The CRM your pharmacy group runs on.
The AI that answers your customers.

Clinical and dispensing

Patient records with masked identity card, allergies and chronic conditions; prescriptions with partial dispensing; and a dispense that advances the prescription, consumes the nearest expiry stock and writes the dispensing register in one transaction. A frozen schedule engine maps every Poisons Act 1952 class to its obligations.

• Controlled and Group B and C supplies are registered at the moment of dispensing, not written into a book afterwards
• A pharmacist whose annual practising certificate has expired is blocked from dispensing, by the system
• Partial dispensing is first class, so a patient can collect the balance later against the same prescription
• The schedule table is deliberately not configurable, because a branch manager should not be able to reclassify a poison

Compliance and the controlled register

A hash chained append only controlled substance ledger where each row seals the one before it, so a verification pass reports the first point of tampering. Alongside it sit product registration validity, outlet licence expiry, cold chain temperature logging with excursion detection, and electronic signature capture.

• A tamper evident digital replacement for the bound controlled drug register
• Warns you before an outlet licence or a product registration lapses, rather than at inspection
• Proves a fridge stayed in band, per device, with the excursions named
• Gives an inspector a verifiable chain instead of a spreadsheet anyone could edit

Recalls and batch trace

Raising a recall places a hold on that batch at every location at once, deliberately without moving any stock. Held batches drop out of the nearest expiry cursor and out of available to promise, so the lot becomes unsellable across the estate immediately. Trace then shows every sale and dispense that touched it.

• A supplier recall stops being forty phone calls to forty outlets
• The stock is blocked in seconds and only moves when someone disposes of it through the audited path
• Shows which patients received the batch, which is the part the notification letter needs
• Nothing can be sold or picked from a recalled lot, including online

Inventory command

The single chokepoint every stock movement passes through. Nothing changes a quantity without writing a movement row in the same transaction, and on hand figures are derived caches kept in step. Consumption is strictly nearest expiry first and skips anything pending quality control, expired or held.

• Every pack is tracked by batch and by expiry, so the till and the picker always take the nearest expiry lot
• Near expiry and dead stock surface while they can still be moved or returned
• A write off needs an approved adjustment with a reason code, never a silent edit
• Quarantined stock physically cannot be sold, dispensed or picked

Warehouse management

A location layer of zones, bins and allocations with task workflows over it: receiving, putaway by rule, wave picking generated nearest expiry first, packing, rolling cycle counts with variance approval, quality control holds and bin label printing.

• The distribution centre knows which shelf a batch is on, not just that the group holds it
• Counts are done rolling instead of shutting the warehouse for an annual stocktake
• Pickers are told the lot to take, so expiry discipline does not depend on who is on shift
• Bin allocations must sum to the batch quantity, and the system holds that invariant

Handheld terminal

A large target, offline tolerant surface for warehouse and outlet staff covering receive, putaway, pick, pack, count, transfer receipt, requisition and lookup. Work is queued locally and pushed through a sync queue that cannot double post.

• Shelf staff raise a shortage or receive a transfer from the aisle, with no desktop
• Keeps working through a dead spot in the stockroom and syncs when signal returns
• Each handheld carries its own key, so a lost device is revoked without touching anyone's login
• Device profiles restrict which modes a given terminal may use

Transfers and requisitions

An outlet raises a requisition, it becomes a transfer order, it is picked nearest expiry first, dispatched and received. Receipt posts the movement at the destination, and raises an inter company invoice in the same transaction when the two branches belong to different entities.

• Moves slow stock to the outlet that is actually selling it, instead of both ordering fresh
• Batch and expiry travel with the stock, so the receiving branch inherits the real dates
• The tax invoice that legally must follow a cross entity move is raised automatically

Replenishment and auto purchase orders

Par and reorder point scanning produces top up proposals, which become purchase orders dispatched to suppliers over WhatsApp, email or a supplier endpoint, with retries and a record of every attempt. Demand sizing is a spike capped average, so one unusual day does not inflate the buy.

• The reorder list writes and sends itself to the distributor
• A supplier replying confirm on WhatsApp advances the order, with no rekeying
• A single day rush does not turn into a month of overstock
• Every send attempt is recorded, so a lost order is provable rather than argued about

Procurement

Purchase orders raised against suppliers and dispatched as documents, supplier acknowledgement, goods received against a note capturing batch and expiry per line with exception handling, then purchase returns and supplier credit notes.

• The buyer can see whether the supplier actually confirmed, not just that an order was sent
• Batch and expiry are keyed once at the dock, which is what every downstream control depends on
• Short shipped, damaged or short dated goods go back with a credit note tied to the original order
• Poison schedule lines require a named approval on the order at any value

Supplier relationship management

Supplier master and contracts with credit limits and claim windows, contracted rate cards per line, request for quotation with comparison and award, price variance detection where a supplier bills above contract, delivery scorecards, three way match between order, invoice and receipt, and rebate accrual.

