Internal tools
Replace an important spreadsheet or improvised process with one clear place to work.
Belgian systems engineer
Internal tools, automation and platforms for the work your team repeats—built from data model to frontend.
01 / Services
I turn recurring operational work into software with a clear source of truth, a useful interface and a dependable path underneath—whether that work sits in a law firm, an operations team or IT.
Replace an important spreadsheet or improvised process with one clear place to work.
Make recurring work run the same way every time, with the checks that keep people in control.
Give teams managing many clients, cases or environments one reliable place to see work, standards and exceptions.
02 / Selected work
These examples come from Microsoft 365 work. The approach is the same anywhere recurring work needs a dependable system.
Private product
01
Tenant standards, drift monitoring and safe change
Problem
Across dozens of tenants, standards drift quietly: a temporary exception becomes permanent, a policy changes during an incident, and no one can later explain the difference.
Outcome
A single source of truth for tenant standards, with planned changes, visible drift and a record of every decision.
The platform compares scheduled tenant reads against templates, showing expected and actual values side by side. It supports approval flows, exception records, bulk user lifecycle work, device retirement and cross-platform application rollout. The product is intentionally not named or linked here.
Live · read-only
02
A clearer starting point for an Intune tenant
Problem
Assessing a long-running Intune tenant means clicking through several portals, then still not knowing which findings deserve attention first.
Outcome
A read-only assessment that turns a tenant into a prioritised, practical list of what to keep, fix or investigate.
Inside the product
Intune Mate checks identity, MFA, Conditional Access, app permissions, admin accounts and device management against Microsoft and CIS guidance. It maps actual policy assignments, flags legacy profiles and unassigned policies, generates Conditional Access JSON from plain English, and can move configurations between tenants safely.
Live · engine complete
03
From installer to deployed application
Problem
Packaging one application for Intune is repetitive, fragile work — and it starts again for every version, application and customer.
Outcome
A controlled path from uploaded installer to published application, without turning every package into a manual project.
Inside the product
The app identifies silent-install options, version and detection logic, then packages installers in Intune’s expected format. It can wrap installations in PSADT, upload and assign packages through Graph, and retains customer keys in Azure Key Vault. The engine is tested down to the package file’s byte layout.
In development
04
Evidence that has a history, not just a timestamp
Problem
An audit needs proof over a period of time, not a screenshot from today. Building that history afterwards creates avoidable risk.
Outcome
A traceable evidence trail that makes the state of each control easy to verify — including what is missing.
The collector records tenant state against individual measures and builds an auditor-friendly file from that history. Scheduled reads and durable evidence records are complete; dossier generation is the current focus.
Live · phase one
05
A household budget built around what remains
Problem
Most budgeting apps tell you what you already spent. That is less useful than knowing what is still available before the month gets difficult.
Outcome
A shared budget that allocates income first, so day-to-day decisions are based on what remains rather than hindsight.
Budgora allocates fixed costs, pots, annual costs and a weekly budget, including exception months. Phase one covers advance allocation; bank imports, transactions and month-end closing are planned for phase two.
03 / Useful tool
Build consistent names for security groups, policies, Endpoint Security, Conditional Access, scripts, update rings and devices—in the same order, every time.
Try Naming Convention Studio04 / Process
We spend an hour on what happens today, who does it and where the friction is. I will say plainly if I am not the right fit.
You get a concise description of the work, a price and a timeline. No proposal binder, no ambiguity.
I build in useful pieces. Every two weeks, there is something running that you can respond to.
Source code, documentation and keys are handed over. The software belongs to you, even if you continue without me.
05 / Contact
Tell me what happens today and what should happen instead. I reply within two business days, including when the honest answer is that I am not the right person for it.
Email SvenOr write directly to sven.degroodt@gmail.com