Why do firms change compliance providers?
One of the most common complaints we hear is slow response time. Another is that the client originally appointed a provider because of the experience of its partner or senior adviser, only to find that most of the ongoing work is eventually delegated to someone much more junior.
There is also the question of value. During quieter periods, some clients look at the monthly retainer and start wondering what the compliance provider is actually doing. If there are few regulatory submissions, few new investors and little business activity, the work can become less visible even though monitoring, policy maintenance and other recurring obligations should still continue in the background.
Sometimes changing provider is justified. Sometimes the better answer is simply to clarify the existing scope and what work the client should expect each month. Before terminating the relationship, I would therefore first compare the engagement scope against what has actually been delivered.
Before switching, understand the current compliance position
When a company tells us that it wants to change compliance providers, the first things I would ask for are the existing compliance calendar, compliance registers, policies and procedures, completed reviews, and details of any ongoing MAS queries or remediation work.
I would also review the current engagement scope. This tells us what the outgoing provider was supposed to be doing and what the incoming provider is actually inheriting.
This matters because the most serious handover issue is usually not a missing document. It is an obligation nobody realises is still open.
What should be included in a compliance handover?
A useful handover should give the incoming provider enough information to understand both the historical position and what needs attention next.
| Area | What should be handed over | What the incoming provider should check |
|---|---|---|
| Compliance calendar | Upcoming filings, reviews and recurring deadlines | Whether anything is due within the next 30 to 90 days |
| Policies and procedures | Latest approved versions and review dates | Whether any documents are overdue for review |
| Compliance registers | Breaches, conflicts, complaints, gifts, outsourcing and other relevant registers | Whether they are current and whether previous reviews were documented |
| MAS matters | Correspondence, ongoing queries, approvals, notifications and remediation | Who owns the next response and when it is due |
| Management reporting | Compliance reports, meeting papers, management acknowledgements and follow-up actions | Whether outstanding actions remain unresolved |
| Regulatory submissions | Filed returns and filing confirmations | Whether recurring submissions were completed and evidence exists |
| Audit history | Internal or external audit reports and management actions | Whether past findings were actually remediated |
| Anti-money laundering and countering the financing of terrorism (AML/CFT) | Investor or customer lists, risk ratings and periodic review dates | High-risk relationships, overdue reviews and unresolved enhanced due diligence (EDD) issues |
| Corporate information | Organisation chart and shareholding chart | Whether the current structure matches regulatory records |
| Regulatory access | MAS-Tx and other relevant portal access | Whether access remains appropriate and current |
A good outgoing provider should ideally prepare a short handover note explaining anything unusual or still unresolved. But even where the outgoing provider gives very little, an experienced incoming adviser should still be capable of rebuilding the compliance framework from the available records. It may simply take more work.
The dangerous gaps are often the small ones
Most competent compliance providers will remember major quarterly or annual regulatory submissions because missing one can attract immediate attention.
The things that slip more easily are often less obvious. A policy was supposed to be reviewed annually. A register was supposed to be refreshed. Senior management was supposed to acknowledge a review. A checklist was supposed to be completed. A business continuity plan (BCP) exercise or staff IT-security training was included in the firm’s own procedures but never actually performed. Nothing happens immediately, so everybody moves on. Technically, that gap could remain unnoticed for years. The problem starts when MAS, an auditor or another reviewer eventually asks for evidence and discovers that the control was never performed. Then the question becomes wider: if this requirement was quietly forgotten, what else has been forgotten?
This is why seemingly minor gaps can create disproportionate concern about the reliability of the firm’s wider control environment.
It is also important to distinguish between something MAS expressly requires at a particular frequency and something the firm committed to doing in its own policies. Even where MAS did not prescribe an annual review, repeatedly failing to follow the firm’s own documented control is still a governance weakness.
Time the handover around important regulatory matters
The timing of a change becomes much more important where the firm is already dealing with MAS or another major regulatory process.
Examples include an active MAS query, a director or controller approval, an ongoing remediation exercise, a licence variation, an audit or a major regulatory return that is due shortly.
Changing provider halfway through one of these processes can create unnecessary confusion if nobody is clearly responsible for the next response. This does not mean the firm is trapped with an adviser it no longer wants. It means the transition should be planned around regulatory continuity rather than frustration alone.
If the relationship remains workable, there may be situations where completing the immediate regulatory milestone before transitioning produces a cleaner outcome. If the existing arrangement itself creates a serious risk, waiting may obviously make matters worse.
Where MAS is already involved, the communication should also be straightforward and professional. A change of provider should not leave the regulator wondering why an existing matter has suddenly gone silent or who is responsible for responding.
I generally find a one-month notice period helpful, where the engagement terms and urgency allow, because it gives the outgoing provider enough time to consolidate records and prepare a proper handover. Direct overlap between the two providers is not always necessary, but responsibilities should remain clear throughout the transition.
The commercial relationship can change. The firm’s regulatory obligations do not stop while that happens.
Historical problems do not disappear when the consultant changes
If a submission was missed six months ago, the incoming provider can usually establish that the failure occurred before it took over. But that does not mean the new provider can ignore it. The incoming adviser should help management understand what happened, whether anything needs to be corrected or reported, and how to stop the same problem continuing under the new arrangement.
A new compliance provider can help fix an old problem. It cannot make the old problem cease to exist.
Changing provider should not be a way to find a more convenient answer
There is another situation where we would be very careful about taking over a client. Sometimes management wants to replace its compliance consultant because the existing adviser has taken a conservative position on a contentious regulatory issue. Perhaps the adviser objects to onboarding a particularly high-risk customer. Perhaps management wants a way around a reporting or notification requirement. Perhaps it simply wants a new consultant who will approve something the previous provider refused to approve. That is not a good reason to switch.
A new adviser may sometimes identify a different, risk-proportionate way of solving the problem. It is completely reasonable to seek a second opinion. But if the objective is to find someone willing to ignore MAS requirements, conceal historical issues or rubber-stamp management’s preferred answer, Advisors Assemble would not be the right provider.
The same applies where serious breaches remain unresolved and management refuses to remediate them, or where management will not provide the information needed to perform the compliance work properly.
If the disagreement with the existing adviser concerns a specific regulatory issue, it may actually be better to discuss that issue with the prospective provider before appointing them. You may discover that the second provider reaches the same conclusion.
Thinking about changing compliance providers?
Advisors Assemble provides ongoing compliance support within an agreed scope and can assist Singapore firms transitioning from an existing compliance arrangement.
We normally start by reviewing the existing scope, compliance calendar, key records and immediate regulatory obligations before establishing the new working framework.
If you are still comparing providers, you may also find our guide to choosing an outsourced compliance provider in Singapore useful.
You can review our ongoing compliance support or contact Advisors Assemble to discuss the transition.
This guide provides general regulatory information and does not constitute legal or regulatory advice on a particular transition. The appropriate handover will depend on the firm’s regulatory status, activities, current compliance arrangement and any outstanding matters with MAS.
Reviewed on 20 October 2026.