Sector · Global business

Custom apps for organisations operating worldwide.

We build for businesses that have long outgrown their Dutch head office: multinationals with production sites on three continents, scale-ups whose customer base is growing faster than their teams, and B2B exporters who need to deliver to the EU, the US, Asia and Latin America from a single codebase. Multi-currency, multi-language, multi-region — and always with code ownership residing with your organisation, not with us.

Target groupMultinational with Dutch HQ
Target groupInternational scale-up
Target groupB2B exporter
Target groupCross-border service provider

The Netherlands as a hub for global business.

~€720 bn
Dutch goods exports in euros per year
~250.000
Dutch exporting companies
~30%
Share of GDP from foreign trade
~5.500
Foreign head offices in the Netherlands

Source: CBS Internationalisation Monitor, NFIA annual report, Eurostat.

Off-the-shelf software breaks once it crosses borders.

An organisation operating within the Netherlands can get a long way with standard ERP, CRM and HR packages. However, as soon as you open a second site in Germany, enter a joint venture in Singapore, or ship daily consignments to Brazil, India and the US via Schiphol cargo, every off-the-shelf system breaks in a number of predictable places. Multi-currency reporting falters as soon as you need quarterly consolidation with intercompany transactions, multi-language support stays limited to a handful of interface languages and becomes unusable in countries with right-to-left scripts, and cross-border data transfers come under pressure from the GDPR, the CCPA, the LGPD and POPIA all at once — and that is only the privacy side.

A Dutch multinational that must for the first time genuinely comply with the CSRD and with the US SEC climate disclosure rules sees its ESG team quadruple within a few months. A scale-up with customers in seven countries discovers that VAT, sales tax, GST and VAT each have their own rules, and that the standard expense tool forces employees in Tokyo to scan yen receipts in an interface that only rounds to euro figures. And an exporter of high-tech machinery — think semiconductor suppliers in the ASML chain — faces export control rules (DUL), customs UCC codes, HS classifications and sanctions lists that differ for every destination country, and which no standard package can be made to work with without custom development.

In practice, global businesses respond with a patchwork: SAP or Oracle for the financial core, Workday or SuccessFactors for HR, Salesforce for customer contact, a bespoke middleware layer in Java or .NET, and alongside that a growing number of point solutions per region. The core functionality works, but every new region means a new subproject, every compliance change means a new migration, and every attempt to get management information from three continents into one view ends in a Power BI report that is out of date again after a quarter.

A custom app solves that differently: your business logic sits at the centre, and the region-specific exceptions sit around it as configuration. Instead of six separate SaaS tools, an employee in São Paulo, Rotterdam, Singapore and San Francisco gets the same core experience with region-adapted data. We build that layer on top of Appfront's app service and connect it to your existing ERP, CRM and HR stack. For companies that deliver their own multi-region platform to international clients, we draw on our multi-tenant platform approach. For the B2B delivery context, covering client onboarding, contract flows and SLAs per region, we align with the logic of a custom B2B app.

Software that fits every form of global business.

Each type of international organisation gets its own flow, its own integrations and its own compliance requirements. Below, by profile, is what we typically build, from multinational to exporter.

Multinational HQ in the Netherlands

The focus here is on consolidation, governance and internal portals for global teams. A Dutch headquarters with branches on several continents faces the same questions: how do I get consistent management information from eight ERP implementations, how do I roll out one employee app to ten thousand staff across twenty time zones, and how do I make sure our CSRD reporting is as robust as our SEC disclosure? In that context, a custom layer on top of existing systems is not a replacement, but the orchestration layer the group steers by.

Our module set for multinationals is typically built on a multi-region data layer that brings financial, operational and HR data from the various branches into a standardised model, with FX conversion at the time of the transaction and separate reporting for IFRS, US GAAP and local GAAP. On top of that we build an employee app for global teams, covering payslips, leave requests, onboarding, a training tracker and internal mobility, in all relevant languages, with region-specific compliance flags and an interface that suits both a factory worker in India and a trader in London. For the board and the risk function we deliver consolidation dashboards that drill down by region to KPI level and work hands-on with CSRD/SFDR data rather than with an after-the-fact export.

