One ERP-grade HCM + Operations system built for a multi-company group — from staff check-in, through each entity's own payroll & LHDN tax filing, to management decisions.
In a real group, the company that employs someone is not always the company that pays them. The system holds those as two separate facts — and every report knows which one it must follow.
| Follows the EMPLOYER (who they work for) | Follows the PAYER (who releases the money) |
|---|---|
| Org chart & reporting lines | Payslip letterhead + stamp & signature |
| Chat segregation between companies | Statutory contributions (EPF · SOCSO · EIS · PCB) |
| Employee directory & HR reports | LHDN forms — EA · E · CP39 · C.P.8D |
| Performance appraisal & tasks | Salary payment list + bank file (CSV) |
Every module shares one database & one API layer — app, web and PWA all see the same data.
Everything revolves around one core — the Laravel 12 REST API — so modules, mobile clients, and external systems all speak the same language.
| Service / Integration | Role in the platform | Type |
|---|---|---|
| Group Structure | Each entity carries its own name, SSM number, address, employer numbers, stamp & bank account — payslips and tax forms follow the paying entity | Platform |
| POS ↔ HCM | Operator mapping + POS sales feed → performance appraisal + auto-syncs new outlets into the geofence (daily cron) | Integration |
| AI Receipt OCR | Auto-fills amount / date / merchant on expense claims — AI-powered | AI |
| Local OCR (offline) | Free on-server OCR — fallback when AI is off / to keep data private | Free |
| AI Payslip Explainer | Explains each payslip in plain language — AI-powered | AI |
| Statutory + LHDN Engine | EPF·SOCSO·EIS·PCB (official Computerised method, validated) — computed per paying company | Compliance |
| Bank file (CSV) | Salary payment list ready to upload to the bank — one file per paying company | Finance |
| Firebase Cloud Messaging | Real-time push notifications to staff phones | Cloud SDK |
| OpenStreetMap + Leaflet | Live location map — free, no per-call fees | Map (free) |
| Device GPS / Geolocator | Attendance geofencing & field tracking | Native |
| WebView SSO Bridge | Opens web modules auto-logged-in inside the app (HMAC token) | Bridge |
| pdf.js (self-hosted) | Renders notice / payslip PDFs in-app — private | Viewer |
| Laravel Sanctum | API token authentication + SPA / PWA sessions | Auth |
| stancl/tenancy | Data isolation per company / tenant | Platform |
| App Store Connect + Google Play | Automated app build, review & distribution (iOS + Android) | Store |
Anti-fraud controls on every check-in, and an architecture aligned with Malaysian security & privacy standards.
| Standard | Platform approach |
|---|---|
| Malaysia PDPA | Designed to PDPA principles — consent, data minimisation, in-country hosting, published privacy policy |
| NACSA | Security practices aligned to NACSA guidelines (access control, audit, incident readiness) |
| ISO/IEC 27001 | Architecture following ISO 27001 best practices (access control, encryption, audit trails) |