Custom software development for public health services (GGD)
Appfront builds custom software for GGDs, the 25 municipal health services that carry out the Public Health Act (Wet publieke gezondheid) under joint arrangements. From youth health care and infectious disease control to travel vaccinations, inspections and health monitoring, we build applications that match your actual processes, connect to national services and handle medical data with care. Book a no-obligation consultation to discuss your challenge.
What is software for a GGD?
A GGD, municipal health service, carries out the statutory public health tasks on behalf of the participating municipalities. Each GGD is a joint arrangement of several municipalities and operates within the framework of the Public Health Act (Wet publieke gezondheid). Its tasks range widely: youth health care, infectious disease control, travel vaccinations, technical hygiene care and inspections, forensic medicine, and health monitoring. Software for a GGD supports these processes, from appointment planning to record keeping and reporting.
Because the scope of tasks differs by region and each task has its own legal framework and data flows, a off-the-shelf package often fits only in part. Custom software can be shaped around your actual way of working, from call-ups for child health clinics to source and contact tracing during an outbreak. We connect to the right base registers and respect medical confidentiality, so professionals work with the software rather than around it. See also our wider services on healthcare software and custom software.
Appfront builds with security in mind, following the OWASP ASVS and paying attention to NEN 7510, the Dutch standard for information security in healthcare. We align functionality, integrations and error handling with your processes, so the software keeps pace with changing tasks and legislation. We also build software for related public bodies, such as municipalities.
Shaped around GGD processes
Software that follows your actual tasks, from youth healthcare to infectious disease control, rather than a generic package your team has to work around. Built modularly so it can grow with your range of duties.
Secure with medical data
Special category data about health requires extra protection. We design with data minimisation, role-based access and strict logging, GDPR-compliant and mindful of medical confidentiality and NEN 7510.
Connected to base registers
Integration with national services such as the BRP (personal records database) for up-to-date personal data and DigiD for secure client and appointment portals. We build integrations according to the official standards, with minimal and traceable data flows.
Our approach to GGD software
We work to a proven methodology that removes uncertainty early and delivers stable software. From an initial analysis of your GGD tasks, data flows and required integrations through to go-live and ongoing management, every step is aimed at software your professionals can understand and trust. Get in touch to discuss your challenge.
We map out which GGD tasks the software supports, which data and legal bases are involved, which integrations are needed and which information security requirements apply (GDPR, NEN 7510, BIO).
We design the architecture and data minimisation, choose the right authentication and access rights, and determine how we connect to base registries and existing systems.
Implementation with automated tests, structured logging and monitoring. You see working versions along the way and steer the project based on what your professionals need.
Controlled go-live with data validation and a safety net, followed by ongoing management, monitoring and further development as tasks and legislation change.
What GGD software can do in practice
Every GGD application is tailored to your tasks, professionals and connected systems. Below are the features we most often deliver for public health services that want custom software to support their processes.
Planning & appointments
Appointment management and automated invitations for child health clinics, vaccination rounds and travel vaccinations. Using up-to-date personal data from the BRP, waiting list and capacity management, and reminders, so planning and attendance run smoothly.
Client records
Structured record-keeping for areas such as youth health care and forensic medicine, with role-based access and logging. Only authorised professionals see the right data, in line with medical confidentiality and the GDPR.
Notifications & source and contact tracing
Registration of notifiable infectious diseases and support for source and contact tracing: mapping, following up and monitoring the status of contacts. With an overview for teams who need to switch quickly during an outbreak.
Inspections & supervision
Support for inspections such as childcare and technical hygiene checks: inspection planning, checklists, findings and reporting. With a link to the relevant national register, so supervision is traceable and consistent.
Stock & logistics
Management of vaccine stocks and materials for travel vaccinations and vaccination programmes: stock levels, shelf life and orders. This helps you prevent shortages and waste and keep track of what is available at each location.
Dashboards & health monitoring
Epidemiological dashboards and reports for health monitoring: trends and key figures at an aggregated level, with attention to traceability. This lets you underpin policy and environmental advice with up-to-date insight, without displaying unnecessary data.
Who we build GGD software for
Public health software differs from service to service. We regularly see a number of recurring areas, and for each of them we help think through the processes, the right integrations and careful handling of medical data.
Youth health care
Child health clinics and youth health teams that keep track of children from birth to adulthood. Software supports scheduling, invitations and record keeping, with up-to-date personal details from the BRP integration and secure access for parents via a DigiD integration.
Infectious disease control
Teams that process notifications and carry out source and contact tracing during outbreaks. The software helps map, follow up and monitor the status of contacts, with an overview for rapid switching and strict logging given the sensitivity of the data.
Travel vaccinations
Vaccination clinics with appointment management, tailored advice and vaccine stock management. Clients can book an appointment safely through a portal, while the service keeps track of capacity, expiry dates and what is available at each location.
Inspections & health monitoring
Technical hygiene care and inspections, including childcare, linked to the national register. In addition, epidemiology and health monitoring with dashboards that underpin policy and environmental advice, without displaying unnecessary data.
Test your idea first: a working prototype in 1 day
With OneDayBuild, we turn your idea into something tangible in one day for €1,150, so you can see whether further development is worth the investment. Decide to go ahead with the full build? Then we credit the full cost.
Explore OneDayBuild →Technology and integrations
We build GGD software using a modern, proven web stack and connect it to the national services relevant to your process. The precise choice depends on your existing systems and information security policy, so that your own IT department or that of the participating municipalities can manage and further develop the software. Relevant integrations include the BRP integration, the DigiD integration and the ZGW API integration for case-based working.
