An employment agency document and email access checklist should make every candidate case traceable to an owner, an approved storage location and a clear handover or closure step. It should also stop business records from becoming trapped in personal inboxes, local downloads and forgotten shared links.
This is an operational control guide for Singapore employment agencies. It does not replace legal advice or a review of your specific record-handling obligations.
Why do candidate records become difficult to control?
Agency work moves quickly between consultants, administrators, employers and candidates. A document may arrive by email, be downloaded for checking, uploaded to a case folder and then forwarded for approval. Without a standard process, the business can lose track of which copy is current and who still has access.
The goal is not to block work. It is to create one reliable route for documents and decisions so staff can move quickly without building private archives.
1. Give every case a named owner and case reference
Assign one accountable owner for each active case. Use a consistent case reference in the shared mailbox, case system and approved document location. The owner does not need to perform every task, but must be able to see the current status and next action.
Avoid using a person’s name alone as the folder structure. Names can be duplicated or changed, and they do not show whether a case is active, on hold or closed.
2. Use a shared mailbox for business correspondence
Candidate and employer correspondence should remain visible to the business. A shared mailbox or case-management queue makes handovers possible and reduces dependency on one consultant’s account.
Define who may read, send and delete messages. Sending rights should match the role. Administrative support may need to file documents without being authorised to approve terms or make commitments.
Create standard folders or labels for new enquiries, documents pending, employer action, candidate action, completed and exceptions. Keep the structure simple enough that staff will use it consistently.
3. Separate intake from the working record
Email attachments are an intake channel, not the final filing system. Move required documents into the approved case location, record the status and avoid keeping uncontrolled duplicates on desktops or in personal download folders.
When a revised document arrives, mark the previous version clearly or use version history in the approved platform. Staff should be able to answer two questions: which version is current, and who accepted it for the case?
4. Grant access by role, not convenience
Build access around work groups such as consultants, administrators, finance and managers. Give users the minimum access needed for their current responsibilities, and make exceptions time-limited where the platform supports it.
Review broad links and folders labelled “everyone”. They are easy to create and easy to forget. External sharing should have a named owner, a business purpose and a review or expiry point.
5. Control document sharing with employers and candidates
Before sending a file or link, staff should verify the intended recipient, the document selected and the permission applied. Use approved sharing methods rather than personal file-transfer accounts.
Where possible, share access to the current document instead of emailing multiple attachments. Confirm whether the recipient needs view, upload or edit rights. Editing access should not be the default.
For unusual requests or last-minute changes, pause and verify through an independent contact route already held by the agency. Urgency should not remove the confirmation step.
6. Make consultant handovers explicit
A handover is more than forwarding an email thread. Use a checklist that records:
- case owner and deputy;
- current stage and next action;
- documents received and still outstanding;
- commitments or deadlines already communicated;
- external links or delegated mailbox access;
- exceptions that need a manager’s decision.
The receiving consultant should acknowledge the handover. The former owner’s access should then be reviewed rather than left in place indefinitely.
7. Close cases deliberately
Define what “closed” means in your systems. A closed case may need a final status, a locked or read-only record, removal of temporary sharing links and a retention decision by the appropriate business owner.
Do not leave every former case mixed into the active workspace. Equally, do not delete records simply to make the folders tidy. Agree the closure and retention process with the people responsible for the agency’s legal and operational requirements.
8. Remove access when staff change roles or leave
Connect the case-control process to the agency’s joiner, mover and leaver checklist. On a role change, review shared mailboxes, case folders, delegated access, groups, mobile sessions and approved third-party tools.
On departure, transfer case ownership before disabling access. Preserve business mail and records through the organisation’s approved process rather than asking a colleague to keep the former employee’s password.
9. Monitor the exceptions that create risk
Useful reviews focus on exceptions rather than reading every document. Check for:
- active cases with no owner;
- shared links with no review date;
- mailbox access that no longer matches a role;
- documents stored outside the approved location;
- stalled handovers and unacknowledged tasks;
- closed cases that still have external access.
Record the action taken and the person responsible. A dashboard is not a control if nobody follows up.
A practical monthly review
Choose a small sample of active, handed-over and closed cases. Trace each one from the first message to the current record. Confirm the owner, storage location, access groups, latest document and external sharing state. Then correct the process issue, not just the one folder.
Quarterly, review group memberships, shared mailbox permissions and the list of connected applications. After a staff departure or major process change, run an additional review rather than waiting for the calendar.
When should an agency ask for managed support?
Bring in technical support when access reviews depend on manual memory, shared mailboxes have unclear owners, staff use several unconnected storage tools or the agency cannot produce a reliable list of who can reach candidate records.
Sakal Network’s Microsoft 365 and managed IT support can help Singapore SMEs document accounts, groups, shared mailboxes, devices, backup and support ownership. The useful outcome is a process your managers can understand and your staff can follow.
For approved business security and productivity products, see the Sakal Shop business technology catalogue.