• Catches an invoice billed above the agreed rate so the money is claimed back rather than quietly paid
• Tells you which distributor is consistently late, short or expensive, with the figures behind it
• Three way match raises a payable or a hold, so nothing is paid against goods that never arrived
• Rebates and bill backs accrue as you buy instead of being reconstructed at year end

Optical character recognition intake

Photographs of supplier invoices, delivery orders and batch stickers are read, the table columns are learned per document because no two Malaysian distributors lay out a tax invoice the same way, and an arithmetic self check recomputes the line and document maths to catch a misread digit.

• Receiving clerks stop typing invoice lines, batch numbers and expiry dates by hand
• The arithmetic check catches an eight read as a three and repairs a single unknown figure
• Low confidence fields surface for review rather than being posted quietly
• Clerk corrections are captured, so the same supplier's layout reads better next time

Consignment

Supplier owned stock sits on the same ledger, flagged by owner. Receiving it raises no payable; the sale or dispense is the title event, accrued at the database in the same transaction as the movement. Company stock reservations cannot take a supplier lot.

• Hold a distributor's range on the shelf without paying for it until it sells
• Settlement statements show exactly what sold and is now owed
• The system cannot accidentally transfer out or reserve stock you do not own

Point of sale

Cashier shifts with cashbox declaration, and a sale that in one transaction writes the sale, the lines, the nearest expiry batch decrements, the ledger rows and the loyalty points, snapshotting cost at the moment of sale. Sales from a third party till can be ingested instead.

• Margin is real, because cost is frozen at the sale rather than recalculated later
• A scheduled poison sold at the till forces its dispensing register entry
• Shift and cashbox reconciliation happens per cashier, per day
• An existing till can feed the platform rather than being ripped out on day one

Online store and marketplaces

Orders arrive from your own store or a marketplace, are routed to a fulfilling branch, and move through paid, picking, packed, shipped and delivered. What is available to sell is read from real batch availability and pushed outward, and settlement files are reconciled against orders to find fee and payout gaps.

• Listings reflect stock that actually exists, rather than a number that went stale overnight
• Scheduled poisons are hard blocked from ever appearing on a marketplace
• Delivery orders are routed to the one outlet a rider can collect from
• Marketplace fees are reconciled, so a short payout is visible instead of absorbed

Commerce and landed cost

Vendor and channel price lists, blanket purchase agreements, unit of measure conversion, and landed cost runs that split freight and duty across the lines of a receipt and update the batch cost in one transaction.

• True cost per pack including freight and duty, so retail margin is not overstated on imported lines
• Channel price lists let a marketplace price differ from the counter price on purpose
• Buying in cartons and selling in strips is a conversion the system holds, not a mental calculation

Rehabilitation equipment rentals

A serialised asset register with a lifecycle running through available, reserved, rented, inspection and maintenance, branching to repair or retirement. Agreements carry daily, weekly and monthly rates, deposits and damage charges, with utilisation and return on investment reporting.

• Knows where every wheelchair, nebuliser and hospital bed is and who has it
• Flags the units due back, which is where rental businesses lose assets
• Shows whether a unit has earned back what it cost before you buy another

Members and points

Every points change writes an immutable event in the same transaction as the balance, by delta only, so the balance is the sum of its own history by construction. Around it sit tiers, a voucher catalogue with grants and redemptions, digital stamp cards, and member submitted receipt claims for missed points.

• A balance that can always be explained line by line to a member standing at the counter
• A missed scan is claimed by the member rather than argued with your cashier
• Stamp cards cover the repeat categories where points are too slow to feel like anything
• An invariant checker reports any member whose balance and history disagree

CRM and the shared inbox

A shared WhatsApp inbox with live updates, automatic replies that pause the moment a human takes over, helpdesk tickets, complaints, reviews, surveys and net promoter scoring, segments built on recency, frequency and value, multi step journeys, campaign sends, and a corporate accounts and deals pipeline.

• Customer enquiries land in one queue instead of on a staff member's personal phone
• Stock, price, generic and opening hour questions are answered without a pharmacist being interrupted
• Anything clinical is handed to a pharmacist rather than answered
• Corporate and panel accounts are worked as a pipeline alongside retail customers

Refill automation

A refill cadence configured per product drives an automated message carrying a tokenised link, and any order that follows is tied back to the automation run that prompted it.

• Chronic patients get a nudge before they run out, which is the difference between adherence and a lapse
• You can see which nudges actually produced a sale, not just how many were sent
• Cadence is per product, so a monthly medication and a quarterly one behave differently

Customer 360 and identity resolution

Fuses the points record, the CRM record and the identity graph into one timeline of purchases, conversations, dispenses, claims and consents, with duplicate merge and consent tracking.

• The pharmacist at the counter sees one customer, not four systems
• The same person under three phone numbers becomes one record with one history
• Consent status travels with the record, so a marketing send cannot reach someone who opted out

Alerts centre

A scanner that writes deduplicated alerts for near expiry, low stock, licence expiry and more, keyed per branch, with routing rules, escalation and per person subscriptions.

• Each outlet gets its own warnings rather than one head office list nobody reads
• An unactioned alert escalates instead of ageing quietly
• Near expiry warnings arrive while the stock can still be moved or returned

Business intelligence

Boards for executive, group performance, branch, warehouse, sales, margin and forecast, with slicers, drill down and export, over a governed reporting schema, plus an operations cockpit watching order ageing, quarantine, stock in transit and service level.

