Data policy

Introduction

This Data Policy sets out the requirements and shared responsibilities governing the classification, protection, continuity, and handling of data configured, submitted, and processed through ApplySG.

This policy establishes the standards for how agency data must be classified, secured, and recovered in the event of disruption, and defines the respective responsibilities of Agencies and ApplySG in maintaining the integrity, availability, and confidentiality of that data.

This policy applies to all Agencies configuring lifecycles and processing submissions on ApplySG.

Agencies must ensure that all data transited through ApplySG complies with ApplySG’s supported data classification, i.e. up to Confidential (Cloud-Eligible), Sensitive High.

Responsibility matrix

Agencies are responsible for their respective account and data management responsibilities described in this policy.

The following RACI matrix defines ownership for account provisioning, access management, and periodic review responsibilities.