4. Requirements4.9 Platform
Platform Services & Governance
User management, workflows, notifications, documents, and PDPA-aligned audit controls.
Purpose
Cross-cutting platform services. Canonical requirements: Attachment A 10.
Summary
| Area | Scope |
|---|---|
| Identity & RBAC | Accounts, roles, MFA, Singpass where applicable |
| Workflows | Configurable approvals (offers, exemptions, refunds, fees) |
| Notifications | Email / SMS / in-app templates |
| Documents | Central repository with versioning |
| Governance | Activity log, PII access log, PDPA retention |
Related
- 4.1 Attachment A 10
- 4.10 Chat agents — agents respect the same RBAC