Why choose Appfront for your GGD software?
Appfront builds custom software for a range of organisations in the Netherlands, including government bodies. We always begin with a thorough analysis of your existing systems and processes. Software must not only work technically, but also add practical value to the work of your professionals.
On every project we write clear documentation and make sure that your own IT department, or a future supplier, can understand and manage the software. No black box, but transparent code and clear agreements on monitoring, alerting and management. We are happy to work alongside the IT teams of the participating municipalities.
You work with a dedicated point of contact who understands both the technical and the functional side. This keeps communication short, prevents misunderstandings and speeds up decisions when choices need to be made during development.
See also our services for related areas of government, such as software for municipalities and AI for municipalities and government, or our wider healthcare software.
- Experience with custom software for government
- Experienced with integrations to base registries (BRP, DigiD, ZGW APIs)
- Security and privacy by design: GDPR, NEN 7510-aware and BIO
- Careful handling of medical data and professional secrecy
- Role-based access, data minimisation and strict logging
- Comprehensive monitoring and alerting from day one
- Clear documentation that your IT department can read and manage
- A fixed point of contact, no account managers passed around
- Ongoing maintenance and proactive further development
- A way of working aligned with your existing IT landscape
Security and privacy in GGD software
GGD software processes special category personal data concerning health. Under the GDPR this data receives additional protection and falls under medical professional secrecy, so security and privacy are central from the design stage. Appfront builds in line with the OWASP ASVS: data minimisation, role-based access with least privilege, strict logging and regular audits. Only authorised professionals see the data they need for their task.
We apply the correct lawful bases for processing and document the data flows, so that your record of processing activities is complete and you can demonstrate compliance with the GDPR. NEN 7510, the Dutch standard for information security in healthcare (based on ISO 27001/27002 and ISO 27799), is the guiding framework for medical data. As a GGD is a government organisation, we also take into account the Baseline Information Security for Government (BIO) and digital accessibility (WCAG 2.1 AA) for client and appointment portals.
More on our security approach: information security policy and CVD policy.
- GDPR-compliant processing of special category personal data
- Medical professional secrecy and data minimisation by design
- NEN 7510-aware and BIO as the framework
- Encryption in transit (TLS 1.2+) and at rest
- Role-based access and least-privilege principles
- Audit logs with traceable data flows
- Monitoring and alerting for anomalies
- Documentation for your record of processing activities
Frequently asked questions about GGD software
Answers to the questions we most often receive about custom software for GGDs.
Custom software for a GGD is an application built specifically for the processes of a municipal health service, rather than an off-the-shelf package. Think of systems for youth health care, infectious disease control with source and contact tracing, travel vaccinations, childcare inspections or health monitoring. Because a GGD is a joint arrangement under the Public Health Act, with tasks that differ by region, custom software often fits the way work is actually done better than a generic package.
Off-the-shelf packages often cover only part of GGD tasks and force you to work around the software. A GGD combines tasks that each have their own legal framework and data flows, from youth health care to forensic medicine. Custom software can be shaped around these processes, connect to the right base registries and take medical confidentiality into account. Sometimes a hybrid approach fits best: custom work built around an existing core system. We determine together, after an analysis, which route works best.
We build software for a wide range of GGD tasks: youth health care, with scheduling and invitations for child health clinics; infectious disease control, with notifications and source and contact tracing; travel vaccinations, with appointment management and stock; technical hygiene care and inspections (including childcare); forensic medicine; and epidemiology or health monitoring, with dashboards. We can also support environmental advice and medical environmental health. For each project, we tailor the functionality to your range of duties.
For GGD software, integrations with national facilities are often essential. A BRP integration provides up-to-date personal data for call-outs and client records, a DigiD integration secures appointment and client portals, and a ZGW API integration connects to case-based working at municipalities. Integration with national registers for inspections is also possible. We build these integrations to official standards and keep data flows minimal and traceable.
GGD software processes special categories of personal data concerning health, which receive additional protection under the GDPR and fall under medical confidentiality. We design with data minimisation, role-based access and strict logging, so that only authorised professionals can reach the right data. We work GDPR-compliant with clear legal bases, build with security in mind according to the OWASP ASVS, and take NEN 7510, the standard for information security in healthcare, into account.
We build GDPR-compliant software, with attention to the correct legal bases for processing, data minimisation and a complete record of processing activities. NEN 7510, the Dutch standard for information security in healthcare (based on ISO 27001/27002 and ISO 27799), guides us when processing medical data. Because a GGD is a government organisation, we also take the Baseline Information Security for Government (BIO) and digital accessibility for portals into account. We will align the exact set of standards with your organisation.
Yes. Appfront regularly takes over the maintenance of existing applications, even if they were originally built by another party. We review the architecture, integrations, security and error handling, document the current setup and propose improvements. From then on, we can handle changes, new modules and monitoring, so the software keeps pace with changing tasks and legislation.
Yes. We align our way of working with your existing IT landscape and information security policy, and we are happy to work alongside your own IT department or those of the participating municipalities. We write clear documentation so that your team, or any future supplier, can understand and manage the software. No black box, just transparent code and clear agreements on management, monitoring and further development.
Ready to get your GGD software built?
Tell us which GGD tasks you want to support with software and which systems and basic registers it needs to work with. We are happy to think along with you about processes, integrations and the careful handling of medical data. A no-obligation first conversation will quickly give you a clear picture of what is possible. Book an advisory call or take a look at our software for municipalities.