YOONG MEI × PRISMA

Digital Ordering & Systems Engagement

A three-part plan to secure your IT estate, put your AI assistant into production, and replace manual order intake with login-free customer ordering that flows straight into your Planning System.

Prepared for
Yoong Mei Trading & Transport Sdn Bhd
Attention
Mr Max Theu
Prepared by
Prisma Technology Solution Sdn Bhd
Date
12 June 2026
Reference
YM-PROP-2026-01 · Scope Overview
Commercials
Quoted separately
1 · Executive Summary

Three scopes, each independently approved

Yoongmei runs a 40-year freight and transport operation — across both your FTL (full-truck-load) and LTL/groupage (loose-carton) divisions — on a capable in-house Planning System, but takes customer orders by hand: enquiries arrive by WhatsApp and a public web form, staff read and re-key each one into the Planning System, then re-key a second time into a separate ordering backend. The cost of manual intake is not just time — orders get missed, and a missed order is lost revenue and a customer who tries a competitor next.

Prisma proposes a three-part engagement, each part independently scoped and approved:

ScopeWhat you get
0 Systems Takeover & Security Your IT estate inventoried, secured, and documented in your name — essentials only
A AI WhatsApp Customer Service Assistant The assistant you've seen, fully managed in production — WhatsApp + website chat, 3 languages, answering customers 24/7
B Customer Ordering System Login-free customer ordering that flows straight into your Planning System — no re-keying, no missed orders
Each scope can be approved on its own. We recommend starting with Scope 0 + Scope A immediately, with Scope B beginning once the takeover audit informs the final build plan. Itemized pricing and payment schedules are provided in the accompanying quotation.
2 · The Problem, In Your Own Operation

Every order is typed twice, by hand

Two divisions, one intake problem

FTL
Full Truck Load — whole-lorry charter

One customer books the entire truck for their shipment. Fewer, larger jobs — pickup, drop-off, truck type and date drive the order.

LTL / Groupage
Less-Than-Truckload — loose-carton consolidation

Loose cartons from multiple customers consolidated into one truck. Many more bookings per truck, and more fields per booking — carton count, dimensions, weight — so far more re-keying.

Both divisions funnel through the same manual, free-text intake today. An order travels like this:

Customer
WhatsApp / web enquiry form
read & re-key by hand
Planning System
entered by your intake staff
manual entry
forward + re-key a SECOND time
Ordering backend
entered a second time by staff
manual entry
Driver dispatch

We looked at the live system. The public enquiry form drops every request into a single free-text box — pickup, drop-off, container size, cargo type, weight and date all mixed into one paragraph that a person must untangle for every order. Genuine freight enquiries sit buried among marketing spam, triaged by hand with a "replied" checkbox. It works because your people are diligent — but it does not scale, and it leaks orders.

Every step above that says "manual entry" is what this engagement removes.
3 · Scope 0

Systems Takeover & Security

2 weeks · essentials-first

You are taking ownership of your full IT estate from your previous developer — servers, cloud account, domains, and all the passwords. Before anything new is built, Prisma secures and documents what you already own. This scope is deliberately kept lean and essentials-first: it covers exactly what must be fixed before any build starts, nothing more.

We reviewed the handover package. In its current state, the access it contains is not safe to leave as-is — credentials are weak, reused, and were shared insecurely. Tightening this is the foundation everything else stands on.

What the handover contains

For transparency, this is the access that was passed over. Identifiers are masked here because this page is shared, and no passwords appear anywhere in this document:

CategoryWhat was received (masked)
Planning System adminnew.yoongmei.net/admin — administrator login + password
Servers ×5AWS EC2 (Singapore) — production 3.1.x.x, staging/email 18.138.x.x, production-system 13.213.x.x, staging-system 18.141.x.x, AutoCount Windows server 18.141.x.x (remote desktop)
SSH accessOne shared private key (issued 2016) used for all 4 Linux servers
AWS root accountdel•••••@gmail.com — the cloud account that controls all servers
Gmail masterSame del•••••@gmail.com mailbox; its two-factor seed was transmitted as an image file
Domains ×152 GoDaddy accounts (yoongmei•••, max•••) — yoongmei.com / .net / .sg, delsnap.com / .sg, 3000trucks.com + 9 more
Database portalsql.yoongmei.net — root database access, reachable from the public internet
FacebookPersonal profile + Business Manager (max•••@delsnap.com) — shared password
Apple DeveloperSame account and password — holds your App Store signing keys
Unidentified1 account on kaverio.com — purpose under investigation
Passwords are excluded from this document. Several are weak, reused across critical accounts, and were transmitted insecurely — which is exactly what Scope 0 items 0.2–0.4 fix.

