Pre-Seed  ·  Permission-Based Commerce  ·  Malaysia-First, World-Ready

The World's First
Permissioned Commerce
Network.

We are replacing skyrocketing online ad costs with mathematically verifiable word-of-mouth. Businesses acquire customers through trusted Connectors — paying only when a deal actually closes.

Warm intro conversion rate vs cold outreach
$100B+
Global B2B customer acquisition TAM
$0
Gas fees. Zero crypto tokens, zero volatility
PDPA
Compliant by design. Privacy-first architecture
Scroll to explore
The Customer Acquisition Crisis

The System Is Broken

Digital advertising is fundamentally broken for high-ticket and B2B services. CAC has surged, while conversion rates plummet due to spam, ad-blockers, and zero-trust environments.

Ads Are Broken

Digital advertising costs are skyrocketing. CTRs are collapsing. Businesses burn cash on clicks that never turn into real meetings. Every RM spent on cold ads is a gamble with no guarantee.

Lost Commissions

Word-of-mouth is the highest-converting channel globally, but it's unscalable and untrackable. Connectors refer clients with no system to prove the intro happened — and get cheated out of their commission.

Privacy Violations

Buyers hate having their contact details shared without consent. Phone numbers get scraped, sold, and spammed — causing immediate rejection of any cold outreach and damaging the connector's reputation.

"Word-of-Mouth already works. It just needs structure, privacy, and a cryptographic proof trail."

— The TrustLink thesis

How TrustLink Works

A seamless, 4-step architecture that digitizes trust — from the first introduction to the verified payout.

The Business Posts an Offer

A business lists a product, service, or partnership opportunity on TrustLink and sets a clear, guaranteed commission rule. The offer is locked cryptographically — the Connector knows exactly what they'll earn.

Example: "10% commission on any closed consulting deal above MYR 5,000"
  • Commission locked upfront — no disputes later
  • Business only pays on successful deal closure

The Connector Finds the Right Fit

A Connector — a freelancer, community manager, or industry insider — recognises that someone in their network needs that exact service. The AI Match Agent helps surface the best offers for their network.

AI Match Agent (READ-ONLY)

"Based on your network profile, this IT consulting offer has a 94% fit score with your contact Ahmad — specialisation in legacy migration aligns."

  • AI suggests matches — human Connector approves
  • Contact details are never exposed at this stage

Permission-First Introduction

Before a single detail is shared, TrustLink sends a private, encrypted consent request directly to the Buyer. No contact information is ever revealed to the business until the Buyer explicitly clicks "Accept".

"Ahmad — would you like an introduction to TechCorp Solutions for their cloud migration service? Your details will only be shared if you approve."
  • Consent is cryptographically recorded to TrustLedger
  • Buyer holds full control — deny or accept anytime

Tracked, Closed & Paid

Once consent is granted, the warm introduction is made. The built-in CRM pipeline tracks the deal as it progresses. When the transaction closes, the system validates the outcome and releases the commission automatically via ISO 20022 fiat transfer.

State:
WON & PAID
Protocol:
ISO-20022 (pacs.008)

What's In It For Everyone?

A perfectly aligned incentive model — every participant in the network wins.

For Businesses

  • Zero up-front CAC: Stop paying for clicks. Pay only for closed, verified revenue.
  • 4× Conversion Rate: Warm, permissioned intros close 4× more than cold leads.
  • Built-in CRM: Manage your entire referral pipeline from a single dashboard.
  • Tamper-proof attribution: Every intro is on the ledger — no disputes over who brought the lead.

For Connectors

  • Monetise your network: Turn industry knowledge and relationships into a passive income stream.
  • Guaranteed attribution: The cryptographic ledger proves you made the intro — businesses cannot steal the lead.
  • Protect your reputation: Only introduce people who explicitly want to be introduced.
  • Transparent earnings: See exactly what you've earned, pending, and when it pays out.

For Buyers

  • No more spam: Your phone number is never scraped, sold, or passed around without your consent.
  • Vetted recommendations: Receive high-quality introductions from people you actually know and trust.
  • Total control: You hold the keys to who can contact you. One click to accept or decline, any time.
  • PDPA protected: All interactions are governed by Malaysia's PDPA — your data rights are baked in.

The Secret Weapon: TrustLedger

Under the hood lives TrustLedger — a lightweight, cryptographically secure audit system. Think of it as an ultra-secure digital notary. The immutability of a blockchain, without cryptocurrencies, gas fees, or complex wallets.

Frontend Clients

React/Next.js communicating via versioned REST APIs. Device-level key management via Web Crypto API. No seed phrases.

Auth: Argon2id · Keys: Ed25519

API Backend (NestJS)

RBAC/ABAC authorization, tenant isolation, business logic orchestration via Redis queues. Strict domain separation.

NestJS · Redis · PostgreSQL

Operational DB

PostgreSQL for mutable state, profiles, and CRM data. Built with strict Row-Level Security (RLS) for multi-tenant isolation.

PostgreSQL · RLS · RBAC

TrustLedger + Witness

Separate append-only PostgreSQL databases generating SHA-256 hash chains and Merkle checkpoints verified by an independent Witness Domain.

