Start a project

// xivu, secure software studio

Secure software, built by a security auditor.

Web apps, SaaS and websites with security by design, built on a secure SDLC. Plus security services, AI photography and content systems, from one accountable person.

Start a projectSee the work

PROOF OF WORKNIUJU · AI PHOTOGRAPHY SAAS

niu-ju.com
NIUJU homepage: the headline 'AI. Photography. Studio.' next to sample portraits of synthetic people, each labelled AI-generated
See the case study

BUILT & SHIPPED: NIUJU · AI PHOTOGRAPHY SAAS · UPLOADS DELETED AFTER 7 DAYS · NEVER USED TO TRAIN AI · SOLO-BUILT WITH AI

// who we are

What is XIVU?

XIVU is a software studio in Fürth, Germany, run by Chan Vu Luu, a former Deputy Information Security Officer. XIVU builds web apps, SaaS and websites for startups and businesses with security by design and a secure SDLC, and offers security services such as supplier security checks and readiness reviews. XIVU also builds and runs its own product, NIUJU, an AI photo studio at niu-ju.com.

Security by design means security is part of the first plan, not a final check. A secure SDLC (secure software development lifecycle) puts it into every phase of the work:

  • Plan. Access rights, data flows and data minimisation are decided in the first plan, before anything is built.
  • Build. Encryption, logging and secure configuration are part of the build. We collect only the data a feature needs and keep it only as long as it is needed.
  • Review. Changes that touch personal data, accounts or payments get a security and privacy review before they go live.
  • Hand over. Everything ships in your accounts with documentation, so you own the code, the data and the evidence.

We work for startups, founders and businesses that need software their customers and auditors can trust. Services are for business customers only. XIVU is not ISO 27001 certified and holds no GDPR certification: we build with the GDPR in mind and align our work with ISO 27001, and the qualifications are personal to Chan Vu Luu.

More about Chan Vu Luu

// services

What we build

Our strength is shipping fast without shipping fragile.

We combine these to cover a launch end to end.
* Click a row to see packages.

Web productionWeb apps, SaaS, marketing sites and landing pages. Designed, built and deployed with security by design.SecurityA security partner for your project, supplier checks and readiness reviews.AI photographyExecutive portraits built on NIUJU, plus AI brand imagery packs.Content systemsRepeatable content production, lead magnets, and launch campaigns.Digital educationHands-on AI workshops and secure-adoption training for teams.

// case

We don’t just build for clients.

NIUJU is our own AI photography SaaS: studio-style photos from up to four photos of you. It is proof we can take a product from zero to shipped, solo, with AI tooling and security by default.

Case studyVisit NIUJU
niu-ju.com
NIUJU homepage: three example phone photos (close-up, upper body, full body) beside the studio portrait made from them, labelled AI-generated, synthetic model
niu-ju.com
NIUJU homepage: the section 'Style packages, made for every scene.' with sample portraits of synthetic models in different scenes, each labelled AI-generated
niu-ju.com/pricing
NIUJU pricing page: 'Choose exactly how many credits you need. Pay once. No subscription.' with one-time credit packs starting at 25 credits for €29 incl. VAT

// the difference

Security from the first plan.

[ AI-NATIVE ]

Built with AI tooling end to end. Studio output from one accountable person.

[ SECURITY BY DEFAULT ]

The founder spent seven years in information security. Security is part of the first plan, not a final check.

[ PRIVACY BY DEFAULT ]

Built with the GDPR in mind. No ads, no tracking cookies or third-party scripts of our own.

// process

How it runs.

  1. 1

    Scope

    We agree on exactly what ships and what it costs before any work starts.

    FIXED QUOTE · 2 WORKING DAYS

  2. 2

    Build

    You get a weekly ship log: visible progress, no black box, no surprises.

    WEEKLY SHIP LOG

  3. 3

    Handover

    Everything ships in your accounts with documentation. You own all of it.

    YOU OWN EVERYTHING

// products

Playbooks, coming soon

AI Photography Prompt Vault

COMING SOONPlanned price €29 plus VATPDF + prompt files

The Solo SaaS Playbook

COMING SOONPlanned price €79 plus VATPDF playbook + templates

SME Security Policy Starter Kit

COMING SOONPlanned price €59 plus VATEditable document templates (DOCX + Markdown)

Notes from the workshop

We write down what we learn.

Secure SDLC for startups: a practical checklist for small teamsSix phases from plan to run, each with a short checklist, for founders who want to build secure software without a security department.How we built NIUJU, an AI photo app, with security by designWhere the photos go, when they are deleted and why we never see a card number: the decisions behind our own AI photo studio.How I ship a SaaS with AI agents without writing the code myselfThe agent team setup, spec templates and verification workflow behind building NIUJU as a solo founder.GDPR is a feature: selling privacy as productWhy building privacy in from day one is a selling point, not a cost centre, in the EU market.What 7 years in information security taught me about building softwareLessons from internal audits and supplier assessments, applied to building software that is safe by default.

// contact

Have something to ship?

FREE INTRO CALL · FIXED QUOTE WITHIN 2 WORKING DAYS OF THE CALL

Start a project