Services
AI, software and cloud as seven services that interlock.
Each service supports the others: data that AI can depend on, agents bounded by permissions, software your staff rely on daily, integrations that carry e-Invoices and orders without loss, a cloud base that runs it all, and architecture that keeps the pieces consistent.
For Malaysian organisations, including groups that work with Europe, that want one team answerable for the whole system.
01 How the services fit
How the seven services connect
An AI feature can only be as reliable as the data beneath it, the systems that surround it and the platform that hosts it. For that reason we do not sell AI, software and cloud as unrelated projects.
Because 2,400+ people work within one company, the engineers who design a retrieval layer also understand the ERP it reads and the landing zone it runs on. You can engage a single service; most programmes draw on several.
Five layers on a single path
- Data & AnalyticsOwned data products, written contracts, measured quality
- AI Engineering & GenAIRetrieval, model routing, testing and LLMOps
- AI Agents & AutomationNarrow tools, approval points, complete audit trails
- Enterprise Software & SaaSSaaS products and portals your team can own for years
- Cloud & Platform EngineeringLanding zones, paved routes, SRE and cost control
- Data & Analytics: Change capture and APIs for data
- AI Engineering & GenAI: Retrieval connectors that respect access rights
- AI Agents & Automation: Narrow tool APIs with limits
- Enterprise Software & SaaS: Module contracts and events
- Cloud & Platform Engineering: Gateways, identity and private links
- One path from data to production, and one team answerable for it.
- Integrations & APIs tie every layer to your current systems.
- Architecture & Consulting surrounds the entire system.
Select a layer to open its service page. Hovering or focusing shows where integration plugs in.
Read the diagram as text
A single vertical path crosses five layers. It opens with Data & Analytics, passes AI Engineering & GenAI, then AI Agents & Automation, then Enterprise Software & SaaS, and closes on Cloud & Platform Engineering, the base on which production workloads run.
To the side, Integrations & APIs runs top to bottom as a connector, tying each layer to your current systems. Data connects through change data capture and data APIs, AI through retrieval connectors, agents through tool APIs with tight scopes, software through contracts and events, and the cloud through gateways and identity.
Architecture & Consulting encloses the whole system and gives it direction through decisions, a target architecture and roadmaps.
02 Combinations
How programmes combine the services
Shapes of work we are often asked to take on, and the services each one needs. Scope is always set by the situation at hand.
| Example programme | AI | Agents | Data | Software | Cloud | Integration | Architecture |
|---|---|---|---|---|---|---|---|
| An assistant over company knowledgeCited answers from documents and business systems, with every source’s permissions carried through to the answer.Enterprise knowledge | Involved | Not used | Involved | Not used | Involved | Involved | Not used |
| Agents supporting service and case workAgents collect, draft and propose within CRM and case systems, while people approve whatever has consequences.Service assistance | Involved | Involved | Not used | Involved | Not used | Involved | Not used |
| Document intake and data extractionIncoming documents, from claim forms to supplier invoices, are classified, read and routed into the right system, with uncertain fields checked by a person.Document intelligence | Involved | Involved | Involved | Not used | Not used | Involved | Not used |
| Renewing a core applicationAn ageing core system retired capability by capability and rebuilt on a cloud base, with daily operations uninterrupted.Legacy modernisation | Not used | Not used | Involved | Involved | Involved | Involved | Involved |
| A cloud foundation for regulated workloadsLanding zone, hosting location policies, incident processes and exit plans for workloads that fall under the Risk Management in Technology (RMiT) policy document of Bank Negara Malaysia, the technology risk guidelines of the Securities Commission Malaysia or the Cyber Security Act 2024 (Act 854). | Not used | Not used | Not used | Not used | Involved | Involved | Involved |
An assistant over company knowledge
Cited answers from documents and business systems, with every source’s permissions carried through to the answer.
- AI Engineering & GenAI
- Data & Analytics
- Cloud & Platform Engineering
- Integrations & APIs
Agents supporting service and case work
Agents collect, draft and propose within CRM and case systems, while people approve whatever has consequences.
- AI Engineering & GenAI
- AI Agents & Automation
- Enterprise Software & SaaS
- Integrations & APIs
Document intake and data extraction
Incoming documents, from claim forms to supplier invoices, are classified, read and routed into the right system, with uncertain fields checked by a person.
- AI Engineering & GenAI
- AI Agents & Automation
- Data & Analytics
- Integrations & APIs
Renewing a core application
An ageing core system retired capability by capability and rebuilt on a cloud base, with daily operations uninterrupted.
