Project documents

What the service must do, how each requirement is tested, and the reviews and approvals of each release.

Business Requirements Document: The epics, features, user stories and acceptance criteria, each criterion with its own ID. Revision 50, 16 October 2026.
Acceptance criteria and their tests: 213 of 213 criteria have a test that names them and passed in release pipeline run 20261017-1440-26d46b1. A release stops if one has none.
Accessibility audit: WCAG 2.2 AA, 12 October 2026: automated scans, the GOV.UK pattern tests and the NVDA screen reader on 112 pages.
Security, GOV.UK and usability review: 10 October 2026: dependencies, forms, headers, sign-in limits, GDS-Check and the GOV.UK checklist.
Release approvals: Every release goes through the release pipeline before it is published. The latest, on 17 October 2026, was approved.

The data protection impact assessment is not published here. It is a draft until the data controller completes and signs it off.