Skip to main content
Home · About · The Compliance Desk
About

The Compliance Desk

Every page on this site is reviewed by an internal compliance function before publication. Here is what that means.

What "reviewed" means

Every claim on this site about a standard, a regulator, a method, or a certification is checked against operating reality before the page goes live. We do not publish what we do not do.

What we deliberately do not claim

NAID AAA membership we have not bought (we operate to NAID-grade protocol). R2v3 / e-Stewards we orchestrate through licensed-recycler partners. ISO 14001 / ISO 27001 / ISO 45001 we have not been third-party audited against. Awards, rankings or volumes we cannot verify. We are not an OEM-authorized partner.

Why this matters

Singapore enforcement under PDPA Section 24 looks at operating reality, not marketing claims. Our customers — BFSI, government, data centres — face audits where vendor accuracy is itself part of the audit. We do not give them a tall claim to defend.

Operating record

Maxicom Global Pte Ltd was incorporated in Singapore in 2015 and has operated continuously as an independent IT asset disposition trading house. Across that operating record the engagement model has stayed consistent: per-asset pickup, per-asset sanitization to NIST SP 800-88 Rev. 1 and IEEE 2883-2022, per-asset Certificate of Destruction, settlement in SGD against PO, NDA-bound by default. We hold no OEM partnerships; we operate independently on the secondary market.

Compliance posture and the standards we work to

The standards stack: NIST SP 800-88 Rev. 1 (the framework auditors default to for media sanitization), IEEE 2883-2022 (the SSD/NVMe sanitization standard), DoD 5220.22-M where contractually specified, NAID-grade operational protocol (we do not hold NAID AAA membership), plus the Singapore privacy law: PDPA Section 24 (Protection Obligation), MAS Technology Risk Management Guidelines for BFSI engagements, NEA Resource Sustainability Act 2019 for downstream e-waste routing, IMDA and CSA guidance where applicable. Every per-asset Certificate of Destruction is written to be admissible against the regulator your engagement actually falls under.

What we do not claim

NAID AAA membership we have not paid for (we operate to NAID-grade protocol — same operational discipline, no annual audit fee, so we do not call it AAA). R2v3 / e-Stewards we orchestrate through licensed-recycler partners rather than holding directly; partner certifications documented on the per-engagement ESG report. ISO 14001 / ISO 27001 / ISO 45001 we have not been third-party audited against. OEM partnerships — we hold none. Awards, rankings or volumes we cannot independently verify.

How we settle and how we contract

Settlement is in SGD against your purchase order, line-item per asset, payment terms agreed in the signed SOW. Programme engagements run on multi-year master service agreements with quarterly business reviews. The SOW is contracted through Maxicom Global Pte Ltd for tax and regulatory clarity in Singapore.

Last updated April 2026.
Operates to NIST 800-88 · PDPA · MAS TRM · NAID-grade · IEEE 2883-2022
References

Authoritative references

Primary sources for the standards and frameworks referenced on this page. Maxicom maps every engagement to these recognised authorities.

Frequently asked questions

Frequently asked questions

When was this entity established?

Maxicom Global Pte Ltd was incorporated in Singapore in 2015.

Where does Maxicom operate?

Singapore-anchored, with regional reach across ASEAN through partner relationships. Independent of any OEM.

Who reviews the content on this site?

Every page on this site is reviewed by an internal compliance function before publication. Claims about standards, regulators, methods, and certifications are checked against operating reality.

What does "" actually mean?

Every page on this site is reviewed by a standing internal compliance review function before publication. Claims about standards (NIST SP 800-88, IEEE 2883-2022, DoD 5220.22-M, NAID-grade Protocol), regulators (DPDPA, OSFI B-13, MAS TRM, UAE PDPL Article 21, etc.), methods (sanitisation techniques, particle sizes, field strengths) and certifications are checked against operating reality. The badge with the date stamp is updated on each refresh cycle.

How do I verify Maxicom's claimed regulator alignment?

On request, we provide engagement-anchored evidence pack covering: (1) per-asset Certificate of Destruction sample naming the cited standards; (2) operator-vetting summary; (3) chain-of-custody manifest sample; (4) sub-contractor certification list (where licensed recyclers are involved); (5) jurisdictional regulatory alignment matrix mapping the engagement to the applicable rules (NIST 800-88 · PDPA · MAS TRM · NAID-grade · IEEE 2883-2022). Sample evidence pack available on NDA before engagement signing.

Can Maxicom be inspected by my regulator under audit-of-vendor rights?

Yes. Where your master service agreement includes audit-of-vendor rights (typical for BFSI, government, healthcare engagements), the regulator may inspect Maxicom's engagement records, facility, and operational protocols. We have served regulator-inspection requests at multiple regulated-entity engagements without findings.

How long has Maxicom been operating in this region?

In Singapore since 2015. Maxicom Global Pte Ltd has decision authority on all Singapore engagements; the team is Singapore-based.

When you are ready

Send the asset list. We will send the number.

A photograph of the rack works. A spreadsheet works better. SGD settlement, against PO.

purchase@maxicom.sg · 1 business day