Singapore's data centre market runs under IMDA's Tropical Data Centre Standard and MTCS expectations, so the gap between a real colocation partner and a brochure shows up in the certificates, power terms, and on-ramps. Use this checklist before you sign a colocation or hosting contract.
How to evaluate a data centre / colocation provider in Singapore
- Treat the Uptime Institute tier as a document, not a slogan: ask for the Tier-Certified Design Documents and Constructed Facility certificates (Tier III at 99.982% is the floor for serious workloads; Tier IV's ~30-50% premium is only worth it for trading floors or critical records).
- If you serve government, finance, or healthcare, verify the provider's MTCS (SS 584) level on the IMDA register rather than accepting an 'MTCS-certified' logo — confirm it is Level 3 where sensitive or regulated data is involved.
- Demand the underlying security and compliance audits behind the badges — ISO 27001, SOC 2 Type II, and PCI DSS where card data applies — and ask for the auditor name, scope, and audit date, not just the certificate cover.
- Pin down power and resilience in writing: confirm whether redundancy is N+1 or 2N, get the last 12-month measured PUE and tested operating temperature (TR 95 / Tropical DC Standard alignment), and read the SLA clause on burst/overage power before modelling 36-month TCO.
- Map connectivity to your stack: check for direct cloud on-ramps in the same facility (AWS Direct Connect, Azure ExpressRoute, GCP Partner Interconnect, OCI FastConnect), cross-connect density, and carrier choice so you are not locked to a single network.
- Test the operational reality of physical security, PDPA obligations, and remote-hands and migration support — confirm 24/7 staffing, escort procedures, response SLAs, and who physically handles your kit at 3am.
Verify for Epoch Digital
- Confirm key details directly with the vendor — this listing isn't vendor-managed yet.
- Ask for two recent Singapore client references you can speak with.
- Ask for a written scope of services before comparing quotes.
- Request evidence of relevant certifications and their current validity.
Questions to ask
- What is your MTCS level on the IMDA register, and can you share the Uptime Institute tier certificate and the date of your most recent ISO 27001 / SOC 2 audit?
- What was your measured PUE over the last 12 months, and is the power model metered, capped, or reserved — including the SLA terms on burst power?
- Which cloud on-ramps and carriers are available cross-connect in this specific facility, and what are the cross-connect and migration fees?
- What are your remote-hands response times and procedures, and how do you meet PDPA and physical-security obligations for tenant equipment and data?