Article 2.6.13 Operator Role and Digital Infrastructure

(a) Companies Registrar:

The Operator may establish or designate a Companies Registrar or similar body responsible for:

(i) Registration of legal entities and legal persons;

(ii) Maintenance of the Companies Register;

(iii) Oversight of filings, compliance, and legal status;

(iv) Investigation and enforcement of duties under this ICT Code.

(b) Digital Filing Platform:

All required disclosures, filings, and governance instruments under this ICT Code shall be submitted via a secure digital platform known as the “Companies Register” maintained or approved by the Operator or the Companies Registrar via the ICT City App or similar digital platform. This platform shall:

(i) Use open standards for interoperability;

(ii) Be accessible to entities, authorised regulators, and designated parties;

(iii) Enable real-time updates, status tracking, and automated notifications; and

(iv) Incorporate international standard of security.

(c) Compliance Tools and APIs:

To minimise administrative burden and support innovation, the Operator or the Companies Registrar (as applicable) may offer or approve:

(i) Smart legal templates for entity formation and reporting;

(ii) Compliance APIs for automated integration with entity governance systems; and/or

(iii) Digital dashboards for real-time monitoring of obligations and deadlines.

(d) Digital Identity and Authentication:

The Operator may link entity registration to digital identity systems, including blockchain-anchored credentials. These systems may be used for:

(i) Authentication of authorised signatories;

(ii) Execution and timestamping of legal instruments;

(iii) Maintenance of tamper-evident audit trails; and/or

(iv) Verification of governance events and status changes.

(e) Digital Legal Validation:

The Operator or the Companies Registrar (as applicable) may provide or certify tools for digital legal validation of foundational documents and other governance instruments, including timestamping, digital notarisation, and execution tracking, to strengthen authenticity and enforceability across jurisdictions.

(f) Delegated Technology Providers:

The Operator or the Companies Registrar (as applicable) may designate third-party technology providers to maintain, operate, or support the Companies Register and associated digital infrastructure, provided such providers meet security, privacy, and reliability standards prescribed by the Operator.

(g) Record Retention and Auditability:

All digital submissions and system interactions under this Article shall be:

(i) Retained in a tamper-evident, searchable format for a minimum period of 7 calendar years;

(ii) Capable of audit by the Operator, the Companies Registrar (as applicable), and authorised dispute resolution bodies;

(iii) Linked to entity activity logs for verification of compliance history and legal standing.

(h) Business Continuity and Data Sovereignty:

The Operator or the Companies Registrar (as applicable) shall ensure that digital infrastructure supporting the Companies Register and governance functions:

(i) Meets internationally recognised standards for cybersecurity and data resilience;

(ii) Includes fallback and continuity protocols in the event of service interruption;

(iii) Stores critical entity data within the ICT or in jurisdictions approved by the Operator for compliance with ICT data localisation policies.