What does a web app development company in the UK actually build?
A web app is software people use in a browser, with accounts, data and actions, as opposed to a website that people mainly read. Hiring a web app development company in the UK means paying for product thinking, a back end, security and ongoing releases, not only page design.
The line is blurry, so here is a quick test. If users log in, create or change data, pay for something on a schedule, or get results computed for them (a quote, an availability slot, a report), you are describing a web app. If they mainly read pages and send an enquiry, you need a website, and our small business website page will suit you better.
Customer-facing web apps for UK businesses mostly fall into four families: booking and appointments, instant quotes and product configurators, member or customer areas, and subscription software sold to other businesses. Each has the same skeleton underneath: accounts, roles, a database, business rules, notifications, payments and an admin area. What changes is where the complexity sits.
Understanding that skeleton helps you read quotes. When a web app development company prices your project, most of the cost is in the rules and the edge cases, not in the number of pages.
Website, web app or SaaS product: which one are you really describing?
Describe what a user does on their third visit, not their first. That usually tells you which category you are in, and the category decides budget, stack and timeline.
A website with forms
Visitors read, then enquire or buy a fixed product. Content management and SEO matter most. Our static sites start at US$150 and online shops at US$750; you do not need custom application code.
A web app for your own customers
Customers log in to book, track, upload or reorder. You are the only operator, so there is one organisation's data and one admin team. For many UK service businesses this is the natural first project.
A SaaS product sold to many businesses
Each paying customer is a separate organisation with its own users, settings and billing. That multi-tenant design adds work to data separation, permissions, subscription handling and support tooling, and should be decided before the first line of code.
Moving from the second shape to the third later is possible but painful. If there is a realistic chance you will sell the tool to other businesses, say so at the start and we will design tenants into the database from day one.
Which stack should a UK web app use: React and Next.js with Node or Python?
For most UK web apps we recommend Next.js with TypeScript for the interface and either Node.js or Python for the API, on a PostgreSQL database. The choice between Node and Python depends on what the app does most, not on fashion.
Next.js lets public pages render on the server, which is good for speed and for search engines, while logged-in screens behave like a fast single-page app. React has an enormous hiring pool in the UK, which protects you if you later bring development in-house or change suppliers.
Choose Node.js when…
the app is mostly about real-time updates, lots of third-party integrations or sharing types and validation code with the front end. One language across the stack also keeps small teams quick.
Choose Python when…
the app does serious data work: pricing engines, reports, forecasting, document processing or AI features. FastAPI or Django give you mature tools, and our team uses Python daily for data and machine learning.
Keep your existing back end when…
you already have a working API or database that other systems rely on. A new React front end on top can modernise the product without a risky full rewrite.
Whichever route you take, insist on TypeScript, automated tests for business rules, database migrations kept in version control and a written README. Those four habits matter more than the framework name.
Logins, user roles and permissions: why they come before screens
Decide who can see and change what before designing a single screen. Permissions touch every page and every database query, so bolting them on later is one of the most expensive mistakes in web app development.
Start with a simple grid: user types down the side (customer, customer's colleague, your staff, your manager, super-admin), actions across the top (view, create, edit, approve, export, delete). Fill it in with ticks. That grid becomes the permission model, the test plan and part of your UK GDPR documentation, because it shows who can reach personal data.
For sign-in, email and password with optional two-factor authentication covers most UK consumer apps. Business customers often prefer signing in with Microsoft or Google accounts, which also means access disappears when they leave their employer. Magic links sent by email suit infrequent users who forget passwords. We avoid building password storage from scratch and use well-maintained authentication libraries or providers.
Team accounts deserve special thought in SaaS products: who invites colleagues, who pays, and what happens to data when the account owner leaves. Writing those rules down early saves awkward support conversations later.
How do you take card payments and subscriptions in GBP inside a web app?
