A role-based portfolio monitoring and compliance platform built for SC Malaysia-licensed trustee companies. Unified oversight across conventional equity, Islamic Sukuk, and digital asset funds in a single self-hosted system.
| Fund ID | Type | NAV (MYR) | Status |
|---|---|---|---|
| MGF-01 | Equity | 142.1M | Active |
| SSF-02 | Sukuk | 83.6M | Active |
| QDET-03 | Digital | 21.6M | Watch |
Purpose-built for trustee back-office operations, covering daily data entry through regulatory reporting and audit compliance.
| 01 |
Core
Dashboard
|
Aggregate real-time view of all managed
funds. AUM, NAV, open breach count, and YTD returns rendered per the
user's role and assigned fund scope.
AUM / NAV Summary
Breach Alerts
Fund Drill-Down
Role-Filtered
|
|
| 02 |
Core
Portfolio Monitoring
|
Central module for fund management,
holdings tracking, and transaction entry. Supports multi-fund switching
with cross-tab fund filtering.
Multi-Fund Management
Holdings by Asset Class
Transaction Entry
Cross-Tab Filtering
|
|
| 03 |
Regulatory
Compliance
|
Rule-based breach detection against
Trust Deed investment limits, concentration caps, and Shariah
restrictions. Runs automatically on a daily schedule, plus manual
trigger and remediation workflow.
Automated Daily Detection
Breach Detection Engine
Remediation Workflow
Breach History
Shariah Rules
|
|
| 04 |
Asset Class
Fixed Income / Sukuk
|
Full instrument lifecycle for
conventional bonds and Islamic Sukuk. Coupon and profit rate tracking,
maturity scheduling, and Shariah-compliant instrument classification.
Sukuk Ijarah / Murabahah
Coupon / Profit Tracking
Maturity Alerts
Accrued Interest
|
|
| 05 |
Asset Class
Digital Assets
|
Institutional management of approved
digital asset holdings. Multi-wallet support, on-chain transaction
tracking, and live price valuation via CoinGecko with fund-level access
scoping.
Multi-Wallet Support
On-Chain Transactions
Live Auto-Pricing
Fund-Scoped Access
|
|
| 06 |
Asset Class
Cash and Deposits
|
Cash account and fixed deposit
management across multiple banks. Tracks interest and Murabahah profit
rates, maturity schedules, and deposit roll-over history.
Multi-Bank Accounts
Fixed Deposit Tracking
Murabahah Profit
Roll-Over History
|
|
| 07 |
Operations
Reconciliation
|
Match TPMS records against external
custodian or fund manager statements. Surfaces discrepancies for review
and maintains a full resolution history.
Statement Matching
Discrepancy Flagging
Resolution Workflow
Reconciliation History
|
|
| 08 |
Reporting
Reports
|
On-demand server-side report generation
in XLSX, CSV, and branded PDF. Covers portfolio summary, holdings,
transactions, compliance findings, fixed income, and cash deposits.
XLSX / CSV / PDF
Branded PDF Header
6 Report Types
Fund Filtered
|
|
| 09 |
Regulatory
Documents
|
Secure document repository for Trust
Deeds, board resolutions, regulatory filings, and fund documents.
Enforces SC Malaysia 7-year retention requirement with fund-level access
scoping.
PDF / DOCX / XLSX
50 MB Per File
7-Year Retention
Fund-Level Scope
|
|
| 10 |
Regulatory
Audit Trail
|
Immutable log of every meaningful system
action. Captures user identity, action type, affected entity, and
timestamp. Read-only for auditor role. Minimum 7-year SC Malaysia
retention enforced.
User + Action + Entity
Tamper-Evident
7-Year Retention
Filterable Search
|
|
| 11 |
Admin
Administration
|
User management, fund scope assignments,
system configuration, demo environment, and database backup. All
company identity fields are configurable without code changes.
6-Role User Management
Fund Assignments
MFA Enforcement
Backup / Restore
|
|
| 12 |
Auth
Authentication / MFA
|
TOTP multi-factor authentication via any
RFC 6238 authenticator app. JWT access tokens with 15-minute expiry
stored in memory, 7-day httpOnly refresh cookies, and configurable
account lockout.
Google Authenticator
15-Min Access Token
Account Lockout
Forced Password Rotation
|
|
| 13 |
Operations
Bulk Import
|
CSV/Excel upload for holdings,
transactions, fixed income, cash accounts, and deposits in one step,
with row-level validation and error reporting. Eliminates manual
re-entry for high-volume funds.
5 Entity Types
Row-Level Validation
Fund-Scoped
Audit Logged
|
Role-based access enforced at both the API route level and the frontend router. Scoped users query only their assigned funds at the SQL layer, not just the UI.
| Role | Fund Visibility | Portfolio | Compliance | Fixed Income | Digital Assets | Cash | Reports | Documents | Audit Trail | Admin |
|---|---|---|---|---|---|---|---|---|---|---|
| Super AdminSystem Administrator | All Funds | Full | Full | Full | Full | Full | Full | Full | Full | Full |
| Trustee ManagerSenior Oversight | All Funds | Read | Read | Read | Read | Read | Full | Full | Read | None |
| Compliance OfficerRegulatory | All Funds | Read | Full | Read | Read | Read | Full | Full | Read | None |
| Operations StaffData Entry | Assigned Only | Full | None | Full | Full | Full | Full | Full | None | None |
| AuditorInternal / External | All Funds | Read | Read | Read | Read | Read | Read | Read | Full | None |
| Report ViewerRead-Only Stakeholder | Assigned Only | None | None | None | None | None | Full | Full | None | None |
Every security control is designed against SC Malaysia requirements for licensed trustee companies. Enforcement operates at the API layer, not just the user interface.
Conventional equity, Islamic Sukuk, and digital assets are managed through a unified interface with asset-class-specific workflows for each.
Most data is entered by the operations team or bulk-uploaded via CSV/Excel, which is standard practice for trustee back-office systems at this scale. Crypto valuations are already auto-priced via a live external feed; equity and banking integrations are phased next steps.