For Finance Companies, Banks, Koperasi Unions
Bank-grade AI lending,
on your infrastructure.
Single-tenant deployment, BYOK, ISO 27001:2022 evidence vault, BNM TRMG alignment, source-code escrow. Designed for procurement, engineered for regulators. Named architect, 1h P1 SLA. Bolehlah Enterprise from RM 60,000/mo plus negotiated setup.
BNM TRMG-aligned · ISO 27001:2022 · SOC 2 Type II prep · Source code escrow
What we built for the regulated end of the market
Most AI lending platforms target volume buyers. We built one specifically to land in front of your CISO, your DPO, your compliance head, and your board risk committee — on day one.
BNM TRMG + ISO 27001 evidence is a quarterly fire drill
Our ISO 27001:2022 ISMS Auditor (Vimal Selvarajan) maintains evidence collection across all 93 Annex A controls — daily access-log sweeps, risk register, recertification countdown. Stage-2 audit becomes a review, not a scramble.
Procurement requires single-tenant or VPC peering
Enterprise tier deploys to your VPC (AWS / Hetzner / on-prem). Borrower data never sits in shared infrastructure. Source code escrow available. MSA negotiated with your legal lead.
Bank-grade audit trail isn't a checkbox feature
Every action — auth, decision, disbursement, deduction submit — captured in an append-only JSONL chain mirrored to GCS Object Lock. PDPA inquiries ("who viewed this NRIC scan in March?") answer in 30 seconds via Drive Activity API.
Senior management wants AI without losing oversight
Manager-tier Officers with configurable autonomous-approval caps (RM 0 to RM 100K). Every decision shows reasoning, every escalation captured. AI assists; humans still own the call.
What ships with Enterprise
Single-tenant deployment · BYOK
Your own database cluster, your own workers. Bring your own KMS-backed encryption key. Optional on-prem install with our Terraform / Ansible playbook.
ISO 27001:2022 ISMS audit, in-house
Vimal Selvarajan, our virtual ISMS Auditor, runs daily evidence collection across all 114 controls in scope. Risk register, internal audit cycles, recertification readiness — visible on /admin/team.
BNM TRMG-aligned by default
Aligned to Bank Negara's Technology Risk Management Guideline. Critical-system uptime tracking, third-party risk register, incident-response runbooks.
Source code escrow available
Iron Mountain (or equivalent) escrow on your terms. Triggered on Bolehlah ceasing operations or material breach. Your business never depends on us being alive.
Named architect + 1h SLA
One person owns your account end-to-end. Slack channel direct with engineering. P1 incident response in 1h, with 24/7 oncall. Quarterly business review with our founder.
Federated learning option
Anonymized fraud + credit patterns flow back to the central brain via differential privacy. Your borrower data never leaves your premises. The whole network gets smarter; your customers stay yours.
Enterprise · from RM 60,000 / month
Setup negotiated based on integration scope. Standard MSA is 24 months with 12-month auto-renewal. Termination for convenience with 90-day notice. Full pricing details and a worked ROI walked through during the architect call.
- All 7 Officer roles at Manager tier
- Unlimited workspace seats
- 1h P1 SLA · 24/7 oncall · named architect
- Single-tenant deployment · on-prem option · BYOK
- ISO 27001:2022 + SOC 2 Type II evidence vault
- BNM TRMG-aligned compliance posture
- Source code escrow available
- Quarterly founder business review
Book the architect call.
30-minute scoping with our founder + a senior architect. We map your infrastructure constraints, audit-evidence posture, and integration surface area. We send back a proposal within 5 working days.