Realistic timeline for a bank's corporate website in London (2026)

The verdict in three sentences

A bank's corporate website in London realistically ships in 6 to 9 months, and any date under 5 months announced to the executive committee will slip. The incompressible phases are compliance review (4 to 6 weeks) and security testing (3 weeks), which cannot be squeezed without regulatory risk. The budget sits between £120,000 and £280,000, including £12,000 to £25,000 for penetration testing.

The timeline phase by phase

The head of communications needs to present a credible date. The safest approach is to start from a reference plan, then add margin for the bank's internal approval loops: executive board, compliance, legal, information security and sometimes the parent group.

Added up, these phases give 30 to 33 weeks, about 7 to 8 months. The 6-month scenario assumes discovery is done and content is ready. The 9-month scenario includes group-level approval or a second round of security testing.

The budget and what drives it

A UK bank publishes regulated information: rates and terms, financial results, branch network, credit offers. Under FCA rules, every financial promotion (COBS 4) must be fair, clear and not misleading and approved by compliance, and the Consumer Duty raises the bar on customer understanding.

These amounts are 2026 orders of magnitude for mid-sized banks in London. The high range reflects core banking integrations (rates, branches, FX) and a design system delivered for future apps.

How to hold the announced date

Three levers genuinely shorten the project. The first is naming a compliance lead from discovery: each template approved upfront avoids late feedback. The second is starting copywriting alongside design, not after development. The third is booking the penetration testing firm in month two, since CREST-accredited testers are often booked 4 to 6 weeks ahead. Finally, avoid launching during year-end close or a results publication window.

Mini case study

Richard, head of communications at a commercial bank in London, must give the executive committee a date in February. Discovery starts on 1 March. He adds 4 weeks of discovery, 6 of design, 12 of development, 5 of compliance and 3 of security: 30 weeks, so delivery at the end of September. He adds 4 weeks of buffer for group approval and announces a launch at the end of October. The approved budget is £190,000, including £18,000 for penetration testing. By booking the testers in April, he avoids the 5-week delay seen on the previous project, which had cost about £12,000 in extended agency time.

FAQ

Can a bank website be delivered in 3 months?

A light visual refresh on an existing CMS, perhaps. A full corporate site with compliance review and penetration testing needs at least 6 months.

Is a penetration test essential?

For a bank, yes. It costs £12,000 to £25,000 and takes about 3 weeks with fixes and retest, and auditors and regulators expect it.

Which FCA requirements apply to the website?

Financial promotions must be fair, clear and not misleading, with prominent risk warnings. Rates and offers must be accurate and approved by compliance before publication.

Must the website be hosted in the UK?

The public site can use a global CDN, which improves availability. Personal data collected through forms remains subject to UK GDPR and the Data Protection Act 2018.

How much does maintenance cost after launch?

Budget £3,000 to £8,000 a month for maintenance, 24/7 monitoring and security updates.

Let's scope your project. Give us your target date and approval loops, and we will deliver a week-by-week plan and an itemised budget. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.