Bolehlah — Credit intelligence for cooperatives and licensed lenders

What we build

Bolehlah is a vertical SaaS platform delivered across five product tiers — from a foundational loan-management book to a full back-office bundle and enterprise tier. The platform is fronted by an agent persona named B, who operates inside WhatsApp and Telegram for borrower and operator conversations, and is mirrored through dedicated iOS, Android, and web surfaces for case management, underwriting, and portfolio intelligence. Every action B takes is logged into a hash-chained audit trail. Lenders plug their existing loan book into the platform and start talking to their data within hours rather than quarters.

Who it's for

Where we are today

The Founding 50 lenders program is open. Engineering: the platform is live at bolehlah.ai with 30+ feature surfaces shipped. Security posture: enforced CSP, WAF, hardened sessions, hash-chained audit trail, RE-hardening so no system prompt leaks into the client bundle, and per-session watermarks on every portal. iOS and Android apps are in active build on an Expo monorepo; store submission is gated on Apple Developer enrollment (in progress). eKYC: Innov8tif selected after a multi-vendor review; sandbox credentials incoming. Compliance: PDPA-aligned data handling with SOC 2 Type 1 on the roadmap.

Team

Founder-led from Kuala Lumpur, with a small engineering and BD team operating in the same time zone as our customers. Names available under NDA.

The 5-tier model

• Tier 1Loan Management Foundation
  RM 1,500/month
• Tier 2+ Loan Application Journey
  RM 3,500/month
• Tier 3+ Underwriting CopilotMost popular
  RM 6,500/month
• Tier 4+ Back-Office Bundle
  RM 12,500/month
• Tier 5Enterprise
  Talk to BD

Founding 50 lenders receive lifetime 50% off all tiers.

Security and compliance posture

• Hash-chained audit trail on every agent and operator action (Drizzle-backed, server-only).
• Field-level encryption helpers ready (AES-256-GCM) for sensitive fields.
• Row-level security migration drafted on Neon Postgres; per-tenant data isolation enforced at the app and database layers.
• Tier-2 step-up auth (password + TOTP, 30-minute idle expiry) on every elevated action.
• eKYC gate (Innov8tif-ready) on admin, client, and CI access from member accounts.
• Per-session portal watermark for screenshot-leak tracing.
• Shariah-flagged loans execute Tawarruq via Shoraka Al-Amin — the same DMCC TradeFlow-evidenced wholesale platform used by 14 Malaysian Islamic banks and 70+ cooperatives. Three e-certificates per AKAD attached to the audit trail.
• Source-of-truth runbooks in runbooks/: disaster recovery, incident response, secret rotation, and more.

Trust signals

• Operating from Kuala Lumpur, Malaysia — Lunar Flame Sdn Bhd (Co. No. 1361453-X, DUNS 473297787).
• Vendors selected: Innov8tif (eKYC), Shoraka Al-Amin (Shariah Tawarruq trading platform, ISRA Consulting-endorsed), Stripe (payments), Anthropic (AI), Vercel (infrastructure), Neon (Postgres), Google Workspace (operations).
• Shariah AKAD execution rides the same wholesale rails used by Maybank Islamic, CIMB Islamic, RHB Islamic, Public Islamic, Affin Islamic, MBSB, Kuwait Finance House, Bank Pembangunan, Bank Kerjasama Rakyat, Agrobank, MIDF Amanah, Kenanga, Exim, and Co-opBank Pertama.
• Provisional patents and trademark filings in progress.

Contact

BD inquiries

bd@bolehlah.ai

Investor inquiries

Talk to us →

WhatsApp / Telegram

via /contact

Mailing address

Level 13A, Wisma Mont Kiara, 1 Jalan Kiara, Mont Kiara, 50480 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia