Managed WordPress for regulated organisations
The compliance-grade way to run a WordPress website.
The work your obligations create, done and evidenced.
One accountable team for hosting, care, accessibility, GDPR and security evidence, with the proof in writing every month.
250+ WordPress sites under management, including charities, tourism bodies and professional firms
Hosted on Pressable, an Automattic company. SOC 2 Type 2 and ISO 27001 infrastructure, 99.9% uptime commitment.
Why regulated organisations come to us
Your board wants every box ticked and the evidence attached.
Accessibility
A WCAG 2.2 AA statement with scan evidence behind it, for the Web Accessibility Directive and the European Accessibility Act.
GDPR
An Article 28 DPA, a current sub-processor list, EU data residency, and support inside the 72-hour breach window.
Vendor due diligence
Procurement questionnaires answered in full, documents attached, ready for the outsourcing register.
Continuity
Daily backups, documented recovery, and a continuity plan your audit and risk committee can minute.
Not sure where you stand? Get a free site audit, reviewed by a person, no obligation.
How it works
We look after the website, carry the work your obligations create, and put the proof in writing.
A care plan
WP Cloud hosting, updates, backups, monitoring and a one-hour critical response.
Your obligations
Accessibility, GDPR, due diligence and security evidence, priced per obligation.
The paper trail
A monthly report your compliance function can file, and questionnaires answered in writing.
What we look after
The website itself, and the compliance work that comes with it. Each one links to what is delivered and what you receive.
Care plan
Hosting, updates, backups, monitoring and a one-hour critical response, with a quarterly security evidence pack on Premium and Custom.
See care plansAccessibility
A WCAG 2.2 AA audit, ongoing monitoring, and a statement you can stand over.
Audit and monitoringCookie consent management
A managed consent banner with scanning, consent records, and the cookie documentation your privacy notice needs.
Consent managementData protection
GDPR and cookie consent kept true month to month, with a filed register.
GDPR and cookiesVendor due diligence
Procurement questionnaires answered in full, with the documents attached. Included.
Trust centreContinuity
Daily backups, a four-hour recovery target, and a plan that is tested, not just written.
Security and continuityGuides: What WordPress management includes · What a WordPress care plan covers · How to secure a WordPress site · What to look for in WordPress hosting
Built for WordPress, powered by WP Cloud.
Enterprise infrastructure from Automattic, with our care layer on top.
Your organisation
YouOwns the site, the content and every decision about it.
HostLogic care
UsUpdates, backups, security monitoring, performance care and support.
- 1-hour critical response
- 4-hour resolution target
- 24/7 monitoring
WP Cloud
Built by AutomatticEnterprise infrastructure from the team behind WordPress.com.
- Auto-scaling
- Global CDN
- Real-time failover
- SOC 2 datacenters
Choose the care plan that meets your organisation’s needs.
- WP Cloud hosting, caching and CDN
- Automated core, plugin and theme updates
- Daily off-site backups, 30-day retention
- SSL, malware scanning, 24/7 monitoring
- Vendor due-diligence pack
- 1-hour response on critical issues
- Everything in Essentials
- Updates reviewed and staged weekly
- Real-time backups and 1-click restores
- Security hardening and WAF
- Quarterly security evidence pack
- Core Web Vitals monitored and tuned
- Priority queue and a dedicated channel
- Everything in Premium
- 4 development hours a month
- Custom SLA terms and bespoke reporting
- Dedicated account manager
Prices exclude tax and are in EUR.
Accessibility work delivered under a state-funded grant scheme.
WCAG 2.2 AA accessibility work, documented to be evidenced afterwards.
