Ribbon
An app on iOS and Android, its web version, and a back end with real-time chat, payments and host payouts. We run all of it every day: the servers, the monitoring and the releases.
Cloud hosting and DevOps for businesses in Malaysia
What does cloud hosting and DevOps from CodaMinds include?
Cloud hosting and DevOps from CodaMinds is the set-up and running of everything your website or app sits on: hosting, domain and business email in your name, monitoring and error alerts, automated releases, backups you can restore, security hardening and a set-up that respects Malaysia's personal data law. We set it up, run it and explain it plainly.
Steven Lim started the studio in Kuala Lumpur in 2021 and has built apps and websites since 2016. Every day we run a live app with real-time chat and payments, its web version and the servers behind them, so what this page describes is what we do for ourselves first. The person you message is the person who sets up and runs your servers, in English, 中文 or Bahasa Melayu. We meet clients in person across the Klang Valley, and work with businesses in the rest of Malaysia, Singapore and further abroad over WhatsApp and a shared draft link.
Signs your set-up needs attention
Most businesses think about hosting only when something goes wrong.
- The site went down and you heard about it from a customer.
- The domain or the hosting is registered in the name of a former agency or freelancer, and nobody has the login.
- Releasing a change means one person copying files by hand, late at night.
- The cloud bill grows each month and nobody can say what it pays for.
- There are backups, in theory, but nobody has ever restored one.
Each has a plain fix: a set-up that is written down, in your name and watched.
What the work includes
Hosting, domain and email in your name
Your domain, hosting account and business email are registered to your business, and you hold the main login. We work inside your accounts with our own access, which you can remove at any time. Email on your own domain is set up so it reaches the inbox, not the spam folder.
Monitoring, uptime and error tracking
We watch your site and app from outside, the way a customer reaches them, and get an alert when they stop answering. Errors inside the app are recorded with enough detail to find the cause, so a crash on a customer's phone becomes a fix, not a guess.
Cloud set-up, migration and fast static sites
A new set-up sized for what the product does today, with room to grow. A move from old hosting or a former developer's account, with the new set-up running alongside the old one until it is proven. For websites that do not need a server, edge and serverless hosting: the pages are copied close to each reader, so they stay fast on mobile data with less to break or patch.
Automated releases and app store releases
A change goes live through the same steps every time: built, checked by automated tests, and released, with no files copied by hand. If a release goes wrong, the previous version goes back. For mobile apps, we prepare the builds, store listings and review submissions for iOS and Android, and send test builds to your team first. See mobile apps.
Backups, recovery and the bill
Backups run on a schedule, are kept apart from the server they protect, and are restored as a test, because a backup nobody has restored is only a hope. Recovery is written down step by step. Alongside it, we read the cloud bill line by line, switch off what nothing uses, and size the rest to the real load, so you know what each line pays for.
Security hardening
Every port that does not need to be open is closed. Logins use keys and named accounts, not a shared password. Requests that do not belong to your site are turned away. Software is kept up to date and secrets stay out of the code. Safe defaults, written down, so the next person who touches the server keeps them.
Personal data and Malaysia's PDPA
If your website or app holds customer names, phone numbers, bookings or payments, it holds personal data. The amendments to Malaysia's Personal Data Protection Act now require a business that controls personal data to notify the Personal Data Protection Commissioner of a data breach within 72 hours, and to appoint a data protection officer once it passes thresholds the Commissioner has set.
We build the technical side so those duties are workable. Where personal data lives: which servers, in which country, in which backups. Who can see it: named accounts with only the access each person needs, and a record of who signed in. A breach plan: who is told, what was logged, and how to work out quickly what was exposed. We do not give legal advice. Which parts of the law apply to you, and whether you need a data protection officer, is a question to check with your adviser. We build to what they approve.
What we have built
The products we run ourselves, on the same set-up we offer you.
iPets
A virtual-pet app for iOS and Android, with a back end that runs daily workers and push notifications. Each release is built and sent to testers on both platforms before it reaches users.
codaminds.com
A static site on edge hosting, in English, 中文 and Bahasa Melayu. The pages are copied close to each reader, so they load fast on mobile data, with no server to patch.
How we work
Brief. You tell us what runs today, where it is hosted, who holds the logins and what worries you. We reply with questions and a written scope.
Fixed quote. One price for the set-up, the move and the hardening in the scope, agreed before work starts. Anything outside it is quoted first.
Draft on your phone. You get the written plan and, for a move, a working copy of your site on a draft link to check before anything changes for customers.
Launch. We switch over once the new set-up is proven and hand over every login in your name.
Care after launch. Monitoring, updates, backups and releases, as part of website maintenance. Each change is quoted before it starts, and there is no lock-in.
Questions
Can you move my website or app to new hosting without customers noticing?
That is how we plan every move. The new set-up runs alongside the old one, we test it on a draft link, and we switch over at a quiet hour you choose. The old set-up stays until you are happy, so going back is one step.
Will the domain, hosting and email be in my name?
Yes. The domain, hosting account and business email are registered to your business, and you hold the main login. We work with our own access, which you can remove at any time. If you move to another team, you keep everything. There is no lock-in.
What happens when the site or app goes down?
We get an alert, often before a customer notices, and start on it. Once it is back, you get a plain note: what broke, what we did and what we changed so it does not happen again.
Can you take over hosting from a previous developer or agency?
Yes, after a review. We find out where everything lives, who holds the logins and what the site depends on, then move it into accounts in your name. If a login is lost, we help you recover it as the owner. You get a fixed quote first.
Will this make my business PDPA compliant?
We build the technical side: where personal data lives, who can see it, the records of who signed in, and a breach plan you can act on within the 72 hours the law now sets. Compliance also covers your notices, consents and processes, which are a legal question. Check with your adviser, and we build to what they approve.
Can you lower our cloud bill?
Often, yes. We read the bill line by line, switch off what nothing uses and size the rest to the real load. We do not promise a figure before we have seen the bill. You get a plain list of what each line pays for and what we suggest changing.
Start
Send us what runs today, where it is hosted and what worries you about it. Tap the button to message us on WhatsApp and get a written plan and a fixed quote.
WhatsApp us