Lummet Team
Editorial team
Insights
Why the control plane never reads a tenant's database
Keeping management and content apart is what lets each brand stay independent.
ReadHow signed requests between Lummet and its brands work
Every call carries a timestamp, a one-time value and an HMAC signature over the request.
ReadDefault-deny access for Lummet staff
New staff accounts start with nothing. Access is granted per brand and per action.
ReadUpdates
The public site now runs from the database
Brands, updates, insights, navigation and page copy on this website are read from the Lummet database.
Read updateAI management chat
Ask for changes in plain language, review a preview, then confirm.
Read updateControl plane and tenant registry
Brands are registered as tenants and reached through a signed API, with credentials encrypted at rest.
Read updateStaff accounts with scoped permissions
Lummet staff can be given access to specific brands and specific actions, and nothing else.
Read updateA CMS for the Lummet site itself
Pages, brand profiles, updates, publications and homepage copy are now managed from the dashboard.
Read update