Annual Review Submission

Solutions that are due for annual review will automatically change their status "Up for Annual Review" in the Approved Solutions page.

You will receive email notifications about the annual review sent to all point of contacts registered in the system.

Click on the solution name to perform the annual review.

What You Need to Prepare

Before starting your annual review, ensure you have the following documents ready:

• Latest financial statements (must be no older than 20 months)

• Valid Cyber Essential Mark certification or higher certification

• Latest VAPT report (conducted within past 12 months)

• Customer satisfaction survey responses from Non-PSG customers

• Sales invoices and proof of payment for additional customers (if you have fewer than 6 Non-PSG customers) • AIS documentation (if applicable to your solution)

• ASR+ documentation (if applicable to your solution)

Review Process

When you access your solution for annual review, you will see the following sections:

• Solution Information Review and update your solution details as needed.

• Financial Information Declaration The system will check if your latest financial statement is at most 20 months old. If your financial statement is older than 20 months, the system will block your annual review and require you to submit a change request to update your financial documents first. While the change request is in progress, you can continue preparing for your annual review submission.

How to fill the Annual Review form

• Non-PSG Customers As part of the annual review requirements, vendors must demonstrate successful implementation for at least 6 customers during the review year.

• Number of Non-PSG customers - This field is automatically populated based on your records. It shows the number of adoptions during the review year (up to the 9th month mark)

  • If your number of Non-PSG customers is less than 6, you must send survey links and upload documentation for the difference (6 minus your number of Non-PSG customers)

• Survey link for Non-PSG customers - Provide the survey URL and forward this Customer Satisfaction Survey link to each Non-PSG customer

  • Customer Documentation Requirements: For each required customer acquired within the annual review period, please upload:

    • Sales invoice

    • Proof of payment (e.g., receipts, bank statements)

  Supporting Documents Please attach the required documents based on your solution type:

  • VAPT Report (Required if applicable) • Upload your latest Vulnerability Assessment and Penetration Testing report • Assessment must be conducted within the past 12 months from submission date • Assessment must be done by a qualified security company (e.g., Accreditation@SGD certified, CREST-certified, or equivalent) • If you're a reseller, provide the assessment report from your product principal

  • Cyber Essential Mark Certification (Required for all) • Upload your valid Cyber Essential Mark ("CEM") Certification or a higher certification (such as Cyber Trust Mark, ISO 27001 etc) • The statement of scope of the certification must minimally include the "Classical Cybersecurity" scope • If you are the Product Principal of the Pre-Approved Solution, you must have a valid "Cyber Essential Mark for ICT Vendor" Certification or higher certification • The statement of scope must cover the relevant business processes, systems, and infrastructure that directly support the Pre-Approved Solution

  • AIS (Required if applicable) • Upload AIS documentation if your solution must be listed on IRAS's approved vendor list for Auto-Inclusion Scheme (AIS)

  • ASR+ (Required if applicable) • Upload ASR+ documentation if your solution must be registered under IRAS Accounting Software Register Plus (ASR+)

Complete all required sections and upload the necessary documents to submit your annual review successfully.

Consequences of Missing Annual Review Deadline

Your annual review due date is available on the Approved Solutions dashboard and you will receive a notification to submit an annual review.

If you fail to submit your annual review by the deadline, your solution status will automatically change to "Lapsed". Once lapsed, your solution will be delisted from all government portals and will no longer be available for grant support. To restore your solution's eligibility, you will need to re-apply and start a completely new application process.