A role-based portfolio monitoring and compliance platform built for SC Malaysia-licensed trustee companies. Unified oversight across conventional equity, Islamic Sukuk, and digital asset funds in a single self-hosted system.
| Fund ID | Type | NAV (MYR) | Status |
|---|---|---|---|
| MGF-01 | Equity | 142.1M | Active |
| SSF-02 | Sukuk | 83.6M | Active |
| QDET-03 | Digital | 21.6M | Watch |
Purpose-built for trustee back-office operations, covering daily data entry through regulatory reporting and audit compliance.
| 01 |
Core
Dashboard
|
Aggregate real-time view of all managed funds. AUM, NAV, open breach count, and YTD returns rendered per the user's role and assigned fund scope.
AUM / NAV Summary
Breach Alerts
Fund Drill-Down
Role-Filtered
|
|
| 02 |
Core
Portfolio Monitoring
|
Central module for fund management, holdings tracking, and transaction entry. Supports multi-fund switching with cross-tab fund filtering.
Multi-Fund Management
Holdings by Asset Class
Transaction Entry
Cross-Tab Filtering
|
|
| 03 |
Regulatory
Compliance
|
Rule-based breach detection against Trust Deed investment limits, concentration caps, and Shariah restrictions. Supports manual trigger and remediation workflow.
Breach Detection Engine
Remediation Workflow
Breach History
Shariah Rules
|
|
| 04 |
Asset Class
Fixed Income / Sukuk
|
Full instrument lifecycle for conventional bonds and Islamic Sukuk. Coupon and profit rate tracking, maturity scheduling, and Shariah-compliant instrument classification.
Sukuk Ijarah / Murabahah
Coupon / Profit Tracking
Maturity Alerts
Accrued Interest
|
|
| 05 |
Asset Class
Digital Assets
|
Institutional management of approved digital asset holdings. Multi-wallet support, on-chain transaction tracking, and price-as-of valuation with fund-level access scoping.
Multi-Wallet Support
On-Chain Transactions
Price-As-Of Valuation
Fund-Scoped Access
|
|
| 06 |
Asset Class
Cash and Deposits
|
Cash account and fixed deposit management across multiple banks. Tracks interest and Murabahah profit rates, maturity schedules, and deposit roll-over history.
Multi-Bank Accounts
Fixed Deposit Tracking
Murabahah Profit
Roll-Over History
|
|
| 07 |
Operations
Reconciliation
|
Match TPMS records against external custodian or fund manager statements. Surfaces discrepancies for review and maintains a full resolution history.
Statement Matching
Discrepancy Flagging
Resolution Workflow
Reconciliation History
|
|
| 08 |
Reporting
Reports
|
On-demand server-side report generation in XLSX, CSV, and branded PDF. Covers portfolio summary, holdings, transactions, compliance findings, fixed income, and cash deposits.
XLSX / CSV / PDF
Branded PDF Header
6 Report Types
Fund Filtered
|
|
| 09 |
Regulatory
Documents
|
Secure document repository for Trust Deeds, board resolutions, regulatory filings, and fund documents. Enforces SC Malaysia 7-year retention requirement with fund-level access scoping.
PDF / DOCX / XLSX
50 MB Per File
7-Year Retention
Fund-Level Scope
|
|
| 10 |
Regulatory
Audit Trail
|
Immutable log of every meaningful system action. Captures user identity, action type, affected entity, and timestamp. Read-only for auditor role. Minimum 7-year SC Malaysia retention enforced.
User + Action + Entity
Tamper-Evident
7-Year Retention
Filterable Search
|
|
| 11 |
Admin
Administration
|
User management, fund scope assignments, system configuration, demo environment, and database backup. All company identity fields are configurable without code changes.
6-Role User Management
Fund Assignments
MFA Enforcement
Backup / Restore
|
|
| 12 |
Auth
Authentication / MFA
|
TOTP multi-factor authentication via any RFC 6238 authenticator app. JWT access tokens with 15-minute expiry stored in memory, 7-day httpOnly refresh cookies, and configurable account lockout.
Google Authenticator
15-Min Access Token
Account Lockout
Forced Password Rotation
|
Role-based access enforced at both the API route level and the frontend router. Scoped users query only their assigned funds at the SQL layer, not just the UI.
| Role | Fund Visibility | Portfolio | Compliance | Fixed Income | Digital Assets | Cash | Reports | Documents | Audit Trail | Admin |
|---|---|---|---|---|---|---|---|---|---|---|
| Super AdminSystem Administrator | All Funds | Full | Full | Full | Full | Full | Full | Full | Full | Full |
| Trustee ManagerSenior Oversight | All Funds | Read | Read | Read | Read | Read | Full | Full | Read | None |
| Compliance OfficerRegulatory | All Funds | Read | Full | Read | Read | Read | Full | Full | Read | None |
| Operations StaffData Entry | Assigned Only | Full | None | Full | Full | Full | Full | Full | None | None |
| AuditorInternal / External | All Funds | Read | Read | Read | Read | Read | Read | Read | Full | None |
| Report ViewerRead-Only Stakeholder | Assigned Only | None | None | None | None | None | Full | Full | None | None |
Every security control is designed against SC Malaysia requirements for licensed trustee companies. Enforcement operates at the API layer, not just the user interface.
Conventional equity, Islamic Sukuk, and digital assets are managed through a unified interface with asset-class-specific workflows for each.
Data is currently entered by the operations team, which is standard practice for trustee back-office systems at this scale. The platform architecture supports external API integration as a phased next step.