Platform and security
Trading companies are audited by banks, insurers, certification schemes and their own partners. Lucidus is built so that the answers to their questions come out of the system.
Identity and access
Authentication and authorization are deliberately separate. Your company keeps its identity policies where they are, and the people who run the business define roles and permissions in the application.
State-of-the-art authentication including multi-factor authentication, integrated with the account management your company already runs, for example Microsoft Entra ID. No separate passwords to manage, and leavers lose access the moment their company account is closed.
Who may do what is defined in Lucidus. Roles bundle granular permissions for the activities of the business, from viewing stock to approving check weights or completing invoices, and users hold one or more roles.
Every change to a batch, registration, invoice, sale or master-data record is written to an append-only history with user and timestamp. The genealogy of goods is derived from the same records, so audits start from data rather than from recollection.
Architecture
Lucidus is a modern, cloud-native web application. The server owns the rules of the domain: what a parcel is, how it may be split, when a weight needs approval. The browser is a fast, configurable view on it, on the desk and on the move.
Lucidus runs in current browsers on desktop and mobile devices. Views with thousands of parcels, server-side paging and filtering, and saved views per user keep it fast on everyday hardware; only the optional Workstation agent for scales and printers is installed locally.
Built on a current, actively maintained technology stack and operated as a cloud service, with embedded reporting on live data and a data region agreed per customer.
Invoices, labels and other printouts are rendered on the server from per-company HTML templates. The same document is what gets printed on the workstation and what gets e-mailed.
Every function of the user interface goes through the same documented REST API with typed request and response models. The same API connects Lucidus to the systems your company already runs, such as accounting, and to trading platforms.
Workstation agent
A small background program for Windows and macOS bridges the browser to the devices on the desk. It runs as the signed-in user, so that user's printers and settings apply, and it needs no administrator rights.
The Workstation agent reads precision balances that speak the Mettler-Toledo SICS or Sartorius SBI protocol and hands the live weight to the browser. Manual entry remains available as a fallback.
Labels are rendered as PDF on the server and spooled by the agent to the printers installed for the signed-in user, at actual size and with the paper settings of that queue. Windows and macOS are supported.
The agent is downloaded from the settings page of Lucidus, installs per user without administrator rights, registers for autostart and checks for updates on its own. Print jobs take seconds, so an update restart goes unnoticed.
Data
Lucidus is operated as a cloud service. The hosting region and backup arrangements are agreed per customer and documented in the service agreement.
Next step
We are happy to walk your IT or compliance team through identity, hosting and the data model before a pilot.