• Head office can rank outlets and see where margin is eroding, split by price, volume and mix
• Shows which branch is sitting on near expiry stock before it is written off
• Reporting comes off the same transactions that moved the stock, so it cannot disagree with itself

Management reporting

Written briefings composed from the reporting views: a daily briefing, a margin watch, an expiry action list and a branch ranking. The prose is assembled deterministically from your figures, with no language model involved.

• A morning briefing naming the branches and lines that need action today
• Every figure ties back to the ledger, because it was read from it rather than generated
• Saves a manager assembling the same four reports before every meeting

Demand forecast

Trend, weekday and moving average views over the sales ledger, with a buyer judgement step: a demand spike is flagged and capped, and the buyer can mark it as a real trend, which promotes the line onto a stock up list without sending an order.

• Separates a one day rush from a genuine multi outlet uptick
• The system never spends money on its own; promoting a trend is a buyer's decision
• A trend has to show across more than one outlet before it counts as one

Finance

Chart of accounts, double entry journals with posting and reversal, receivable invoices with ageing and follow up actions, payable bills, payments, and payroll posting to the ledger.

• Branch and company profit come from the same transactions that moved the stock, not a rekeyed monthly export
• Receivables age themselves and surface the follow ups
• A posting error is reversed on the record rather than edited away

Treasury and bank reconciliation

Bank accounts mapped to ledger cash accounts, imported statements, automatic and manual matching of lines to payments or journals, and a period reconciliation whose book balance ties to the ledger.

• Daily takings banked by each outlet are matched off against the bank feed
• A deposit that never arrived is visible the same week, not at year end
• The reconciled balance and the reported cash position are the same number

Panels and corporate accounts

A panel master with credit limits, and claims raised from completed counter sales with the split between panel and patient portion. Claims move through pending, approved, invoiced, statemented and paid, and a panel over its credit limit is blocked at claim creation.

• Tracks what each corporate and insurance panel owes you, and how old it is
• Stops serving a panel that has blown its credit limit, at the point of claim
• Claims are raised from the actual sale, so the line detail matches the till
• Submission to each administrator stays a human step; this is the tracking and ageing side

Electronic invoicing

A direct client for the national electronic invoice service, with per company authentication, batched submission, document generation and validation, code generation, status polling and mapped error codes. Counter sales are consolidated, including the seventy two hour rule.

• Meets the Malaysian electronic invoice mandate from the same sale records you already keep
• Walk in counter sales are consolidated and submitted monthly rather than one by one
• Rejections come back mapped to a readable reason instead of a raw code
• Runs against the sandbox until your credentials are in place, so nothing is submitted by accident

Franchise

Franchisee records mapped to branches, with royalty and levy statements computed per period directly off the sales table at each franchisee's contracted rate, plus brand audit scoring and standard operating procedure distribution.

• A royalty invoice derived from actual till sales rather than a self declared figure
• Brand audits are scored and comparable across the network
• Procedure updates reach every franchisee with a record of who received them

Human resources

Employees, attendance, leave with balances, payroll computing the statutory contributions and posting to the ledger, statutory file exports, sales commission rules, shift rostering, recruitment, training, reviews and disciplinary records.

• Rosters pharmacist coverage per outlet, which is a licensing requirement and not just a staffing one
• The practising certificate expiry held here is the same field the dispensing engine checks
• Payroll posts straight to the ledger, so labour cost per branch is real
• Commission is computed from the sales ledger rather than a separate spreadsheet

Approvals and governance

An approval matrix by amount band with separation of duties, and a personal approvals inbox spanning purchase orders, stock adjustments, leave and journals.

• Nobody writes off stock or commits spend above their band without a named approver
• Poison schedule lines require named approval on an order at any value
• The person who raises a document cannot be the person who approves it

Outlet communications

Head office broadcasts targeted at specific branches with acknowledgement tracking, plus recurring outlet checklists and their completions.

• Planogram changes, recall notices and procedure updates go out with a record of who read them
• Opening and closing checklists are completed on the record rather than on a clipboard
• You can see which outlet has not acknowledged a recall notice

Data migration and cutover

Legacy rows land in staging, are validated and deduplicated against live masters, and opening stock posts through the same controls as a normal receipt. A reconciliation gate ties staged against posted counts and opening value, and nothing goes live while a figure disagrees.

• Come off your incumbent system outlet by outlet instead of a single weekend switch
• Opening stock is proven to tie before go live, as a number rather than an assurance
• The estate can run part live and part legacy while the move is under way

Audit, access and configuration

A full audit trail on every changing action, sessions with lockout and second factor authentication, scoped keys for tills and handhelds, layered configuration by group, company and branch with provenance, document numbering and printable templates, and custom fields.

• Every price change, write off and refund carries a named actor and a timestamp
• A branch can override a group setting where it is allowed to, and you can see which level a value came from
• Thirteen roles, enforced on the server rather than by hiding a menu
• Receipts, payslips, orders and invoices print on your own numbering and templates