What we'd fix on day one

Two items don't wait for the full sweep — they're exposed right now, so we'd close them first:

  • Your database is reachable from the public internet. The sql.yoongmei.net portal currently accepts connections from anyone, not only your own servers — we lock it down to your systems alone.
  • Your cloud-account recovery isn't fully in your control. The account that owns every server can today be recovered through access that isn't solely yours — we rebuild it so only you hold the keys.

Itemized deliverables

#ItemWhat's included
0.1Full estate inventory5 servers, cloud (AWS) account, 15 domains, social & developer accounts — one register of everything you own
0.2Credential security sweepRotate every password, enable two-factor authentication everywhere, rebuild cloud-account recovery so only you control it
0.3Access lockdownClose publicly-exposed database access, least-privilege per system, re-issue server keys (retire the shared decade-old key)
0.4Password manager handoverAll credentials secured in a proper password manager, handed to you with training
0.5DocumentationArchitecture + security baseline document, domain renewal/billing confirmation, plain-language handover doc — what you own, what's protected, what it costs to run
Why it's separate: this protects you whether or not you proceed with Scopes A and B. It is scoped standalone so the work is visible and accountable, not buried inside a build.
4 · Scope A

AI WhatsApp Customer Service Assistant

Go-live within 2–4 weeks of receiving your materials · fully managed service

A fully managed AI assistant on a dedicated WhatsApp number (1 free number included; up to 10 supported for branches/departments), answering customers 24/7 in 3 primary languages (English, Bahasa Malaysia, 中文 — Tamil/Vietnamese understood too). This is not a generic chatbot template: it is a production-grade AI engine already serving live businesses, customised to Yoongmei's services, rates, and coverage areas.

Setup — itemized inclusions

#Included in setupDetail
A.1WhatsApp provisioning1 free dedicated number + account setup, profile, connection (up to 9 more numbers at no extra setup cost)
A.2AI platform configuration & deployment4-tier intent classification (pattern → fuzzy → semantic → LLM), automatic language detection, prompt-injection protection, multi-provider AI failover
A.3Knowledge base compilationWe structure ALL your static info — services (FTL whole-lorry charter, LTL/groupage consolidation, LCL/FCL, cross-border), coverage & ports (Pasir Gudang, Tanjung Pelepas), rates guidance, FAQs, hours. You give raw materials; we do the rest
A.4Guided quotation collectionStructured 8-step workflow — name, pickup, delivery, commodity, quantity, weight, dimensions, billing — complete enquiry summary sent to your team. No detail missed
A.5Admin dashboard + team-leader oversightLive conversation monitor, staff-reply review with identity/timestamp, auto/manual mode control per conversation, searchable history, escalation queue with urgency detection
A.6Web channels (bonus)Embeddable website chat widget + standalone webchat page — included at no extra cost
A.7Testing, QA, go-live & trainingPlus full data export (CSV/JSON) on request after 6 months — already included, no exit fee

What it handles — and when it brings in your team

  • Service & coverage questions — which routes, ports and truck types you serve; FTL vs LTL; cross-border to Singapore.
  • Quotation requests — runs the guided 8-step collection and hands your team a complete, structured enquiry.
  • Shipment-status enquiries — once Scope B is live, a customer can ask "where's my order?" and get a real answer.
  • Company basics — operating hours, contact, billing details, common FAQs.
  • Brings in your team for — price negotiation, complaints, and anything it isn't confident about: it escalates with the full conversation attached, and never guesses.

What a customer conversation looks like

Illustrative mockup — exact replies are configured with you during setup (A.3–A.4). The assistant detects each customer's language automatically and runs the structured 8-step quotation flow.

