App Running Costs in Singapore and Malaysia: The Third-Party Bills

An app’s build is a one-off bill. Its running costs arrive every month, and many of them go to other companies: the cloud host, the maps provider, the SMS gateway, the email service, the payment gateway and, increasingly, the AI model. Engineering picks these services during the build, so it decides much of the bill long before anyone sees an invoice.

This guide lists the third-party services a typical business app in Singapore or Malaysia uses, what each costs at its current published price, and a worked month for a customer-facing app. All prices were checked on the providers’ own pricing pages on 11 October 2026. Most are in US dollars, and providers change them, so treat this as a starting estimate and check each page before you budget. Developer time for fixes, updates and new operating system versions is a separate cost and is not covered here.

What a business app pays other companies for

Almost every app needs somewhere to run, a way to log people in and a way to send them messages. Beyond that, the list depends on what the app does.

Service	Typical use	How it is priced
Hosting and database	Running the app and storing its data	Monthly plan, then usage
App stores	Publishing an iOS or Android app	Annual or one-time fee; commission on digital sales
Maps	Showing locations, addresses, routes	Per 1,000 calls, after a free monthly allowance
SMS	Login codes, alerts	Per message segment, by destination country
WhatsApp	Notifications, customer replies	Per message, by category and country
Email	Receipts, password resets, notifications	Per 1,000 emails or monthly plan
Payments	Card, PayNow, FPX	Percentage and fixed fee per transaction
Document processing	Reading invoices, forms, claims	Per page
AI models	Extraction, search, assistants	Per million tokens
Login and monitoring	User accounts, error reports	Free tiers, then monthly plans

Each line is small on its own. The ones to watch are those priced per use, because they grow with the number of users, and a single design decision, such as sending an SMS code at every login, can multiply them.

Hosting

Hosting is usually one of the smaller lines for a business app. Cloudflare Workers’ paid plan is US$5 a month, which includes 10 million requests and 30 million CPU milliseconds, with no charge for data transfer out (Cloudflare Workers pricing). An AWS Lightsail server with 0.5 GB of memory, 2 vCPUs, 20 GB of storage and 1 TB of transfer is also US$5 a month, and the Singapore region gets the full transfer allowance (AWS Lightsail pricing).

A production app also needs a managed database, backups and a staging copy for testing, which add to that figure. What matters more than the starting price is the shape of the bill: how it grows with users, and whether data transfer out is charged. Ask your developer for an estimate at today’s usage and at ten times today’s usage.

App store fees and commissions

To publish an iOS app, your company needs an Apple Developer Program membership at US$99 a year (Apple). Google Play charges a one-time US$25 registration (Google Play Console Help).

The store commissions apply only to digital goods and subscriptions sold inside the app. Apple’s Small Business Program takes 15%, instead of the standard 30%, for developers with up to US$1 million in proceeds in the previous year (Apple Small Business Program). Google Play takes 15% of the first US$1 million a year and 30% above that in markets such as Singapore and Malaysia (Google Play service fees).

Most business apps pay neither. An app for booking a service, ordering physical goods, or running work inside a company does not sell digital goods through the store, so it pays the account fees only. Whether you need a native app at all is a separate question: for many internal tools, a web app that works well on phones avoids the store fees and the review process.

Maps

Google changed how Maps is billed on 1 March 2025. The US$200 monthly credit that most older guides still describe was replaced by a free monthly allowance for each product (Google Maps Platform, March 2025 changes). Each Essentials product now has 10,000 free calls a month, each Pro product 5,000, and each Enterprise product 1,000 (Google Maps Platform pricing).

Above the free allowance, the Essentials prices per 1,000 calls are US$7 for dynamic maps, US$5 for geocoding, US$5 for routes, US$2.83 for address autocomplete and US$2 for static maps.

The engineering choices behind this line are specific. A static map image costs less than an interactive map where the user does not need to pan or zoom. Geocoding an address once and storing the coordinates, where Google’s terms allow it, costs less than geocoding it on every page view. Setting a daily quota on each API in the Google Cloud console caps the bill if a bug or a bot starts calling it in a loop.

