Proposed AI Governance Bill · PDPA (amended 2024) · AIGE principles
Your AI makes decisions. Can you explain them?
Malaysia is preparing its first AI Governance Bill (public consultation since July 2026), and the National AI Office's AIGE principles already call for transparency and accountability. DecisionCore gives every significant AI decision — credit, hiring, insurance, academic standing — a formal, auditable explanation in minutes, cited to your own policies and the rules that apply. Free to try. No credit card.
The Ministry of Digital began engagement and public consultation on the proposed AI Governance Bill in July 2026. Explanations you keep now are ready for it.
PDPA breach window
72 hours
Where a personal data breach causes or is likely to cause significant harm, the PDP Commissioner must be notified as soon as practicable and no later than 72 hours.
To get started
Free
3 full explanation reports per month at no cost. No credit card. No time limit.
Reference Scenario (illustrative) · HR Tech
Prisma Data Sdn Bhd (fictional)
Malaysian HR SaaS processing 1.2 million employee records monthly. Integrated DecisionCore for payroll exception explanations.
Malaysia has no dedicated AI law yet, but the direction is clear: a proposed AI Governance Bill under public consultation, the National AI Office's voluntary AIGE principles of transparency and accountability, and a PDPA that already governs the personal data your AI decides on.
Proposed AI Governance Bill
Explainable, accountable AI
The Ministry of Digital describes a risk-based framework, with governance responsibilities shared according to each party's role. The final requirements are still being consulted on — a reproducible explanation record for each significant decision is the practical way to be ready.
PDPA (Act 709, amended 2024)
DPO + 72-hour breach notification
Data controllers appoint a data protection officer and, where a personal data breach causes or is likely to cause significant harm, notify the PDP Commissioner as soon as practicable and no later than 72 hours. Clear records of how personal data was used make both easier.
What counts as a "Significant Decision"?
Loan & credit approval
Hiring & recruitment
Insurance underwriting
Academic standing
Benefits eligibility
Risk scoring
How it works
Three steps to a compliant explanation.
DecisionCore connects to your existing system via REST API or MCP. No retraining. No model replacement. One API call delivers a formal explanation report.
01
Send the decision
POST your decision and the subject context to the API. Works with any system — REST or MCP. Processed on TechnoNet's own servers in Kuala Lumpur — no third-party AI services.
DeepSeek R1 — a specialist chain-of-thought reasoning model — works through the applicable regulations and constructs a traceable explanation path. Every reasoning step is stored verbatim in your audit log.
A formal A4 PDF is returned — branded, signed with an Audit ID, citing specific regulatory provisions and the AI's full reasoning chain. Hand it to the subject or your compliance officer.
Every explanation is generated as a branded A4 PDF — decision banner, regulatory citations, XAI reasoning chain, and a plain-language rights notice. Audit-ready on arrival.
📋
Regulatory Citations
BGE-M3 embedding model matches your decision against a sovereign corpus of Malaysian rules and guidance — PDPA, FSA, BNM guidelines and the National AI Office's AIGE principles, with the proposed AI Governance Bill tracked as it develops. Exact provisions, not summaries.
🔒
Audit Trail with Retention
Every decision and explanation is written to an append-only PostgreSQL log with an Audit ID and a record fingerprint. The full record is kept for 12 months, then reduced to a verification record (Audit ID, date and fingerprint) kept for 7 years — so a saved report can still be verified.
🔗
MCP Integration
DecisionCore ships as an MCP server — natively callable from Claude and any MCP-compatible client. Check consent, log decisions, and report breaches without leaving your workflow.
✅
Granular Consent
Per-purpose consent widget — one toggle per data use, not a bundled "I Accept All." Withdrawals honoured instantly. Every consent state logged with timestamp, IP, and consent version.
🚨
72-hr Breach Detection
Automated agent monitors your application logs for breach indicators. Alerts the DPO to breach indicators, so any notification to the PDP Commissioner can be made within the 72-hour window, and logs every alert to the Sovereign Audit Log.
Pricing
Start free. Scale as you grow.
Every tier includes the full explanation pipeline, PDF reports, regulatory citations, and audit trail. No feature gating on the free tier — just volume.
Try it
Free
RM 0
3 complimentary explanations · no credit card
Full pipeline. Real PDF reports. No credit card. No time limit. The same engine your production system will use.
3 explanation reports to start
Full DeepSeek R1 reasoning
Regulatory citations (BGE-M3)
Audit trail included
REST API + MCP access
Developer
Starter
RM 50 + 8% SST
10 explanations · RM 5.00 each
For developers building compliance features into their applications. Top up any time without changing plans.
10 explanation reports
No expiry — use when needed
Full API access
Email support
Business
Growth
RM 200 + 8% SST
50 explanations · RM 4.00 each
For regular production use. 20% savings over Starter. Right for organisations running compliance workflows daily.
50 explanation reports
No expiry — use when needed
Full API + MCP access
Priority email support
Consent widget included
High volume
Scale
RM 500 + 8% SST
150 explanations · RM 3.33 each
For high-volume decision pipelines — financial services, insurance, HR tech. 33% savings. Includes breach detection agent.
150 explanation reports
No expiry — use when needed
Full stack — all 6 features
72-hr breach detection
Dedicated onboarding
Enterprise deployment (unlimited, sovereign node, white-label reports) — contact us for a quote. ·
Unused explanations never expire. ·
Top-up packs available without changing tier. ·
Free to Scale are hosted by TechnoNet in Kuala Lumpur; Enterprise runs on your own infrastructure.
FAQ
Common questions.
What exactly counts as a "Significant Decision"?
DecisionCore treats as a Significant Decision any automated or AI-assisted decision that has a material effect on an individual's rights, opportunities, or access to services. This includes loan and credit approvals, hiring and shortlisting, insurance underwriting, academic standing (pass, fail, probation, dismissal), benefits eligibility, and risk scoring. If your AI makes a yes/no decision about a person and that decision affects them — it is a Significant Decision.
Where does my data go, and how long is it kept?
On the Free to Scale tiers, DecisionCore is hosted by TechnoNet on our own servers in Kuala Lumpur, Malaysia. The reasoning model (DeepSeek R1), the embedding model (BGE-M3) and the regulatory corpus all run on our hardware via Ollama and Qdrant — no third-party AI service sees your data. Each explanation record is kept in full for 12 months, then reduced to a verification record (Audit ID, date and fingerprint) kept for 7 years; on account closure your records are deleted. You receive a full copy of every report to keep for as long as your own obligations require. Enterprise deployments run on a sovereign node on your own infrastructure, so no data leaves your network.
Does the free tier expire or have hidden limits?
No expiry and no hidden limits. The Free tier gives you 3 full explanation reports per month, permanently. The same DeepSeek R1 reasoning pipeline, the same PDF output, the same regulatory citations — nothing is stripped out. The only limit is volume. Contact us and we will issue your free API key within one business day.
Can it integrate with my existing system?
Yes. DecisionCore exposes a standard REST API (POST /explain for JSON, POST /explain/report for PDF download) and an MCP server for direct integration with Claude and MCP-compatible clients. Any system that can make an HTTP POST request can integrate in under an hour. The Implementation Guide covers Python, Node.js, and curl examples.
Start explaining your AI decisions today.
3 free explanation reports. No credit card. Hosted in Malaysia, no third-party AI.