Readinga company
Six steps take an SME's documents from upload to a report your team can check. Each step has one job, and one check that protects the result.
Walk the six steps| Document | Status | Uploaded |
|---|---|---|
| ssm-certificate.pdfSSM Document | Completed | 3 Mar 2026 |
| audited-fy2024.pdfAudited Report | Completed | 3 Mar 2026 |
| statement-jan-2026.pdfBank Statement | Completed | 4 Mar 2026 |
| statement-feb-2026.pdfBank Statement | Review | 4 Mar 2026 |
| beneficial-owners.pdfBeneficial Ownership | Completed | 4 Mar 2026 |
| ctos-report.pdfCTOS/CCRIS Report | Processing | 5 Mar 2026 |
Written for Decision-makers, Credit & risk, IT & compliance
Sample company, anonymised. Figures are illustrative; the rules are the product's.
Checked against the product source on 14 October 2026.
Think of it like this
Think of a careful librarian. Before a book is cited, they confirm it is the right book, by the right author, from the right year. SPOT does the same for every document and every figure.
Six steps, one check each
Every document goes through the same six steps on its way to a report. Each step has one job, and one check that protects the result. Pick a step to see both.
Upload
The SME drops in its PDFs.
The check. Each PDF is checked for scan quality before it is accepted. A scan below 72 DPI is refused and the SME is asked for a clearer copy, so a blurry statement never turns into a wrong number.
Recognise
SPOT reads and labels each file.
The check. Every file gets a document type: SSM certificate, audited report, bank statement, CTOS report, contract and more than 20 others. Nobody tags anything by hand.
Verify
Each file is matched to the SSM.
The check. The SSM certificate fixes who the company is. Every other document must match it by registration number or by name. A close-but-unsure name is sent back to the SME to confirm, and a document from a different company is kept out of the report.
Record
Every figure keeps its source.
The check. A figure keeps the document it came from and the period it describes. A 2022 report uploaded yesterday still counts as 2022 data; the newest upload never wins by default.
Analyse
SPOT writes each report section.
The check. Where the evidence is missing, SPOT writes “Data not available” instead of guessing. Eligibility ranges and product matches come from fixed rules, not from the AI.
Report
A report your team can defend.
The check. The report, the verdicts and the evidence behind them arrive together, with each source document one click away.
Unreadable files stop at the door
A wrong number usually starts as a bad scan. Before a PDF is accepted, SPOT checks the resolution of its first page. Below 72 DPI the scan is refused and the SME is asked for a clearer copy. A scan that is readable but soft gets a warning, and the SME decides whether to upload it anyway.
Too soft to read
Under 72 DPI
Refused
Readable, but soft
72 to 99 DPI
Warned
Clear enough
100+ DPI
Goes through
Every document must name the company
The SSM certificate is uploaded first and fixes who the company is. Every financing document after it is compared against that identity. Only documents that pass feed the report.
Sample Foods Sdn. Bhd.
The SSM name, fixed by ssm-certificate.pdf
The same check holds for a sole proprietor's three months of statements and a Sdn Bhd's audited report. The SSM identity anchor explains the full set of match rules.
Sample Foods Sdn. Bhd.
Named in statement-jan-2026.pdf
Matches your company
Sample Food Sdn. Bhd.
Named in statement-feb-2026.pdf
Held for confirmation
Sample Holdings Sdn. Bhd.
Named in statement-dec-2025.pdf
Removed
The two rules behind every step
A figure is only worth reading if it belongs to this company and describes the right year. Every step applies both rules, and each shows its work.
Right company
The SSM certificate fixes the company's identity, and every other document has to match it. Documents from a different entity are kept out.
Company number
201401000000
Read from ssm-certificate.pdf, uploaded 3 Mar 2026, for Sample Foods Sdn. Bhd. Also written 1000000-X, the old format.
Right period
A figure is only as useful as the date it describes. SPOT records each figure with the period it covers and the document it came from, so last year's accounts are never mistaken for this year's just because they were uploaded recently.
2024
RM 4,200,000
Revenue. Read from the FY2024 audited report.
2023
RM 3,650,000
Revenue. Read from the 2023 column of the FY2024 report. No FY2023 audited report was uploaded, so the comparative column stands in. Upload one and its own figure replaces this.
Both read from audited-fy2024.pdf, uploaded 3 Mar 2026. The upload date sets neither year.
Missing evidence stays missing
When the documents do not support a field, the report says Data not available. It does not estimate, borrow from another company or fill the gap with a plausible guess.
Number of Employees
Data not available
In this sample no upload states headcount. Only a statutory contribution statement does: EPF Contribution, SOCSO Contribution or HRDC Levy.
Identity Snapshot
- Nature of Business
- Manufacture of sauces and condiments
- Industry Sector
- Manufacturing
- Domiciled Country
- Malaysia
- Shareholders Capital (MYR)
- RM 500,000
For a credit team, a visible gap is a question to ask; an invented number is a risk nobody sees.
What it does not do
SPOT works from the documents the SME provides, so a report is only as complete as the documents behind it. Where they are thin, the report says so.
An excerpt of a Full SPOT identity snapshot where no document states headcount. Sample company, anonymised.
What the SME does
From your referral link to a finished report, an SME makes six stops. Each stop has one check that keeps the result trustworthy.
Continue to What the SME does