Public Sector Digital Services
Modern, accessible, compliant
We build websites, portals, and internal tools for UK councils and public sector organisations. Everything we deliver is accessible, open source, and yours to keep.
Compliance credentials
The boxes your procurement team needs to tick
WCAG 2.2 AA Accessibility
We build with Radix UI primitives and semantic HTML so everything works with keyboards and screen readers out of the box. Every project is audited against WCAG 2.2 AA before it goes live.
GDPR Compliant by Design
Privacy is baked into the architecture, not bolted on afterwards. That means data minimisation, proper cookie consent, and UK hosting options where needed.
Cyber Essentials Certified
Certified 2026We are Cyber Essentials certified, meeting the UK government's baseline security standard across all five technical controls. This is a requirement for many public sector contracts handling sensitive data.
Open Standards, No Lock-In
We use React, Node.js, and PostgreSQL. You get full source code ownership and can deploy on any G-Cloud platform. Nothing proprietary, nothing you can't take elsewhere.
Cyber Essentials certified
Cyber Essentials is the UK government's security certification scheme, backed by the National Cyber Security Centre (NCSC). It's a requirement for suppliers handling sensitive or personal data on many public sector contracts. Level5 meets all five technical controls, independently verified.
Firewalls
Boundary firewalls and internet gateways configured to protect every device from unauthorised access.
Secure Configuration
Systems configured to reduce vulnerabilities, with unnecessary software and default accounts removed.
Security Update Management
Software and devices kept up to date with the latest security patches within 14 days of release.
User Access Control
Access limited to authorised individuals with least-privilege principles and multi-factor authentication.
Malware Protection
Anti-malware measures in place across all devices to prevent and detect malicious software.
What we deliver
Council Websites
Fast, mobile-first websites that meet WCAG 2.2 AA. Built so citizens can actually find what they need.
Citizen-Facing Portals
Self-service forms and dashboards that take pressure off your call centre. Residents can do things themselves instead of waiting on hold.
Internal Tools & Dashboards
Apps for your staff that actually fit how they work. Reporting, case management, operations - built around your processes, not ours.
Learning Platforms
Self-hosted LMS for staff training. Unlimited users, progress tracking, and certificates included.
Learn moreAI & Automation Consulting
We help you find the repetitive tasks that AI can handle, then build the tools to actually do it.
Learn moreLegacy Modernisation
If your current system is held together with duct tape and good intentions, we can replace it. Phased migration, zero downtime.
Relevant projects
Swipe to see more
How we deliver
Aligned to GDS service standards, with clear outputs at every stage
Discovery
We talk to your stakeholders, understand the service, and figure out what actually needs building. No code yet.
Alpha
A working prototype to test the approach. You can see it, click through it, and decide if it's right before committing more budget.
Beta
We build it properly. Fortnightly demos so you always know where things stand, with accessibility testing baked in throughout.
Live & Handover
We deploy, train your team, and hand over everything. The source code, the documentation, the lot. It's yours.
Ongoing Support
SLA-backed support with monitoring and regular updates. We stick around for as long as you need us to.
Risk management
How we protect your budget, your timeline, and your reputation
Fixed-Price Contracts
You agree a scope, we agree a price. If something changes, we quote it separately. No surprises on the invoice.
Source Code Ownership
Everything we build belongs to you. If you want to walk away and give it to another team, you can. No licensing fees, no strings.
Transparent Reporting
You get access to a live build plan so you can check progress whenever you like. We also send fortnightly updates as standard.
UK-Based Team
All work is done in the UK by named individuals. You'll know exactly who is working on your project.
Proven Technology
React, Node.js, PostgreSQL. These are widely used technologies with large talent pools, so you'll never struggle to find someone to maintain it.
Business Continuity
We document everything and build clean handover packs. Any competent developer can pick up where we left off.
Support & SLAs
We don't disappear after launch. Every project comes with SLA-backed support, clear response times, and someone you can actually call when something goes wrong.
Support tiers range from basic maintenance to fully managed service. Security patching and uptime monitoring are included on all plans.
Critical issues get a response within 4 hours. Everything else within 1 business day.
Backed by SLA and measured continuously. If we miss it, you'll know about it before we do.
Automated checks running round the clock. We catch problems before your users do.
Security patches and dependency updates every month. Performance reviews included.
Ready to discuss your project?
Whether you're putting together a tender, need a capability statement, or just want an informal chat about what's possible, we're happy to help.