GLOSSARY · 27 TERMS

Plain-English definitions, no legalese.

AI, compliance, and SEA-specific vocabulary used across ONSET. If we use a term without explaining it on a product page, the definition is here.

A2 TERM(S)

AI Employee

A module in ONSET that performs a single role end-to-end — receptionist, sales rep, debt collector, compliance officer. Each AI Employee has perception (a webhook), reasoning (an LLM), action (a tool call) and an escalation path.

ASP (e-Invoice)

Authorised Service Provider. An LHDN-listed party that may submit invoices to MyInvois on behalf of taxpayers. ONSET is an ASP.

B2 TERM(S)

Bahasa Melayu (BM)

Malay — Malaysia's national language. ONSET's modules generate native BM, not translated. Manglish (code-switched MY-English) is handled separately.

Bumi / Bumiputera

Malaysian Constitutional category. Relevant for some procurement and grants but never used as an AI decision factor in ONSET.

C5 TERM(S)

Cancel window

The 30-second human override on any outbound or financial action. An approver can cancel via Telegram before send. A core platform principle: humans decide, machines execute.

Class A/B/C change

Governance classification for AI modifications. A = behaviour-changing (model swap), B = cost-impacting, C = ops-only. Class A requires written owner approval.

Council (Layer 4)

The autonomous goal-directed meta-agent. Reginald gives Council a high-level goal — "onboard client X" — and it plans, calls modules as tools, self-corrects and reports.

Compliance monitor

Our PDPA oversight surface. Runs daily checks on consent expiry, retention, suppression integrity, and DPO threshold. Deterministic SQL — no LLM in the audit path.

Client-health monitor

Our customer-success oversight surface. Weekly per-tenant health, churn risk and upsell signals. Feeds Module N when an intervention is warranted.

D2 TERM(S)

DPO

Data Protection Officer. Mandatory under PDPA s.45A for data users handling ≥20,000 records. Need not be a lawyer, must be reachable in Malaysia.

DSR

Data Subject Request. A PDPA-empowered request from an individual: access, correction, withdrawal, erasure or portability of their personal data.

F2 TERM(S)

FPX

Financial Process Exchange. Malaysia's online banking payment rail. Real-time but not natively recurring — ONSET Module Z handles the workaround.

Finance monitor

Our finance-oversight surface. Daily MRR, gross profitability per client, and AI spend vs budget. Alerts when bundles trend toward unsustainable territory.

H2 TERM(S)

HRDF / HRD Corp

Human Resources Development Corporation. PSMB providers can offer HRDF-claimable training. Module AVT & Y are HRDF-aligned.

Health monitor

Our operational-health oversight surface. 15-minute checks across the platform's critical services. Auto-pauses any module above 20% error rate in a rolling 1-hour window.

L1 TERM(S)

LHDN

Lembaga Hasil Dalam Negeri — Malaysia's Inland Revenue Board. Operates MyInvois. Module E1 is the integration.

M4 TERM(S)

Manglish

Code-switched Malaysian English — "Can ah?", "Lah", "Where got". Module V detects and matches this register.

MCP

Model Context Protocol. The open standard for AI tools. ONSET currently exposes account-gated J/K/L/status tools for Claude Desktop, Cursor, and local MCP clients.

MSIC

Malaysia Standard Industrial Classification. Every line on a MyInvois submission needs a 5-digit MSIC 2008 code.

MyInvois

LHDN's e-Invoice portal + API. Phase 4 began 1 Jan 2027 with a penalty-free relaxation period; full enforcement begins 1 January 2028 (per LHDN Specific Guideline v4.7).

P1 TERM(S)

PDPA

Personal Data Protection Act 2010 (Malaysia). Amended 2024 with mandatory breach notification, DPO threshold, data portability.

Q2 TERM(S)

QA judge

A review profile that checks consequential or client-facing AI output for missing fields, tone fit, factuality risk, and hallucinated claims before delivery.

Quality monitor

Our output-quality oversight surface. Hourly sampling of AI responses across modules with 1-10 scoring. Regressions are flagged immediately.

R1 TERM(S)

RLS

Row-Level Security — a database feature enabled on every multi-tenant table. Ensures tenant A cannot read tenant B's rows even if the application logic has a bug.

S2 TERM(S)

SOC 2

AICPA security/availability/confidentiality framework. ONSET has Type I and is in Type II observation through Q4 2026.

SSM

Suruhanjaya Syarikat Malaysia — the Companies Commission. Every MY business has an SSM number. ONSET tenants are SSM-verified.

T1 TERM(S)

Task profile

The ONSET routing choice for a job type such as extraction, client writing, hard reasoning, long context, vision, or final QA. The provider and fallback model are selected centrally.