The verdict in three sentences
Drupal 7 has had no official support since January 2025: every month spent on it exposes the federation to unpatched vulnerabilities on a site that holds data on 1,200 member companies. Migrating 4,000 pages and 9,000 documents, with a member directory and a members' area, takes 12 to 16 weeks and hinges on two things: the 301 redirect plan and a clean transfer of member accounts. In Brussels, this kind of project is typically priced between 25,000 and 70,000 EUR excl. VAT; at Kolonell, an institutional site of this scope is quoted on request, after an audit.
Why staying on Drupal 7 costs more than migrating
Since end of life, no community security patches are released. Paid extended support exists, but it extends technical debt without reducing it: old PHP versions, abandoned modules, hosts raising prices to keep obsolete stacks running. For a Brussels federation, often working with EU institutions and holding member contact data, the risk is concrete: the members' area holds names, roles, emails and sometimes dues, all personal data under the GDPR and closely watched by the Belgian Data Protection Authority.
| Option | Annual or one-off cost, 2026 order of magnitude | Risk | Horizon |
|---|---|---|---|
| Stay on Drupal 7 without support | No license, rising hosting cost | Unpatched flaws, GDPR exposure | Untenable |
| Paid extended support | 3,000 to 12,000 EUR per year | Technical debt unchanged | 1 to 2 years |
| Upgrade to Drupal 10 or 11 | 35,000 to 70,000 EUR | Rewrite of custom modules | 5 to 7 years |
| Institutional WordPress | 25,000 to 50,000 EUR | Directory and members' area rebuilt | 4 to 6 years |
| Headless CMS (Sanity, Strapi) + modern front end | 35,000 to 70,000 EUR | Front-end skills required | 6 to 8 years |
| Kolonell, institutional scope | Quote on request after audit | Plan and data transfer scoped upfront | Per specification |
The four workstreams of a federation migration
The first workstream is the content inventory. Out of 4,000 pages, a federation often has 30 to 40 % with no visits in 12 months: old press releases, past event pages, duplicates. They are archived or merged, which cuts volume and cost. The 9,000 documents (position papers, legal notes, studies, often in French, Dutch and English) are sorted by type, date and language, with a clear decision: migrated, archived as downloads, or deleted.
The second is the member directory: company profiles, filters by region and sector, and custom fields accumulated over a decade. The third is the members' area: account transfer, secure password reset (Drupal 7 hashes cannot always be reused as is), role-based access (member, admin, federation staff). The fourth is the 301 redirect plan, which protects traffic and inbound links from members, EU institutions and the press. A headless CMS is a strong fit here: content lives in one structured repository, the front end is fast, and multilingual versions are handled field by field.
| Workstream | Typical volume | Estimated effort | Watch point |
|---|---|---|---|
| Content inventory and triage | 4,000 pages | 8 to 12 days | Archive 30 to 40 % dead pages |
| Document transfer | 9,000 files | 6 to 10 days | Metadata, language and access rights |
| Member directory | 1,200 profiles | 10 to 15 days | Normalize custom fields |
| Members' area and accounts | 2,500 to 4,000 accounts | 8 to 12 days | Password reset campaign |
| 301 redirects | 3,000 to 5,000 rules | 4 to 6 days | Test 100 % of high-traffic URLs |
| Acceptance and training | 3 to 5 editors | 5 to 8 days | Editorial approval workflow |
A 12 to 16-week plan and content governance
A realistic plan: weeks 1 to 3, audit, inventory and wireframes; weeks 4 to 9, build of the headless back end, the directory and the members' area; weeks 10 to 13, scripted migration with two dry runs on a database copy; weeks 14 to 16, acceptance testing, redirects, training and a weekend cutover, with a 48-hour content freeze.
Governance matters as much as technology. A federation has a director general, a board, working groups and staff who publish. The new CMS needs a multi-level approval workflow, version history and clear roles. Accessibility under WCAG 2.1 AA, expected from any representative body and required by the European Accessibility Act for many digital services since June 2025, and GDPR compliance of the members' area belong in the specification from the audit stage.
Mini case study
Pieter, director general of a 1,200-member federation in Brussels, compares two scenarios over 3 years. Scenario A: Drupal 7 extended support at 9,000 EUR a year plus 6,000 EUR a year of emergency fixes, so 45,000 EUR over 3 years, with no reduction in risk. Scenario B: a headless migration priced by the market at 55,000 EUR, then maintenance at 7,000 EUR a year, so 69,000 EUR over 3 years.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
The apparent 24,000 EUR premium is offset by productivity: the 4-person staff spends 6 hours a week working around the old tool. Recovering 4 of those hours at 50 EUR loaded cost per hour gives 4 × 50 × 46 weeks = 9,200 EUR a year, or 27,600 EUR over 3 years. The gap is covered, and the data breach risk goes away.
FAQ
Is Drupal 7 really dangerous in 2026?
Yes, no community patch has been released since January 2025. On a site with 2,500 to 4,000 member accounts, an exploited flaw makes the federation liable under the GDPR.
How long does migrating 4,000 pages take?
Plan 12 to 16 weeks, including 3 to 4 weeks of scripted migration and dry runs. Initial triage often cuts volume by 30 to 40 %.
Will we lose traffic at cutover?
A temporary 5 to 15 % dip over 4 to 8 weeks is common. A 301 plan covering 100 % of high-traffic URLs keeps the loss small.
Do members have to create new accounts?
No, accounts are transferred. A one-time password reset through a secure link is often needed, with an email campaign and 2 reminders.
What budget should we plan?
The Brussels market ranges from 25,000 to 70,000 EUR depending on the directory and members' area. At Kolonell, an institutional website is always quoted on request, after an audit of the existing site.
Let's scope your project. We audit your Drupal 7 site, directory and members' area, then quote a 12 to 16-week migration with a full redirect plan. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
