Multichannel E-commerce Software (MES)

Centralise management of multiple online sales channels through a single interface. The system synchronises inventory, orders, and listings across various marketplaces and webstores in real-time, while providing analytics dashboard for comprehensive sales performance monitoring.

Instructions

  • This page helps you prepare "Solution Requirements" section in Vendor Management Portal and you will see the exact questions and flow.

  • 🔴 Mandatory questions: Must answer "Yes" to continue

  • 🟡 Preferred questions: Can answer either way and continue

  • Follow the question flow as indicated

Q1 🔴 Mandatory - Cloud and Multi-Device Accessibility

Main Question: Does your solution allow for cloud-based, mobile-based, and/or web-based usage?

🔴 Answer: ○ Yes [Next: Q2] ○ No [⚠️ Cannot Proceed]


Q2 🔴 Mandatory - Multi-channel Integration

Main Question: Can the solution integrate to multiple channels (minimally 2 channels), such as marketplaces (e.g. Amazon, Shopee, Lazada, etc.) and webstores (brand.com), and allow for management in a single dashboard , including inventory management and order processing?

Please specify the number and names of e-commerce platforms that the solution has already been integrated with.

Click "Yes" to confirm you have completed the instructions.

🔴 Answer: ○ Yes [Next: Q3] ○ No [⚠️ Cannot Proceed]

Text Elaboration Required: [Text Box for Description/Details]


Q3 🔴 Mandatory - Real-time Tracking

Main Question: Does the solution allow real-time or near real-time management of sales, orders, and inventory through a single interface?

🔴 Answer: ○ Yes [Next: Q4] ○ No [⚠️ Cannot Proceed]


Q4 🔴 Mandatory - Product Listing Management

Main Question: Can the solution allow for the creation and modification of product listings (e.g. product details, product description, product variations, product images, etc) across channels, and enable the uploading of multiple product listings at once while adhering to each channel's specific requirements?

🔴 Answer: ○ Yes [Next: Q5] ○ No [⚠️ Cannot Proceed]


Q5 🔴 Mandatory - Data Fetch

Main Question: Can the solution fetch data such as product listings, order details, and delivery status from the enterprise's accounts on their existing e-commerce channels, as well as pass data from the solution to the integrated e-commerce channels?

🔴 Answer: ○ Yes [Next: Q6] ○ No [⚠️ Cannot Proceed]


Q6 🔴 Mandatory - Inventory Management and Synchronisation

Main Question: Can the solution set up inventory product details (e.g. weight, size, variations, etc.), upload multiple inventory products, track inventory levels across various channels, and synchronise them as sales are made?

🔴 Answer: ○ Yes [Next: Q7] ○ No [⚠️ Cannot Proceed]


Q7 🔴 Mandatory - Dashboards and Reports (MES)

Main Question: Can the solution track sales and performance across multiple channels on a single dashboard, and generate reports on key performance metrics and insights (e.g. sales, transactions, order volumes, etc.)?

Dashboard Requirements: Your digital solution should have one or more dashboards that provide an at-a-glance overview of key metrics/indicators with at least 4 charts/graphs to help users analyse data through data visualisation.

Interactive Features (Must include at least one): The dashboard must include at least one of the following interactive features:

  • Option 1: Interactive charts/graphs that allow users to interact with one chart and apply that interaction as a filter to other charts on the dashboard, and vice versa

  • Option 2: At least three common filters/slicers applicable to ALL charts/graphs on the same dashboard

🔴 Answer: ○ Yes [Next: Q8] ○ No [⚠️ Cannot Proceed]


Q8 🟡 Preferred - Marketing and Campaign Management

Main Question: Can the solution create and execute campaigns and digital marketing activities for the e-commerce channels?

