Web Development Company in Edinburgh

Sign-off workflow is the difference between a fast Edinburgh site and a slow one, and it shows up in the scope. A scoped Edinburgh marketing site is a six to ten week engagement covering UX, design, build on Next.js or Astro, a headless CMS (Sanity, Contentful, or Storyblok), Cloudflare or Vercel hosting in UK regions, PSBAR WCAG 2.2 AA conformance, and ICO-aligned cookie and privacy infrastructure. FCA-regulated financial services marketing sites for firms like abrdn, Baillie Gifford, or Scottish Widows-tier brands add financial promotions sign-off workflows, Consumer Duty outcome tracking, and SYSC record retention. Scottish public sector builds against the Digital Scotland Service Standard with mygov.scot pattern alignment are scoped against transactional complexity. We quote fixed fees, not T and M, so Edinburgh finance directors get a number they can defend at quarter-end.

Yes. Our FCA work includes financial promotions sign-off workflows (CONC, COBS, MCOB depending on activity), Consumer Duty (PS22/9) outcome tracking wired into analytics so firms can evidence good outcomes to the FCA's four outcomes test, SYSC record retention for marketing communications, and PRA operational resilience controls under SS1/21 and PS6/21 where the firm sits inside the PRA dual regulation perimeter. We have patterned builds after public estates from NatWest Group, Lloyds Banking Group, abrdn, Scottish Widows, and Aegon UK, including approver workflows, audit trails, and archive search that survive an FCA thematic review or s.166 skilled persons report without a remediation programme. ICO UK GDPR registration and cookie consent ship inside the same delivery, not as a Phase 2.

Yes. Our Scottish public sector engagements run against the Digital Scotland Service Standard's discovery, alpha, beta, live phases, with self-assessments produced at each gate and a service assessment pack ready for the Digital Directorate at Victoria Quay. We align with mygov.scot design patterns, integrate with Scottish Government myaccount when citizen authentication is in scope, and pass the PSBAR accessibility monitoring run by the Cabinet Office and the Scottish Government's accessibility team. Builds default to AWS eu-west-2 (London), Crown Hosting, or UKCloud where Official-Sensitive workloads require sovereign hosting. We have delivered to this standard for Scottish public bodies and produce the Digital Service Standard evidence pack as a delivery artefact, not a post-launch scramble.

All builds ship to WCAG 2.2 AA, the legally required standard for Scottish and UK public sector under the Public Sector Bodies (Websites and Mobile Applications) (No.2) Accessibility Regulations 2018 (PSBAR), and the de facto standard the Equality and Human Rights Commission expects for private sector under the Equality Act 2010. We run axe-core in CI on every pull request, manual NVDA, JAWS, and VoiceOver testing before each release, and a published accessibility statement aligned with the Scottish Government template. For Edinburgh public sector clients we coordinate with the Digital Directorate's accessibility monitoring team and address any findings inside contracted maintenance, not as a change request. We have remediated existing estates that failed Scottish Government audits to pass on re-monitor without a rebuild.

A typical Edinburgh fintech marketing site (CodeBase tenant, Bayes Centre spin-out, FNZ partner firm) takes eight to fourteen weeks from kickoff to launch, assuming brand assets exist and content is drafted in parallel. Week 1 to 2 is discovery, accessibility baseline, and a UK GDPR data flow map. Week 3 to 5 is UX wireframing and design in Figma with a tokenised component library. Week 6 to 10 is build on Next.js or Astro with a headless CMS your marketing team can run. Week 11 to 12 is QA, Lighthouse and axe-core gating, FCA financial promotions sign-off if applicable, and a Scottish Government accessibility-monitor-equivalent pass. Week 13 to 14 is launch and handover. Application-grade builds with authentication, payments, and FCA-regulated journeys add eight to sixteen weeks.

Both. We white-label production engineering for Edinburgh design and brand agencies on George Street, Leith, and Stockbridge who need a UK-hours build team that does not compete on creative or strategy. We also work directly with NatWest Group business units, abrdn, FNZ, Skyscanner alumni founders, and Scottish Government tier-one suppliers when the client wants a single accountable delivery partner. In agency mode we work to your studio's brand, Figma, and project management standards and never market to your client. In direct mode we lead discovery through to launch with the client's product, compliance, and brand leads. References from both modes are available under NDA on request.

Yes. Default hosting is AWS eu-west-2 (London) or eu-west-1 (Ireland), Cloudflare's London POPs for edge delivery, and Vercel or Cloudflare Pages for Next.js and Astro front ends with UK region pinning configured. For Scottish public sector and FCA-regulated clients who require sovereign or restricted-region hosting we deploy to UKCloud, Crown Hosting, or AWS GovCloud-equivalent UK-only configurations. Maintenance contracts cover dependency upgrades, security patching against the National Cyber Security Centre's Cyber Essentials Plus guidance, accessibility regression testing, CMS training for new marketing hires, and a documented incident response runbook that satisfies the FCA's operational resilience and impact tolerance requirements. SLAs are committed in writing with credits for breach, not best-effort language.

Yes. Our Edinburgh financial services integrations include FNZ wealth platform APIs, Aladdin (BlackRock) read endpoints for asset manager marketing sites, Modulr payments-as-a-service (Edinburgh HQ) for fintech onboarding flows, Bottomline and Form3 for payment initiation, and Salesforce Financial Services Cloud and Microsoft Dynamics 365 for advisor and intermediary portals. For NatWest Group, Lloyds, abrdn, Scottish Widows, and Aegon UK-tier integrations we work behind the firm's API gateway with OAuth 2.0 and mTLS, and we produce the third-party risk management documentation, SOC 2 Type II or ISO 27001 evidence, and PRA SS2/21 outsourcing register entries the procurement and operational resilience teams need. We do not pretend we built the back-office. We integrate cleanly.