
Foundations
Part of Web design agencies foundations: evidence and rules for 2027
Web design agencies market entry checklist: nine gates
An evidence-led web design agencies market entry checklist for England: nine gates covering demand, pricing, ownership, accessibility, data, security and exit.
This web design agencies market entry checklist applies to a supplier preparing to sell website design and build. Market entry should stop when a critical gate lacks evidence, because a persuasive portfolio cannot compensate for unclear rights, unsafe administration or a service the team cannot support.
This checklist was prepared on 6 September 2026 for a supplier planning to serve buyers in England. It excludes sector-specific authorisation and is not legal, tax or procurement advice. The relevant qualified reviewer must approve each regulated boundary.
What to take away
- Stop market entry when a critical gate lacks evidence, because a persuasive portfolio cannot fix unclear rights or unsafe administration.
- Prove demand with named buyer types, and list the agencies buyers will compare you with before you commit budget.
- Name the buyer, deliverables, exclusions and who can reject an unsuitable enquiry before promising a full service.
- Set the price unit, scope boundaries and the route that turns an enquiry into a paid project.
- Make ownership testable by stating what transfers, stays owned or is licensed, including territory, duration and permitted changes.
- Design accessibility into acceptance using WCAG 2.2 criteria, manual review and user evidence, not just an automated tool score.
- Publication stays on hold until reviewers sign the actual claims and journey, with every objective claim substantiated.
1. Prove demand and map the field
- Name the buyer types you will serve, the work they need done and the evidence that they buy it now.
- List the agencies a buyer will compare you with, from established UK studios such as Clearleft, Torchbox and Nomensa to the local firms you meet in pitches.
- Write the position you will hold, including the work you will turn down to keep it credible.
Stop if: the plan rests on a market figure you cannot source, or on a difference no buyer can check before buying.
2. Price the work and open a client route
- Set the price unit, scope boundaries, inclusions and the point at which extra work becomes a change order.
- Check that the price covers delivery, support and the time it takes to win the work.
- Name the channels that will produce enquiriesreferrals, partnerships and directory profiles — and the person who keeps each one current.
Stop if: no named buyer type has a route to a paid project, or the price cannot cover delivery and support.
3. State the service and the refusal line
- Name the buyer, user task, deliverables, operating period and acceptance record.
- List excluded work, especially content ownership, hosting, integrations, analytics and post-launch support.
- Record who can reject an unsuitable enquiry and why.
Stop if: the proposition relies on an invented market total, undefined "full service" promise or capability that no named person can deliver.
4. Establish the trading and people model
- Verify the legal party, trading name, banking route, insurance and tax registrations needed for the chosen structure.
- Define employee, worker, contractor and subcontractor relationships from their real working arrangements.
- Give a qualified finance reviewer the price unit, currency, VAT treatment and payment schedule.
GOV.UK employment-status guidance notes that tax and employment-law status can differ, and a contract label is insufficient on its own. Where a contractor works through their own company, the off-payroll working rules (IR35) may place the status decision with the client, and HMRC's Check Employment Status for Tax (CEST) tool can support that test.
Stop if: the delivery plan depends on unconfirmed availability or an unresolved status, tax or supervision question.
5. Make ownership testable
- Inventory client material, agency frameworks, open-source components, fonts, images and newly created work.
- State whether each item transfers, remains owned or is licensed, including territory, duration and permitted changes.
- Define repository, domain, hosting and credential control at exit.
The IPO copyright ownership page explains that commissioned work generally starts with the creator unless otherwise agreed in writing.
Stop if: essential assets cannot be lawfully transferred, licensed or replaced.
6. Design accessibility into acceptance
- Identify critical journeys, page states, content types, browsers and assistive technologies for evaluation.
- Combine automated checks with manual review and user evidence appropriate to the service.
- Log each failure, owner, remedy and retest result.
WCAG 2.2 supplies global, testable web-content criteria, but it does not by itself prove conformance or settle every English legal duty. The Equality Act 2010 sets the reasonable-adjustment duty for service providers, and public sector bodies also fall under the Public Sector Bodies (Websites and Mobile Applications) Accessibility Regulations 2018.
Stop if: the acceptance plan is only a tool score or excludes an essential user journey.
7. Map data before adding tags
- Record forms, accounts, analytics, embedded media, cookies, pixels, recipients, transfers and retention.
- Identify actual controller and processor decisions rather than copying role labels.
- Specify user choice, objection, deletion and change-control evidence.
The ICO final storage and access guidance covers PECR and, where relevant, UK GDPR. Permission depends on purpose and operation.
Stop if: a component's purpose, recipient or lawful deployment cannot be explained.
8. Secure build, operation and recovery
- Assign privileged access, code review, patching, backups, logging and incident response.
- Test restoration and access removal with authorised fixtures.
- Document supplier dependencies and restart authority.
The NCSC guide to secure online services treats people, processes, technology and supply chains as one system.
Stop if: there is no recoverable backup, incident route or owner for administrative access.
9. Clear claims and the exit route
- Link every objective website claim to current substantiation and a named approver.
- Check consumer information, advertising, sector rules and accessibility independently.
- Rehearse export, credential transfer, retention, deletion, continuity and final acceptance.
The CAP Code, which governs UK non-broadcast advertising, addresses substantiation, qualification and price presentation. Publication remains on hold until the relevant reviewers sign the actual claims and journey.
Before you act
- Prove demand, map the competitor field and write the position you will hold.
- Set the price unit, scope boundaries and the route from an enquiry to a paid project.
- State the service, buyer, deliverables and refusal line.
- Verify the legal party, banking, insurance and tax registrations, and test employment status from real working arrangements.
- Inventory assets and define repository, domain and credential control at exit.
- Record critical journeys, manual review and user evidence for accessibility acceptance.
- Map data, recipients, transfers and retention before adding tags.
- Assign privileged access, patching, backups and incident response.
- Link every objective website claim to current substantiation and a named approver.
Common questions
What should happen when a critical gate lacks evidence?
Market entry should stop. A persuasive portfolio cannot compensate for unclear rights, unsafe administration or a service the team cannot support. The checklist says to stop if the proposition relies on an invented market total, an undefined full service promise or capability no named person can deliver.
Does a contract label settle a contractor's tax and employment status?
No. GOV.UK employment-status guidance notes that tax and employment-law status can differ, so a contract label is insufficient. The checklist says to define employee, worker, contractor and subcontractor relationships from their real working arrangements, and to stop if delivery depends on an unresolved status, tax or supervision question.
Who owns commissioned work unless otherwise agreed?
The IPO copyright ownership page explains that commissioned work generally starts with the creator unless otherwise agreed in writing. The checklist therefore requires an inventory of client material, agency frameworks, open-source components, fonts, images and newly created work, stating whether each item transfers, remains owned or is licensed.



