Discover hard-coded and leaked secrets across code repositories, CI/CD, cloud storage and chat; govern non-human identities (NHI) and AI agents; remediate and rotate credentials into your vault.
Connect CRM, iVerifier eKYC, billing and provisioning through connector packs and event-driven triggers, with retries and replay.
Expose SOAP and legacy systems such as AS/400 as secure REST APIs, without rewriting them.
Catalogue services in Service Hub, version APIs, manage gateway configuration with GitOps, and publish TM Forum Open API-based and GSMA Open Gateway (CAMARA) services consistently.
Security classifications on top of permissions, role-based access, and a comprehensive audit trail for every view, change and download.
Declare records and apply retention with Alfresco Governance Services, and find content fast with full-text and AI-assisted search.
Ingest email, portals and Microsoft Office documents, and scan paper with ABBYY OCR and intelligent document processing.
Connect CRM, ERP, OSS/BSS, iVerifier and low-code apps through REST APIs, so documents and verified eKYC evidence stay with the customer, contract or site they belong to.
Run on-premise, in a private cloud or on Kubernetes in AWS (EKS), Azure (AKS), Red Hat OpenShift or SUSE Rancher, with S3-compatible object storage.
Give teams DigiWorks, Crest’s GenAI-enabled digital workspace for Alfresco, and add Fasoo digital rights management for files that leave the repository.
Customer onboarding and eKYC evidence
Network site and tower lease documents
Dealer and partner onboarding
Invoice and finance approvals
Procurement-to-contract approvals
Legal case files
Contract repository and renewals
Regulatory submissions
Proven in regulated industries: a Singapore digital bank automated more than 100 workflows on Alfresco Process Services, and a Malaysian regulator cut process turnaround from weeks to days. Digital bank story · Regulator story
HashiCorp’s self-hosted HCP Terraform: reusable modules in a private registry, policy as code with Sentinel or OPA, SAML SSO and audit logging for every change.
Centralise secrets, issue dynamic database and cloud credentials, run PKI and encryption as a service, and rotate credentials automatically, with namespaces, replication and HSM support.
Discover hard-coded and leaked secrets across code repositories, CI/CD, cloud storage and chat; govern non-human identities (NHI) and AI agents; remediate and rotate credentials into your vault.
Proven in regulated industries: a Singapore digital bank automated more than 100 workflows on Alfresco Process Services, and a Malaysian regulator cut process turnaround from weeks to days. Digital bank story · Regulator story
Policy checks run on every Terraform plan, so teams self-serve within approved patterns instead of waiting on tickets.
Vault leases expire automatically and can be revoked at once if a workload is compromised. Keep integration secrets, such as iVerifier API keys and webhook signing keys, in Vault too.
StackGuard inventories API keys, service accounts and tokens with owners and permissions, and flags orphaned accounts.
Change history from Terraform, access logs from Vault and remediation records from StackGuard support PCI DSS, ISO 27001 and data-protection audits.
Hyland Solution Builder Partner of the Year for Alfresco
Kong partner for API and microservices platforms
A MAS-licensed digital bank runs onboarding, loan origination, complaints and internal operations on Alfresco Process Services on AWS.
BPMN workflows for licensing, case handling and approvals, with records classification, retention and audit on one Alfresco platform.
Plan customer-data protection, identity verification, cyber-security obligations and audit evidence together across service, channel and platform changes.
Compliance depends on your policies, configuration, operating procedures and audits. These platforms provide controls and evidence that support your compliance programme.
Personal-data laws such as the PDPA in Malaysia and Singapore and Indonesia’s Personal Data Protection Law govern customer records; Malaysia’s 2024 PDPA amendments add biometric data to sensitive personal data, which matters for eKYC selfies. SIM registration and KYC rules, including national digital ID where mandated, apply to subscriber onboarding. Critical telecom infrastructure also falls under national cyber-security regimes, such as Malaysia’s Cyber Security Act 2024 and IMDA’s Telecommunication Cybersecurity Code of Practice in Singapore.
