Lightwell — Data-driven capital for specialty finance lenders
Lightwell is a secure, authenticated platform for capital stack management, portfolio data automation, and capital facility matching for specialty finance and private credit lenders.
Who uses Lightwell
- Bridge and construction lenders managing complex collateral and capital stack structures
- Non-bank private credit originators with active loan portfolios seeking institutional capital or warehouse facilities
- Lenders with NPL tapes or shadow pipelines seeking buyers or capital partners
- Capital markets teams automating portfolio stratification, reporting, and lender outreach
Platform capabilities
- Capital matching — Intelligent matching between lenders and capital providers based on loan type, portfolio size, asset classes, geography, and facility eligibility
- Regulus Engine (AI gap analysis) — Automated loan tape parsing, collateral normalization, stratification table generation, and gap analysis before bank package submission
- Capital stack management — Tools for managing layered capital structures including senior debt, mezzanine, and equity components
- Pipeline tracking — Structured intake for loan applications, NPL tapes, and shadow pipeline opportunities across configurable workflow stages
- Lender portal — Authenticated portal for reviewing matched capital sources and managing mandate preferences
- Document management — Standardized tape uploads, stratification tables, and executive summaries backed by Cloudflare R2
Security and data handling
Lightwell is a closed, authenticated platform. All lender-facing routes require Supabase JWT authentication. Administrative routes require owner-email verification. No unauthenticated access to lender data is possible.
- Encryption: Datasource credentials encrypted at rest with AES-256-GCM; key is environment-isolated
- Data handling: Loan tape data processed in-memory; not persisted to relational storage in raw form; output files stored in Cloudflare R2 with 7-day signed URL expiry
- Compliance: Designed with GLBA and CCPA principles; portfolio data used solely for capital matching and analysis; not shared with third parties or used for model training
- Rate limiting: 200 req/IP/15 min global; tighter limits on AI-powered and file-upload endpoints; 10 MB body cap globally