Technology & Platform

LucentSkill is a modern, cloud-native web application built on the same foundation trusted by some of the world's largest consumer and enterprise products. It is not legacy software: it runs on a globally distributed, auto-scaling platform with a fully managed, always-backed-up database.

• TypeScript, a typed superset of JavaScript, powers the entire application from the user interface to the server API. Types catch errors at build time, which means fewer defects and more reliable releases.
• Next.js, the industry-standard React framework, renders the interface and the API as one cohesive system.
• Tailwind CSS provides a consistent design system across every screen.

LucentSkill is deployed and served on Vercel, the enterprise-grade cloud platform built specifically for Next.js and React applications.

Vercel serves some of the highest-traffic properties on the web. Its published customer list includes Shopify, Sonos, Under Armour, Nintendo, The Washington Post, Zapier, and The Weather Company, which delivers real-time forecasts to roughly 350 million users every day.

• Global edge network: pages and APIs are served from data centers near each user, so the product stays fast worldwide.
• Automatic scaling: traffic spikes are absorbed without downtime or manual configuration.
• Security by default: DDoS protection, automatic TLS (HTTPS), and isolated serverless functions for every request.
• Versioned releases: every change is reviewed, deployable in seconds, and instantly rollback-ready.

All LucentSkill data, organizations, users, learning progress, courses, and analytics, is stored in Neon, a fully hosted PostgreSQL database. PostgreSQL is the world's most widely adopted open-source relational database, trusted in production for decades.

Neon is enterprise-grade serverless Postgres: it separates storage from compute so each scales independently, keeping the database responsive and cost-efficient at any size. It powers demanding workloads including Replit and Vercel's own v0, and Neon is now part of the Databricks family.

• Fully managed: no database servers to provision, patch, or back up by hand.
• Serverless scaling: compute scales automatically with workload, with no over-provisioning.
• Database branching: instant, isolated copies for testing and previews, with zero risk to production data.
• Continuous backups and point-in-time recovery.

• Multi-tenant isolation: every organization's data is logically separated, and every database query is scoped to the caller's own organization.
• Role-based access control with three tiers (owner, admin, member) enforced on the server, never only in the interface.
• All traffic is encrypted in transit (TLS), passwords are hashed with bcrypt, and sessions are signed, time-limited, and revocable at any time.
• Multi-factor authentication via the TOTP standard, available on every account and optionally required for admins and owners.
• Microsoft Entra ID single sign-on using OAuth 2.0 with PKCE and OpenID Connect, so each organization keeps its own identity provider.
• Member data is encrypted at rest with AES-256-GCM, covering names, emails, survey answers, and contact details.
• An immutable authentication audit log and prompt-injection defense on every AI path.
• Bring your own AI endpoint: connect the content engine to an AI service your team has already vetted, so generated content stays within a provider you choose.

LucentSkill is secure by design: security is engineered into the platform and validated before every release, then exercised in production, not assumed from a checklist. Each control maps to a recognized standard, including OWASP ASVS, NIST SP 800-63B, OAuth 2.0 and OpenID Connect, PCI DSS, and GDPR.

See the Security by Design page for the complete list of standards and frameworks, and exactly how each one is implemented.