API gateway: authentication, access policy and logging for every API that touches customer data. Alfresco: classification, access control, audit and retention for KYC, legal and contract documents. Vault and StackGuard: credential hygiene, encryption keys and rotation. Terraform: reviewed, policy-checked infrastructure change. iVerifier: session-scoped, signed verdicts with reviewable evidence for KYC audits. iRetailOS: role-based access and audit-ready logs.
Each solution area can start as a focused pilot with measurable outcomes before it expands across the network.
Pick the journey, identity check, API product, document process or platform to start with; agree success measures such as waiting time, verification time, API latency, approval cycle time or secrets found.
Go live in one or two service centres, add eKYC to one journey such as SIM replacement, publish the first secured API product, automate one BPMN workflow, or onboard one platform team to Terraform and Vault.
Roll out across regions and channels, add journeys and APIs, and hand over runbooks, dashboards and support from Crest.
Book a 2–3 hour workshop for the area that matters most this year: customer service, customer identity, digital channels, paperless operations or platform security.
Practical answers for CX, digital, operations and platform teams.
A telecom queue management system organises how customers book, arrive, wait and are served in telco stores and service centres. iRetailOS unifies appointments, walk-ins and virtual waiting, routes each customer to the right counter and skill, and measures every journey from arrival to outcome.
Customers join the queue from the app, web or a kiosk and wait wherever they like, with live position and predicted wait. Fewer people crowd the store, waits feel shorter, and supervisors see abandonment by branch and journey so they can act before customers walk away.
Yes. Leaders see average and predicted waiting time, SLA risk, abandonment, staff utilisation and a satisfaction index from post-visit feedback, for every service centre, journey and hour, in one dashboard.
Your app, store tablet or dealer app makes three API calls to start a hosted capture session. The customer captures the front and back of their ID, a hologram tilt and a selfie; iVerifier runs document OCR, face match and passive liveness, then returns a signed verdict to your CRM or provisioning system by webhook, with polling as a fallback, usually within seconds.
No. Where a national digital ID is mandated, such as MyDigital ID for prepaid SIM registration in Malaysia, follow that requirement. iVerifier covers the other journeys that need document and biometric evidence, such as SIM replacement, postpaid and device-financing onboarding, account recovery and dealer onboarding.
Websites, self-care apps, dealers and partners all call the same billing, CRM and provisioning systems. An API gateway such as Kong authenticates every call, applies rate limits and threat protection, and logs traffic in one place, so new digital services launch faster without exposing the core.
Yes. CAMARA is the open-source project, run by the Linux Foundation with the GSMA, that defines the network APIs behind GSMA Open Gateway, such as SIM Swap, Number Verification and Device Location. Kong can secure, meter and publish those APIs, alongside TM Forum Open API-based services, to developers and aggregators through its developer portal.
Yes. Alfresco Content Services provides the repository, Alfresco Process Services runs BPMN 2.0 workflows for approvals, and Governance Services applies retention. Crest migrates content and metadata from legacy systems and integrates CRM, ERP and OSS/BSS through REST APIs.
Terraform Enterprise provisions infrastructure from reviewed code with policy checks. Vault Enterprise issues short-lived credentials and certificates to the applications and pipelines Terraform deploys. StackGuard finds secrets that have leaked into code, pipelines or chat, then helps remediate and rotate them into Vault.
Kong, Alfresco, Terraform Enterprise and Vault Enterprise support on-premise, private-cloud, public-cloud and Kubernetes deployments. For iRetailOS and iVerifier, Crest confirms the hosting model with you. Crest designs the architecture around your data-residency, security and availability requirements.
Tell us where you want to start, and we’ll bring a plan, a demo and a pilot scope.
Talk to Crest about queue management for your service centres, eKYC for onboarding and SIM replacement, API security for your digital channels, paperless operations on Alfresco, or infrastructure and secrets automation.
Queue management and customer satisfaction
iVerifier eKYC: OCR, face match and liveness
API gateway, API security and partner portal
Alfresco ECM, BPMN 2.0 and document security
Terraform, Vault and StackGuard
Tell us what your organisation needs.
Opens your email application with a draft to review and send. Use the online contact form if you prefer.
Request for information or schedule a solution demo.