Ongoing managed service

A monthly subscription covers everything needed to keep the assistant running and improving: a generous AI usage allowance (~5,000–10,000 conversations/month), managed hosting with 99.9% uptime, daily backups, knowledge-base updates whenever your information changes, proactive monitoring + priority support, and every upcoming feature included — voice in/out, OCR of delivery orders, Google Calendar & Gmail integration, scheduled messages, broadcast campaigns, weekly WhatsApp performance reports, customer contact database. The subscription begins only when the assistant is live with real customers.

Phased rollout (risk-free)

  • Phase 1 — Assisted: AI suggests, your team approves every reply. Zero risk of wrong answers reaching customers.
  • Phase 2 — Semi-autonomous: routine FAQs answered automatically; quotations, pricing and complaints still routed to staff.
  • Phase 3 — Full autonomous: AI handles the volume, your team handles the exceptions.

Why it beats hiring

Traditional staffAI assistant
Working hours8 hrs/day, 5–6 days24/365
Languages1–23, instantly
Simultaneous customers1–2Unlimited
MC / leave / training timeYesNever
ConsistencyVaries by mood/fatigueAlways consistent
Outcome: every WhatsApp enquiry answered instantly — even at 3 AM, on weekends, during Raya — reducing the load on your intake staff and ending lost leads. PDPA-compliant, with your data exportable and owned by you.
5 · Scope B

Customer Ordering System

10–14 weeks · phase-gated delivery

The core of the engagement: a login-free ordering experience for your customers that writes structured orders straight into your Planning System — eliminating both manual re-keys and the missed-order problem.

What your customers get

Place an order via WhatsApp or a one-tap link — no account, no password. Pickup, drop-off, container type, cargo and date captured as structured fields, not a free-text blob. Automatic status updates (received → dispatched → delivered).

Two ways to order — one system behind it

Your customers don't all work the same way, so ordering meets them where they are. Both channels capture the same structured fields, run the same validation, and land in the same staff review queue — you maintain one system, not two.

Channel 1
WhatsApp bot — just chat

Customers who live in WhatsApp simply message you. The bot collects each field in conversation, confirms the summary, and submits — no app to install, no form to hunt for.

Channel 2
One-tap web link — a clean form

Customers who prefer a form tap a shareable link (also embeddable on your website and Facebook page). Same fields, same validation, still no login.

Illustrative mockup — the WhatsApp ordering bot collects the same structured fields as the web form, confirms, then writes straight into your Planning System. Exact wording is configured with you in Phase B1.

What your staff get

Orders arrive already structured and validated in the Planning System. Your intake team moves from copy-typing to a quick review-and-approve screen. No second re-keying.

Built for what's next

Architected multi-tenant from day one, so the same platform can onboard a second fleet operator when you're ready to grow toward the 3000trucks vision — without a rebuild.

How an order will travel after Scope B

Customer
WhatsApp / one-tap link — no login, no password
structured fields, validated automatically
Planning System
order arrives complete — one-click review & approve by your intake staff
automatic
Driver dispatch + customer status updates
WhatsApp: received → dispatched → delivered

The order form, done right

Instead of one free-text box, every order starts with a service-type selector — FTL (whole lorry) or LTL/groupage (loose cartons) — and the form adapts: FTL asks for truck type and full-load details; LTL asks for carton count, dimensions, weight and consolidation handling. Every order captures structured fields: pickup point, drop-off point, container/truck type, cargo type, weight, and required date. The system validates each field as the customer fills it — an order cannot arrive incomplete. Repeat customers are recognised by phone number, so their company details pre-fill without any account or password.

order.yoongmei.com
✓ No account · no password needed
Service type
FTL — whole lorryLTL — loose cartons
Pickup point
Puchong, Selangor
Drop-off point
Singapore (cross-border)
Cartons
12
Weight
180 kg
Dimensions
40 × 40 × 60 cm
Date
18 Jun 2026
Phone (for status updates)
+60 1• ••• ••••
Submit order →
Illustrative mockup — final design confirmed in Phase B1. Choosing FTL switches the form to truck type and full-load fields; LTL shows carton count, dimensions and weight.

