When we attend industry events, one of the most common questions we get asked is: “Does SSM accept digital signatures yet?”
It’s a fair question. No one wants to adopt a digital solution just because “everything is online nowadays.” What business owners and company secretaries really care about is if SSM recognizes it as legally valid.
In Malaysia, every entrepreneur and business owner collaborates with Suruhanjaya Syarikat Malaysia (SSM), the Companies Commission of Malaysia. SSM is key in monitoring and regulating companies to ensure legal operation. A registered and compliant company gains recognition and legal protection under Malaysian law.
In recent years, SSM has focused on digitalizing records and submissions. This change lowers dependence on physical documents and manual transfers. It also helps business owners access company data more easily, allowing for quicker decisions.
In fact, according to SSM,
“From 2019 to July 31, 2024, more than 26.4 million information transactions were recorded through the MyData-SSM and SSM e-Info portals.”
So here comes the real question: with so many documents that require signatures before being submitted to SSM, are electronic or digital signatures actually accepted?
To get a definitive answer, we reached out to SSM directly via email – and they replied refer to the attached.
We have accessed the document and was able to find the answer.
In the sections below, we’ll explore how SSM is moving towards digital signatures, and share our understanding of what “proof and evidence” may involve.
While we have reached out for further clarification, we have not yet received an official reply. What follows is based on available references and our best interpretation, rather than a confirmed directive from SSM.
SSM’s digitalisation milestone
Before digitalisation, companies and company secretaries had to physically visit SSM counters to submit hardcopy documents, fill in paper forms, wait in long queues, and manually process statutory filings.
This process was time-consuming and prone to delays.
To modernise corporate compliance, SSM launched the first generation of the Malaysian Business Reporting System (MBRS) between 25 December 2020 and 28 February 2021, enabling businesses to submit annual returns and financial statements online.
The real game changer came on 25 September 2024, with the rollout of MBRS 2.0, a major milestone in SSM’s digitalisation journey. Built on XBRL (eXtensible Business Reporting Language) technology, the new MBRS Portal allows companies to submit:
Complete financial statements
Exemption applications
Annual returns
1 December 2024
Filing of unaudited financial statements under the Companies Act 2016.
1 March 2025
Filing of audited financial statements under the Companies Act 1965.
1 June 2025
SSM fully discontinue physical counter submissions, completing its transition to a fully digital platform.
This transformation aligns with Malaysia’s national agenda to create a paperless government service ecosystem and make corporate compliance faster and more accessible.
Benefits of SSM’s digitalisation
Today, businesses can:
- Submit all statutory filings online via the MBRS 2.0 portal
- Use XBRL format for financial statement submissions
- File documents 24/7 without being limited by office hours
- Reduce paperwork, queues, and manual errors
- Enjoy better integration with other government systems
This shift makes compliance more efficient, transparent, and business-friendly – a significant step forward for Malaysia’s corporate landscape.
Electronic signatures in SSM submissions
When SSM mentions “electronic signatures”, it doesn’t simply mean typing your name or inserting a scanned signature image into a PDF.
Instead, it refers to signatures that meet specific legal and technical standards before they can be considered valid for statutory filings.
Built-in digital signing in MBRS
The good news is that SSM’s MBRS system already has a built-in digital signature function.
According to the official MBRS FAQ, the platform provides a “digital signature facility”, which is one of its core features.
How it works
Digital certificate requirement
- Companies must obtain a digital certificate from a licensed Certification Authority (e.g., POS Digicert).
- This creates a verified digital identity for each signer, ensuring authenticity.
Platform Features
- Role-based access (Maker and Lodger roles)
- Secure digital signing process
- Online payment and filing
- Email confirmations and status updates
Legal framework for electronic submissions
Electronic submissions through MBRS are supported by three key Malaysian laws:
- Electronic Commerce Act 2006
- Digital Signature Act 1997
- Electronic Government Activities Act 2007
Practical application
Documents that can be digitally signed and submitted online include:
- Annual Returns
- Financial Statements
- Exemption Applications
This means companies no longer need to submit physical documents with wet-ink signatures, significantly simplifying compliance and making it possible to complete the entire process online.
Beyond MBRS: Other corporate documents
But what about documents that cannot yet be submitted via MBRS?
Some examples include:
- New Company Incorporation (Sdn. Bhd. / Berhad)
- Registering a new private limited (Sdn. Bhd.) or public company (Berhad).
- Change of Company Particulars
- Updating company details, such as the company name, registered office, or business address.
- Director / Secretary Appointments and Resignations
- Filing statutory forms, like Section 58 under the Companies Act 2016.
- Share Allotments and Transfers
- Notifying changes in shareholding structures.
- Business Registration (Enterprise / Sole Proprietor / Partnership)
- Registering or renewing under the Registration of Businesses Act 1956.
- Certain Statutory Declarations or Court-Required Documents
- Documents that still require in-person witnessing.
For these types of documents, you may still need to follow the traditional filing process or use SSM’s other portals (e.g., MyCoID, EzBiz).
This is why it’s important to understand the difference between electronic signatures and digital signatures under Malaysian law, so you can choose the correct signing method depending on the document type and its regulatory requirements.