Campaign Types: a. Onsite marketing campaigns (promotions, gift with purchase, flash sale on marketplaces) and/or b. Offsite marketing campaigns (paid media ads, search ads)

🟡 Answer: ○ Yes [Next: Q9] ○ No [Next: Q9]


Q9 🟡 Preferred - Analytics and Insights

Main Question: Can the solution provide recommendations, and forecasts based on sales performance or inventory status?

🟡 Answer: ○ Yes [Next: Q10] ○ No [Next: Q10]


Q10 🟡 Preferred - Logistics Integration

Main Question: Can the solution integrate with third-party logistics software or database to provide real-time or near real-time data on order delivery status?

🟡 Answer: ○ Yes [Next: Q11] ○ No [Next: Q11]


Q11 🟡 Preferred - Fulfilment Document Generation

Main Question: Can the solution generate invoices, shipping labels, picking lists, and other fulfilment-related documents?

🟡 Answer: ○ Yes [Next: Q12] ○ No [Next: Q12]


Q12 🟡 Preferred - Financial Reconciliation

Main Question: Can the solution reconcile, consolidate, and classify all transactions including the sales, payments, and expenses (e.g. platform fees, marketing costs, logistics costs, etc.)?

🟡 Answer: ○ Yes [Next: Q13] ○ No [Next: Q13]


Q13 🟡 Preferred - AI Features

Main Question: Does your solution incorporate AI in your core features and functions?

🟡 Answer: ○ Yes [Next: Q14] ○ No [Next: Q15]

--

Q14 🔴 Mandatory Follow-up - AI Features - Elaboration

This question appears only if you answered "Yes" to Q13

Main Question: Describe your AI feature and its benefits. Examples are:

Feature Examples: a. Generate output, identify items, or provide recommendations based on training models to improve decision-making b. Recognise text, images to shorten time taken for manual inputs of forms c. Others, please specify

Click "Yes" to confirm you have completed the instructions.

🔴 Answer: ○ Yes [Next: Q15] ○ No [⚠️ Cannot Proceed]

Text Elaboration Required: [Text Box for Description/Details]


Q15 🔴 Mandatory - Business Data Extraction

Main Question: Can your solution enable SMEs to efficiently extract business data in various discrete formats such as CSV, XLSX, XML, and TSV?

🔴 Answer: ○ Yes [Next: Q16] ○ No [⚠️ Cannot Proceed]


Q16 🔴 Mandatory - Personal Data Protection

Main Question: Can your solution demonstrate compliance with the following Personal Data Protection requirements?

Compliance Requirements: Digital solutions that collect, use, disclose, process or dispose personal data should incorporate features that support the obligations under the Personal Data Protection Act (2020).

To comply with this requirement, you MUST complete the Personal Data Protection Requirements form at https://go.gov.sg/pdp.

🔴 Answer: ○ Yes [Next: Q17] ○ No [⚠️ Cannot Proceed]


Q17 🔴 Mandatory - Vulnerability Assessment/Penetration Testing (VA/PT)

Main Question: Has your solution undergone a comprehensive security vulnerability assessment/penetration testing (VA/PT) conducted by a qualified third-party within the last 12 months?

Scope Requirements: The scope of the VA/PT must cover network security; application security; data protection measures and access control (if applicable); API security testing (if applicable); Cloud security configuration review (if applicable). Specifically, for web application security, the scope must cover minimally all OWASP Top 10 vulnerabilities.

Submission Requirements: Please submit the VA/PT report (dated maximum 1 year from the checklist submission date). The VA/PT Report must include Executive summary; Detailed findings and risk ratings; Remediation recommendations; Evidence of vulnerability fixes or mitigation plans; Testing methodology used; Scope of assessment; Assessor's qualifications and certifications.

If you are the reseller of the solution, please obtain the VA/PT report from your product principal. SOC 2 Type II report can be accepted if the detailed technical vulnerability assessment results are part of the SOC2 Type II scope.