What your staff see

A review console lists every incoming order with its structured fields already in the Planning System. Staff approve clean orders in one click, edit the rare exception, and flag spam — instead of untangling paragraphs and typing each order twice. Nothing is dispatched without staff approval: automation does the typing, your people keep the judgment.

Incoming orders — review queuesynced to Planning System ✓
LTL
12 cartons · 180 kg — Puchong → Singapore
repeat customer · details pre-filled · 18 Jun
pending review ApproveEdit
FTL
40-ft trailer · full load — Pasir Gudang → Kuala Lumpur
truck type confirmed · 16 Jun
approved ✓ View
?
"Boost your website ranking…"
no valid route or cargo fields detected
filtered as spam
Illustrative mockup — final design confirmed in Phase B1.

Itemized modules (Phase B2 build)

#ModuleWhat it does
B2.1Customer ordering interfaceLogin-free ordering via WhatsApp bot and one-tap web link; service-type selector (FTL / LTL-groupage) with mode-specific structured fields; repeat-customer recognition by phone number
B2.2Planning System integration layerThe API endpoints your system doesn't expose today — order creation, customer lookup, status read/write — designed, built, and documented
B2.3Order validation engineField-level validation per service type (FTL: truck type, full-load details; LTL: carton count, dimensions, weight) plus locations and dates; incomplete or spam enquiries filtered before they reach staff
B2.4Intake hand-off automationThe double-entry between your two systems replaced by a single automated flow into the ordering backend
B2.5Staff review & override consoleOne screen to review, approve, edit, or reject incoming orders; full audit trail of who approved what
B2.6Customer status notificationsAutomatic WhatsApp updates at each stage: received → dispatched → delivered

Phased delivery

PhaseWeeksDeliverable
B1 — Discovery & Design2 UX prototype + integration spec + field dictionary, signed off with you; final channel form (WA bot vs link vs both) decided here
B2 — Build6–10 The 6 modules above, working and internally tested
B3 — Deploy & Handover2 Live in production; staff trained; documentation; 90-day warranty begins
Each phase is approved before the next begins — you see and sign off real progress at every gate.
6 · Integration & De-risking

Will it really connect to the system you already run?

It's the first question any owner should ask — because without a real connection to your Planning System, an ordering layer is just another inbox to re-key. Our answer isn't a promise; it's based on a hands-on, read-only walk through your live system on 12 June 2026. We looked before we quoted.

The whole idea, in one picture

Your customers — no login, no password
📱 WhatsApp bot
Order by chatting
🔗 One-tap web link
Order via a clean form
same structured order, validated automatically
Prisma Ordering Layer
Structured fields · field validation · spam filtered out · repeat-customer recognition · staff review & approve queue
4 connections we build into your system — the new "API"
1 · Create order 2 · Look up customer 3 · Read / update status 4 · Notify customer
Your Planning System — the TMS you already run
Enquiries → Delivery Orders → Logsheets → Invoices
Customers ⇄ AutoCount — existing sync, reused
↩  Status updates (received → dispatched → delivered) flow back to the customer on WhatsApp, automatically
Built & tested on your existing TESTING environment first — production is switched on only when you approve. Your live operation is never the test bed.
How the ordering layer sits in front of your Planning System. Nothing you run today is replaced — we add the connections that let orders flow in without re-keying.

What we found inside your Planning System

It isn't a thin order tool — it's a full Transport Management System ("YMTT ADMIN") that already runs your freight back-office end to end:

  • Enquiries → Delivery Orders → Logsheets → Invoices — the whole job lifecycle is already modelled in your system.
  • Customers records, plus a Customers ⇄ AutoCount sync that already mirrors customers into your accounting.
  • Drivers, Outsource Drivers and YM Lorries — your own fleet and subcontracted capacity, already tracked.
  • A separate TESTING environment running alongside the live system.

Why that's good news for the integration

What we foundWhat it means for the build
Your enquiry intake already exists and is public-facingScope B writes structured orders onto rails that are already there — we're not inventing your intake from zero.
An AutoCount customer sync already existsWe reuse your existing accounting bridge instead of building one. Less to build, and less that can go wrong on the finance side.
A separate TESTING environment existsWe build and prove the entire integration on a copy of your system. Production is switched on only after you sign off — your live operation is never the guinea pig.
Multi-fleet records are already presentThe platform can grow toward your 3000trucks vision without a rebuild.

