The Answer in 60 Seconds

Your Singapore SME holds multiple insurance policies - Work Injury Compensation, fire and property, public liability, group medical, motor, professional indemnity, trade credit, and others - and the documents typically live across email threads, WhatsApp messages, finance drives, and the desk of whoever happens to "do" insurance. That arrangement breaks at exactly the wrong moment: a claim, a renewal, an audit, a staff departure. The fix is not technology; it is a seven-folder structure that mirrors how Singapore insurers and regulators classify your cover, with a renewals calendar that holds the dates that actually carry penalties. This article sets out the structure, what belongs in each folder, and the Singapore statutory retention periods that govern how long you must keep the documents - at least five years for accounting records under the Companies Act 1967, at least five years for tax records per the IRAS record-keeping requirements, five years for work-injury records under the Work Injury Compensation Act 2019 - and how to make the structure survive when the person who set it up leaves the company.

The Sourced Detail

Singapore SMEs rarely fail their insurance because they bought the wrong policy. They fail because at the moment cover is needed - a claim notification, a renewal quote, a landlord's certificate request, an MOM audit - the document required is somewhere unfindable. A 2025 QBE Singapore survey reported that while 74% of Singapore SMEs were concerned about business interruption, only 23% carried specific cover for it, a gap that becomes painful at the moment an SME tries to assemble the right policies under pressure.

Document discipline is not bureaucratic vanity. It is the operational layer that makes the insurance you have paid for actually respond when something goes wrong.

Why this matters before we get to folders

Three Singapore regulators effectively set the floor for how long you must hold business records, and what counts as a complete record. They do not write the folder structure for you, but they define the test the structure has to pass.

Tax records and accounting. Under the IRAS record-keeping requirements for businesses, a Singapore company must keep proper records of its business transactions for at least five years from the relevant Year of Assessment. The IRAS simplified record-keeping guide for small businesses sets out the format and content expectations and confirms that records may be kept in electronic form, provided the records are true and complete and can be reproduced legibly. Insurance documents - premiums paid, claims received, policy schedules - fall within the income-tax record-keeping perimeter and are also subject to the Companies Act 1967 requirement for proper accounting records.

Work-injury records. Under the Work Injury Compensation Act 2019, employers must maintain Work Injury Compensation insurance for employees doing manual work, regardless of salary, and for non-manual employees earning at or below the salary threshold MOM publishes from time to time. MOM's standard expectation is that employers retain work-accident records for at least five years from the date of the accident; that retention is what allows the WIC insurer, MOM and any future Common Law action to reconstruct what happened.

Personal data and the PDPA. Insurance documents routinely contain personal data - employee names and NRICs on group medical schedules, claimants' details on motor claim files, foreign workers' passport and Work Permit numbers on the WICA schedule. Under the Personal Data Protection Act 2012, the Data Protection Obligations, organisations must make reasonable security arrangements to protect personal data (the Protection Obligation, s.24) and must cease retaining personal data once the purpose for which it was collected is no longer being served and retention is not necessary for legal or business purposes (the Retention Limitation Obligation, s.25). A WhatsApp group with two years of claim photos shared across staff who have since left does not meet either obligation, and PDPC's published enforcement decisions include multiple cases where unsecured storage of employee or customer data led to financial penalties.

The seven-folder structure below is built so that each folder maps to a regulator's view of your records, not to whichever email an insurer happened to send.

The seven folders

The structure is designed to mirror how a Singapore insurer, MOM officer, or external auditor will look at your insurance position. Each folder is a single, named place where the relevant documents live; the inside of each folder is organised by policy year.

01_Mandatory_Covers

The compulsory and quasi-compulsory cover that the law requires you to hold. For most Singapore SMEs this means:

  • Work Injury Compensation insurance for employees doing manual work (and for non-manual employees within the MOM salary threshold), maintained under WICA 2019.
  • Foreign-worker medical insurance for Work Permit and S Pass holders, per MOM requirements.
  • MOM Security Bond for non-Malaysian Work Permit holders.
  • Motor third-party liability for any company vehicle, under the Motor Vehicles (Third-Party Risks and Compensation) Act 1960.

Each policy year should have: the policy schedule, the proposal form, all endorsements, the certificate of insurance, the premium invoice and payment evidence, and any correspondence with the insurer about coverage scope. A clean Mandatory_Covers folder is the document set you produce in fifteen minutes when MOM, the Building and Construction Authority, or a public-sector procurer asks for proof.

