Websites for regulated firms: credible without looking like a bank

You run an FCA-authorised firm, a three-partner accountancy practice, a boutique employment outfit or a consultancy that sells judgement. Your website is navy or slate grey. There is a photograph of two people shaking hands in front of glass, a sentence about being a trusted partner, and your firm reference number set in eight-point grey at the very bottom. It looks almost exactly like the four firms you lose work to.

The way out is not more compliance, and it is not a louder brand. The rules constrain what your copy is allowed to claim; they say nothing about layout, typography, photography or how directly you are permitted to speak. Credibility online comes from specificity: your reference number where a sceptic can check it, named people with real histories, a plain account of where client money sits, and one sentence saying what you do that the firm down the road cannot.

Sameness is a commercial problem, not an aesthetic one

Think about how you actually get chosen. A finance director takes your name from someone they trust, then opens three tabs: you, plus two others they turned up while checking. If all three promise a trusted partner, tailored solutions and decades of combined experience, they have learned nothing in ninety seconds and will decide on fee, or on whoever replies first.

Open ten corporate FX brokers in a row and you will find the same three ingredients: Canary Wharf at dusk, a line about partnership, and pricing you can only get by filling in a form. Sameness feels safe. Nobody was ever hauled in front of compliance for being boring. It still costs you, in fee pressure and in enquiries that never arrive.

What the rules require, and what firms assume they require

Start with what is written down. If you are FCA-authorised, the financial promotion rules in COBS 4 require a communication to be fair, clear and not misleading: risk warnings where they are relevant, benefits and risks given comparable prominence, past performance handled to a defined standard rather than cherry-picked. Since February 2024 there is also a gateway, an authorised firm needs specific FCA permission before it can approve a promotion for an unauthorised person.

Solicitors have the SRA Transparency Rules, which require published price and service information for named areas of work: residential conveyancing, uncontested probate, unfair and wrongful dismissal claims, immigration other than asylum, debt recovery up to £100,000, licensing applications for business premises and summary motoring offences. You also have to show your SRA number and the digital badge, and publish your complaints route. Accountants have no equivalent pricing rule, but ICAEW and ACCA both set professional indemnity minimums tied to fee income, and rules about how you describe your status.

Now read that back and notice what is missing. Nothing in it asks for stock photography, the passive voice, or fees hidden behind a form. The rules constrain the claims, not the design, the voice or the directness.

Where the credibility signals belong

A regulated buyer is sceptical in a specific way. They want to know who regulates you, where their money or their file sits, what happens if you fail, and who exactly will do the work. Give each of those its own place instead of one paragraph of general reassurance.

The people pages matter more than most firms expect. After the homepage, the page a referred prospect opens next is almost always a named individual, because somebody was given a name and is checking them before the call. A grey silhouette and "over 20 years' experience" wastes the one moment where you were being taken seriously.

So write real histories. "Qualified 2009, eleven years at a Top 20 firm, defends tribunal claims for care operators and does the advocacy herself" tells a buyer more than three paragraphs about values. Use real photographs taken in the room you work in; half a day with a commercial photographer runs about £350 to £800 and covers everyone at once.

Say the specific thing

The differentiator is almost never service. Every firm in your category believes its service is better, says so, and cannot prove it on a web page. What can be proved on a web page is a corridor, a niche, a sector or a jurisdiction.

• An accountancy practice for owner-managed construction businesses that knows CIS cold.
• A consultancy that only runs FCA authorisation applications, and has done sixty of them.
• An employment practice that defends tribunal claims for care providers.
• A broker who can price into Ghana, Kenya and Nigeria without routing through anybody else.

That last one is the pattern worth copying. If your Africa corridors are the thing competitors cannot casually match, they should not sit as one line on an inside page. Lead the homepage with the corridor argument, put the FCA authorisation and the segregated-funds explanation underneath carrying the weight, and you are answering the question the dealer opened the site to ask. Working that argument out on paper before anything gets designed is how I run a build.

The fear is always the same: name a niche and you turn work away. In practice you turn away the enquiries you were losing anyway, and start winning the ones where you were obviously the right answer. If working out that sentence feels harder than building the site, it is. That is positioning work, and it belongs before anybody opens a design tool.

Measure enquiries, not traffic

Professional work has a long look-to-book window. A company changes accountants at year-end. A hedging relationship takes months of quiet consideration. A tribunal instruction lands the week the claim form does, from someone who read your explainer in March.

Sessions are close to useless here. Track qualified enquiries, define what qualifies, in writing, before you start, plus time from first visit to first call, and the value of the first instruction. Twelve enquiries a month worth six figures each is a different business from ninety worth £2,000 each, and no traffic report tells those apart.

