Legacy App Modernization in Singapore for Insurance, Banking and Logistics

ZTABS modernizes legacy applications for Singapore enterprises in insurance, banking, logistics and manufacturing. Singapore insurers operate AS/400 RPG systems processing policies across ASEAN markets. Banks run COBOL core banking serving millions of regional customers. Logistics companies operate legacy EDI systems connecting global trade routes through Singapore. ZTABS is remote-first by design from our Houston, Texas office.

Singapore legacy modernization demand spans insurance AS/400 RPG migration for MAS-regulated carriers, banking core system modernization for MAS-supervised institutions, logistics platform upgrades for port and supply chain operations, and technology platform decomposition for regional headquarters.

Legacy app modernization in Singapore at a glance

Need	What we build	Key requirement
Insurance	AS/400 RPG migration	MAS, risk-based capital
Banking	Core system modernization	MAS, SWIFT, SGFinDex
Logistics	Platform upgrades	Port, customs, EDI
Manufacturing	ERP and MES upgrades	Industry 4.0
Technology	Platform decomposition	PDPA, regional scale

Insurance AS/400 RPG modernization

Singapore insurers operate AS/400 RPG systems accumulated over decades serving ASEAN insurance markets. Assessment determines actual version, adaptor, vendor support, data and latency options. Policy administration, claims processing, premium calculation and actuarial functions running on legacy hardware.

Policy administration. Life, health, general and travel insurance policy lifecycle modernized. Actuarial calculations for pricing, reserving and regulatory reporting preserved and verified. MAS reporting dependencies maintained. Multi-country ASEAN operations with country-specific regulatory requirements.

Claims processing. Claims workflow from notification through assessment, settlement and recovery modernized. Fraud detection integration enabled. Motor, health and travel claims processing consolidated.

Premium calculation. Rating engines encoding decades of actuarial rules modernized. Underwriting rules, risk assessment algorithms and pricing models preserved and verified through parallel operation.

RPG developer availability. RPG developer pool declining. Knowledge transfer from retiring RPG developers critical. Business rules documented before developer departure.

Banking core system modernization

Singapore banks operate COBOL mainframe core banking serving millions of customers across Southeast Asian markets. Real-time payments, digital banking, open banking and MAS supervisory requirements driving modernization.

Core banking migration. Account management, transaction processing, general ledger and customer information migrating from COBOL mainframes. MAS technology risk management requirements addressed.

Real-time payments. Legacy batch-oriented payment processing modernized for FAST payments, PayNow and cross-border payment capabilities.

SGFinDex integration. SGFinDex actual onboarding, purpose, consent and credential requirements for financial data aggregation. Legacy systems modernized for SGFinDex API compatibility.

Singpass and MyInfo. Actual onboarding, purpose, consent and credential requirements. Not a general identity API for any application. Government service integration assessed per actual authorised scope.

Logistics platform modernization

Singapore logistics companies operate legacy EDI systems connecting global trade routes. Port operations, customs clearance, warehousing and supply chain visibility systems requiring modernization.

Port systems. Legacy terminal operating systems modernized for real-time container tracking and supply chain visibility. PSA and Jurong Port integration maintained.

Customs integration. Singapore Customs TradeNet and National Single Window connections modernized. Legacy customs clearance interfaces updated for current message formats.

Supply chain visibility. Legacy batch processing systems modernized for real-time tracking. ASEAN cross-border supply chain visibility enabled.

Singapore regulation

PDPA. Actual collection, use and disclosure bases, exceptions and transfer routes. Not generic compliance statements. Assessment per actual processing activity and legal basis.

DNC. Actual specified telephone marketing conditions. Do Not Call registry compliance for marketing channels.

MAS AI supervisory guidelines. Final 7 October 2026 supervisory expectations on responsible AI adoption by financial institutions. Sections 3 and 4 effective from October 7 2027. Sections 5 and 6 effective by October 7 2028. Risk-proportionate supervisory expectations covering governance, inventory, evaluation, human oversight and third-party control responsibilities. Not retroactively applicable to all existing systems; not all legacy projects involve regulated AI.

AI Verify. Traditional and generative AI scope. AI Verify Foundation and toolkit for assessment and testing. AI Verify is not a legal compliance certificate.

EDG and EDGE. EnterpriseSG EDG, MRA and PSG ceased 29 September 2026. From 30 September 2026 apply under EDGE. Ongoing old submissions and projects still processed with claims possible. Current EDGE eligibility, project scope, approved provider and own contribution requirements apply. Not guaranteed funding.

InvoiceNow. IRAS InvoiceNow GST obligation phased by taxpayer cohort: new voluntary applicants from 1 April 2026, new compulsory GST-registered businesses from 1 April 2028 and existing registrants phased by annual supply thresholds through 2031. Overseas entities and businesses liable to register for GST wholly due to the reverse charge regime are excluded from the obligation. Invoice data transmits through an IMDA-accredited access point (AP); off-the-shelf solutions use an accredited IRSP or AP, while a customer's own in-house enterprise solution connects through an accredited AP. Separate from ACRA corporate filing.