Use a hosted payment provider that supports sterling, subscriptions and UK card authentication, and never let card numbers touch your own servers. Your web app stores only references to customers and subscriptions, while the provider handles the card data.
Billing logic is where SaaS-style web apps get complicated. Plans, trials, upgrades mid-month, VAT on invoices, failed payments, cancellations and refunds each need a rule. We model these as events: the provider notifies the app through webhooks when something happens, and the app updates access accordingly. That keeps the two systems in step even when a customer changes cards at midnight.
Checkout flows should support Apple Pay and Google Pay where the provider offers them, because many UK customers pay on their phones. Receipts and invoices should show what your accountant needs; which VAT treatment applies is their call, and we build the invoice to match it.
We help you choose a provider by comparing their published fees and features with your volumes. The merchant account is always opened in your business name, and payouts go straight to your UK bank, never through us. For a detailed comparison of providers, see our payment gateway integration guide for UK businesses.
Progressive web app or native app: what should UK users get first?
Start with a responsive web app, make it installable as a progressive web app (PWA) if users return often, and build native apps only when you hit a limit the browser cannot cross. One codebase is cheaper to change while you are still learning what customers want.
The gap has narrowed. Apple's WebKit team announced that from iOS and iPadOS 16.4, web apps added to the Home Screen can receive push notifications and show badge counts, provided the user grants permission after tapping a button. That removed one of the biggest reasons UK businesses used to build an iPhone app for simple reminders.
Native still wins for heavy offline use, background location, Bluetooth devices, complex camera work and discoverability in the App Store and Google Play. If those matter, a Flutter app from US$600 can share the same API as your web app, so you are not building the product twice.
The honest cost comparison: one web app from US$900; a companion mobile app from US$600 on top; plus developer account fees paid to Apple and Google in your name. For a deeper look at mobile, our Flutter app development page covers the native route.
Why build a UK web app to WCAG 2.2 AA from day one?
Because retrofitting accessibility is slower and costlier than building it in, and because a web app that excludes disabled customers loses them. WCAG 2.2, a W3C Recommendation, is the current version of the Web Content Accessibility Guidelines, and level AA is the level most UK organisations aim for.
WCAG 2.2 added nine success criteria to version 2.1. Several matter directly to web apps: interactive targets should be at least 24 by 24 CSS pixels (2.5.8 Target Size, Minimum), focused elements must not be entirely hidden by sticky headers or banners (2.4.11 Focus Not Obscured), dragging actions need a single-pointer alternative (2.5.7), and logging in should not rely on a cognitive test such as remembering or transcribing a code without help (3.3.8 Accessible Authentication).
In practice that means semantic HTML before custom widgets, labels on every form field, error messages that say how to fix the problem, sensible focus order in modals, colour contrast checked in both themes, and booking calendars that work with a keyboard. We test with keyboard only, a screen reader and automated checks in every release.
What the law requires of your particular business is a question for your own adviser. For an audit of an existing product, see our website accessibility audit service.
How much does it cost to hire a web app development company in the UK?
It depends on what users can do, not how many pages there are. With our team a first release starts at US$900; other suppliers' quotes vary widely, so compare them on the same written scope.
The items that move a web app budget most:
- User types and permissions: every extra role multiplies test cases.
- Business rules: availability logic, pricing formulas, approval chains.
- Billing: one-off payments are simpler than subscriptions with trials, upgrades and team seats.
- Integrations: calendars, accounting, CRM, email and SMS providers.
- Admin and reporting: the back office your staff use is often half the build.
- Multi-tenancy: selling to many organisations rather than serving your own customers.
- AI features: priced separately, from US$600.
Hidden costs to budget for: hosting and database (paid to the provider), email and SMS sending, error monitoring, domain and certificates, and developer time for updates after launch. A quote that ignores these is not cheaper, just incomplete.
How long does web app development take from idea to launch?
A focused first release usually takes six to twelve weeks with us, and that timeline is shaped mostly by decisions, not typing. Apps whose owners answer questions quickly and test each release promptly finish sooner.
