Settle claims faster.
Stop fraud before it pays out.

Run every claim, proposal and policy change as one governed case on Alfresco, catch edited evidence before payout, verify policies instantly through secure APIs, and close with a signed discharge, all on SLA and audit-ready.

Insurance case management, fraud detection, API security and e-signing

Policyholders judge an insurer at the moment of a claim. Crest connects the four things that decide that moment: a governed case for every claim and policy change, checks on the evidence, secure APIs to every system and partner, and a signature that closes the loop.

Case management

Claims settled on SLA

Every claim, proposal, endorsement, complaint and renewal runs as an Alfresco case with stages, SLAs and authority limits.

Document fraud detection

Edited evidence caught before payout

Repair invoices, medical bills and police reports are checked for tampering, with reasons, before money leaves.

API management & security

Kong secures every API behind portals, apps, agents and partners, so checks that took days happen in seconds.

Paperless signing

SignDex signs proposals, claim discharges and endorsements inside the case and files them as records.

Days → instant

customer policy verification at MNRB

Days → seconds

customer checks for a leading Malaysian insurer

insurance case types ready to configure, from claims to renewals
0
workflows automated on Alfresco Process Services for a digital bank
0 +

Results from Crest success stories. Case types from Crest’s insurance case management solution on Alfresco.

Insurance claims and case management on Alfresco

Stop running claims on email and spreadsheets. Each claim, proposal and policy change becomes one case with its stages, tasks, documents, SLAs and audit trail, so handlers know what to do next, managers see what is at risk, and auditors see every decision.

One workspace for every case

Case summary, work, documents, comments, communications, alerts and a unified audit trail in one screen, with Customer 360 and policy context alongside.

SLAs and authority built in

SLA targets per stage, such as claim triage in 4 hours or complaint acknowledgement in one business day, and settlement authority limits that route larger claims to the right approver.

Smart routing and document rules

Route motor, high-value and high-risk cases to the right queue automatically, and require the right evidence per case type, such as a claim form always and a police report when the event requires one.

Dashboards that show risk early

Due-today and at-risk views, team and saved views, and reports for operations, claims, underwriting, onboarding and KYC, and SLA attainment.

Privacy by design

Customer lists never show phone numbers or e-mail addresses; personal details stay masked until a user with permission reveals them, and every reveal can be audited.

Built on Alfresco

Alfresco Process Services runs each stage, Content Services holds documents, versions and renditions, and Governance Services applies retention and security marks. The workspace is built on Alfresco ADF.

Ready for regional teams

English, German and Japanese, light and dark themes, and a WCAG 2.2 AA accessibility target. Your policy administration system and CRM stay the source of truth for policies and customers.

Claims fraud detection that checks the evidence before payout

Inflated repair invoices, altered medical bills and doctored IDs cost insurers on every line of business. Document fraud detection checks each submitted document for tampering as it arrives in the claim, and sends anything suspicious to an assessor or straight to fraud review.

Check at first notice of loss

Screen invoices, medical bills, police reports and identity documents as soon as they are uploaded, not after the claim is approved.

Reasons, not just scores

Each flag explains what looks wrong, such as an edited amount or inconsistent dates, so assessors decide quickly and fairly.

Refer to fraud review in one step

Suspicious claims move to the fraud and investigation queue with the evidence and reasons attached to the case.

Powered by FinInsight AI: the same document fraud detection Crest provides to banks for payslips and statements, applied to claim evidence. Explore FinInsight AI

API management and security for insurers

Quotes, policy checks and claims now start in portals, apps, agent tools and partner platforms. Kong Enterprise puts one secure, observable gateway in front of your policy, claims and billing systems, so new digital services launch faster without widening the attack surface.

Instant answers for customers and agents

Real-time policy verification, pricing comparisons, purchase confirmations and digital claim submission, served through governed APIs.

Security on every call

OAuth 2.0, OpenID Connect, JWT and mTLS authentication, rate limits and threat protection, applied the same way by every team.

Less infrastructure to run

Offload routing, rate limiting and service discovery to the gateway, and publish APIs once through a developer portal for internal teams and partners.

“This used to take a matter of days. Now, with Kong, it’s instantaneous.” Head of DevOps, MNRB, on customer policy verification. Read the MNRB story

Electronic and digital signatures for insurance

Waiting for wet signatures on proposals and discharge forms keeps claims and policies open for days. SignDex adds a signing step to the case: route the document, verify the signer, seal the PDF and file it as a governed record.

Proposals, discharges and endorsements

Sign new-business proposals, claim discharge vouchers, endorsements and consents inside the same case workflow.

Identity matched to risk

Choose email, OTP, qualified eID or biometric and government ID checks per document type and value.

Evidence that stands up

PAdES-LTV signed PDFs backed by local certification authorities, tamper-evident with a timestamped audit trail, designed to align with Malaysia’s Digital Signature Act 1997 and Electronic Commerce Act 2006.

