Borong's compliance programme is built to meet the requirements of the enterprise and government-linked organisations that rely on us. This page documents the standards our programme is built against and how Borong's platform supports your own compliance obligations.

Certifications and Assessments

Malaysia Personal Data Protection Act 2010 (PDPA)

Borong processes personal data in compliance with Malaysia's Personal Data Protection Act 2010 (Act 709). The PDPA establishes seven data protection principles governing how personal data is collected, processed, stored, and disclosed in commercial transactions in Malaysia.

Borong's data handling practices are aligned with the PDPA. Full details of Borong's PDPA compliance approach are documented on the Data Privacy & PDPA page.

Status: Compliant. Ongoing.

Supplier Compliance Standards on Borong Marketplace

Borong Marketplace maintains compliance requirements for all suppliers listed on the platform. These are not Borong's own certifications but represent the governance standards Borong enforces across its supplier network.

Business registration: All suppliers are verified against the Suruhanjaya Syarikat Malaysia (SSM) register or equivalent for foreign entities before activation on the Marketplace.
Product certifications: Suppliers selling regulated products must hold and maintain the relevant certifications for their category. For food and beverages, this includes halal certification from the Department of Islamic Development Malaysia (JAKIM) or an equivalent recognised body where applicable.
Import permits and licences: Suppliers of controlled goods must hold valid import permits from the relevant Malaysian authorities.
Ongoing monitoring: Supplier compliance status is monitored on an ongoing basis. Listings are suspended when certifications lapse.

How Borong Supports Your Compliance Requirements

For GLCs and Government-Linked Organisations

Government-linked companies and public sector organisations in Malaysia operate under procurement governance frameworks that require documented controls over supplier selection, contract compliance, and spend accountability. Borong's platform is designed to meet these requirements operationally: approved vendor list management, contract rate enforcement, three-way matching, and immutable audit trails provide the evidentiary record that governance frameworks require.

Borong's audit export function allows procurement and finance teams to generate compliance-ready reports on demand, covering purchase requisitions, approval decisions, purchase orders, delivery receipts, and invoices. These reports can be used directly in internal governance reviews and external audits.

For Enterprise Organisations

Enterprise organisations conducting vendor risk assessments or third-party due diligence on Borong can request the following:

Security questionnaire responses (VSAQ, SIG Lite, or custom formats)
Data processing agreements

Request can be made here.

Compliance Roadmap

Borong's compliance programme is developing in line with the platform's growth and the requirements of its enterprise and institutional clients. Borong is evaluating additional frameworks relevant to its operating context.

Compliance Enquiries

For compliance documentation requests, vendor assessments, or questions about Borong's compliance programme, please contact us.

Explore Trust Center

Overview Security Data Privacy & PDPACompliance & Certifications