Loan Document Review Agent

Strictly ConfidentialCredit decisionBanking secrecyCustomer PII+1High riskDocument Processing · BU Restricted · 640 runs / 30d

Checks SME loan application packs for completeness and consistency before they reach a credit officer. It extracts fields from the application form, SSM company documents, director MyKad copies and bank statements, cross-checks them against each other and the customer's records in the lakehouse, and drafts a completeness note with every discrepancy linked to its source page. It recommends; the credit officer decides.

Ownership and sensitivity

Owned by

Business Banking SME Lending

Accountable owner: Lim Wei Jie

Who approves access

Owner, SME Lending, Lim Wei Jie
Data Governance Office, Ahmad Faizal
Model Risk Management, Dr. Kavitha Subramaniam

In Credit decisioning (Tier 1)

Strictly Confidential

Customer-level data under banking secrecy and PDPA, and models that decide on customers.

Named-user entitlement with the data owner's consent and a stated purpose; reviewed on expiry.

Credit decision: Outputs feed a decision on a customer's credit; fairness and explainability tests apply.
Banking secrecy: Customer account information protected under the Financial Services Act 2013.
Customer PII: Contains or processes personal data about customers (PDPA 2010).
GenAI: Generates text; prompt screening for customer data and output review apply.

Tools

Document AI (mykad-kyc-extractor)
Document AI (trade-document-extractor)
BigQuery read (sme-portfolio-mart)
BigQuery read (loan-applications-history)
Gemini on Vertex AI (credit-memo-summariser)
Loan origination system: case note writer

Data access scope

Read-only: application packs in the credit officer's assigned queue
Read-only: existing facilities and conduct for the applicant in sme-portfolio-mart
Write: completeness notes to the loan origination case file only, never a credit decision
Document images are not retained after extraction completes

Guardrails

Confidence below 0.85 on any extracted field routes that field to the officer for manual check
The agent cannot approve, decline or change facility terms; it only drafts a completeness note
MyKad numbers and account numbers are masked in all logs and telemetry
Automatic halt if the SSM registration and the application disagree on company name or directors

Human-in-the-loop

Credit officer reviews every completeness note before the case moves to credit evaluation
Mandatory human review for new-to-bank applicants and any facility above MYR 5 million
Monthly sample of 5% of cases reviewed by Business Banking credit quality assurance

Orchestration

Every tool call is scoped by the declared data access above; the orchestrator cannot reach systems outside it. Owning business unit: Business Banking.

Live demo run

Watch the agent execute a real scenario step by step, every tool call, validation, and human checkpoint is traced and auditable. Typical run: ~12.0s.

Audit

Updated 2026-07-27. Run traces retained 24 months for audit under the platform governance policy.

Community · 1 thread

Questions, findings and requests from the business units that use this asset. Owners reply here; threads with upvotes surface to the owning team's inbox.

EA forms from small employers fail the completeness check

Tan Mei Yee · Group Risk Management · Consumer · 3 days ago

Applicants working for small employers often submit a salary letter instead of an EA form. The agent flags the bundle as incomplete, which is right by policy, but it is 30% of our manual-review queue. Can the agent accept a salary letter plus three months of statements as an alternative? #LoanOrigination #HumanInTheLoop