A typical path: one to two weeks shaping the first user journey and clickable screens; one week on foundations such as authentication, roles, database and hosting; three to six weeks building features in short cycles, each deployed to a staging address you can test; one to two weeks of polish, accessibility checks, load testing and content; then launch.
The first release should prove one journey end to end. For a booking app that might be: find a slot, pay a deposit, get a reminder, reschedule. Resist adding the loyalty scheme and the referral programme before a single real customer has booked. Every feature added before launch delays the moment you learn what people actually do.
After launch, releases continue in smaller steps. Many UK products settle into a rhythm of fortnightly improvements, each one small enough to test in an afternoon.
Staged releases timed around the UK working day
We deploy in the Indian morning, which is the very early UK morning, so new versions are live and checked before most of your customers arrive. If something looks wrong, there are hours to roll back before it costs you bookings.
Staged means changes go through three places: a development environment for us, a staging copy for you to test with realistic data, and production for customers. Bigger features ship behind feature flags, so they can be switched on for your staff first, then a small share of users, then everyone.
Database changes are written as migrations that run automatically and, where possible, are backwards compatible, so the old and new versions can run side by side for a few minutes during a release. That is what lets a small team deploy often without scheduling downtime at 2 am UK time.
We avoid releasing on Friday afternoons UK time and around your own busy periods, whether that is Monday morning bookings for a clinic or the first week of January for a fitness product. Release notes go to you in plain English on WhatsApp or email, so your support staff know what changed before customers ask.
Security and UK GDPR basics every customer-facing web app needs
Treat every input as hostile, store as little personal data as the product needs, and log who accessed what. Those three habits prevent most of the problems that make headlines.
Our baseline for UK web apps includes: HTTPS everywhere; parameterised database queries; server-side permission checks on every request, not just hidden buttons; rate limiting on login and sign-up; secrets kept out of the code; encrypted backups; dependency updates; and the OWASP Top 10 used as a review checklist before launch.
On the data protection side, the app should support the rights your privacy notice promises: letting users download their data, correct it and close their account, with clear rules on what is kept afterwards for accounting. Hosting in a UK or EU cloud region keeps data location simple. If our developers need access to live personal data, your adviser may want processor terms and a transfer safeguard in place; our bespoke software page explains how that paperwork usually fits together.
Compliance itself is your responsibility as the business running the app, confirmed by your own advisers. We build the features and supply the technical description they need.
Performance, SEO and AI-search visibility for a web app
Logged-in screens should be fast; public pages should also be findable. Web apps often forget the second part, then wonder why nobody signs up.
We keep marketing pages, pricing, help articles and feature pages server-rendered with Next.js, with proper titles, structured data and internal links, so Google and AI answer engines can read them. Logged-in areas are excluded from indexing. Core Web Vitals are measured on real mobile devices, because UK users often sign up on their phones during a commute and will not wait for a heavy JavaScript bundle.
AI search tools such as Google's AI Overviews and chat assistants tend to quote clear, self-contained answers. Help pages that answer one question each, a plain pricing page and an honest comparison page give them something accurate to cite. Our monthly SEO plans from US$150/mo can handle that content once the product is live, and our AI search optimisation service covers the newer side of visibility.
Speed inside the app matters just as much: paginated lists, database indexes on the columns you filter by, and images resized on upload. Slow admin screens cost your staff time every single day.
Measuring a UK web app without breaking the cookie rules
Put analytics behind a consent banner unless a tool is genuinely strictly necessary. The ICO's PECR guidance says you must tell people about cookies, explain what they do and get consent for any that are not strictly necessary, and that consent needs a clear positive action.
For a web app, the useful measurements are about behaviour inside the product: sign-up completion, time to first booking, drop-off in the quote form, feature usage by plan. Much of that can be recorded as server-side events tied to accounts, which gives better data than third-party trackers and is easier to explain in your privacy notice.
