STACK

Singapore's data centre market runs under IMDA's Tropical Data Centre Standard and MTCS expectations, so the gap between a real colocation partner and a brochure shows up in the certificates, power terms, and on-ramps. Use this checklist before you sign a colocation or hosting contract.

How to evaluate a data centre / colocation provider in Singapore

• Treat the Uptime Institute tier as a document, not a slogan: ask for the Tier-Certified Design Documents and Constructed Facility certificates (Tier III at 99.982% is the floor for serious workloads; Tier IV's ~30-50% premium is only worth it for trading floors or critical records).
• If you serve government, finance, or healthcare, verify the provider's MTCS (SS 584) level on the IMDA register rather than accepting an 'MTCS-certified' logo — confirm it is Level 3 where sensitive or regulated data is involved.
• Demand the underlying security and compliance audits behind the badges — ISO 27001, SOC 2 Type II, and PCI DSS where card data applies — and ask for the auditor name, scope, and audit date, not just the certificate cover.
• Pin down power and resilience in writing: confirm whether redundancy is N+1 or 2N, get the last 12-month measured PUE and tested operating temperature (TR 95 / Tropical DC Standard alignment), and read the SLA clause on burst/overage power before modelling 36-month TCO.
• Map connectivity to your stack: check for direct cloud on-ramps in the same facility (AWS Direct Connect, Azure ExpressRoute, GCP Partner Interconnect, OCI FastConnect), cross-connect density, and carrier choice so you are not locked to a single network.
• Test the operational reality of physical security, PDPA obligations, and remote-hands and migration support — confirm 24/7 staffing, escort procedures, response SLAs, and who physically handles your kit at 3am.

Verify for STACK

• Confirm key details directly with the vendor — this listing isn't vendor-managed yet.
• Ask for two recent Singapore client references you can speak with.
• Ask for a written scope of services before comparing quotes.
• Request evidence of relevant certifications and their current validity.

Questions to ask

• What is your MTCS level on the IMDA register, and can you share the Uptime Institute tier certificate and the date of your most recent ISO 27001 / SOC 2 audit?
• What was your measured PUE over the last 12 months, and is the power model metered, capped, or reserved — including the SLA terms on burst power?
• Which cloud on-ramps and carriers are available cross-connect in this specific facility, and what are the cross-connect and migration fees?
• What are your remote-hands response times and procedures, and how do you meet PDPA and physical-security obligations for tenant equipment and data?

Prepared under the TechDirectory editorial byline with review credit June C; this label is not proof of identity, credentials, or a completed human review. This directory-authored checklist is not attributed to STACK; editorial independence has not been independently audited. Editorial standards