Bizfile and Corppass Access for Singapore Companies (2026 Guide)

The new Bizfile portal has replaced BizFile+ for ACRA filings since 9 December 2024, and Corppass now sits between almost every company-controlled government digital service. When a Singapore company assigns the wrong role or shares one login, a statutory filing can be blocked at the deadline.

In this guide, we discuss how to set up Bizfile access for Singapore companies and appoint the right Corppass administrator. We also explain service-specific permissions for corporate secretaries, finance staff, payroll teams and tax agents. Finally, we cover clean access removal when providers or employees change.

How Does Bizfile Access for Singapore Companies Work in 2026?

The portal separates entity action through Corppass from individual endorsement through Singpass, and it replaced the old interface on 9 December 2024.

Business users act for a company through a Corppass-linked entity account tied to its Unique Entity Number (UEN). Individuals separately endorse certain appointments and withdrawals through their own Singpass. The two routes must not be treated as one permission set. ACRA launched the new Bizfile portal on 9 December 2024, replacing BizFile+, and dated screenshots or navigation steps may no longer reflect the live portal.

Individual endorsement requirements are transaction-specific, so a single authoriser, presenter and viewer chart cannot cover every filing. Companies should confirm each permission against the current Bizfile screen rather than copying an old role list.

1. Business-user access through Corppass

An employee signs in with a Corppass account authorised for the company’s UEN. An external CSP signs in through its own Corppass account and selects the authorised client profile. The digital services granted to that account determine which transactions are visible in Bizfile.

2. Individual endorsements through Singpass

Certain appointment and withdrawal actions require the relevant individual to endorse through a separate Singpass login rather than the company’s Corppass profile. Companies should check the live ACRA guidance for the specific transaction before submitting.

What Are the Main Corppass Account Types?

Corppass separates system authority from job titles; each account type grants a different set of powers.

A job title such as director, secretary or finance manager does not automatically confer an e-service role. Corppass distinguishes several account classes, including Registered Officer, Admin, Sub-Admin, User and Enquiry User. The Registered Officer can appoint and manage Admins, while Admins and Sub-Admins manage users and digital-service access. This is system authority, not a requirement that a particular founder, director or provider must personally be the Admin.

The comparison table below summarises the core authority for each account type. Broad access to all e-Services can carry wider authority than intended, and companies should always check the relevant agency’s role settings before assigning it.

Who Should Hold the Corppass Administrator Role After Incorporation?

Primary control should stay inside the company, with a Singapore-based director, founder or senior employee as the practical administrator.

This reflects the team's professional judgement and is a governance recommendation, not a legal rule. The company should confirm its final primary-backup design through its own governance review. An external corporate secretary can guide the setup but should not be the sole administrator merely for convenience. A second company-controlled person should provide continuity through a backup Admin or Sub-Admin arrangement.

Directors and shareholders should decide these roles when incorporating a company in Singapore. Remote founders should separately assess Singapore company tax residency. Corppass and Singpass credentials must not be shared or transferred between people. Each user needs a separately authorised account; using a founder’s login by an employee or service provider is not acceptable.

1. Why company-side control matters

Consider a hypothetical risk scenario. A company may discover shortly before a filing that a former provider’s employee is still the only practical admin contact. The company must then identify its Registered Officer, restore company-side administration through Corppass and reassign the required service before filing.

2. Why a backup administrator is sensible

An overseas founder should be cautious about making a departing local employee the only admin. If that employee’s email and mobile number are disabled, nobody can approve a new user. A named backup reduces this continuity risk.

3. What external providers should not hold

An external provider should receive an agency authorisation or service-specific role, never the company’s master login and never blanket access to every government digital service. Ending an engagement letter does not automatically revoke Corppass or tax-agent permissions.

How Should Companies Assign Corppass Access to a Tax Agent and Finance Staff?

Tax agents and finance staff need the specific digital service and tax type, not broad user administration or unrelated taxes.

IRAS requires employees and third parties, including tax agents, to have Corppass authorisation before accessing an entity’s IRAS digital services in myTax Portal. This is tax-type specific: corporate income tax authorisation does not automatically cover GST, employment-income, withholding-tax or property-tax work.

For corporate tax filing, an authorised Approver for Corporate Tax (Filing and Applications) is required to submit an Estimated Chargeable Income filing. For GST, the GST (Filing and Applications) service differentiates Preparer and Approver roles, and the Approver can submit the return. Access should be added only for the tax type and function covered by the engagement.

1. Confirm the tax type and digital service

An authorised Approver for a specific IRAS digital service is an example of a transaction-specific role. A corporate tax engagement should not automatically include GST, employment-income or property-tax access.

2. Assign the minimum Corppass role

A tax agent ordinarily receives the digital service and functions required by the engagement. A client finance employee may receive:

• Enquiry access.
• Payment and account viewing.
• The return-submission service needed for the role.

By default, that person should not receive Corppass user administration, ACRA filing, CPF or employment-income submission. This is a least-privilege recommendation rather than an official rule.

