At a glance
- Custom software with a client portal, back office, time tracking and secure file sharing, designed around day-to-day mental healthcare practice.
- Microsoft 365 with conditional access and a password manager, so access to sensitive data stays under control.
- Endpoint security on every device, in line with handling special category personal data and HKZ quality standards.
- One IT partner for software, security, Microsoft 365, consultancy and the website: short lines of communication and calm, predictable management.
Zorggroep Soeverein provides expert, tailored support to adults (18+) living with mental health problems. Based in Zoeterwoude-Rijndijk, the organisation works from several locations across the Leiden region and the Rijnstreek, including Alphen aan den Rijn, Oegstgeest and Leiderdorp, and is built on two clear pillars: community-based support and supported housing. Its principle is simple: good care is care you share, with a dedicated, trusted support worker and a personal support plan for every client. That promise takes committed professionals, but it also takes IT that quietly does its job in the background and grows with the organisation. In mental healthcare, everything revolves around special category personal data. Support workers record progress, share information with colleagues and sometimes work alongside other care providers and public authorities. All of that has to happen without sensitive data ending up where it shouldn't, and without technology getting in the way of care. Zorggroep Soeverein is HKZ-certified, so diligence and demonstrable quality are not a nice-to-have but a requirement, including for IT and information security. TRON Group is the IT partner that takes care of the whole picture for Zorggroep Soeverein: from custom software for clients and staff to device security, the Microsoft 365 environment and the website. In this case study you can read how we tackled it together, with real involvement in the care side, short lines of communication and transparency about the choices we make.
Starting point
The challenge
Zorggroep Soeverein was growing and operating across several locations in the region, with support workers out in the community and colleagues based at supported housing sites. That brings a number of challenges. Client information needs to be central, up to date and securely available wherever a member of staff happens to be. At the same time, this is special category personal data, on which the GDPR and the HKZ certification impose strict requirements. In practice, this meant that separate tools and off-the-shelf packages didn't always fit the way people worked. Time tracking, file sharing, communication with clients and internal coordination between staff needed something that fitted the care processes, not the other way round. On top of that is the question of who may access which data and when, a sensitive issue when you work with personal support plans and medical context. The organisation's public face had to be right too. The website is often the first point of contact for new clients, their families and people looking to apply for a job, so it needed to be reliable, clear and always up to date. In short, Zorggroep Soeverein needed IT that moves with the care it provides, protects data and takes the hassle off the team's hands, without the organisation having to build a full IT department of its own.
How we tackled it
Our approach
Listening to the care practice and mapping the risks
We started with IT consultancy: looking at how support workers, the back office and care coordination actually work. What data is recorded, who needs which access, and where are the risks in working with special category personal data? Based on that analysis, and with the GDPR and HKZ requirements in mind, we agreed priorities together before a single line of software was written.
Building custom software around clients and staff
Through our Software Engineering team we developed bespoke software: a client portal and an internal back office for staff. It includes time tracking, secure file sharing and functionality that fits working with personal support plans. The guiding principle throughout was that the software supports the care, not the other way round, so support workers have more time left for their clients.
Setting up and managing the Microsoft 365 environment
We set up the Microsoft 365 environment and take care of its management. That includes conditional access: rules for who can access data, from which device and under what circumstances. Collaboration stays easy for the team, while access to sensitive information remains controlled and auditable.
Securing devices and passwords
As part of our Cyber Security service, we rolled out endpoint security on the devices staff use, precisely because they work in the community and across different locations. We also set up a password manager so the team uses strong, unique passwords without the hassle. Security that works in day-to-day practice, rather than something people work around because it's too cumbersome.
Building and maintaining a reliable website
We built the website and look after its ongoing management. The site is where new clients, families and job applicants land first. With development and management in one pair of hands, the information stays current and the technology up to date, and Zorggroep Soeverein has a single, dedicated contact for questions or changes.
The big picture
The solution
The result is a coherent IT environment tailored to care. The custom software brings the client portal, internal back office, time tracking and secure file sharing together in one system that fits how community-based support and supported housing work in practice. Staff can find what they need in one central place, and sensitive information is no longer scattered across separate tools. Underneath that software sits a secure foundation. TRON Group manages the Microsoft 365 environment, with conditional access governing who can reach data and under which conditions. Devices run endpoint security and the team works with a password manager. For an HKZ-certified organisation that handles special category personal data, this means control over access and a defence that suits the mobile, multi-site nature of the work. On the outside, the website built and managed by TRON Group gives clients, families and job applicants a reliable starting point. Because we provide software, security, Microsoft 365, consultancy and the website from a single source, lines of communication are short and Zorggroep Soeverein doesn't have to juggle separate suppliers. The care team stays in charge; we keep the IT that works, grows and protects in good order.
What it delivers
The results
- Software for the client portal and back office
- Custom-built
- Managed access to Microsoft 365
- Conditional access
- Endpoints and password management
- Secured
For Zorggroep Soeverein, IT has gone from a collection of separate parts to a calm, coherent foundation. The custom software fits the care processes, so client data, time tracking and file sharing are central and easy to oversee. Support workers can securely access what they need on location and on the move, without technology holding them up. On security, the organisation is demonstrably better protected. With conditional access in Microsoft 365, endpoint security on devices and a password manager, access to special category personal data is controlled and traceable, which fits well with GDPR obligations and the HKZ certification. The website gives clients, families and job applicants a reliable, up-to-date starting point. Perhaps most importantly, Zorggroep Soeverein has one dedicated IT contact for software, security, Microsoft 365, consultancy and the website. That means short lines of communication, predictability and the space to focus on what really matters: good, personal care.
FAQ
