We have found that a software architecture that addresses requirements on policies, security and flexibility facilitates the development of configurable public health applications. By creating this architecture, key success factors, such as reducing cost and time-to-market of applications, adapting to changing surveillance targets and increasing user efficiency are achieved.