All case studies

09 / Case study · BSMR

Certification Issuance and Compliance Management

From submission to certificate, with a clear trail.

Industry
Professional Compliance
People
100+ employees
Where
Indonesia
BSMR application validation interface with pending, successful, and draft states.

Who they are

BSMR is a key certification body for risk-management professionals in Indonesia, issuing credentials through training providers, verification and finance approval.

What they set out to do

BSMR wanted the whole certification lifecycle digitized: governance enforced at every stage, and the time from final approval to issued certificate cut sharply.

The problem they were living with

Credentialing depended on manual handoffs between training providers, verification administrators and finance administrators. Status was hard to follow, and the risk of mismatched data between a submission, an invoice and a certificate grew with volume.

What it was costing them. The manual process routed data between training providers, verification admins and finance admins by hand. That produced chronic delays, mismatches between certificate and invoice, fraud exposure and audit trails nobody could follow.

What changed

  1. Time to issuance reported sharply shorter after final approval
  2. Submission, invoice and certificate reported fully consistent

    Approved data flows into both documents, so the portfolio reports 100% consistency between them.

  3. One real-time dashboard for compliance monitoring
  4. Edited data is re-verified before it can pass

    A later change cannot slip past the approval process.

Outcomes as recorded in the QuantumByte enterprise case-study portfolio (2025). They are the engagement’s own reporting, not an independent audit.

Designed solutions

What we designed for BSMR’s people.

Governed submission flow

Multi-stage approval rules connect provider submissions with verification and finance review.

Validation and status management

Administrators work from one queue that shows each submission’s state and the actions available.

Certificate and invoice generation

Approved data flows into the documents needed for issuance and payment.

Change-aware re-verification

Edited data is flagged for renewed verification, so a later change does not silently bypass approval.

Audit history and traceability

Action history lets auditors follow the steps behind a certificate and its records.

Compliance overview

A dashboard brings certificate categories and activity into a central reporting view.

The workflow

How the work flows now.

  1. Submit the application

    The training provider supplies the data for the requested credential.

  2. Verify the record

    Administrators review the submission and request or confirm changes.

  3. Complete the financial review

    The application moves through the required payment or finance stage.

  4. Issue the documents

    The certificate and invoice are generated from approved information.

  5. Keep the trail intact

    Later edits are re-verified and every workflow action stays on record.

The interfaces

Where else this applies

The same approach, in other industries.

IndustryFitWhy
Financial services and bankingHighRegulatory certifications such as AML, KYC and risk management need secure, auditable records.
HealthcareHighMandatory safety training and specialized medical certifications follow a complex, traceable workflow.
Government and public sectorHighPublic-facing licenses, permits and professional certifications need accountability.
Corporate learning and developmentMediumLarge companies formalize, track and issue internal credentials for technical skills and proprietary systems.

Kevin’s part

Kevin led delivery with the Quantum team: the multi-stage approval workflow, document generation and the audit history.

How I think about work like this

Working on something like BSMR’s?

Tell me where the workflow breaks today and who carries it. I’ll tell you what the smallest useful slice would be, and whether I’m the right person to build it.

Tell me the problemSee how a project runs

Taking new projects · Remote · US-hours overlap