About

Built to the standards of regulated environments

Maandoh was founded by James Ma, who has more than 15 years in banking, payments and security. How every engagement is run, from fixed scope to a documented handover, comes from that experience.

James Ma, founder of Maandoh

Founder

James Ma

James founded Maandoh because regulated AI is as much a security and controls problem as a model problem. He has spent more than 15 years on that side of it: defensive coding, cybersecurity and fintech across banking, payments, credit card processing and startups, leading global teams that delivered secure, scalable platforms.

He was part of the core engineering teams that launched Fundsupermart, Shopee and Trust Bank Singapore, and mentors underrepresented tech talent through the CodeDay Labs programme.

Book a 30-minute call LinkedIn

What this means for you

What you get from working with Maandoh

A named, accountable lead

Every engagement has one named lead who is accountable from the first call to handover, so you always know who to ask.

Security built in

Secure coding, OWASP and CIS Benchmarks are the starting point, not an afterthought, and your data stays inside your boundary.

Shaped by regulated work

The approach comes from years in banking, payments and card processing, so questions about audit trails, access and third parties are expected, not new.

Clear terms

Scope, price and deliverables are written down before work starts, and we say so when something is outside what we can do.

Continuity: what happens if we are not there

For a regulated organisation, dependency on a supplier is a fair thing to examine. This is how each engagement is set up so that your team does not depend on Maandoh to keep running:

  • The system runs on your hardware and does not need Maandoh to keep operating.
  • You receive written documentation and a handover so your team can run and review it.
  • The regulation pack is delivered as files you keep.
  • Scope, price and deliverables are fixed in writing before work starts.

Documentation and a handover session are included in every engagement.

Credentials

The experience behind that

Experience

  • Banking, payments and credit card processing.
  • Core engineering teams for Fundsupermart, Shopee and Trust Bank Singapore.
  • Leading global teams building secure, scalable platforms.

Education and credentials

  • MSc Finance, Stuart School of Business
  • B.Eng Computer Engineering, Nanyang Technological University
  • Diploma in Information Technology, Nanyang Polytechnic
  • AWS Certified Developer – Associate, issued September 2026, valid to September 2029. Verify on Credly (badge issued to Weiming Ma).

Working knowledge of

ISO 20022EMVCoOpenAPIAWS Well-ArchitectedTerraformKubernetesCIS BenchmarksOWASPSecure coding

Books

Three books on finance and software engineering

Cover of Secure Coding for Software Engineers

Secure Coding for Software Engineers

Publisher and year

View on Amazon

Patents

Patents and published applications

Show the five filings
  • US11748749B2: Method and system for mediated cross ledger stable coin atomic swaps using hashlocks (granted).
  • US20190392446A1: Authenticating a card-not-present transaction (published application).
  • US20230153807A1: Smart chip payment acceptance (published application).
  • US20220374896A1: Identity, payment and access control system (published application).
  • US20230059546A1: Access control system (published application).

Where we work

Singapore and Malaysia.

Talk to us

No obligation. We will ask about your environment and tell you plainly whether we can help.

Book a 30-minute call