02_Premises

Cover that attaches to the physical place where the business operates: the fire and property policy, any landlord-required public liability extension, and any business interruption cover that follows the property cover. The proposal form's declared sums insured (building, contents, stock, plant and machinery) live here, because the sums insured are what the average clause runs against at claim time - under-insurance reduces a partial-loss payment in the same proportion as the underinsurance ratio.

Where the lease imposes specific insurance obligations on you as tenant - landlord-named-insured wordings, waiver of subrogation, "primary and non-contributory" clauses - keep the relevant lease pages alongside the policy, so the lease clause and the insurer endorsement live together.

03_Liability

The third-party liability cover the business buys: public liability, product liability, professional indemnity, cyber liability, and any management liability (Directors' & Officers') cover. Each of these is claims-made in the typical Singapore wording - the policy responds to claims first made during the policy period - so two extra things belong in this folder beyond the schedule:

  • The retroactive date for each claims-made policy, prominently labelled, because losing track of the retroactive date is how SMEs accidentally let years of historic exposure fall out of cover at renewal.
  • A circumstances log - a short, dated record of any incident or complaint that could plausibly become a claim - so that when something does mature into a claim, you can demonstrate that the policy in force at the time was notified within its notification window.
04_People

Employee benefit insurance: group hospital and surgical, group personal accident, group term life, key-person cover. Group covers are typically headcount-based and renewed annually with a fresh census. Keep the latest census, the most recent claims experience report from the insurer, and any individual-level data (with appropriate PDPA controls) here. WICA itself sits under 01_Mandatory_Covers, but the WICA wage census worksheet - by employee, with monthly Ordinary Wage and CPF Submission Number - is often easier to maintain here next to the group covers, since the headcount data overlaps.

05_Vehicles

Motor commercial fleet, plant and equipment insurance, drone and specialty mobility cover. The policy schedule lists each vehicle by registration number; keep the vehicle registration documents, road tax certificates and any No-Claim-Discount (NCD) protection endorsement alongside, because all three together are what an insurer asks for at renewal.

06_Finance

Cover that protects the financial position rather than the physical operations: trade credit insurance, commercial crime / fidelity guarantee, Directors' & Officers' (which can also sit under 03_Liability), and any insurance required by a bank facility or by a customer contract. Where a bank facility requires insurance to be maintained at a stated minimum, keep the facility letter's insurance covenant alongside the policy so the covenant and the cover live together.

07_Renewals_Calendar

Not a document store but a control document. A single sheet listing, for each policy:

  • The policy expiry date.
  • The renewal-quote target date (typically T-60: sixty days before expiry - see the pre-renewal data preparation sprint for the workflow that this date supports).
  • The premium-payment warranty deadline (Singapore market practice on most non-life policies is sixty days from policy inception, per the General Insurance Association of Singapore / Singapore Insurance Brokers Association Premium Payment Framework - see the framework explainer).
  • The certificate-of-insurance dependencies (landlord, MCST, public-sector procurer, customer contract - anyone who needs a fresh COI at renewal).

If the company holds only one document well, it should be this one. Missing a renewal date or a premium-payment deadline is the single most expensive document failure an SME makes.

What belongs in each policy-year sub-folder

Within each of folders 01 to 06, the structure repeats per policy year:

  • The policy schedule (current and any prior versions if the schedule has been re-issued).
  • All endorsements in date order, with the endorsement reference and the effective date in the file name.
  • The proposal form as submitted to the insurer.
  • The claims experience report or loss runs from the insurer.
  • The certificate of insurance issued to any third party (landlord, MCST, procurer, customer).
  • Correspondence with the insurer or broker on coverage scope, including any written confirmation of cover for marginal scenarios.

Naming convention matters as much as folder structure. A file called WICA_2026_Schedule.pdf survives a staff handover; a file called Final final v3 (updated).pdf does not.

Digital, paper, or both

IRAS accepts records in electronic form, provided they are true and complete and can be reproduced legibly. MOM accepts electronic records for WICA purposes. PDPC accepts electronic records subject to the PDPA security obligations. There is no Singapore requirement to keep paper originals of insurance documents beyond what the policy itself stipulates - and modern Singapore policies are issued and endorsed electronically by default.

