Foxinelo Discuss your project
Foxinelo Ltd. · London · since 2020

Software that is not only built, but operated.

We develop our own SaaS products and selected systems for businesses. Multilingual, tax compliant, secure and proven in production.

A · Product engineering

Platforms built on solid foundations.

SaaS, customer portals, multi-tenant systems and mobile apps. Architecture, backend, web frontend, iOS and Android from one team, with clear tenant isolation and billing through Stripe.

  • Multi-Tenant
  • Web · iOS · Android
  • Stripe · Entitlements
  • Docker · Cloudflare
International markets

One platform, many countries, each with its own rules.

Language, tax type, invoice format and currency are part of our data model. From London, we work for clients in Europe, Asia and the USA. HandiVo is offered for registration in 23 markets and supports 16 languages, with tax logic for nine countries.

  • 23 markets
  • 16 locales
  • Stripe Tax · UK VAT · EU OSS
B · Security

We find the gaps before others do.

Manual penetration testing against OWASP, audits with prioritised action plans and hardening for production systems. Evidence for every finding, a retest for every fix.

  • Penetration tests
  • Audits
  • Hardening
  • Incident analysis
C · AI in existing workflows

AI exactly where it removes a manual step.

Documents and enquiries are classified, extracted and routed to the right place. Integrated into your systems, with traceable results and data protection agreements with OpenAI and Anthropic.

  • Classification
  • Extraction
  • Routing
Operations

Operations continue after launch. For the long term.

Monitoring, backups with tested recovery, updates and regular retests are part of delivery. You could operate everything we hand over yourself from day one.

  • Monitoring
  • Recovery tests
  • Updates
  • Retests
Foxinelo

From architecture to operations. One team throughout.

You speak directly with the architect. Within one working day, you receive a technical assessment of your project.

Also

Websites & online shops

We build bespoke websites with our own code and design, fast and tailored precisely to your business. We build online shops with SureCart: checkout, subscriptions, taxes and payment providers working together. Our agency licence covers your shop system permanently, with no licence costs for you.

Our own product · handivo.app

From floor plan to signed invoice. In 16 languages.

HandiVo is our quotation, order and invoicing platform for trade businesses. Room planning, material requirements, a customer portal with signed acceptance and invoices with country-specific tax logic. One system that represents a business in France just as well as one in Malaysia.

7Weeks to launch
23Market–locale combinations
9Compliance modules
76 × 16Email templates × languages
Open handivo.app

HandiVo shows our approach most clearly. The same care goes into every client system. Features and invoice formats depend on the plan and country.

Rechnung
Sample trade business · Example data
RE-2026-0418
04.10.2026
PositionNetto
Zwischensumme
USt. 19 %
Gesamt
✓ Angebot digital signiert

Sample invoice with fictional amounts. Language, tax type, tax rate, currency and date format follow the selected country.

Security

This is what our reports look like.

We test manually because scanners miss the errors that become truly costly: authorisation logic, tenant isolation and payment flows. Every report contains reproducible evidence and a retest after remediation.

  1. 01
    ScopeAgree systems, roles and boundaries together
  2. 02
    TestManual testing against OWASP, supported by tools
  3. 03
    ReportSeverity, evidence and a specific recommendation for each finding
  4. 04
    RetestConfirm that every fix actually works
FINDINGS · WEB APP · EXCERPTRETEST PASSED
Critical

IDOR on invoice endpoint

Other customers’ invoices accessible by ID. Evidence: 3 requests, screenshots attached.

Fixed · Retest OK
High

Session not bound to device

Token remains valid after password change.

Fixed · Retest OK
Medium

Missing login rate limits

Brute-force attack successful in 4 minutes.

Fixed · Retest OK
Low

Content Security Policy in report-only mode

Recommendation with an activation schedule.

Accepted
Our approach

Three commitments for every project.

Decisions at architecture level

You speak with the system architect from the outset. Requirements are not lost between intermediaries.

Ready to operate at handover

Documentation, deployment, backups and monitoring are part of delivery. You could operate what we build yourself on the day of handover.

Data protection to EU and UK standards

Data processing agreements, data protection impact assessments and contracts with subprocessors are part of every project.

Contact

Tell us about your project.

You receive a technical assessment within one working day. Specific, honest and from the person who would build the system.

1
Working day to your first
technical assessment
Protected by Cloudflare Turnstile