SMS login codes: the line that surprises people

Sending a one-time password by SMS costs very different amounts in Singapore and Malaysia. Twilio lists US$0.0591 per outbound SMS segment to Singapore numbers (Twilio, Singapore) and US$0.3389 per segment to Malaysian numbers (Twilio, Malaysia), more than five times as much. Twilio Verify, which handles the code generation and checking, adds US$0.05 per successful verification (Twilio Verify pricing).

A segment is one SMS of up to 160 plain characters. A longer message, or one with characters outside the basic set such as emoji or Chinese characters, is split into several segments and charged for each. SMS is also the target of a type of fraud called SMS pumping, where bots trigger codes to expensive numbers. For messages sent through its messaging API, Twilio lists SMS pumping protection at US$0.025 a message (Twilio, Malaysia).

There are cheaper ways to confirm who someone is:

• Email codes or magic links. At Amazon SES’s price of US$0.10 per 1,000 emails, a login code costs a hundredth of a US cent.
• WhatsApp authentication messages. From 1 October 2026, Meta’s authentication rate to a Malaysian number is RM0.0564 per message, against US$0.3389, well over RM1, for an SMS through Twilio. Our guide to WhatsApp Business API pricing covers the rates and rules.
• Passkeys or staying signed in. A trusted device that does not need a code at every login removes most of the messages.

SMS is still the right choice for some users and some risks. The point is to choose it deliberately, and to ask for a code only when it is needed.

Email

Transactional email, such as receipts, password resets and notifications, is cheap at most volumes. Amazon SES charges US$0.10 per 1,000 emails (Amazon SES pricing). Resend has a free plan of 3,000 emails a month, then US$20 a month for 50,000 (Resend pricing). Postmark’s Basic plan is US$15 a month for 10,000 emails (Postmark pricing).

The engineering work here is deliverability, not price. A sending domain needs SPF, DKIM and DMARC records set up correctly, or receipts and reset links end up in spam.

Payment gateways

Payment fees are a percentage of every sale, so they are often the largest third-party cost for an app that takes money. Stripe’s published rates are:

Market	Domestic cards	Other methods	Extras
Singapore (Stripe SG)	3.4% + S$0.50	PayNow 1.3%	+0.5% international cards; +2% currency conversion
Malaysia (Stripe MY)	3% + RM1.00	GrabPay 3%	+1% international cards; +2% currency conversion

On a S$100 card payment in Singapore, Stripe’s fee is S$3.90. Through PayNow it is S$1.30.

For larger payments, a flat fee matters more than the percentage. Billplz, a Malaysian gateway, lists FPX online banking at RM1.25 per B2C transaction on its free Basic plan and RM0.75 on its Standard plan, which costs RM999 a year (Billplz pricing). On a RM5,000 invoice, a card fee of 3% + RM1 is RM151; an FPX B2C payment costs RM1.25 or less. Billplz prices FPX B2B, for corporate bank accounts, separately: RM3 a transaction on Basic and RM2 on Standard (Billplz pricing). If your customers pay large invoices, offer bank transfer methods first.

Document processing and AI

Apps that read documents, such as invoices, claims or delivery orders, pay per page. AWS Textract lists US$0.0015 per page for plain text detection and US$0.05 per page for form extraction, for the first million pages a month in its example region (AWS Textract pricing). At 5,000 pages a month, that is US$7.50 for text only and US$250 for forms: here, the feature you choose changes the bill more than the page count does. Our comparison of OCR and AI document extraction explains when each is enough, and our claims document extraction build shows what the pipeline involves.

AI models are priced per million tokens, and the gap between models is wide. Anthropic lists Claude Haiku 5.5 at US$0.10 input and US$0.50 output per million tokens, and Claude Sonnet 5.5 at US$2 input and US$10 output (Anthropic pricing). For an assistant answering 10,000 questions a month at about 2,000 input and 500 output tokens each, that is US$4.50 a month on Haiku and US$90 on Sonnet. Test whether the smaller model is accurate enough for the task before defaulting to the larger one.