The one piece that's genuinely new — and why it's everything

Your system doesn't yet expose a connection point ("API") for outside software to talk to it. So the core engineering task — and the single most important part of the whole engagement — is to build a small, documented set of connections directly into your existing system. Without these, the ordering layer cannot perform; with them, an order flows end-to-end with no re-keying. There are exactly four, and we already know what each must do:

ConnectionWhat it does
1 · Create orderA new customer order is written straight into your Planning System as a proper job record.
2 · Look up customerA returning customer is matched to their existing record, so their details pre-fill — no duplicate accounts.
3 · Read & update statusThe order's progress (received → dispatched → delivered) is read back from your system.
4 · Status notificationWhen the status changes in your system, the customer is updated automatically on WhatsApp.

These are defined, scoped tasks — designed and signed off with you in Phase B1 — not mysteries we discover mid-build. We mapped them first, not last, precisely because everything else depends on them.

How we de-risk it: every field on the new order form is mapped to a real field in your Delivery Order record before a line of integration code is written; the whole flow is built and tested against your existing TESTING environment; and production goes live only on your approval. Nothing is guessed, and your live operation is never the test bed.
7 · System Map

Inside your Planning System — a visual tour

These are real screens from your live YMTT Admin (its TESTING environment), captured during our walk-through. Customer names, phone numbers and emails are blacked out for privacy. They show what your system already does, where its boundary sits, and exactly where the new ordering layer plugs in — a reference for whoever builds it.

🔒 Privacy: every customer name, contact number and email in these screens has been masked (black bars) or blurred. No customer data is exposed on this page.
Screen 1 · the boundary
The whole system at a glance

The left-hand menu is the entire freight back-office: Enquiries, Delivery Orders, Insurance D/O, Logsheets, Petty Cash, Trip Expenses, Wages, Customers, Customers AutoCount, Invoices, Drivers, Outsource, YM Lorries. The new ordering layer sits in front of all this — it replaces none of it. The green TESTING banner is the safe copy we build and prove everything against.

YMTT Admin dashboard showing the full module navigation (system boundary), staff names redacted
Screen 2 · the problem
How orders arrive today

The public enquiry form drops every request into a single free-text "Info" box (blurred here), mixed in with marketing spam, across 19 pages. Staff read, untangle and re-key each one, ticking "Replied (By)" by hand. This manual, error-prone intake — where real orders get missed — is exactly what the ordering system removes.

Enquiries listing: 19 pages, identity columns blacked out, free-text Info column blurred, manual Replied checkbox
Screen 3 · what we write into
The structured job record (Delivery Order)

Every booking becomes a Delivery Order with these exact fields — Consignor / Consignee, Collect & Deliver points with state, multi-stop pickup/drop points, Pay-By / Debtor Code, and multi-item goods (Quantity, UOM, Description, M3, Weight, Unit Price, Freight, SST). The integration's "Create order" connection fills this form in automatically, instead of a person typing it. (Shown as a blank new-order form — no customer data.)

Create Delivery Order form showing all structured fields, blank, no customer data
Screen 4 · the bridge that already exists
Customers ⇄ AutoCount sync

The Customers AutoCount module already mirrors your customers into AutoCount, with per-customer invoices and quotations (136 pages of them) and one-click download. We reuse this existing bridge rather than build a new accounting integration — less to build, and far less that can go wrong on the finance side.

Customers AutoCount listing: 136 pages, branch/code/name blacked out, invoice and quotation counts visible
Together these four screens are the field-level map our build follows: the ordering layer reads and writes the same Customers, creates the same Delivery Orders, and reuses the same AutoCount sync. That is why we call the integration defined work, not guesswork — your future programmer can see exactly what connects to what.
8 · The Business Case

What manual intake costs you today

The price of typing every order by hand isn't only staff time — it's the orders that slip through, and the customers you never hear back from.