Append-Only · Merkle · Ed25519

Tamper-Proof History

Every major event — consent granted, meeting booked, deal won, commission paid — is stamped with a mathematical proof. Once recorded, no one (not even the business or an admin) can alter history or deny a referral happened.

Zero Crypto Hassle

It provides the proof, verification, and transparency of a blockchain — but without cryptocurrencies, tokens, gas fees, or complex crypto wallets. Pure cryptographic math, zero volatility.

Privacy by Design

Personal details are never stored on the ledger. It only stores secure mathematical "receipts" (HMAC-SHA-256 hashes) — making it fast, inexpensive, and compliant with Malaysia's PDPA and global GDPR standards.

The Cryptographic Pipeline

How real-world events are securely anonymised, chained, and verified without a public blockchain.

A. Privacy-Preserving Payload Commitments

To comply with PDPA, raw personal data (PII) is never written to the immutable ledger. Instead, the backend generates an HMAC-SHA-256 commitment using a secret tenant key.

// 1. Operational data lives in PostgreSQL (mutable)
const pii_payload = { name: "Ahmad Razali", phone: "+6012345678" };

// 2. Cryptographic commitment written to TrustLedger
payload_commitment = HMAC-SHA-256(
  tenant_secret,
  canonical_json(pii_payload)
);

// Only THIS hash ever touches the ledger — no PII
"payload_hash": "a8f5f167f44f4964e6c998dee827110c..."

B. Canonical Serialisation & Hash Chaining

Each event is serialised deterministically and links to the previous_event_hash — making it computationally impossible to insert, reorder, or delete events retroactively.

// Canonical event object (deterministic)
{
  "event_id": "01HGW9J5M3...",
  "event_type": "CONSENT_ACCEPTED",
  "tenant_id": "ORG_00482",
  "payload_hash": "a8f5f167...",
  "previous_event_hash": "b2x99f3..." // Chain link
}

// Final Event Hash
event_hash = SHA-256(canonical_event_json);

C. Merkle Checkpoints & The Witness Domain

Events are batched into a Merkle Tree. The root hash is signed by the primary server (Ed25519) and sent to a totally independent Witness Domain — even if the main DB is compromised, the Witness signature cannot be forged.

// Checkpoint at witness.trustlink.my
{
  "tree_size": 184920,
  "merkle_root": "c4d32ae99f0183b...",
  "operator_signature": "base64(sign(root, primary_key))",
  "witness_signature": "base64(sign(root, witness_key))"
}

// Attacker who compromises the main DB
// CANNOT forge the independent Witness signature.

The Referral State Machine

Strict pipeline execution. Contact data is cryptographically locked until consent is explicitly granted.

STATE_1 : SUBMITTED

Connector initiates intro. Contact is identified via opaque ID. No details shared with business yet.

STATE_2 : CONSENT_REQUESTED

System directly pings the Buyer with an encrypted consent request. Business is still completely blind to the contact's identity.

STATE_3 : CONSENT_ACCEPTED

Buyer approves. Payload is decrypted and injected into the Provider's CRM. Ledger records the consent hash permanently.

STATE_4 : IN_PIPELINE

Business engages the Buyer. Deal is tracked inside the CRM. All stage changes are logged as immutable ledger events.

STATE_5 : WON & PAID

Transaction validated. Smart rule triggers COMMISSION_APPROVED. Fiat payout is processed via ISO 20022 (pacs.008) and logged to TrustLedger.

Web2 Usability · Web3 Cryptography

The Front-End Experience

No wallets. No seed phrases. No gas. Just a frictionless path to verified commerce.

1

Frictionless Onboarding

Users authenticate via simple Email/Passkeys. Businesses undergo KYC background verification. Device-level cryptographic keys are generated silently in the browser's secure enclave via the Web Crypto API — no wallet setup required.

Auth Method: Passkey / Email
Password Hash: Argon2id
Device Key: Ed25519 Gen
2

P2P Permissioned Match

Connectors browse verified business offers. The AI Match Agent suggests best fits based on network context. The Connector sends a private consent request. No PII is shared with the business until the Buyer accepts.

Consent Msg: Encrypted (E2E)
PII Status: Locked (HMAC)
State: CONSENT_PENDING
3

Monetisation & Settlement

The deal closes in the CRM. The system calculates the commission, records an immutable proof to the TrustLedger, and prepares the fiat payout using the global ISO 20022 banking standard — the same standard used by modern central banks.

Commission Rule: Auto-Calculated
Proof: TrustLedger Hash
Payment: ISO-20022 (pacs.008)
The Better-Than-Crypto Advantage

Bypassing Volatile Crypto with ISO 20022 Integration

Public blockchains suffer from fluctuating gas fees, slow consensus, and regulatory nightmares. TrustLink avoids all of that. Instead of a volatile utility token, TrustLedger secures the proof of the transaction mathematically, while processing the actual fiat payout using the ISO 20022 standard — the exact global financial messaging standard used by XRP, SWIFT, and modern central banks.