Insurance success stories

Insurers, takaful operators and reinsurers in Malaysia trust Crest Infosolutions to modernise the systems behind every policy and claim.

Reinsurance & takaful · Malaysia

MNRB verifies customer policies instantly with Kong

MNRB Holdings, whose subsidiaries work in reinsurance, retakaful and retail takaful, became API-first with Kong Gateway Enterprise, an API catalogue and developer portal, and OAuth2 and OIDC security.

  • Customer policy verification from days to near-instant
  • Real-time pricing comparisons, purchase confirmations and digital claim submission
  • Faster product delivery to five main platforms, with fewer extra servers and load balancers

Life insurance · Malaysia

A leading Malaysian insurer turns days into seconds

A Malaysian insurer known for online policy management and mobile-first claims replaced a traditional reverse proxy with a three-tier Kong Enterprise gateway, secured with JWT, OAuth2 and OIDC, and a developer portal.

  • Customer checks and system connections in seconds instead of days
  • Less reliance on costly hardware and legacy load balancers
  • Monitoring that catches issues before users do, with Crest managed services

Controls that support claims, data-protection and technology obligations

Show regulators and auditors how every claim was handled, who saw policyholder data and how every API and signature was secured.

Claims settlement

BNM RMiT

PDPA

Complaints handling

e-Signature acts

Audit & retention

Compliance depends on your policies, configuration, operating procedures and audits. These platforms provide controls and evidence that support your compliance programme.

Obligations banks plan for

In Malaysia, BNM’s Policy Document on Claims Settlement Practices (issued July 2024, in force January 2025) sets shorter motor and non-motor claim turnaround expectations for general insurers and takaful operators; BNM’s Risk Management in Technology policy shapes technology and cyber controls; the PDPA, amended in 2024, governs policyholder data; and the Digital Signature Act 1997 and Electronic Commerce Act 2006 cover electronic signing.

Where the controls sit

Alfresco case management: stage SLAs, authority limits, masked personal data, retention and a unified audit trail on every case. Document fraud detection: reasons and evidence for every flag. Kong: API authentication, rate limits and logs for the SOC. SignDex: tamper-evident, timestamped signing evidence filed with the case.

Insurance case management FAQs

Practical answers for claims, underwriting, operations and technology teams.

What is insurance case management?
Insurance case management runs every claim, new-business proposal, onboarding, endorsement, complaint and renewal as a case with its own stages, tasks, SLAs, documents and audit trail. On Alfresco, Process Services orchestrates the workflow, Content Services holds the evidence and Governance Services applies retention, so teams work in one place instead of chasing email and shared drives.

Each claim moves from first notice of loss through triage, assessment, approval and settlement with SLA timers, authority limits and routing rules built in. Missing documents are requested automatically, high-value or suspicious claims go straight to the right team, and the discharge is e-signed inside the case, so fewer claims stall and every decision is recorded.

Yes. Crest’s insurance case management models six case types: claims, new business, customer onboarding, endorsements, complaints and renewals, each with configurable stages, document rules, SLAs and authority matrices per product and market.

Document fraud detection checks repair invoices, medical bills, police reports and identity documents for signs of editing, anomalies in metadata and structure, and inconsistencies with the claim, before payout. Each flag comes with reasons, so assessors can clear, review or refer the claim to fraud review in one step.

Customer portals, apps, agents, brokers and bancassurance partners all call the same policy, claims and billing systems. Kong Enterprise authenticates every call with OAuth 2.0, OpenID Connect, JWT or mTLS, applies rate limits, logs traffic for the SOC and publishes partner APIs through a developer portal. MNRB cut customer policy verification from days to near-instant with Kong.

SignDex produces PAdES-LTV signed PDFs backed by local certification authorities, with a tamper-evident seal and a timestamped audit trail, and is designed to align with Malaysia’s Digital Signature Act 1997 and Electronic Commerce Act 2006. Proposal forms, claim discharge forms and endorsements are signed inside the case and filed as governed records. Your legal team decides the signature type each document needs.

Yes. The case workspace treats your policy administration system and CRM as the source of truth for policies and customers, and connects through REST APIs, typically published and secured through Kong, so there is no rip-and-replace of core systems.

Yes. Alfresco and Kong run on-premise, in a private or public cloud, or on Kubernetes, so policyholder data stays within your residency boundary. For document fraud detection and SignDex, Crest confirms the hosting model with you.

See your claims journey, end to end.

Bring one claim type and we’ll show it running as a case, with evidence checks, API calls and signing, in a 30-minute walkthrough.

Case management

Claims · underwriting · renewals

Document fraud

Invoices · bills · reports

API security

Kong · portals · partners

e-Signing

SignDex · proposals · discharges

Request a demo

Tell us what your organisation needs.

Opens your email application with a draft to review and send. Use the online contact form if you prefer.

Privacy Policy

Contact form image of Crest website

Let's Connect!

Request for information or schedule a solution demo.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.