For institutional and corporate libraries · 027.6
For company, trust, institute and society libraries: role-based access, an audit log, two-factor sign-in, privacy tools, an API for your own systems and reports for the committee.
Sound familiar?
Who touched what
Committees ask who issued, edited or deleted something. The answer should be one filter away.
Access that is too wide
A volunteer should not see what a librarian sees. Least privilege should be the default, not a project.
Systems that do not talk
Your members live in an HR or membership system. The library should be able to read and write through a proper API.
Reporting to a committee
A tidy export with the right columns, without a developer.
What you get
Roles and permissions
Eight staff roles and 29 granular permissions, a global guard, and protection of the last super admin.
Learn moreAn audit log
A staff-visible action log with filters and CSV export.
Learn moreTwo-factor sign-in
Optional TOTP for staff accounts, with encrypted secrets.
Learn moreAPI and webhooks
Scoped API clients and HMAC-signed webhooks to connect your other systems.
Learn moreAcquisitions and serials
Vendors, funds, orders and subscriptions with GST-aware invoices.
Learn moreReports and export
34 built-in reports, a builder, and CSV or Excel export.
Learn moreIn India
- Fines and fees in INR, with UPI and Razorpay if you charge them
- Privacy controls aligned with DPDP thinking: per-member history policy, scheduled anonymisation, member self-service erase (engineering notes, not legal advice)
- English and Hindi interfaces
- Self-hostable on Postgres, so data can stay where your policies say it must
The real thing
Audit log
Who did what, and when.
Staff accounts
Roles and permissions.
Typed preferences
Settings you can actually read.
Reports
For the committee.
Questions
Has Lumina been audited or pen-tested?
No independent penetration test or security audit has been done yet. The controls described on the security page are engineering controls verified by code review, not a compliance attestation.
Can we host it ourselves?
Yes. It is a NestJS API, a web app and Postgres. A Cloudflare Worker and Pages option is part of the design, though nothing is deployed to a public host today.
Next step
See your library in Lumina.
Thirty minutes, your questions, and a walk through the desk, the catalogue and the Koha import. No slides.