Singpass and MyInfo. Actual authorised service, purpose, consent and credentials. Not all SaaS applications entitled to government identity data.

Strangler fig for ASEAN systems

Seam selection. Insurance seams: policy administration, claims, premium calculation, regulatory reporting. Banking seams: accounts, payments, lending, regulatory reporting. Logistics seams: container tracking, customs, billing, scheduling. Each function extracted independently.

Single authoritative write. One system authoritative for each transaction type and period during coexistence. Insurance dual-write dangerous for MAS reporting. Banking dual-write dangerous for regulatory and settlement reporting. CDC with versioning and conflict detection.

Reconciliation. Idempotency keys enforced by receiving side. Finite retries with DLQ. Unknown outcomes require reconciliation before replay, especially for insurance premium settlements, FAST payments, customs declarations and production records.

Data migration methodology

Insurance data. Policy records, claims history, actuarial data and regulatory reporting data migrated with actuarial verification. Multi-country ASEAN data with cross-border regulatory compliance.

Banking data. Account records, transaction history and regulatory data migrated with reconciliation against agreed record totals, tolerances and exception register with owner acceptance. MAS regulatory reporting data maintained. Multi-currency ASEAN banking data.

Logistics data. Container records, customs declarations, shipping schedules and billing data migrated with operational verification.

Data type mapping. Types, nulls, time zones, currency, rounding, identifiers, encoding, history and crosswalks reconciled. Singapore-specific: NRIC and FIN handling per PDPA requirements, MAS regulatory reporting fields, multi-currency SGD, USD, MYR, THB, IDR, PHP handling across ASEAN operations, Singapore date and number formatting conventions.

Cutover rehearsal. Observable acceptance with measurable RTO, RPO and latency targets. Insurance cutover timed for renewal cycles. Banking cutover timed for settlement cycles. Logistics cutover planned for lower-volume periods.

Inventory and discovery

Singapore enterprise modernization begins with complete inventory: applications, users, scheduled jobs, database procedures, reports, file and EDI dependencies, vendor contracts, supported versus end-of-life versions.

Business rules discovered with users through representative transaction analysis. Insurance rules validated against MAS requirements and actuarial standards. Banking rules validated against MAS requirements. Logistics rules validated against customs requirements.

Integration and dependency management

Insurance integrations. MAS regulatory reporting, reinsurance connections, General Insurance Association, Life Insurance Association, health insurer connections.

Banking integrations. MAS regulatory reporting, FAST payment network, PayNow, SGFinDex, SWIFT, cross-border payment connections.

Logistics integrations. Singapore Customs TradeNet, PSA terminal connections, shipping line EDI, trucking and warehousing system connections.

Authentication versus authorisation. Authentication identity distinct from policy-level, account-level and role-level authorisation. Singpass identity distinct from application-level authorisation.

Logs and retention

Logs minimise and redact secrets and regulated payloads with actual retention and legal holds. MAS record retention requirements for regulated entities. PDPA data protection requirements for personal data. IRAS tax record retention. Not all logs same retention period. NRIC and FIN minimised where full identifier unnecessary.

Assessment methodology

Application archaeology for Singapore systems covers RPG programme analysis for insurance business rule extraction, COBOL programme analysis for banking transaction rules, EDI interface cataloguing for logistics integration mapping and regulatory reporting analysis for MAS compliance verification.

Data type mapping for Singapore industries

Singapore industry data has unique types requiring careful migration planning. Insurance: policy identifiers across ASEAN markets, MAS regulatory reporting fields, actuarial valuation dates with multi-country conventions. Banking: SWIFT message formats, FAST payment identifiers, SGFinDex data exchange formats. Logistics: container identifiers, customs tariff codes, TradeNet message formats, shipping document references.

Regression and testing

Representative business-critical paths: insurance policy lifecycle with premium and claims across ASEAN markets, banking transaction lifecycle with FAST and PayNow, logistics container tracking with customs clearance. Meaningful integration, performance and manual UAT with domain expert approval.

Cost and timeline

Legacy system modernization follows the published cost guide.

Tier	Range	Timeline	Example
UI Modernization	$40K to $100K	8 to 16 weeks	New frontend, API wrapper, improved UX
Re-Platforming	$100K to $250K	16 to 32 weeks	Modern stack, containerization, cloud, data migration
Re-Architecture	$250K to $400K	8 to 14 months	Decompose monolith, event-driven, modern data layer
Full Rebuild	$400K to $500K+	12 to 18+ months	Ground-up rebuild, agreed availability target, rehearsed staged cutover

Vendor comparison

Ranges are 2026 US-buyer guide-based estimates for re-platforming a 10 to 15 year old business-critical system using a strangler fig approach, modern stack, API wrappers, phased data migration and regression harness.