3. Verify before the filing deadline

The assigned user should open the relevant service and confirm that the intended enquiry or filing function is visible before the return is due. For YA 2026, corporate income tax returns are due by 30 November 2026 unless IRAS has granted a waiver.

What Permissions Does a Corporate Secretary Actually Need in Bizfile?

Corporate secretarial work needs preparation and presentation rights; the company officer retains approval and endorsement authority.

A corporate secretary or registered corporate service provider prepares and presents statutory filings. A director or other authorised officer approves the underlying corporate action and completes any required endorsement. Labels such as authoriser, presenter or preparer and viewer can be transaction-specific in the current portal. Confirm the actual permission shown rather than copying an old role chart.

Covered providers of corporate services in or from Singapore must register with ACRA under the Corporate Service Providers Act, which took effect on 9 June 2025. That registration does not by itself dictate every client-side Corppass role. A registered corporate service provider can file through its CSP profile only after the client has endorsed the CSP’s client-list request. It can authorise its own employees for filing access. This does not make the CSP the company’s master administrator.

1. Filing rights to request

Assign the relevant ACRA Bizfile e-Service rather than blanket all-e-Service access. The available transactions depend on the selected entity profile and the eService’s eligibility rules. The relevant director or officer should approve the underlying action and complete any required endorsement.

2. Excessive access to refuse

Finance and tax staff ordinarily should not receive officer changes, share-capital changes or user administration merely because they need accounting or tax access. This is least-privilege judgement, not an official prohibition.

3. CSP filing route

A registered CSP must remove an employee’s Bizfile filing access immediately when that employee leaves the CSP. This is an ACRA requirement for registered CSPs and their employees, not a complete client-side offboarding procedure.

How Are CPF EZPay and IRAS Employment-Income Submissions Assigned?

These are separate digital services and should follow the payroll maker-checker process, not the tax or corporate-secretarial access.

Central Provident Fund Board guidance states that CPF EZPay access is assigned through Corppass for a UEN-registered entity. Users must be appointed as CPF EZPay Administrators or Editors to access it. Only persons authorised through Corppass for Submission of Employment Income Records can access the relevant employment-income function. Submission requires the Approver role.

These permissions should be granted only to payroll or HR personnel or an appointed payroll agent, not to a corporate secretary or corporate tax agent as a default. Employers should check whether they use myTax Portal, payroll software or an API workflow before granting access.

1. CPF EZPay access

The employer should assign Administrator or Editor access according to its maker-checker process. Corporate secretaries or tax agents should be added only where the engagement actually covers payroll.

2. Employment-income submission access

Separate Preparer and Approver capabilities exist, and the payroll or HR team should receive the minimum role needed for their part of the workflow.

3. No GST access before registration

GST (Filing and Applications) access is used for GST registration and related GST matters; after registration, assign it only to users or agents who need those functions. Before registering for GST, the user must be authorised in Corppass for an IRAS digital service to access the GST registration digital service.

What Should an Offboarding and Access Review Checklist Include?

Remove each digital-service permission, restore company-admin control, and confirm the replacement user before the next filing.

When a provider or employee leaves, companies should remove obsolete Corppass, Bizfile, IRAS, GST, CPF and employment-income access. They should then confirm that the replacement user has the required access. This reflects the team's professional judgement and is recommended practice rather than a single official cross-agency procedure. Exact removal paths, timing and evidence retention should be confirmed for each agency.

Do not test revocation by asking a former employee or provider to log in or by lodging a dummy filing. A quarterly access review can help identify obsolete permissions between staff changes, but this is a governance practice rather than a statutory requirement.

1. Revoke access through each digital service

Remove the individual from the agency-specific service and retain dated evidence of the revocation. Ending an engagement letter does not automatically remove access.

2. Restore company-controlled administration

Confirm that the company’s Registered Officer can manage users and that a backup administrator exists before the departing party is removed.

3. Verify replacement access before submission

Ask the replacement user to open the relevant service and confirm that the intended enquiry or filing function is visible before the next deadline.

Conclusion

The core rule is least privilege by digital service. A recommended least-privilege approach is:

• Separate entity control from transaction work.
• Keep primary Corppass administration with a company-controlled person.
• Grant tax agents only the relevant IRAS service and tax type.
• Revoke access formally when engagements end. This protects filing deadlines, audit trails and sensitive records across ACRA, IRAS, CPF Board and the new Bizfile portal.

The exact role labels and permissions should be checked against the live portal before every submission. A registered corporate service provider can guide the setup, but company officers remain responsible for authorising corporate actions and endorsements. The illustrative access matrix in this article is a starting point and should be adjusted to the company’s governance model.

3E Accounting Singapore helps companies in Singapore map each government portal to the right officer, prepare an access register and coordinate offboarding when providers or staff change. We support company incorporation, corporate secretarial, tax and payroll engagements without taking control of a client’s master credentials. Enquire via our contact page.

Frequently Asked Questions