For marketing pages we set up the banner so non-essential cookies stay off until the visitor agrees, with accept and reject options that are equally easy to use. Our UK GDPR cookie banner guide goes into the detail. Your privacy notice wording and lawful bases are decisions for you and your adviser; we make sure the app does what the notice says.
One practical rule: decide your three key product metrics before launch and wire them in from day one. Retrofitting analytics after launch means losing the first weeks of the most interesting data.
How should you vet a web app development company in the UK or abroad?
Ask to see how they work, not just what they have made. A polished portfolio says little about whether the team tests, documents and hands over properly.
- Ask who will write the code, and speak to them before signing.
- Ask how they handle roles and permissions; listen for a grid, not a shrug.
- Ask where the repository and hosting will live. The right answer is: in your accounts.
- Ask how a release reaches production and how they roll back.
- Ask which accessibility standard they build to and how they test it.
- Ask what the first release excludes. A good partner cuts scope with you.
- Ask for an itemised quote and what happens when requirements change.
If you are comparing a UK studio with an overseas team, our write-up on offshore versus onshore development sets out the trade-offs, including legal recourse and communication.
Building a UK web app with a remote team in India: calls, money and the first fortnight
The time difference is 4.5 hours during British Summer Time and 5.5 hours in winter. A 10 am call in London is mid-afternoon for us, and anything you send by early afternoon UK time is usually picked up the same day.
Week one
You describe the product and the first user journey; we send questions, then an itemised quote in USD within about two working days. Once approved in writing, you create the code repository, cloud account and domain in your business name and invite us.
Week two
We share clickable screens for the core journey and agree the permission grid. You test on your own phone, send comments in one batch and sign off. Foundations such as sign-in and hosting start the same week.
Rhythm after that
A short call once a week in your morning, a written update after each staging release, and WhatsApp for quick questions any day of the week. You always know what shipped and what is next.
Money and paperwork
Invoices come from India in USD; most UK clients pay from sterling through Wise, wire or PayPal. Contract terms, confidentiality and IP assignment are agreed in writing before work begins. There is no UK office and no site visits.
Worked example: a hypothetical lesson-booking SaaS for music teachers in Glasgow
Purely an illustration. Suppose a Glasgow piano teacher has built a following among other independent music teachers and wants to sell them a simple tool: pupils book lessons online, pay termly or per lesson, and get reminders, while teachers see their week at a glance.
Because many teachers would subscribe, this is a multi-tenant product from day one. Each teacher is a tenant with their own pupils, calendar and payment settings. Roles would be teacher, parent or adult pupil, and the founder as super-admin.
A sensible first release: teacher sign-up and a GBP subscription with a free trial; availability and lesson types; a public booking page per teacher; card payment per lesson; email reminders; a simple weekly view. Termly invoicing, group lessons, a PWA install prompt and push reminders would wait for release two, informed by what the first teachers ask for.
Accessibility would matter from the start, since parents and pupils of every age would use the booking page on phones. The price would come from an itemised quote starting at US$900, with the founder owning the repository, cloud account and payment account throughout.
Web app launch checklist for UK businesses
Run through this list a week before launch, whoever built the app.
- Every user type has tested the core journey on a phone and a laptop.
- Payments tested with real cards, including a refund and a failed payment.
- Password reset, email verification and account deletion all work.
- Keyboard-only and screen reader checks passed on sign-up, booking and checkout.
- Privacy notice, terms and cookie banner live, with analytics respecting consent.
- Backups run and a restore has actually been tested.
- Error monitoring and uptime alerts go to someone who will act on them.
- Admin users have only the access they need; test accounts removed.
- Public pages have titles, descriptions and a sitemap; logged-in pages are excluded.
- You hold every login: repository, cloud, domain, email sending and payments.
Ready to scope yours? Send us the first user journey in a few sentences and we will come back with questions and a quote.