Login, notifications and monitoring

These lines are often free for a small business app:

• Login: Firebase Authentication is free up to 50,000 monthly active users, though phone sign-in is billed per SMS (Firebase pricing). Clerk’s free plan covers 50,000 monthly retained users (Clerk pricing), and Auth0’s free plan 25,000 (Auth0 pricing).
• Push notifications: Firebase Cloud Messaging has no charge (Firebase pricing).
• Error monitoring: Sentry’s free Developer plan includes 5,000 errors a month. Its Team plan is US$26 a month, billed annually (Sentry pricing).

Free tiers are a fair choice for a first version. Note the limits, because a successful launch is exactly when an app crosses them.

A worked month

Take a customer-facing booking web app in Malaysia with a few thousand users. Each month it sends 3,000 SMS login codes, loads 20,000 interactive maps and sends 30,000 emails. It runs on Cloudflare Workers, uses Firebase for login and push notifications, and Sentry’s Team plan for errors. The codes go out through Twilio’s messaging API; using Twilio Verify instead would add up to US$150 (3,000 × US$0.05).

Line	Usage	Cost (US$)
Hosting (Cloudflare Workers)	Within plan	5.00
SMS login codes (Twilio, to Malaysia)	3,000 × US$0.3389	1,016.70
Maps (dynamic, Essentials)	10,000 free, then 10,000 × US$7 / 1,000	70.00
Email (Amazon SES)	30 × US$0.10	3.00
Login and push (Firebase)	Under free limits	0.00
Error monitoring (Sentry Team)	Annual plan, per month	26.00
Total, before payment fees and tax		1,120.70

SMS is about 90% of this bill. Sending the same 3,000 codes as WhatsApp authentication messages would cost RM169.20 at Meta’s rate, and email codes through Amazon SES about US$0.30. That one decision, made during the build, changes the monthly bill several times over. Payment fees come on top, as a percentage of what customers pay.

Tax on overseas services

Most of these services are billed from overseas, and both countries tax them.

In Singapore, overseas vendors that sell digital and remote services above IRAS’s thresholds must register under the Overseas Vendor Registration regime and charge 9% GST by default (IRAS, overseas businesses). A GST-registered business that gives the vendor its GST number is not charged GST, and accounts for it under reverse charge where that applies. A business without GST registration pays the 9% on top of the US-dollar price.

In Malaysia, service tax applies to digital services from foreign providers, and the rate rose from 6% to 8% on 1 March 2024 (KPMG Malaysia, on RMCD’s transitional guide). Malaysian businesses may also need to account for tax on imported services themselves. The rules have changed several times since 2024, so confirm your position with your tax adviser.

The other cost of overseas billing is the exchange rate. Every US-dollar line in the worked month moves with the ringgit or the Singapore dollar, and card payments in a foreign currency can carry a conversion fee from your bank.

How to keep the bill under control

• Estimate per-use lines before the build. For each paid service, write down the expected monthly volume and the price. Ask your developer for the same table at ten times today’s usage.
• Choose the cheaper channel by default. Email or WhatsApp before SMS, static maps before interactive ones, plain text detection before form extraction, a smaller AI model before a larger one, wherever the cheaper option does the job.
• Set quotas and budget alerts. Most providers let you cap usage or send an alert at a spending level. A bug that calls an API in a loop should not be discovered on the invoice.
• Register the accounts to your company. Hosting, app stores, payments, maps and messaging should be in your business’s name and paid with your card, with the developer added as a user. Owning the source code matters less if the accounts it runs on belong to someone else.
• Review the bill every quarter. Providers change prices and free tiers, as Google Maps did in 2025 and Meta did for WhatsApp in 2026.

When we build a mobile app or a web app, these choices are part of the design: you receive 100% of the source code, and the services it uses should be yours too. If you are planning an app and want the running costs estimated alongside the build, tell us what it needs to do. You talk to the technical lead, and we reply within 24 hours.