review

BY ALEX LEW

Alex Lew, Singapore — CFA, AIGP, CIPP/A, FIP.

This DIY toolkit sits alongside Alex’s AI governance review and PDPA programme, with DPO support available as an add-on. For information about his work, visit alexlew.live.
Questions and limits

BEFORE YOU DECIDE

Does using this guarantee compliance?

No. These are general editable examples. You must adapt them to the organisation, review the sources and implement the chosen controls. No legal approval or regulator endorsement is claimed.

Is it an ISO certification kit or completed AI testing?

No. The ISO crosswalk is a non-exhaustive, topic-level alignment aid and does not reproduce the standard. Forms and process checklists do not execute AI tests or obtain certification.

Can I use it without developer tools?

Yes. The toolkit comes as a ZIP file. Extract it and edit the DOCX and XLSX files in compatible office software. PDF reading copies and Markdown/CSV masters are also provided.

What does the licence cover?

One organisation, for internal use and adaptation only. It does not allow resale or redistribution, so an adviser cannot resell the templates. You get 12 months of updates from purchase, delivered as new versioned ZIP files with a change log.

How do I get it?

The toolkit is complete and available now. Send a DM on X to @alewyl1 and access is arranged by DM. DM me on X to buy. Once payment is confirmed, I'll email you the toolkit ZIP. This page takes no payments and collects no email addresses.

Read before relying on the kit

This toolkit provides general information and editable examples, not legal advice. Adapt it to your organisation and obtain qualified advice where appropriate. Using it does not guarantee compliance or certification.

General Singapore SME scope only. Sector-specific requirements are outside the kit. Citations point to the official documents used; check the current official text before relying on any clause, because laws and guidance change.

These are templates and guidance, not legal advice. For legal advice, use a Singapore-qualified lawyer.

Singapore AI Governance & PDPA Toolkit · Complete edition