Vendor type	Typical cost	Timeline
Freelance or dev collective	$40K to $130K	5 to 12 months
Offshore systems integrator	$60K to $200K	8 to 14 months
ZTABS	$100K to $280K	6 to 12 months
Big 4 consultancy	$300K to $1M+	10 to 18 months
SaaS replacement vendor	$50K to $200K implementation	4 to 9 months

Parallel-running infrastructure, senior knowledge-transfer time and where applicable compliance revalidation can add a combined scope-dependent $100K to $500K+ planning allowance. The guide's examples are SOX, HIPAA and FDA; actual applicable regime depends on the engagement.

Proposal evaluation criteria

Evaluate any vendor proposal against these six criteria regardless of price tier.

Criterion	What to verify
Strategy, deliverables and acceptance	Defined modernization phases with measurable acceptance criteria at each stage
Data source-of-truth and reconciliation	Which system is authoritative per object and period, agreed reconciliation tolerances and exception register
Rehearsal, cutover and rollback	Rehearsed cutover with RTO and RPO targets, documented rollback feasibility after schema and data changes
Security, privacy, compliance and approval scope	Applicable regulations identified with actual approval authority and scope
Full recurring costs	Licensing, parallel-run infrastructure, support, monitoring and decommission costs beyond initial build
Human roles and responsibilities	Provider and customer trainer-validator-support split, agreed working languages, translated materials review and on-site responsibilities where needed

How delivery works

ZTABS is remote-first by design from our Houston, Texas office. Overlap with Singapore business hours for coordination and review.

When ZTABS is not the right fit

• The system still works and nobody is asking for changes. Wait for a real forcing function.
• Insurance platform vendor selection. Insurance administration platform licence selection and vendor-led configuration are the licensed vendor's and customer's scope. This engagement modernizes the surrounding integration, data migration and MAS reporting connections.
• On-site programme office and multi-vendor coordination. This engagement delivers application modernization. Separately contracted programme governance, on-site management and advisory retainers have different scope and responsibilities.
• On-site embedded team. ZTABS is remote-first by design. On-site staffing, training and support retainers for this engagement are separately agreed.
• MAS or PDPC regulatory advisory. This engagement builds platforms, not regulatory advice. Regulatory advisory is separately engaged.

White-label AI products

ZTABS builds custom white-label AI products for clients to brand and resell. Singapore technology companies can commission white-label AI platforms for distribution under their own brand.

Cutover rehearsal detail

Observable acceptance with measurable RTO, RPO and latency targets. Insurance cutover timed for renewal cycles across ASEAN markets. Banking cutover timed for FAST payment settlement windows and MAS reporting periods. Logistics cutover planned for lower-volume periods.

Rollback feasibility assessed after schema, data and contract changes. Insurance premium settlements, FAST payments, customs declarations and production records may not be automatically reversible. Compensations can require actuarial, regulatory or operational review.

Manufacturing modernization

Singapore manufacturers operate legacy MES and ERP systems requiring modernization for Industry 4.0, IoT integration and real-time quality analytics.

ERP upgrades. Legacy SAP R/3 with Singapore-specific customisation for GST, CPF contributions and MOM reporting migrated to current versions. Custom developments analysed and migrated.

Smart manufacturing. Legacy MES modernized for real-time production monitoring, predictive maintenance and IoT sensor integration. JTC Smart Estate connectivity enabled.

Modernization approach comparison

Singapore enterprises should assess risk per approach. Compare targeted remediation, upgrade, re-platform, re-architecture, rebuild and replacement with actual risk and expected benefit. Not all systems need the same approach. Older AS/400 RPG insurance systems may need re-architecture while relatively modern web applications may only need re-platforming.

AI integration in modernized systems

MAS final 7 October 2026 supervisory expectations with sections 3 and 4 from October 2027 and sections 5 and 6 by October 2028. Risk-proportionate expectations for financial institutions using AI. AI Verify traditional and generative scope assessed for AI components in modernized systems where applicable. Not all legacy modernization projects involve regulated AI.

Risks and mitigations

MAS regulatory continuity. All regulatory reporting addressed at each migration phase. MAS notification for material outsourcing where required.

Multi-country ASEAN complexity. Each ASEAN market migrated independently with country-specific regulatory validation and data protection assessment.

RPG developer transition. Knowledge transfer from retiring RPG developers prioritised. Business rules documented and verified before developer departure.

Regional headquarters modernization

Singapore serves as regional headquarters for multinational corporations operating legacy platforms across ASEAN markets. Centralised legacy systems serving multiple countries with different regulatory requirements, languages, currencies and tax regimes.

Multi-country platform consolidation. Legacy systems operating independently per country consolidated into unified modern platforms with country-specific configuration. Data sovereignty assessed per country.

Cross-border data flows. PDPA transfer routes and ASEAN country-specific data protection requirements assessed for cross-border processing between Singapore headquarters and country operations.

Handover

Modernization handover includes runbooks, data lineage, licensing, support contacts and accountable owners. Insurance handover includes MAS compliance documentation and actuarial documentation. Banking handover includes MAS regulatory reporting specifications and SGFinDex integration documentation. Logistics handover includes TradeNet integration documentation and customs clearance specifications.