With multinationals, the value lies in standardisation without centralisation: one architecture, one design system, one identity layer, while local changes remain possible without bloating group IT governance.

  • Multi-region data layerConsolidation across EU/US/APAC, FX at transaction date, IFRS and US GAAP side by side.
  • Global employee appTwenty languages, RTL support, region-specific flows, mobile-first.
  • CSRD/SFDR dashboardDatapoints at transaction and invoice level, audit trail per disclosure.
  • SSO across all regionsOne identity provider, MFA aware of international travel.

Which global business apps we typically build.

The world of global business is broader than a single type of client, and that shows in the kinds of apps we build. For one company, the centrepiece is a multi-currency and multi-language customer portal where clients in fifteen countries log in at the same time, see their invoices in local currency, read contracts in their own language and handle support requests in their own time zone. Such a portal calls for ICU MessageFormat as the basis for i18n, Right-to-Left support for Arabic, Hebrew and Persian users, an exchange-rate pipeline (Open Exchange Rates or a feed from a central bank), and a payment layer that connects smoothly to Mollie or Stripe for European countries, to Adyen and local schemes for APAC, and to ACH and wires for the US.

For another group of clients, the need is an employee app for global teams: one environment in which an employee in Rotterdam, a production worker in Poland, a sales representative in Brazil and an engineer in Bangalore all get the same core experience, with payslips in the right language and currency, leave requests that follow local labour rules, and a training tracker with country-specific content. Under the hood, that means role configuration per country, a design system that works across ten languages without breaking the pixel grids, and a notification layer that takes regional religious holidays into account. For businesses serving international clients through their own tenant architecture, the same approach builds on our multi-tenant platform approach.

A third category is cross-border compliance dashboards, which have become considerably more demanding in recent years. A Dutch listed company faces CSRD for its EU reporting, SFDR for financial products making sustainability claims, and the EU Taxonomy for classifying its activities, and in the same cycle it may also need an SEC reconciliation if it is listed in the US. We don't build these dashboards as after-the-fact reports. Instead, we build a hands-on environment in which ESG data is pulled at transaction and invoice level, and in which the audit trail for each disclosure can be traced back to an individual purchase invoice or HR change. The foundations come directly from our CSRD/ESG reporting software approach.

For exporters and logistics organisations, we more often build supply-chain track-and-trace and customs flows: shipments from the Dutch warehouse or the Schiphol cargo hub can be tracked all the way to their final destination, with automatic HS code classification, integrations with the EU Customs Single Window and local customs APIs, and sanctions list screening at order confirmation. For high-tech exporters in the semiconductor and machinery supply chain, export control is added on top: classification under the Dual-Use Regulation, list assessment per supplier country and end-use declarations. Where compliance complexity runs deeper, this often connects to an enterprise software project as a reference architecture.

A fifth group of apps centres on expense management, travel flows and client onboarding for international travel and cross-border KYC/KYB. Employees in São Paulo, Tokyo or Lagos scan local receipts, the system allocates them to the correct sub-unit, links them to the local corporate card, and forwards them to group accounting, where the amount is converted at the exchange rate on the day of the transaction. Client onboarding for international B2B service providers runs on KYC and KYB, with UBO rules per jurisdiction, sanctions screening against EU, US and UN lists, and contract flows that account for local jurisdictional provisions and language variants. For the B2B side of such apps, we often start from our page on building a B2B app.

The common thread: the software is built for the reality of operating worldwide, rather than exporting a Dutch product with a few extra languages bolted on. We build vendor-independent — a future IT partner of your group or a successor in the CIO seat can take over the code, data and hosting without Appfront becoming indispensable through tokens, certificates or credentials. An international business should not be locked into a tool the moment it makes an acquisition, closes a site or its reporting regime fundamentally changes.

Compliance that works across six jurisdictions at once.

A global business rarely operates under a single legal regime. From the first sprint, we build within the framework of EU privacy law, international data transfer instruments, regional equivalents and the relevant export and trade rules.

