Skip to content
Engineering standards

Built by senior engineers, to a standard you can check.

Senior engineers, disciplined practices, evidence as the work goes: who changed what, who approved it, where every number came from.

Our principles

Six rules we build by.

  1. 01

    Build on what you have before buying new.

  2. 02

    Buy before build; we only build where it makes you different.

  3. 03

    Security and privacy designed in from day one.

  4. 04

    One trusted source for every number, so board, regulator and front line agree.

  5. 05

    Everything documented and handed over: code, designs and know-how are yours.

  6. 06

    If we walked away tomorrow, your systems keep working.

How we engineer

Disciplined by design.

The same practices on every engagement.

Team

Small senior teams, a named lead

Senior engineers; one named lead accountable to you throughout.

Every change

Checked before it reaches you

Quality, security and accessibility checked automatically before anyone sees a change.

Method

Test-first and peer-reviewed

Tests first; a second engineer reviews every change.

Release

Your governance, your gates

Releases through your own approval steps, on your timetable.

Quality you can see

Quality you can check.

Evidence you can check, from the work itself.

Accessible

WCAG 2.2 AA

Usable by everyone, including with assistive technology: WCAG 2.2 AA.

Security tested

Before anything goes live, and again as it changes.

Recovery tested

Proven, rather than trusting a backup on the day.

Performance measured

Measured against agreed targets once in use.

Evidence, by default

Who changed what, who approved it, where every number came from, recorded as we go.

Standards we align to

The standards we hold ourselves to.

The standards your regulator, auditor and board recognise; we claim no certification we don’t hold.

UK Government Service Standard and Technology Code of Practice

Aligned to

The government’s rules for building and running public services and their technology.

NCSC cloud security principles

Aligned to

The National Cyber Security Centre’s guidance on safe cloud use.

Cyber Essentials Plus

Certified

Government-backed security certification, independently tested. Scout holds it.

UK GDPR and data protection by design

Aligned to

UK data protection law, privacy designed in from the start.

WCAG 2.2 AA accessibility

Aligned to

The international accessibility standard, at the level UK public bodies must meet.

Microsoft cloud adoption and well-architected guidance

Aligned to

Microsoft’s guidance on adopting Azure well.

AI, safeguarded

AI at speed, with a named engineer accountable.

We use AI, including Claude and Microsoft’s tools, on every engagement. It is what makes 10x possible: senior teams delivering in weeks rather than months.

Playbooks and rules, not individual judgement, govern what AI may do on every piece of work.

Our commitments

Nothing AI-generated reaches you without a named engineer’s sign-off. Every decision recorded with reason and approver; the same rules every time.

Keep reading
The detail

Ask us about our engineering standards.

We would rather talk you through our practices, evidence and standards than publish them.