Problem
A constellation of small Dutch services running on bespoke .NET. Hard to maintain, slow to update, expensive in licensing.
21 services live in 9 months. Citizen response time −58%. CX score +29 pts. 70% citizen-dev led after handover.
A constellation of small Dutch services running on bespoke .NET. Hard to maintain, slow to update, expensive in licensing.
Mendix CoE for the city, reference architecture, design system aligned to NL DesignSystem. Citizen developers trained and reviewed under city standards.
21 services live in 9 months. Citizen response time down 58%. CX score +29 points. 70% of releases citizen-dev-led after handover.
Five phases. One accountable team. Every phase had a named decision point and a measurable outcome.
Workshops with the Leading European Municipal Authority executive team, baseline metrics, target outcome tree, programme governance set up.
Reference architecture, security blueprint, joint squad model agreed. Data model and integration contracts published.
Vertical slice built and run live-parallel against the existing system. Continuous integration, daily deploys, weekly business demos.
Phased cutover, audit-aligned reconciliation, scaling out of squads, capability transfer to Leading European Municipal Authority teams.
Managed run with named SLOs, quarterly value reviews, and a 15% optimisation budget reserved for improvement work.
Cloud landing zone, identity, network, security baseline. Data fabric with lineage-by-default. Audit-grade observability stack from day one.
Domain-aligned microservices behind a published API surface. Event-driven core with CDC into the data fabric. Live-parallel capability built in, not bolted on.
RBAC, audit logs, lineage, policy-as-code. Model risk records for every production model. Compliance posture on the executive dashboard, not in a quarterly slide.
Production-grade choices, defended by track record. The stack is one engineering decision among many — but a load-bearing one.
Independent assurance reviews at each phase gate. Findings tracked in a single risk register with named owners and remediation deadlines.
ISO 27001, SOC 2 Type II controls applied throughout. Data lineage captured by default; sensitive data tokenised at the edge.
Deployment aligned to national cybersecurity authority controls. Sovereign cloud where data residency requires it.
WCAG-AA on every citizen-facing journey. Arabic-first design with parallel English; user-research panels include accessibility users.
The municipality runs the platform now. That is the right end-state.
C CIO · Leading European Municipal Authority
9 months from kickoff to first regulated outcome — squad density and decision velocity matter more than headcount.
Joint squads with Leading European Municipal Authority engineers stayed in place after go-live. Ownership did not transfer in a hand-off — it grew in place.
Live-parallel for a meaningful window before cutover bought us trust. The cutover itself was a flag flip, not a war room.
Tell us your sector and your timeline. A senior partner with sector experience will respond within one business day.