The Developer Society

United Kingdom · www.dev.ngo · 8 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 8 sub-vendors.

Insights

Last updated 2026-08-15 · revision 2

8 direct vendors, 149 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

The Developer Society demonstrates strong potential for migration readiness, primarily driven by its modern and flexible tech stack. The use of Python, Django, and Wagtail CMS, along with "bespoke APIs" and "AI experimentation," suggests an architecture highly adaptable to cloud-native environments, containerization, and microservices. The lack of specified data residency requirements also simplifies initial migration planning. However, significant challenges and unknowns exist. The "Vendor Lock-in Risk" is unspecified, which is a critical factor; despite the contradictory "Total Vendors: 0" data point, the mention of 12 services and vendor geographic diversity implies external dependencies that could pose lock-in challenges. The absence of financial data (revenue concentration, growth history) makes it difficult to assess the company's capacity to fund a potentially complex migration. Similarly, the unspecified regulatory environment means potential compliance hurdles during migration are unknown.

Compliance

11 in-scope frameworks identified; showing 3.

UK Equality Act 2010 — Assessment Required

The Public Sector Bodies (Websites and Mobile Applications) Accessibility Regulations 2018 (PSBAR) require public sector bodies to meet WCAG 2.1 AA accessibility standards. The Developer Society builds websites and digital platforms for charities and public-benefit organisations, many of which are subject to PSBAR. As a digital services provider to these organisations, the company has a commercial and reputational interest in delivering accessible products. The risk is Medium because: (1) clients may face regulatory action if delivered products are not accessible; (2) the company's own website accessibility compliance is not verified; (3) the company works with vulnerable populations (domestic abuse helplines, eating disorder charities) where accessibility is critical.

Evidence: https://www.dev.ngo/, https://www.legislation.gov.uk/uksi/2018/952/contents/made, https://www.gov.uk/guidance/accessibility-requirements-for-public-sector-websites-and-apps

UK Charity Law — Compliant

The Developer Society is registered as a Community Benefit Society under the Co-operative and Community Benefit Societies Act 2014, regulated by the Financial Conduct Authority (FCA). FCA registration number 7532 is publicly disclosed. The company is also VAT registered (VAT No. 103471160). These registrations are publicly verifiable and the company openly discloses them, indicating active compliance with UK corporate and co-operative law. The risk is Low as the company demonstrates transparent regulatory registration.

Evidence: https://mutuals.fca.org.uk/Search/Society/19607, https://www.uk.coop/directory/developer-society, https://www.dev.ngo/, https://www.legislation.gov.uk/ukpga/2014/14/contents

GDPR (source) — Partially Compliant

The Developer Society is a UK-based data controller that explicitly references GDPR compliance in its published Privacy Policy and has appointed a Data Protection Officer (DPO), both of which are strong positive indicators. However, the privacy policy notes that personal data 'may be transferred outside the EU' without specifying the transfer mechanisms (e.g., Standard Contractual Clauses, adequacy decisions), which is a potential gap. The company is a small-to-medium not-for-profit co-op, reducing the likelihood of large-scale enforcement action, but the ICO actively enforces UK GDPR across all sectors including charities and digital service providers. The risk is Medium rather than High because the company has demonstrably invested in compliance infrastructure (DPO, published policy, ISO 27001 certification), but gaps in transfer mechanism documentation and the absence of a publicly verifiable ICO registration record (not confirmed in research) keep the risk from being Low.

Evidence: https://www.dev.ngo/privacy/, https://www.dev.ngo/iso/, https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/, https://www.legislation.gov.uk/ukpga/2018/12/contents/enacted

Financials

Three-year financials

Financial Resilience Score: 6/10

The Developer Society is a small (~28 person) UK-based Community Benefit Society operating as a not-for-profit digital co-operative serving the charity and NGO sector. Its financial resilience is supported by a strong, mission-aligned market position in a defined niche with comparatively few peer competitors, a long and sticky client roster including Oxfam, Samaritans, ActionAid, Living Streets, Choose Love, CIVICUS, Refugee Council and others (200+ charities served historically), and mature operational controls evidenced by multiple ISO certifications (9001, 14001, 20000, 27001) and Cyber Essentials Plus. Its co-operative governance and employee-ownership model reduce staff turnover risk and reinforce mission credibility with charity buyers. The organization has traded for approximately 15+ years across its former limited company and 2017-onwards community benefit society forms, suggesting operational continuity. However, resilience is constrained by small scale, which limits buffer against loss of any single major client and creates key-person risk around founder Stephen Hawkes. Heavy concentration in the UK third sector exposes the company to donation cycles, cost-of-living pressures on giving, and government funding uncertainty. Charity clients are typically price-sensitive, while the co-op's real Living Wage commitment and UK-based salary base constrain price competition versus offshore development shops. As a community benefit society, capital raising is restricted to withdrawable/transferable share capital rather than open equity markets. Emerging generative AI and no-code tooling could compress fees on core web/CMS work. No public financial figures (revenue, EBIT, equity) are available to verify actual balance sheet strength, as accounts are filed with the FCA Mutuals Register rather than Companies House.

Key strengths: Mission-aligned niche position in UK charity/NGO digital services, Long, sticky client roster (Oxfam, Samaritans, ActionAid, CIVICUS, 200+ charities), Mature operational controls: ISO 9001, 14001, 20000, 27001 and Cyber Essentials Plus, Co-operative governance and employee ownership reduce turnover risk, ~15+ years of continuous trading across legal forms, Certified member of Co-operatives UK

Risk factors: Small scale (~28 staff) limits buffer against client loss, Key-person risk around founder Stephen Hawkes, High sector concentration in UK third sector exposed to donation cycles, Price-sensitive charity clients vs. UK Living Wage cost base, Community benefit society structure limits equity capital raising, Generative AI / no-code tooling may compress fees for core CMS work, Financial opacity — filings on FCA Mutuals Register, not Companies House

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report