GDPR & cross-border data transfers

SCCs, EU-US Data Privacy Framework, BCRs

Every data flow leaving the EU falls under Schrems II case law. We build apps in which data transfer instruments such as Standard Contractual Clauses, Binding Corporate Rules and, for the US, the EU-US Data Privacy Framework are explicitly visible in the architecture: for each dataset, you can look up who the controller is, which transfer mechanism is used and which additional safeguards (encryption, pseudonymisation, access control) apply. Sub-processor registers and standard DPIA templates are delivered at handover, not in a later update.

GDPR / CCPA / LGPD / POPIA

Regional equivalents as first-class citizens

The California Consumer Privacy Act, Brazil's LGPD, South Africa's POPIA, Singapore's PDPA and Australia's Privacy Act — each region has its own privacy regime with subtly different definitions, rights and notification deadlines. We build a single privacy engine that applies the right consent text, data subject request flow and retention policy per region, with a unified audit log for the group DPO and region-specific views for the local privacy officer. Where it applies regionally, the Code on Privacy of Communications is included as well.

Export control, Customs UCC & HS classification

Dual-use, customs and global tariffs

For exporters of high-tech machinery, semiconductor components and software with cryptography, EU Regulation 2021/821 on dual-use goods applies. Our apps automatically flag the DUL status, the sanctions-list position of the supplier and the end-use declaration required when an order is created. On the customs side, the Union Customs Code governs procedures within the EU, while the Harmonized System (HS) classification determines the tariff and import rules for each destination country. We build automated HS classification, integration with the EU Customs Single Window, and connections to the customs APIs of the main trading partners (US CBP, Brazil's Receita Federal, UK HMRC, Singapore Customs), with a digital file per shipment that can be traced back to the original commercial invoice.

CSRD / SFDR / EU Taxonomy

ESG reporting with an audit trail down to the transaction

The CSRD requires a growing group of companies to report in detail on environmental, social and governance performance. The SFDR does the same for financial products making sustainability claims, and the EU Taxonomy classifies the underlying activities. We build ESG reporting as a data layer on top of existing financial and HR systems, with data points at transaction level and an audit trail that traces each reported KPI back to a source purchase invoice or HR change. For groups with multiple CSRD-reporting entities, we support entity-level and consolidated reporting side by side.

EU AI Act & international AI regimes

Responsible AI in a global rollout

The EU AI Act applies extraterritorially to companies that place AI systems on the European market. At the same time, we are seeing AI regimes emerge in the US, the UK and Brazil. For each AI application in the app, we map the risk classification, document governance, and build in disclosure and transparency flows where needed. Our guiding principle: AI models that process personal data across multiple jurisdictions comply with the strictest applicable rules, not an average.

Ownership & code handover

The code and data stay with your organisation

We deliver the code in a repository managed by your group and it continues to exist without Appfront. No mandatory licences, no hidden hosting lock-ins, no compulsory maintenance contract. When a global group makes an acquisition, restructures a regional subsidiary or appoints a new CIO, the software simply goes with it. We can handle hosting and management, but that is a choice on your side.

Seamlessly connected to the international enterprise stack.

We integrate with the systems your group already uses, from the core ERP to the local tax engine, and from payment providers to logistics partners. There is no need to migrate the entire stack: our app complements your existing systems and rarely replaces them.

SAP / Oracle
Multi-region core ERP
Workday / SuccessFactors
Global HR & payroll
Salesforce / Dynamics
CRM and service
Vertex / Avalara
Cross-border tax engine
Open Exchange Rates
Multi-currency FX
Stripe / Adyen / Mollie
Global payments
Cloudflare / Fastly
Global CDN & security
AWS / Azure / GCP
Multi-region cloud
EU Customs Single Window
Customs integration
Okta / Azure AD / Ping
Identity & SSO
DocuSign / OneSpan
eIDAS & e-signatures
OneTrust / Cookiebot
Multi-region consent

Standard integrations, no project-specific connection.