The practical implication is that the folder structure should live in one digital location, with controlled access, version history, and a documented backup. A shared drive within Google Workspace or Microsoft 365 with restricted-access folders meets the PDPA's reasonable-security expectation; an unmoderated WhatsApp group does not.

The staff-turnover risk

The most common reason SMEs lose control of their insurance is staff turnover. The "insurance person" leaves; the new person inherits a partial collection of policies, no claims history, and no renewals calendar. Within twelve months the new person discovers a missed renewal, a coverage gap, or a claim that should have been notified months earlier.

The folder structure is the antidote - if and only if the access is not tied to one person. Three rules:

  1. The folders live on the company's shared drive, not on an individual's account.
  2. At least two people have full access, and at least one is a non-leaver (typically the finance lead and the operations lead, or the finance lead and a director).
  3. The renewals calendar (07_Renewals_Calendar) has an automatic notification - calendar invite or workflow alert - to the two people with access, set 90, 60, and 30 days before each policy expiry.

How this connects to what comes next

A folder structure is the entry-level discipline. It is the prerequisite for the next two operational layers in any well-run insurance programme:

  • A renewal process that turns the dates in the calendar into structured pre-renewal data submissions (see the 90/60/30-day pre-renewal data preparation sprint).
  • A claims protocol that turns the circumstances log into timely claims notifications, particularly for the claims-made covers in 03_Liability.

Covarage exists in part to take the folder-structure layer off the SME's plate - to provide the workspace, the access controls, the renewals calendar, and the document discipline as a service. The structure above works whether or not an SME uses Covarage. The point is that some version of it has to exist, and it has to survive the next staff change.

Common Mistakes / What Goes Wrong

  1. Insurance documents in personal email. When the staff member leaves, so does the document trail.

  2. Renewal dates in one person's head. A single point of failure for the most expensive document mistake - a missed renewal.

  3. "Final final v3" file naming. No way to identify the operative version under time pressure.

  4. WhatsApp groups for claim photos. PDPA Protection and Retention obligations breached; no audit trail.

  5. Endorsements stored separately from the policy. At claim time, no one is sure which endorsement was operative on the date of loss.

  6. No retroactive date logged for claims-made covers. A renewal accidentally narrows historic exposure when the retroactive date is allowed to move forward.

  7. Mandatory and discretionary covers mixed together. WICA, foreign-worker medical insurance and motor third-party are subject to regulatory enforcement; they should be visibly distinct from the discretionary covers.

  8. No circumstances log. Known events that mature into claims after a policy expires are unrecoverable because they were not notified in time.

  9. No certificate-of-insurance register. When a landlord or procurer asks for a COI, no one knows which third parties already hold one or when it expires.

  10. Folders set up, then abandoned. The structure exists but nobody updates it; six months later it is partially obsolete and silently distrusted.

What This Means for Your Business

  1. Decide the structure once and write it down. The seven-folder structure above is one workable model; what matters is that it is decided and documented, not invented per claim.

  2. Move every existing insurance document into the structure. Including the ones currently in personal email.

  3. Give two people full access - at least one of whom is a non-leaver.

  4. Build the renewals calendar with 90-, 60- and 30-day reminders for every policy.

  5. Log the retroactive date for every claims-made cover (PI, D&O, cyber, EPL, crime), prominently, in the relevant policy-year folder.

  6. Open a circumstances log even if it is a single shared spreadsheet - and use it.

  7. Audit the structure once a year, ideally at the start of the financial year, against the policies actually in force.

The cost of setting this up is one focused week of work for a small SME, and proportionately more for a larger one. The cost of not setting it up is realised in the moment of a claim or a missed renewal, and is rarely recoverable.

Questions to Ask Your Adviser

  1. For each policy we hold, can you confirm the current schedule, the latest endorsements, and (for claims-made policies) the retroactive date?
  2. Which of our policies are claims-made, and what is the notification window for circumstances under each?
  3. Do you have a register of certificates of insurance issued in our name, and if so, can we have a copy?
  4. For each of our renewals, what is the recommended T-60 / T-30 data-submission cadence, and what data do you need from us by when?
  5. If our insurance lead leaves tomorrow, what is in your records that we would not be able to reconstruct from ours?

Related Information

Published 21 May 2026. Source verified 21 May 2026. COVA is an introducer under MAS Notice FAA-N02. We do not recommend insurance products. We provide factual information sourced from primary regulators and route you to a licensed IFA who can match a policy to your specific situation.