- Data & Analytics
- Enterprise Software & SaaS
- Cloud & Platform Engineering
- Integrations & APIs
- Architecture & Consulting
A cloud foundation for regulated workloads
Landing zone, hosting location policies, incident processes and exit plans for workloads that fall under the Risk Management in Technology (RMiT) policy document of Bank Negara Malaysia, the technology risk guidelines of the Securities Commission Malaysia or the Cyber Security Act 2024 (Act 854).
- Cloud & Platform Engineering
- Integrations & APIs
- Architecture & Consulting
03 All services
Each service, grouped by focus
AI & data03
- AI Engineering & GenAI
Generative AI on your own documents and data: permission-aware retrieval, model choice you can reverse, and release gates based on measured quality.
- AI Agents & Automation
Agents and workflows that use only the permissions you grant, wait for approval before steps with consequences, and record every action.
- Data & Analytics
Lakehouse platforms, owned data products, rules for purpose and retention that the platform enforces, and dashboards people open every week.
Engineering03
- Enterprise Software & SaaS
SaaS products, portals and business applications built to be accessible and tested, and to stay in your hands for many years.
- Cloud & Platform Engineering
Landing zones, developer platforms, signed release pipelines and cost control, with the hosting location agreed per workload.
- Integrations & APIs
APIs, event-driven integration, identity, and connections to MyInvois and Peppol, with every flow assigned to an owner.
Advice01
- Architecture & Consulting
Estate reviews, AI readiness, target architectures and roadmaps that hold up under scrutiny, settled before the budget is committed.
See also
- Salesforce, SAP and OdooThe platforms we implement and integrate
- Our delivery approachUnderstand, design, build and operate
- Public sectorWhere our way of delivering was put to the test
Malaysia
Malaysian rules and EU rules in one design
Malaysian organisations now design around several dated obligations: the amendments to the Personal Data Protection Act 2010 (Act 709) in force since 2025, the Cyber Security Act 2024 (Act 854) in operation since 26 August 2024 for NCII entities, and e-Invoice through MyInvois, mandatory in phases up to 1 January 2026. Groups that sell into the EU or own companies there also meet the EU AI Act, NIS2 and the GDPR.
We design each service so that these requirements sit in configuration and well-bounded components rather than in separate systems for each jurisdiction. Our work for public authorities in EU Member States taught us to expect rules that change at a border, and to document every choice so an auditor can follow it.
- Personal Data Protection Act 2010 (PDPA)Personal Data Protection Act 2010 (Act 709), as amended by the Personal Data Protection (Amendment) Act 2024 (Act A1727): data protection officer, breach notification, data portability (opens external site)
- Cyber Security Act 2024Cyber Security Act 2024 (Act 854): National Critical Information Infrastructure duties and licensing of cyber security service providers, administered by NACSA (opens external site)
- Malaysian e-Invoice (MyInvois)Mandatory e-Invoice validated through MyInvois (IRBM), phased by annual turnover or revenue; businesses below RM3 million annual turnover or revenue are exempt (opens external site)
- EU AI ActArtificial Intelligence Act, Regulation (EU) 2024/1689 (opens external site)
- NIS2NIS2 Directive (EU) 2022/2555 (opens external site)
- GDPRGeneral Data Protection Regulation (EU) 2016/679 (opens external site)
Questions on our services
Is a single service enough to start with?
Yes. Many organisations begin with one, often an architecture review, a data foundation or a first AI use case. The broader team proves its value once the work reaches into systems, data or infrastructure beyond the original scope.
How do the services connect with SAP, Odoo and Salesforce?
These platforms already carry much of your day-to-day business. Our services plug AI, data and custom software into them, while our platform teams implement and extend them. FromNine holds partner status with all three (Salesforce Summit Partner, SAP Gold Partner, Odoo Gold Partner).
Who would work on our programme?
A team put together for the work, led by people who remain for its full length, with specialists from the other services brought in when a question calls for them.
How is information security handled?
FromNine is ISO/IEC 27001 certified. Before work begins, we agree what access to your systems and data the team needs, restrict it to that, and review it whenever the team changes.
Will you make us compliant with the PDPA, Act 854 or the EU AI Act?
We design with these rules in view and produce the technical evidence they call for: documentation, logs, access controls and incident processes, including records that support a breach notification under the Personal Data Protection Act 2010 (Act 709) or an incident notification under the Cyber Security Act 2024 (Act 854). Which obligations apply to you is a legal question for your counsel, and we supply the technical facts that counsel needs.
Begin with the problem, not with a service
Tell us what needs to change. We will name the services it calls for, the ones it can do without, and our proposed first step.