Development
At KvalitetsIT, we develop and deliver essential IT systems for your business. Our solutions include central backend services that support and manage business-critical services and the secure handling of sensitive personal data.
DEVELOPMENT
Development of business-critical IT systems
KvalitetsIT develops and delivers business-critical IT systems. Our solutions and systems often comprise central backend services that handle specific business-critical functions and securely manage sensitive personal data. We ensure that your data is always handled with the highest level of security.
Our involvement in projects and tasks ranges from taking full responsibility for the delivery to offering our help as consultants in your existing team. This means that whether you need a total solution or just a helping hand, we are ready to assist. We believe in fostering close collaboration and strong relationships to achieve the best possible outcomes together.
National Service Platform (NSP), security and data sharing, Danish Health Data Authority
KvalitetsIT is responsible for the support and maintenance of the Danish Health Data Authority’s components for managing security and data sharing in the healthcare sector in Denmark. The agreement covers support in accordance with the Authority’s procedures, along with ongoing maintenance, further development aligned with QA requirements, testing, documentation, and standardisation of both architecture and architectural documentation. The agreement includes monthly deliveries, which are rolled out to production at different times, coordinated with the Health Data Authority’s other suppliers and priorities. The platform handles several hundred million requests each month.
For further details on the platform, visit the Danish Health Data Authority’s NSP page or read our case study on simplifying health data.
BENEFITS
Advantages of our development solutions
We ensure that our deliveries quickly generate value for your business. Here are some of the key benefits of our solutions:
- Deliveries are put into production promptly, ensuring rapid value generation.
- We work in scrum teams, providing continuous updates and adjustments.
- Security and privacy are integrated from the start of the development process.
- We consider operation and maintenance from the beginning and involve all relevant parties.
- We use DevOps principles and microservices to standardise and simplify operations and management.
Deliveries are put into production immediately
We put deliveries into production immediately, as delaying for months or years offers little value. Only software in production has real business impact, so we ensure prompt delivery to maximise your benefits. That’s why, together with your organisation, we continuously deliver a product ready for immediate production, so you can start benefiting from its functionality right away.
We work in a larger or smaller team, running a scrum process together with you and possibly other suppliers for your software or IT development. The team delivers regular updates, ensuring continuous production-ready releases. This approach allows the entire team to gain experience with the delivery and can make adjustments as all parties learn more and potentially have new or changed needs.
Focus on security and operations from the start
We base our development on security-by-design and by-default, as well as privacy-by-design and by-default, so security and privacy are integrated from the start. As an integrated part of the development process, we think about the subsequent operation and management of the IT system right from the beginning. We involve all relevant parties, both within your organisation and external partners, to ensure the best results in both the short and long term.
Whenever possible, our deliveries are based on microservices (Docker containers), which contribute to the gradual standardisation and harmonisation of operations and management of your systems. We apply DevOps principles where relevant and possible to create more efficient and stable solutions.
National video infrastructure (VDX), Medcom
KvalitetsIT provides, among other things, the booking API and federated login for Medcom’s National Video Infrastructure. The system is used by a wide range of stakeholders, enabling individuals to consult their doctors via video and access telemedicine services with hospitals.
For more information about the video infrastructure, visit Medcom’s video hub page.
PROCESS
The process for tailored solutions
If you need software with specific functionalities, we can create a tailored solution, starting with an introductory meeting to align expectations and define the required features. Next, we hold two workshops: the first focuses on the technical aspects, while the second covers project planning and organisation.
Focus on all the technicalities the software should include.
Focus on planning the process and organisation.
Once the requirements, criteria, and organisation are finalised, we proceed to kickoff, where development and production begin. Agile development and production is a process where we continuously develop and test in iterative cycles. We test how the functions perform in practice, allowing us to refine and enhance your software as needed.
Hosting, support, and maintenance
Once your software is developed, it needs to be hosted. You can either leave the hosting to us or manage it yourselves. Because software is constantly evolving, there will always be a need for ongoing maintenance and support after the project is completed. You can leave it all to KvalitetsIT, we can do it together, or you can take full responsibility over the operation and maintenance of your software.
Telemedicine (KOMO), Region Midtjylland
KvalitetsIT delivers a range of APIs and user interfaces that enable both staff and patients to access the home monitoring programmes offered by the region to its citizens.
For more information about KOMO, read Region Midtjylland’s article “Ny løsning til hjemmemonitorering i Region Midtjylland” (‘New solution for home monitoring in Region Midtjylland’) or view the technical documentation for KOMO.
TECHNOLOGY
Examples of the technology used
We use a wide range of technologies and have listed some of them below.
You might spot what you’re looking for. If you don’t see what you’re looking for, feel free to contact us, and we’ll be happy to discuss your specific needs.
Microservices
-
Construction of microservices in various languages such as Java, .Net, Golang, Python, Containerisation of services via Docker.
-
Handling of asynchronous communication via streaming and messaging (NATS, Kafka, RabbitMQ).
-
Control of service-to-service communication via Service Mesh such as linkerd2, Istio, and KvalitetsIT’s own proxies.
-
Services are orchestrated via Kubernetes. KvalitetsIT can perform onsite installation of Kubernetes via Kubespray, Rancher, or other cluster provisioning tools.
-
KvalitetsIT has built experience over several years with many open source projects, including under the Cloud Native Foundation. We also contribute to open source ourselves.
DevOps
-
Automation of the delivery process: Jenkins, Azure DevOps, and Argo.
-
Automation of testing: Integration tests are run automatically as part of the delivery and quality process. Testcontainers are used as part of the testing, so tests can easily be automated.
-
Automation of service installation and provisioning via Helm, Kubecfg, Ansible, and Jsonnet.
-
Continuous integration and delivery.
-
All installation is done as code in GIT – Configuration-as-code.
Observability and analysis
Monitoring
-
System administrators can keep track of how services are performing without having to request statistics from operations.
-
The system can be set up to push metrics from running services via Prometheus, Grafana, AlertManager.
-
Metrics are collected and presented live via Grafana. Alerts are triggered when services do not behave as specified.
Logging
-
Logs can be collected centrally, making them searchable. This allows for the generation of standardised reports, so statistics and error reports can be extracted from the system.
-
FluentBit, ElasticSearch, and Kibana are used for in-cluster monitoring, so log data is not sent to the cloud.
Security
-
We are specialists in security and have secured a number of systems using standard security protocols such as OIDC/OAuth, SAML, OIOIDWS, and XUA.
-
Integration with Identity Management and Identity providers such as ADFS and NemLog-in.
-
We offer to set up IdPs like Keycloak and either our own proxy components or keycloakproxy to decouple security from individual services.
-
We have developed components to solve cross-cutting concerns for handling security (SAML2, IDWS, OAuth).
Health IT
-
Security models relevant to the healthcare sector: DGWS, OIOIDWS, XUA, and Oauth.
-
Installation, security, and scaling in relation to IHE XDS registry, XDS repository, XCA gateways, XUA tokens.
-
Data (sharing) formats, e.g., HL7 FHIR and HL7 CDA.