Understanding electronic vs. digital signatures
Before we dive deeper, let’s clarify the terminology:
| Term | What it means | When to use |
|---|---|---|
|
Electronic Signature |
Any electronic process that indicates acceptance, can be typing your name, clicking “I agree,” or inserting a scanned signature. |
Use when the law does not specifically require a digital signature, e.g., simple contracts under the ECA 2006. |
|
Digital Signature |
A cryptographic process using a CA-issued digital certificate to verify identity and document integrity. Creates a tamper-evident audit trail. |
Required when the law (e.g., DSA 1997) specifically mandates it, or for high-value, regulated transactions. |
What is a digital signature?
A digital signature uses encryption technology and a unique digital certificate to confirm:
Who signed the document (identity verification)
That the document hasn’t been changed since it was signed (integrity)
When and where it was signed (audit trail)
Think of it as a secure digital fingerprint, impossible to copy or alter without detection.
Legal recognition in Malaysia
Malaysia has a clear legal framework that gives digital signatures the same legal standing as handwritten signatures, provided they meet certain requirements.
Digital Signature Act 1997 (DSA 1997)
- Recognizes digital signatures as legally valid if issued by a licensed Certification Authority (CA).
- Specifies technical requirements like encryption standards and certificate validity.
- Establishes that digitally signed documents are admissible as evidence in court.
Electronic Commerce Act 2006 (ECA 2006)
- Broader act covering all types of electronic communications and transactions.
- States that no document can be denied legal effect solely because it is in electronic form.
Choosing the right signing method
If your filing or document must comply with DSA 1997, you should use a digital signature (e.g., through SigningCloud).
If it only needs to comply with ECA 2006, a standard electronic signature might be sufficient – but using a digital signature still offers stronger proof, security, and peace of mind.
What is the “proof & evidence” SSM may require?
When SSM says that the company secretary or assignee is “fully responsible and must provide proof/evidence”, they might referring to the company’s ability to demonstrate that:
The signer’s identity is valid
- You can show that the person who signed is indeed authorized (e.g., a director, company secretary).
The signing process is compliant
- You can produce records showing that the document was signed using a recognized digital certificate and has not been altered since.
The timeline is traceable
- You can show when, where, and by whom the document was signed.
In practice, this means keeping an audit trail for each signed document. This audit trail should include:
- Signer details (name, email)
- Timestamp for every action (viewed, signed, completed)
- Document hash value (digital fingerprint to confirm integrity)
- IP address or geolocation (if available)
By using a secure e-signature platform, you can automatically generate these records and export them as PDF evidence in case SSM or an auditor requests them.
Common mistakes & how to avoid them
Even though SSM accepts digital signatures, many companies still run into problems because of improper implementation. Here are the most common mistakes and how to avoid them:
| Mistake | Risk | Solution |
|---|---|---|
|
Using scanned signatures or “signature images” |
May be rejected by SSM, no legal proof if disputed |
Use DSA-compliant digital signatures with encryption and certificate validation |
|
Failing to keep an audit trail |
Cannot prove compliance if SSM requests evidence |
Use a platform that automatically generates tamper-proof logs |
|
Submitting mixed formats (some signed physically, some digitally) |
Confusion and potential rejection |
Standardize your signing process: use digital signatures for all submission |
|
Not renewing digital certificates on time |
Unable to sign, last-minute delays |
Keep track of certificate expiry dates and renew early |
How SigningCloud helps with SSM compliance
SigningCloud is designed to meet Malaysia’s compliance requirements, making SSM submissions smooth and worry-free:
CA-Issued Digital Certificates
No need for extra manual steps. You can seamlessly purchase a digital certificate from any licensed Malaysian CA directly within the SigningCloud platform, ensuring full compliance with DSA 1997 and ECA 2006.
Secure Audit Trail
Automatically records every step of the signing process, giving you tamper-proof proof of compliance whenever required.
Signer Verification
Built-in 2FA and eKYC options help ensure that only authorized signatories can access and sign documents.
Real-Time Notifications
Receive instant updates when your documents are viewed, signed, or completed.
Integration-Friendly
Connect seamlessly with your internal workflows and document management systems for smoother filing preparation.
Affordable Pricing
Unlike many international e-signature platforms, SigningCloud offers unlimited document sending and signing at a competitive local price, perfect for companies that handle frequent SSM submissions.
Summary: Does SSM accept digital signatures?
The answer is yes if a company uses the right technology and provides the needed proof. SSM’s shift to full digitalization shows that corporate compliance is going paperless. Digital signatures, especially DSA-compliant ones, are now essential for business in Malaysia.
By using a secure, compliant solution like SigningCloud, you can:
- Meet SSM’s requirements confidently
- Avoid costly delays or rejections
- Keep a clear record of every signing event
Ready to go digital?
Contact SigningCloud today and experience how simple, secure, and compliant your SSM filings can be.
Dislaimer:
This article’s information is based on publicly available references and our current understanding of SSM’s digitalisation initiatives. Although we have asked SSM for further clarification, we have not received an official response yet. Before making compliance decisions, readers should consult their company secretary, legal advisor, or SSM directly to confirm the information.
Reference:
- SSM launches SSM search and Safedata-SSM corporate information supply platforms
- MBRS PKI Registration
- Malaysian Business Reporting System (MBRS) - Resources Center
- A Commentary on E-Signatures - Dr Cheah Foo Seong FCIS, FIPA, MBA, LLM, LLD
- Guidelines on the use of electronic signatures for documents submitted to the SCM
