We are replacing skyrocketing online ad costs with mathematically verifiable word-of-mouth. Businesses acquire customers through trusted Connectors — paying only when a deal actually closes.
Digital advertising is fundamentally broken for high-ticket and B2B services. CAC has surged, while conversion rates plummet due to spam, ad-blockers, and zero-trust environments.
Digital advertising costs are skyrocketing. CTRs are collapsing. Businesses burn cash on clicks that never turn into real meetings. Every RM spent on cold ads is a gamble with no guarantee.
Word-of-mouth is the highest-converting channel globally, but it's unscalable and untrackable. Connectors refer clients with no system to prove the intro happened — and get cheated out of their commission.
Buyers hate having their contact details shared without consent. Phone numbers get scraped, sold, and spammed — causing immediate rejection of any cold outreach and damaging the connector's reputation.
"Word-of-Mouth already works. It just needs structure, privacy, and a cryptographic proof trail."
— The TrustLink thesis
A seamless, 4-step architecture that digitizes trust — from the first introduction to the verified payout.
A business lists a product, service, or partnership opportunity on TrustLink and sets a clear, guaranteed commission rule. The offer is locked cryptographically — the Connector knows exactly what they'll earn.
A Connector — a freelancer, community manager, or industry insider — recognises that someone in their network needs that exact service. The AI Match Agent helps surface the best offers for their network.
AI Match Agent (READ-ONLY)
"Based on your network profile, this IT consulting offer has a 94% fit score with your contact Ahmad — specialisation in legacy migration aligns."
Before a single detail is shared, TrustLink sends a private, encrypted consent request directly to the Buyer. No contact information is ever revealed to the business until the Buyer explicitly clicks "Accept".
Once consent is granted, the warm introduction is made. The built-in CRM pipeline tracks the deal as it progresses. When the transaction closes, the system validates the outcome and releases the commission automatically via ISO 20022 fiat transfer.
A perfectly aligned incentive model — every participant in the network wins.
Under the hood lives TrustLedger — a lightweight, cryptographically secure audit system. Think of it as an ultra-secure digital notary. The immutability of a blockchain, without cryptocurrencies, gas fees, or complex wallets.
React/Next.js communicating via versioned REST APIs. Device-level key management via Web Crypto API. No seed phrases.
RBAC/ABAC authorization, tenant isolation, business logic orchestration via Redis queues. Strict domain separation.
PostgreSQL for mutable state, profiles, and CRM data. Built with strict Row-Level Security (RLS) for multi-tenant isolation.
Separate append-only PostgreSQL databases generating SHA-256 hash chains and Merkle checkpoints verified by an independent Witness Domain.
Every major event — consent granted, meeting booked, deal won, commission paid — is stamped with a mathematical proof. Once recorded, no one (not even the business or an admin) can alter history or deny a referral happened.
It provides the proof, verification, and transparency of a blockchain — but without cryptocurrencies, tokens, gas fees, or complex crypto wallets. Pure cryptographic math, zero volatility.
Personal details are never stored on the ledger. It only stores secure mathematical "receipts" (HMAC-SHA-256 hashes) — making it fast, inexpensive, and compliant with Malaysia's PDPA and global GDPR standards.
How real-world events are securely anonymised, chained, and verified without a public blockchain.
To comply with PDPA, raw personal data (PII) is never written to the immutable ledger. Instead, the backend generates an HMAC-SHA-256 commitment using a secret tenant key.
Each event is serialised deterministically and links to the previous_event_hash — making it computationally impossible to insert, reorder, or delete events retroactively.
Events are batched into a Merkle Tree. The root hash is signed by the primary server (Ed25519) and sent to a totally independent Witness Domain — even if the main DB is compromised, the Witness signature cannot be forged.
Strict pipeline execution. Contact data is cryptographically locked until consent is explicitly granted.
Connector initiates intro. Contact is identified via opaque ID. No details shared with business yet.
System directly pings the Buyer with an encrypted consent request. Business is still completely blind to the contact's identity.
Buyer approves. Payload is decrypted and injected into the Provider's CRM. Ledger records the consent hash permanently.
Business engages the Buyer. Deal is tracked inside the CRM. All stage changes are logged as immutable ledger events.
Transaction validated. Smart rule triggers COMMISSION_APPROVED. Fiat payout is processed via ISO 20022 (pacs.008) and logged to TrustLedger.
No wallets. No seed phrases. No gas. Just a frictionless path to verified commerce.
Users authenticate via simple Email/Passkeys. Businesses undergo KYC background verification. Device-level cryptographic keys are generated silently in the browser's secure enclave via the Web Crypto API — no wallet setup required.
Connectors browse verified business offers. The AI Match Agent suggests best fits based on network context. The Connector sends a private consent request. No PII is shared with the business until the Buyer accepts.
The deal closes in the CRM. The system calculates the commission, records an immutable proof to the TrustLedger, and prepares the fiat payout using the global ISO 20022 banking standard — the same standard used by modern central banks.
Public blockchains suffer from fluctuating gas fees, slow consensus, and regulatory nightmares. TrustLink avoids all of that. Instead of a volatile utility token, TrustLedger secures the proof of the transaction mathematically, while processing the actual fiat payout using the ISO 20022 standard — the exact global financial messaging standard used by XRP, SWIFT, and modern central banks.
We do not use a single "God-mode" AI with unrestricted access. TrustLink uses domain-isolated, strictly scoped agents — each locked to their purpose.
Can Do
Cannot Do
Can Do
Cannot Do
Can Do
Cannot Do
How deletion requests are handled without breaking cryptographic integrity
When a user exercises their right to data deletion under Malaysia's PDPA (or GDPR), TrustLink executes a two-phase response that satisfies the law while preserving the mathematical integrity of the immutable Merkle chain.
Upon request, the backend immediately executes a hard delete (or cryptographic key-shredding) of the raw PII from the mutable PostgreSQL database. The user's name, phone, and contact details are permanently and irreversibly destroyed. No copies remain.
The payload_commitment (the HMAC-SHA-256 hash) remains in the TrustLedger. Because the raw data and tenant secret are required to reverse the hash, the data cannot be reconstructed — fulfilling PDPA requirements while keeping the Merkle chain mathematically valid and the audit trail intact.
Immutable event stream. Click any record to view the cryptographic receipt.
Select an event to view the immutable proof.
From Malaysia to the Global B2B Economy. Designed for Southeast Asia. Built for the world.
Malaysia offers the perfect launchpad. Its strict Personal Data Protection Act (PDPA) mirrors global GDPR standards, forcing world-class privacy compliance from day one — making every feature globally exportable.
Asian business culture is deeply anchored in high-trust network relationships (Guanxi/Networking). We digitise this existing behaviour first in Southeast Asia, capturing the multi-billion dollar ASEAN B2B service market.
Once unit economics are proven in SEA, the platform scales globally. The architecture is borderless — multi-currency, multi-language, ISO 20022-powered payouts work anywhere in the world. The total addressable market (TAM) for B2B customer acquisition exceeds $100 Billion globally.
TrustLink aligns completely with its users. We take a small platform fee (e.g. 2–5%) only when a transaction successfully closes and the commission is paid out. Zero revenue from failed deals. Zero cost for browsing or attempting.
Premium monthly subscriptions for large organisations requiring advanced CRM features, custom AI routing rules, dedicated API access, private community networks, and white-label deployments for their referral ecosystem.
Whether you're a business, connector, investor, or strategic partner — TrustLink is building the infrastructure for trusted B2B referrals in Southeast Asia and beyond.