We have standardised the integrations mentioned above across several global business projects. For a new assignment, we set up the integration using the same abstraction layer, which means fewer bugs, a shorter lead time, and your own tech team can manage it independently once we step away. The integration layer is a mappable adapter: if your group migrates from SAP S/4HANA to Oracle Fusion next year, or from Workday to SuccessFactors, that is a configuration change in the adapter, not a rebuild.

For specific group software, such as a bespoke Java middleware, a proprietary tax engine built by a local subsidiary, or a legacy mainframe connection exchanging EDI messages with customs authorities, we build on a case-by-case basis. For groups that sell their own multi-region product layer to international clients, we look at our multi-tenant platform approach; for the B2B delivery framework, see our custom B2B app page; and for ESG components, see our CSRD/ESG reporting approach.

A key difference from large SaaS suites: with us, the API credentials, OAuth tokens and data flows belong to your group. We configure and build, but we do not make Appfront indispensable through the tokens. If your group changes supplier or a private equity owner decides on a restructuring, no hidden account runs on in the background.

From regional audit to global go-live in clear steps.

A global business app project has its own rhythm: more alignment with regional business owners, more interaction with compliance and tax teams, and more cutover rounds. Five phases that are recognisable in every international rollout.

01 · Audit

Regional mapping

A working session with IT, finance, tax, HR and the regional managing directors of the main sites. Outcome: current systems mapped per region, compliance requirements identified, and data flows documented.

02 · Design

Scope per region & lifecycle

By region, which flows enter the app, which integrations take priority (ERP, HR, tax, payments), which compliance regimes apply, and which flows belong in a later release.

03 · Build

Short sprints, demo per region

Each sprint we deliver a working flow that is tested by the regional business owners. The first working flow is typically live within a few sprints, often in one pilot region before we widen the scope.

04 · Cutover

Pilot in one country or site

First one country, for example the Netherlands and Belgium, then a second region, then APAC or LATAM. For each rollout we provide a training programme for the local team and onboarding material for new staff, and hand over to your local functional management.

05 · Maintenance

Ongoing adaptation

Whenever a regulation changes in one of the regions, whenever a new GDPR guideline appears, or whenever trade agreements or customs procedures change, we adapt the app. Fixed monthly fee, first-line support within the same working day in EU time, and an escalation path for the relevant time zones.

Working in a sector where precision is non-negotiable.

CBS Internationalisation Monitor

"Dutch companies with production or service sites in multiple regions report the digitalisation of compliance and consolidation processes as among the most important investment themes for the coming years."

NFIA & Holland International Trade

"The Netherlands' position as a hub for foreign headquarters stands or falls with digital infrastructure that remains workable across jurisdictions, from tax compliance to privacy equivalence."

European Union Customs Single Window

"Standard digitalisation of customs processes between member states and trading partners is a prerequisite for the European competitiveness of industrial sectors with international supply chains."

Answers for the organisation that scales globally.

The questions we hear most often from CIOs, international operations managers and group CFOs.