Zero Gas Fees No fluctuating network costs. Ever.
Fiat-Native Payouts Commissions paid directly to bank accounts.
Instant Finality No block confirmation delays.
PDPA Compliant PII is hashed. Never exposed on ledger.
pacs.008.001.08 · ISO 20022 Commission Transfer
<!-- Customer Credit Transfer Payload -->
<Document xmlns="urn:iso:std:iso:20022:tech:xsd:pacs.008">
  <FIToFICstmrCdtTrf>
    <GrpHdr>
      <MsgId>TL-PAY-849201</MsgId>
      <CreDtTm>2026-08-08T12:00:00Z</CreDtTm>
    </GrpHdr>
    <CdtTrfTxInf>
      <!-- 10% Commission Payout -->
      <IntrBkSttlmAmt Ccy="MYR">1250.00</IntrBkSttlmAmt>
      <RmtInf>
        <Ustrd>TrustLink Ref: 01HGW9J...</Ustrd>
      </RmtInf>
    </CdtTrfTxInf>
  </FIToFICstmrCdtTrf>
</Document>
Transaction Immutable. Funds Routing to Bank Account.

AI Orchestration & Governance

We do not use a single "God-mode" AI with unrestricted access. TrustLink uses domain-isolated, strictly scoped agents — each locked to their purpose.

Match Agent

Can Do

  • Rank offers and explain match reasons to Connectors
  • Suggest best-fit offers based on anonymous network signals

Cannot Do

  • Expose private relationship graph or PII data
  • Initiate referrals autonomously without human approval

Referral Agent

Can Do

  • Draft consent request messages and next-action recommendations
  • Summarise deal pipeline status for CRM review

Cannot Do

  • Send messages without explicit human permission
  • Access the Buyer's contact before consent is granted

Ledger Agent

Can Do

  • Verify event hashes, check Merkle proofs, generate audit reports
  • Confirm dispute resolution evidence for commission claims

Cannot Do

  • Mutate ledger history or regenerate historical signatures
  • Access raw PII — only hashes are visible

PDPA "Right to be Forgotten" Workflow

How deletion requests are handled without breaking cryptographic integrity

When a user exercises their right to data deletion under Malaysia's PDPA (or GDPR), TrustLink executes a two-phase response that satisfies the law while preserving the mathematical integrity of the immutable Merkle chain.

Phase 1 — Operational Scrubbing

Upon request, the backend immediately executes a hard delete (or cryptographic key-shredding) of the raw PII from the mutable PostgreSQL database. The user's name, phone, and contact details are permanently and irreversibly destroyed. No copies remain.

Phase 2 — Ledger Preservation

The payload_commitment (the HMAC-SHA-256 hash) remains in the TrustLedger. Because the raw data and tenant secret are required to reverse the hash, the data cannot be reconstructed — fulfilling PDPA requirements while keeping the Merkle chain mathematically valid and the audit trail intact.

✓ PDPA 2010 Compliant ✓ GDPR Aligned ✓ Audit Trail Preserved ✓ Merkle Integrity Unbroken

TrustLedger Live Explorer

Immutable event stream. Click any record to view the cryptographic receipt.

Witness Nodes: Syncing · 5 / 5 Finalized
Event Hash
Type
Age
Status

Cryptographic Receipt

Verified

Select an event to view the immutable proof.

The Market Strategy

From Malaysia to the Global B2B Economy. Designed for Southeast Asia. Built for the world.

Phase 1

Malaysia as the Sandbox

Malaysia offers the perfect launchpad. Its strict Personal Data Protection Act (PDPA) mirrors global GDPR standards, forcing world-class privacy compliance from day one — making every feature globally exportable.

Asian business culture is deeply anchored in high-trust network relationships (Guanxi/Networking). We digitise this existing behaviour first in Southeast Asia, capturing the multi-billion dollar ASEAN B2B service market.

IT Consulting Agritech B2B Legal Services Real Estate Finance & Fintech
Phase 2

Global Expansion

Once unit economics are proven in SEA, the platform scales globally. The architecture is borderless — multi-currency, multi-language, ISO 20022-powered payouts work anywhere in the world. The total addressable market (TAM) for B2B customer acquisition exceeds $100 Billion globally.

TAM (Global B2B CAC)$100B+
SEA ASEAN B2B Market$12B+
Conversion Uplift4× vs cold
MVP Development6-Month Rollout

1. Success-Based Transaction Fee

TrustLink aligns completely with its users. We take a small platform fee (e.g. 2–5%) only when a transaction successfully closes and the commission is paid out. Zero revenue from failed deals. Zero cost for browsing or attempting.

Revenue = (Commission Paid) × Platform Fee %

2. Enterprise SaaS Tiers

Premium monthly subscriptions for large organisations requiring advanced CRM features, custom AI routing rules, dedicated API access, private community networks, and white-label deployments for their referral ecosystem.

Starter · Growth · Enterprise · White-Label
Now accepting partners & early investors

Ready to build the future of
trusted commerce?

Whether you're a business, connector, investor, or strategic partner — TrustLink is building the infrastructure for trusted B2B referrals in Southeast Asia and beyond.

PDPA 2010 Compliant · ISO 20022 Enabled · Zero Gas Fees · Agentic AI Governed