Work / Bambu.Co

Backend muscle
behind a bank's
wealth platform.

Bambu.Co builds wealth-management technology for financial institutions. Their CIMB / PAM platform powers CIMB Bank's personalised investment advisory — the consumer-facing layer is Bambu's; the engineering quietly underneath is shared.

We came in to extend the backend and API surface — making the platform scale under spiky load, harden under regulator scrutiny, and keep up with the analytics decisions Bambu's product team wanted to act on. UI/UX stayed with Bambu; the engineering plumbing was ours.

Client

Bambu.Co

Sector

Fintech · Wealth Tech

Engagement

Backend · API · Performance

Location

Singapore · Global

Engagement · Closed Bambu.Co
CIMB · PAM Webloon × Bambu
/ 01
The Challenge

Wealth, scale, regulators, all at once.

CIMB serves a large and diverse client base, and the PAM system is the platform giving each of those customers personalised advice. That puts three constraints on the same backend: scale that doesn't degrade under spikes, security tight enough to hold up to financial-services audit, and an API surface that keeps existing CIMB systems working while new functionality lands.

None of those are negotiable on their own. Together they push every part of the stack — and the work has to happen alongside Bambu's product cadence, not as a separate plan.

An engineering brief where every constraint is the floor, not the ceiling.

/ 02
What Webloon Did

Backend, API, and the boring things that matter.

We worked with Bambu's engineers, financial analysts, and database specialists in a phased plan — scalability and containerisation first, then security and compliance hardening, then the API extensions that opened up new flows. Every change was scoped to integrate with CIMB's existing systems without breaking what already worked.

Architecture

Scalability

  • Containerised services using Docker and Kubernetes
  • Workload management that absorbs traffic spikes
  • Capacity headroom for CIMB's growing client base
Security

Layered protection

  • Advanced encryption and secure data storage
  • Two‑factor authentication and access controls
  • Regular audits and compliance checks (GDPR, PSD2)
API

Versioning & integration

  • API versioning with backward compatibility
  • Faster, more reliable inter-service communication
  • Smooth integration with CIMB's existing systems
Analytics

Without slowing the system

  • Analytics pipeline tuned for low system overhead
  • Data‑driven optimisation of the PAM platform
  • Performance KPIs set up for ongoing monitoring
/ 03
What This Proves

A wealth platform that holds up where it has to.

The PAM backend now scales without strain, the security posture holds up under audit, and the API extensions let Bambu's product team ship advisory features without re-platforming. The engagement set a quiet baseline for how Bambu's fintech and CIMB's traditional banking infrastructure operate together.

Proof

Scale, headroom

Backend absorbs traffic spikes for CIMB's growing user base.

Proof

Audit‑ready security

GDPR & PSD2 alignment with regular compliance reviews.

Proof

API efficiency

Faster, more reliable inter-service communication.

Quantitative results available on request under engagement confidentiality. Bambu.Co's public-facing website is no longer online.

Next case

ISM Angels →

Read next