Built for modern brokers

The operating system was missing.

LumireCRM is the back office for brokers and prop firms — KYC, money movement, marketing, IB networks, audit, and a public API. Multi-tenant, event-driven, and honest about every number on this page.

Get started Book a demo

Self-serve signup · Approved within business hours

LumireCRM · Back-office

Operations · Live

Settlements

TODAY $184,210

14:03:56s.mensah@accra-cap.com+3,320

14:03:29a.tanaka@kaizen.trade+750

14:03:02l.varga@northdesk.eu+9,600

14:02:38j.okafor@vertexfx.io+1,180

14:02:11m.haddad@theta-cap.com+2,500

KYC auto-review

92.4%

AI approved

QUEUE7

MANUAL REVIEW3

SANCTIONS HITS0

Withdrawals · pending

k.ivanov@…$12,400Dual-ctrl

d.moreau@…$980Queued

y.chen@…$3,250Dual-ctrl

o.adeyemi@…$640Queued

>$1,000 requires a second approver. Every decision lands in the audit log.

RLS ONAUDIT TRAIL ON19 EVENTS → WEBHOOKSSAMPLE DATA

MT5CONNECTORcTraderCONNECTORMeta AdsLEADS + CAPINEWGoogle AdsDATA MANAGERNEWUSDTBSC · BASE · TRC20KYC AIAUTO-REVIEWDrip Engine30S CRONPublic API60 MODULESWebhooksHMAC-SIGNEDS2S PostbacksVOLUUM · KEITARO · BINOMIB TreesCPA · REVSHARE · HYBRIDSanctionsOFAC · EU · UK · UNVIP TiersAUTO-EVALUATELeaderboardsPUBLIC + STAFF

01The back office

Every system the desk needs. None of the duct tape.

One graphite back office replacing the CRM, the payment spreadsheets, the KYC vendor tab, and the ad-platform dashboards your team juggles today.

Money movement

Deposits and withdrawals on real state machines. Sanctions screen on every payout, FX-normalised reconciliation, invoices, statements, CSV export.

Dual-control > $1,000

KYC that just works

Hosted verification portal with self-hosted AI review and auto-approve. A manual state machine when you want hands on. Lists refreshed nightly.

Hosted portal + B2B API

NEW

Marketing & ads engine

Meta lead ads land with attribution intact. CAPI and Google Data Manager push every funnel stage back. Spend sync prices your CPL and cost-per-FTD.

Meta · Google · S2S

IB & affiliates

Multi-tier IB trees with CPA, RevShare and hybrid plans. Automated commission close, referral rewards, public leaderboards with dual-control prizes.

Commission close

Risk & compliance

Sanctions screening across KYC and payouts — OFAC, EU, UK, UN. Dual-control on money and prizes. Tenant isolation enforced at the database row.

RLS · Dual-control

Automation & workflows

A drip engine on a 30-second cron: sequences, idempotent enrollment, email, SMS and WhatsApp through real adapters. Event-driven workflows take the rest.

Sequence running

Audit everything

Every state change writes an audit entry — money, KYC decisions, key rotations, admin actions. Immutable, queryable, tenant-scoped.

Every mutation logged

Public API

Sixty modules behind scoped keys — Argon2id-hashed, per-key rate limits, IP allowlists, an event catalog, and SDKs in four languages.

60Modules

02Money movement

Crypto-native. No processor in the middle.

LumireCRM mints a deposit address per trader, watches the chain itself, credits the ledger idempotently, and tells your trading backend over an HMAC-signed webhook — then sweeps to treasury behind OTP. Fully automated, end to end.

USDT on BSC · BASE · TRC20
Idempotent credit — never double-booked
Dual-control withdrawals over $1,000
FX-normalised reconciliation + statements

USDT rail · lifecycle

BSC · BASE · TRC20

MINTPer-trader deposit address — USDT on BSC, BASE or TRC20
SCANSelf-hosted chain scanners watch every block — no third party
CONFIRMConfirmation threshold met on-chain — 12 / 12
CREDITIdempotent ledger credit — the same tx can never book twice
NOTIFYHMAC-signed webhook delivered to your trading backend
SWEEPFunds swept to treasury behind OTP-protected admin control

0x4f3a…b29e+2,500 USDTTRC2012/12CREDITEDSAMPLE

03Marketing engine

Acquisition funnel · 30 days

Attribution on

lead.created2,418→ CAPI · Lead
lead.converted1,533→ CAPI · stage
kyc.approved1,189→ CAPI · stage
deposit.settled604→ CAPI · Purchase

EVENTS FORWARD AUTOMATICALLY · META CAPI · GOOGLE DATA MANAGER · S2S POSTBACKSSAMPLE DATA

From ad click to funded account — attributed.

Meta lead ads land in the CRM with click and UTM attribution intact. Every funnel event flows back to Meta CAPI and Google Data Manager with deduplicated event IDs — and nightly spend sync turns it into a CPL and cost-per-FTD you can defend.

Meta lead webhook + backfill
Custom audiences from segments
S2S postbacks — Voluum · Keitaro · Binom
Drip sequences — email · SMS · WhatsApp

04Developer platform

A real API, not an export button.

Push leads from your landing pages, read deposits and withdrawals, enroll traders into drip sequences. Scoped keys with default-deny enforcement, per-key rate limits, IP allowlists — and webhooks that carry timestamped HMAC signatures.

7 key scopes · default-deny
Per-key rate limits + IP allowlists
Event catalog — 19 domain events
SDKs — TypeScript · Go · PHP · Python

Read the docs →

Public API · console

POST /v1/api/leads

$ curl -X POST $LUMIRE_API/v1/api/leads \
    -H 'X-API-Key: lum_live_............' \
    -H 'Content-Type: application/json' \
    -d '{ "email": "trader@northdesk.eu", "source": "meta_ads" }'

HTTP/1.1 201 Created
{ "id": "ld_91hd72", "status": "new" }

→ lead.created → webhooks · meta capi · drip enroll

SCOPE leads:writeRATE 120/MINKEY ARGON2IDLIVE ENDPOINT

01deposit.requested02deposit.approved03deposit.rejected04deposit.settled05deposit.reversed06withdrawal.requested07withdrawal.approved08withdrawal.rejected09withdrawal.settled10kyc.submitted11kyc.approved12kyc.rejected13kyc.more_info_requested14lead.created15lead.converted16trader.created17position.opened18position.updated19position.closed

05Counted, not claimed

Numbers from the codebase, not the deck.

API modules

One NestJS back office

Domain events

Webhooks · workflows · CAPI

API-key scopes

Default-deny enforcement

SDK languages

TypeScript · Go · PHP · Python

Get started

Give the desk its operating system.

Create an account in minutes — our team approves new tenants within business hours. Your data stays yours: isolation is enforced at the database row.

Get started Book a demo →

Multi-tenant · Audit-logged · API-first