Protum releases agentic AI governance toolkit for Singapore IMDA and PDPC rules

SINGAPORE - July 24, 2026 - PRLog -- Protum today released Trusted AI OS, a free and openly published set of governance tools that helps organisations turn Singapore's agentic AI guidance into the evidence their boards, internal auditors and regulators ask for.

The release lands as Singapore's expectations for autonomous AI sharpen on two fronts. The Infocomm Media Development Authority (IMDA) launched the Model AI Governance Framework (MGF) for Agentic AI in January 2026 and published version 1.5 in May. The Personal Data Protection Commission (PDPC) has since set out how the Personal Data Protection Act (PDPA) applies to personal data used in generative AI systems. Organisations deploying AI agents in Singapore now sit under two sets of expectations, from two regulators, on two separate clocks.

"The frameworks tell you what good looks like. They do not tell you what evidence to put in front of your board on a Tuesday morning," said Sandeep Joshi, Founder and Managing Director of Protum. "That gap is where every chief information officer, chief information security officer and data protection officer in Singapore is currently standing. We published our methodology openly because governance that cannot be inspected is not governance."

Trusted AI OS has five components plus a supporting toolkit, all free and all available without a sales call.

The Agentic Risk Matrix. 42 risks across 8 domains: decision, delegation, execution, interaction, memory, identity, governance and value. Protum says it was built from live Asia Pacific deployments and includes risks it did not find in existing published frameworks.

The Agent Trust Record. One versioned, board-ready document per agent: identity, risk tier, permission map, oversight telemetry and mapping to IMDA, PDPC, the Monetary Authority of Singapore (MAS), the PDPA and ISO/IEC 42001.

The Crosswalk Whitepaper. Maps the IMDA MGF for Agentic AI and the PDPC generative AI guidance into one governance stack, so two obligations are met in one assessment cycle. Free, no registration.

The MGF Readiness Assessment. 20 questions, about 20 minutes. Returns an A to E grade, a four-dimension radar and a ranked gap list citing the framework, on screen immediately.

The Generative AI Data Protection Readiness Check. The same, for data protection officers working through what the PDPC guidance changes. About 20 minutes, instant scored report.

A risk tiering worksheet and a board briefing pack complete the toolkit.
Links

• Trusted AI OS: https://protum.ai
• MGF Readiness Assessment: https://protum.ai/mgf-readiness
• Generative AI Data Protection Readiness Check: https://protum.ai/data-protection-assessment
• Crosswalk Whitepaper: https://protum.ai/mgf-readiness