Which types of global business apps do you build?
Mostly multi-currency and multi-language customer portals, employee apps for global teams, cross-border KYC/KYB onboarding, supply chain track and trace with customs integration, expense management for international travel, cross-border compliance dashboards (CSRD, SFDR, EU Taxonomy, SOX alignment), and customs and trade finance modules for exporters. We work with multinationals headquartered in the Netherlands, international scale-ups, B2B exporters in industry and high-tech, and cross-border service providers. For the service layer of a single, clearly defined app, see also our app development.
How do you handle multi-currency and multi-language?
For multi-currency we work with an exchange rate pipeline (Open Exchange Rates, an ECB feed or your own feed from the central bank) and a data model that stores the source, booking and reporting currency for each transaction. This enables correct quarterly consolidation and supports recalculation when IFRS rules change. For multi-language we use ICU MessageFormat with Right-to-Left support for Arabic, Hebrew and Persian users, and a translation workflow with fallback languages so that a Mongolian customer never lands on a blank screen.
How do you manage cross-border data transfers?
Every data flow leaving the EU falls under GDPR requirements for cross-border transfers. We explicitly implement the instruments the supervisory authority accepts: Standard Contractual Clauses for regular third countries, Binding Corporate Rules for intra-group transfers, and for the United States the EU-US Data Privacy Framework via a certified US recipient. For each dataset we document which instrument applies and which additional safeguards (encryption, pseudonymisation, strict access control) are in place. For concerns with data flows to the US, UK, Switzerland, Singapore, Brazil or South Africa, we provide the relevant DPIA building blocks per region.
How do you handle cross-border CSRD reporting?
We build CSRD reporting as a data layer on top of your existing financial and HR systems, rather than as an after-the-fact export. For each CSRD data point, we define which source table or system supplies the value, with an audit trail down to transaction and invoice level. For groups with multiple CSRD-reporting entities, we support per-entity and consolidated reporting side by side, aligned with SFDR for financial products and the EU Taxonomy for activity classification. For the details of such a project, we often work from our CSRD/ESG reporting software approach.
Do you work with multi-region cloud?
Yes. For most international projects, the app runs across several AWS, Azure or GCP regions at once: an EU region for European users (Frankfurt, Amsterdam or Dublin), a US region for North America, and an APAC region for users in Asia (Singapore, Sydney or Tokyo). For clients who want data sovereignty (French HDS, German BSI C5, Italian AgID), we configure data residency explicitly. For the performance layer, we use Cloudflare or Fastly as a global CDN.
How do you handle export control, sanctions lists and MFA for international travel?
For exporters of high-tech machinery, semiconductor components and software with cryptography, the EU Dual-Use Regulation 2021/821 applies. We build dual-use classification into order creation, with sanctions list checks, end-use declarations and licence tracking as standard. For MFA, we use a travel-aware identity layer: users can flag a travel plan, so login attempts from announced regions are handled with a second-factor prompt, while unusual patterns trigger additional checks. For the B2B context of such flows, we often draw on our custom B2B app.
Do we retain ownership of the code and the data?
Yes. We deliver the code in a repository managed by your group, with OAuth credentials, hosting credentials and database ownership in your company's name. If you change suppliers, your group makes an acquisition or divests a regional subsidiary, no hidden dependency remains and a successor can continue the project without Appfront.
How much does a global business app cost?
A multi-currency client portal for a single Dutch exporter is a different project from a worldwide employee app for a multinational with tens of thousands of staff, or a cross-border compliance dashboard that must meet SOX, CSRD and SFDR requirements at once. We work with a fixed sprint budget and, after the planning phase, give a concrete price for the complete build, including integrations and compliance work. What we often do: start with one clearly defined flow for one region, and expand once that works.
Can you build for a Schiphol cargo, supply chain or scale-up context?
Yes. For logistics organisations around Schiphol cargo, exporters with daily shipments through Rotterdam port terminals, and agritech players handling perishable goods, we build supply chain track-and-trace environments with automatic HS classification, EU Customs Single Window submission and integrations with local customs systems. For international scale-ups, we more often build on a SaaS stack and deliver custom software where growth hurts most: typically cross-border customer onboarding, multi-currency invoicing and an employee app that scales with international teams. Our experience with the multi-tenant platform approach gives us a strong starting point there.
Do you work with enterprise security and SSO?
Yes. For global business organisations, we work with enterprise identity providers as standard: Okta, Azure AD/Entra ID, Ping or an in-house IdP. SSO across all regions, MFA for all users and SCIM provisioning from your HR system are standard. For clients who require ISO 27001, SOC 2 or a local equivalent, we supply the evidence for our part of the stack. For the wider enterprise context, we work through our enterprise software programme.
Fabian van Dijk · Business Developer
Talk to us about global business apps, multi-region rollouts and cross-border compliance. Email fabian.vandijk@appfront.nl.

Talk to us about your international rollout.

A 30-minute introductory meeting with a CIO, group CFO, international operations manager or regional managing director. We listen, ask questions and offer an initial direction. No obligation.

Edit content