We designed and built IQrate as a full-stack web platform using Next.js for the consumer-facing frontend (with server-side rendering for SEO and instant page loads) and NestJS for the backend API layer.
The core innovation is SmartMatch AI — a recommendation engine that takes a user's financial profile (income, existing debts, property type, purchase timeline) and instantly matches them with the best mortgage packages from 16 partnered banks. The algorithm factors in not just headline interest rates, but lock-in periods, penalty clauses, clawback conditions, and the user's TDSR/MSR limits — surfacing packages that the borrower actually qualifies for, ranked by total cost of ownership over the loan tenure.
For homebuyers, we built three key tools. SmartMatch provides personalised rate comparison in under 60 seconds. iTrack monitors refinancing opportunities, automatically calculating potential savings when market rates shift. iCalculate is a suite of smart calculators covering TDSR, MSR, loan eligibility, stamp duty, and monthly repayment projections — replacing the confusing spreadsheets that borrowers were using before.
For mortgage brokers, we built a separate portal with a Broker Marketplace — a platform where certified brokers can manage leads, access real-time rates, generate client proposals, and process In-Principle Approvals (IPAs). The broker onboarding flow was streamlined from a weeks-long manual process to a 3-step digital certification that takes under 48 hours.
Rate data was the hardest technical challenge. Each bank provides rates in different formats, at different frequencies, with different terms and conditions. We built a normalisation layer that ingests rates from all 16 banks, standardises the data model, and updates the comparison engine in real time. Elasticsearch powers the rate search and filtering, ensuring sub-second query performance even as the rate dataset grows.
The platform was deployed on Vercel (frontend) and AWS (backend — EC2, S3, RDS for PostgreSQL) with Redis caching for rate data. PDPA compliance was built in from day one — consent management, data minimisation, encryption at rest and in transit, and audit logging for all data access.