Qualified Third-party Definition: [1] Qualified third-party refers to: CREST-certified companies [https://www.crest-approved.org/members/] or companies with security professional with relevant CREST certifications; Security professionals with recognised certifications such as: Offensive Security Certified Professional (OSCP); EC-Council Certified Penetration Testing Professional (CPENT); GIAC Penetration Tester (GPEN); or other equivalent industry-recognised certifications.

Click "Yes" to confirm you have completed the instructions.

🔴 Answer: ○ Yes [Next: Q18] ○ No [⚠️ Cannot Proceed]

Date of Issue Required: [Date Field] Upload Supporting Document Required: [File Upload] Text Elaboration Required: [Text Box for Description/Details]


Q18 🟡 Preferred - Cybersecurity Compliance - Cyber Essentials Mark (CEM)

Main Question: Are you the Product Principal of the solution that you are submitting for pre-approval?

🟡 Answer: ○ Yes [Next: Q19] ○ No [Next: Q21]

--

Q19 🟡 Preferred - CEM for Product Principal

This question appears only if you answered "Yes" to Q18

Main Question: Has your organisation achieved CSA Cyber Essentials for ICT Vendor Mark certification or equivalent recognised cybersecurity certifications (including but not limited to Cyber Trust Mark or ISO27001) that validate the implementation of appropriate security controls against common cyber threats in your organisation and the solution you are submitting for pre-approval?

Requirements: Vendors are encouraged to comply at application and are required to meet this requirement by the Annual Review, where it will be assessed as mandatory.

Note: For more information on Cyber Essentials mark, please refer to https://www.csa.gov.sg/cyber-essentials/

🟡 Answer: ○ Yes [Next: Q20] ○ No [Assessment Finished]

--

Q20 🔴 Mandatory Follow-up - CEM for Product Principal - Elaboration

This question appears only if you answered "Yes" to Q19

Main Question: Please specify the following information:

Required Information: i. The certificate demonstrating your organisation has attained Cyber Essentials for ICT Vendors i. The cybersecurity certification the organisation has met ii. The scope of the certification

Please also upload a copy of the Certification and indicate the Certification Issuance Date in the date field.

Click "Yes" to confirm you have completed the instructions.

🔴 Answer: ○ Yes [Assessment Finished] ○ No [⚠️ Cannot Proceed]

Date of Issue Required: [Date Field] Upload Supporting Document Required: [File Upload] Text Elaboration Required: [Text Box for Description/Details]


Q21 🟡 Preferred - CEM for Resellers

This question appears only if you answered "No" to Q18

Main Question: Has your organisation achieved CSA Cyber Essentials Mark certification or equivalent recognised cybersecurity certifications (including but not limited to Cyber Trust Mark or ISO27001) that validate the implementation of appropriate security controls against common cyber threats in your organisation and the solution you are submitting for pre-approval?

Requirements: Vendors are encouraged to comply at application and are required to meet this requirement by the Annual Review, where it will be assessed as mandatory.

Note: For more information on Cyber Essentials mark, please refer to https://www.csa.gov.sg/cyber-essentials/

🟡 Answer: ○ Yes [Next: Q22] ○ No [Assessment Finished]

--

Q22 🔴 Mandatory Follow-up - CEM for Resellers - Elaboration

This question appears only if you answered "Yes" to Q21

Main Question: Please specify the following information:

Required Information: i. The cybersecurity certification the organisation has met ii. The scope of the certification

Please also upload a copy of the Certification and indicate the Certification Issuance Date in the date field.

Click "Yes" to confirm you have completed the instructions.

🔴 Answer: ○ Yes [Assessment Finished] ○ No [⚠️ Cannot Proceed]

Date of Issue Required: [Date Field] Upload Supporting Document Required: [File Upload] Text Elaboration Required: [Text Box for Description/Details]

circle-info

Preparing for submission?

Your submission should contain screenshots and write-ups that clearly demonstrate compliance with each mandatory requirement sub-point. Contact usarrow-up-right if you need help.

Last updated