  • Every order is keyed twice — once into the Planning System, once into the ordering backend. Heaviest on the LTL/groupage side, where one truck carries many bookings.
  • Real orders get missed — genuine freight enquiries sit between SEO spam and cold outreach in the same inbox, triaged by hand with a "replied" checkbox. We saw it live. A missed order is a lost job and a customer who tries a competitor next.
  • After-hours enquiries wait — anything arriving at night, on weekends, or during festive closure sits unanswered until someone is back at a desk.
  • Intake knowledge sits with a few people — when your intake staff are on leave, the whole pipeline slows.

Before and after

Today — manualAfter this engagement
Times each order is typedTwice, by handZero — the structured order flows in; staff approve in one click
Enquiries answered after hoursWhen staff returnInstantly, 24/7, in 3 languages
Spam reaching intake staffAll of it, sorted by handFiltered out before it reaches them
Risk of a missed orderReal on every busy dayDesigned out — orders can't arrive incomplete or get lost in a free-text inbox
Adding a second fleet laterA new buildAlready supported — no rebuild

Intake effort per order — illustrative

Today — manual3 manual touches
Read & untangle free-text
Key into Planning System
Re-key into ordering backend
After this engagement1 quick touch
Review & approve
— order already structured & in the system —
Illustrative comparison of the work that touches each order: three manual touches become one. Your real volumes and times are measured together in Discovery (Phase B1).
If structured ordering saves your intake team even a few minutes on each booking — across two divisions and the volume you handle every month — the recovered hours add up to a meaningful share of a full-time role, before you even count the orders no longer missed. We'll measure your real numbers together in Discovery (Phase B1).

How we keep the investment manageable

  • Approve one scope at a time — each scope is priced and approved on its own. Start with the essentials and the assistant; add the ordering system when you're ready. You're never asked to commit to everything at once.
  • Your existing chatbot investment carries forward — it's folded into Scope A, not repurchased.
  • Grant & levy offsets — portions may qualify for Malaysian digitalisation grants (SME Corp / MSME Digital), and the staff-training component can be structured as an HRDF-claimable invoice to recover through your levy.
  • Build once, scale free — multi-tenant from day one, so growing later doesn't mean paying to rebuild.
Commercials: every line is itemized and costed in the accompanying quotation, so you can see exactly what each part is for and approve each on its own terms.
9 · Ownership & No Lock-in

Everything we build, you own

  • Your accounts, in your name — after Scope 0, every credential, domain and cloud account is yours, with recovery only you control. No dependence on a previous developer.
  • Your data, exportable any time — full export (CSV / JSON) on request, with no exit fee. The assistant's conversations and every order record belong to you.
  • PDPA-compliant — customer data is handled to Malaysian data-protection standards.
  • No hostage situation — documented architecture and a plain-language handover mean your own people, or another team, could run it. You stay with us because the service is good — not because you're trapped.
  • You only pay when it's earning — the assistant's monthly subscription starts only once it's live with real customers, and the ordering-system care plan is optional.
10 · Why Prisma

A local team that already knows your stack

  • Local Johor team, on-site with you already (visit 11 May 2026), chatbot demo live, handover received.
  • Proven delivery on comparable integration work — AutoCount migration + custom-module builds, AutoCount ⇄ warehouse-system integration, both delivered on milestone schedules.
  • We already understand your stack — we've walked the Planning System and the handover; the integration path is mapped, not guessed.
  • Optional: guidance on Malaysian digitalisation grants (SME Corp / MSME Digital) to offset part of this investment — discussed separately.
11 · Recommended Sequence

Recommended Sequence

WhenActivity
Week 1Approve Scope 0 + Scope A
Week 2–3Scope 0 — secure & document your systems
Week 2–5Scope A — assistant set up, knowledge base built, go-live
Week 4Scope B Phase 1 begins (informed by the audit)
Week 6–15Scope B — build → test → go-live
OngoingOptional care plan — hosting, support SLA, monitoring
12 · Next Steps

Next Steps

  1. Review this scope overview; we'll walk through any part together.
  2. Confirm which scopes to start with (our recommendation: 0 + A now).
  3. We provide the itemized quotation and engagement letter, and begin within the week of approval.
Commercials: itemized pricing and payment schedules for each scope are provided in the accompanying quotation, so you can approve each part on its own terms.