Read the numbers in ninety-day cohorts rather than weekly dashboards. At professional-firm volumes, one quiet August moves the line enough to look like a trend and isn't one. Say that out loud to whoever you hire, and hold them to the same honesty.

Now the unprofitable part. If nearly all your work arrives by referral and always has, the site's job is to make a referred prospect comfortable enough to book the call, not to replace the relationship that got them there. I would spend that budget on people pages, fee transparency and two good explainers before spending anything on search visibility. Search captures demand you are missing; it does not manufacture demand in a referral trade.

Content that earns links and trust

Three formats work in regulated sectors. Thin blog posts are not among them.

Plain-English explainers. The difference between hedging an exposure and speculating on one. What the merged R&D scheme changed for a company with £400,000 of qualifying spend. Written for a competent person who does not do this daily, with worked figures in sterling and no term left undefined.

Commentary with a view. Not a summary of yesterday's rate decision, which everybody has within the hour and nobody links to. It earns its place when it says what you would say to a client on the phone, including the part where the advice is to do nothing.

Your own data. This is the format that earns links. A practice publishing the average number of days between year-end and filing across its client base, or a broker publishing corridor spreads across a year, holds something no competitor and no journalist can get elsewhere. Trade press picks that up, and those links outweigh fifty guest posts.

The constraint is not writing, it is review. Budget a week of compliance turnaround per piece and build the calendar around it. One properly approved explainer a month beats four thin posts and a standing argument with your approver.

Design language: restraint, hierarchy, real data

Quiet reads as competent in these categories. Let typographic hierarchy do the work instead of decoration: generous space, one accent colour, tabular figures so numbers line up down a column. A near-black page with one accent can still carry a live rates panel and come in under 400KB. Set that weight budget first and the design has to live inside it.

Then replace stock imagery with real information. A rates panel, a fee table, a jurisdiction map, a timeline of what happens in the first thirty days of an instruction. All of it is more interesting than a handshake, and all of it answers something the buyer came to find out.

Speed belongs in the same argument. Half of these visits happen on a phone between meetings, and a page that takes six seconds does not read as thorough. It reads as badly run. Hand-built static pages make that easy; on a page builder, the usual culprits are uncompressed photographs and a stack of tracking scripts.

The practicalities nobody enjoys

Cookie consent and analytics

PECR requires consent before non-essential cookies are set, and Google Analytics is non-essential. The ICO's position is that rejecting must be as easy as accepting; it wrote to the UK's largest websites about this in late 2023 and has kept at it since. A bright Accept button with Reject buried two clicks deep is exactly the pattern under challenge.

Two workable routes. Run a proper consent platform, Cookiebot or Iubenda, roughly £10 to £40 a month, and accept that a chunk of visitors will decline and vanish from your reporting. Or use cookieless analytics such as Plausible or Fathom, both under £10 a month at professional-firm volumes, which sidesteps most of the problem and counts everybody.

Accessibility

Under the Equality Act 2010 a website is a service, and service providers must make reasonable adjustments. Private firms face no statutory audit the way public bodies do under the 2018 regulations, but the exposure is real and it usually arrives commercially before it arrives legally: public sector and large corporate procurement now routinely asks for a WCAG 2.2 AA statement. If you sell in-scope services to EU consumers, the European Accessibility Act has applied since June 2025.

Most of this is cheap at build time and expensive to retrofit. Contrast ratios, visible focus states, labelled form fields, real heading structure, full keyboard navigation, and no document that exists only as a scanned PDF. Do not buy an accessibility overlay widget. They do not fix the underlying markup, and in the United States they have generated litigation rather than defended against it.

Client documents

Onboarding means ID, proof of address, bank statements, source of funds. None of it should arrive by email, and none of it should live on your brochure website. Your practice management system almost certainly has a client portal already, Clio, Actionstep, Karbon, IRIS, and using it is safer and cheaper than anything bespoke.

The website's job is to link to that portal clearly and set out what happens next: what you need, why, how long you keep it, who sees it. If you genuinely need uploads on the site itself, you need encryption in transit and at rest, a written retention period, an entry in your processing record and a named person reviewing it quarterly. Most firms are better off not.

What this adds up to

A website will not win you a mandate. It can lose you one, when a referred prospect checks you out, finds a page that could belong to any firm in the category, and decides to ring the other name they were given as well. The job is to be recognisably yourself, visibly regulated, and specific about the work you are best at.

If you want a straight opinion on whether yours does that, send me the URL. I will tell you what a sceptical buyer sees in the first ninety seconds, and whether it needs a rewrite, a rebuild or nothing at all. Start there.