Delivery standards

Standards that hold the whole canopy

These are commitments we make on every project. They are written to be checked, not admired.

Accessibility

We design and build towards WCAG 2.2 level AA. We test with keyboard, screen readers and zoom, and record known gaps honestly rather than claiming compliance we have not verified.

Security

Secrets stay out of source code, dependencies are reviewed, data is encrypted in transit, and access follows least privilege. We follow OWASP guidance as a reference, not as a certificate.

Performance

Budgets for page weight, start-up time and responsiveness are agreed early and checked before release on mid-range devices and ordinary connections.

Ownership

You own your code, designs, accounts, domains and data. We work in your repositories and accounts wherever possible.

Documentation

Each project ends with a readable architecture note, run instructions, deployment steps and a list of known limitations.

Estimates

Estimates come with assumptions and ranges. When scope changes we say so in writing before the work, not on the invoice.

Release readiness: soil test

A practical checklist we use before any launch. Your ticks stay in this browser only if you accept optional storage.

Error monitoring is active in production Backups exist and a restore has been tested Privacy notice matches actual data collection Accessibility check completed on key journeys Rollback plan written and understood Credentials are held by the client organisation Support route communicated to users Handover documentation reviewed by client team

0 of 8 ready.