Singapore tightens AI risk rules across financial institutions
New central bank guidelines and third-party oversight frameworks set clear operating standards for fintech vendors.
The Monetary Authority of Singapore released its Guidelines on Artificial Intelligence Risk Management on Oct. 7, setting baseline operating expectations for software systems deployed across the country's financial sector [1].
Under the supervisory structure, regulated institutions must assess and document third-party vendor exposures according to four separate regulatory rulebooks [1]. For external technology providers and software partners, institutional accountability remains internal rather than delegated to third-party providers. As a risk specialist summarized regarding institutional compliance, "The regulator never saw the vendor. It saw my file on the vendor" [1].
Complementing the supervisory standards, the Future of Finance Institute formally began operations on Nov. 3, 2026 [1]. That initiative features a dedicated technical pillar known as SafeFin.ai to study safe deployment and governance across financial tooling [1].
Questions and answers
When did the Monetary Authority of Singapore publish its AI risk guidelines?
The central bank issued the Guidelines on Artificial Intelligence Risk Management on Oct. 7, 2026.
What regulatory frameworks govern third-party technology risk in Singapore?
Domestic institutions are required to manage third-party vendor risk across four regulatory rulebooks.
What is SafeFin.ai?
SafeFin.ai operates as a key component of the Future of Finance Institute, which began operations on Nov. 3, 2026.
Sources
- 1.Before the licence: What Singapore’s regulated institutions ask a fintech partner first — e27, Nov 10, 2026


