---
title: "Corporate Website Development: Pages, Stack and Compliance"
description: "What a corporate website needs: pages by audience, governance and SSO, Webflow, WordPress VIP and headless prices, WCAG 2.2, privacy and vendor checks."
url: "https://dardo.studio/en/blog/corporate-website-development/"
language: "en"
translations: {"es":"https://dardo.studio/es/blog/pagina-web-corporativa/","pt":"https://dardo.studio/pt/blog/site-institucional/"}
updated: "2026-11-08T04:58:31.482Z"
---

[Blog](https://dardo.studio/en/blog/)

# Corporate website development: pages, governance, stack and compliance

A practical guide for the team delivering a company website: the pages each audience needs, governance, platform prices, compliance and vendor checks.

By [Nicolás Cerón](https://www.linkedin.com/in/nicoceron/) · November 7, 2026

![A corporate headquarters at blue hour seen from a wet stone plaza, its glass lobby lit amber, with a single crimson door standing open at the centre as the way in.](https://dardo.studio/_astro/01M6WNS3ND3C6DWFT0K3E5CYPZ_Z2uAGDL.webp)

## Key takeaways

- A corporate site is checked by buyers, investors, journalists, candidates, partners and regulators; give each one a page that answers its task.
- Governance sets the platform tier: on 7 November 2026, Webflow's single sign-on and audit logs API sat on its quote-only Enterprise plan, above a $2,500-a-month Team plan.
- WordPress VIP, Sitecore and Adobe Experience Manager publish no prices; a headless CMS with Astro or Next.js starts from published per-seat and hosting prices.
- Build to WCAG 2.2 AA: WebAIM found detectable WCAG failures on 95.9% of the top million home pages in February 2026.
- Check privacy rules by audience: the CCPA's revenue threshold is $26.625 million, and visitors in the EU bring the GDPR and cookie consent with them.
- Pull job ads from your applicant tracking system and expire them on time; Google can take manual action on stale postings.

## The short answer

A corporate website is the company's official record online, where buyers, investors, journalists, candidates, partners and regulators check who you are. Building one is mostly about the parts a small-business site skips: leadership, a newsroom, investor relations if you're listed, careers fed by your applicant tracking system, locations, legal pages, an accessibility statement and often several languages. Around them sit the controls that let many people edit safely: roles, approvals, single sign-on and an audit log.

Those controls decide the platform and much of the cost. On 7 November 2026, Webflow's Team plan cost $2,500 a month on an annual contract and its Enterprise plan, the one with single sign-on, was quote-only; WordPress VIP, Sitecore and Adobe Experience Manager published no prices. Build to WCAG 2.2 AA, with privacy settings that fit your visitors' laws and a basic set of security headers. To price the build, see [how much a website costs in the US](https://dardo.studio/en/blog/website-cost-united-states/).

## What a corporate website is, and who it serves

A corporate website presents the company itself, not one product or campaign. It answers people deciding whether to trust the company, and most arrive with one task:

- Buyers and procurement teams check that the company is real, stable and secure enough to work with.
- Investors and analysts look for results, filings, governance documents and events.
- Journalists want facts, a media contact and images they may use.
- Candidates want the open roles and a reason to apply.
- Partners and suppliers need to know whom to contact.
- Regulators and the public read the legal notices, policies and accessibility statement.

### What is an enterprise website?

An enterprise website is a corporate website run at a larger scale: several brands, regions or languages, dozens of editors, and an IT and procurement process around it. The pages are mostly the same; the operating model changes. It needs single sign-on so access follows the company directory, roles that limit who can publish what, approvals, an audit log, uptime commitments in a contract and a vendor that can answer a security questionnaire. Those features are where platform prices jump.

Web development

Want Dardo to do this for you?

Tell us what you need. Nico replies personally within one business day.

[Get a proposal](https://dardo.studio/en/contact/?service=web-development) · [See the service](https://dardo.studio/en/services/web-development/)

## The pages and features that set it apart

A small-business site can be five pages and a form. A corporate site carries obligations to several audiences at once. This is the core set, who uses each part and what it needs:

| Page or feature         | Who uses it                           | What it needs                                                                                                                                                                                  |
| ----------------------- | ------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| About and leadership    | Buyers, journalists, candidates       | Bios with photos the press may reuse, and Organization structured data on the home or about page ([Google](https://developers.google.com/search/docs/appearance/structured-data/organization)) |
| Newsroom and press kit  | Journalists, analysts                 | Dated releases, a media contact who answers, logos and photos with usage terms                                                                                                                 |
| Investor relations      | Shareholders, analysts                | Filings, results, events and governance documents, to your securities counsel's checklist                                                                                                      |
| Careers                 | Candidates                            | Open roles pulled from your applicant tracking system, JobPosting structured data, closed roles removed promptly                                                                               |
| Locations and contact   | Buyers, partners, suppliers           | A page per office with address and hours; forms routed by topic                                                                                                                                |
| Legal and policy pages  | Regulators, customers, partners       | Privacy policy, cookie choices and terms, each with an owner and a review date                                                                                                                 |
| Accessibility statement | People with disabilities, procurement | The standard you meet, known limitations and a way to report barriers ([W3C](https://www.w3.org/WAI/planning/statements/))                                                                     |
| Languages               | International buyers and candidates   | A URL per language, hreflang between versions and a reviewer for each language                                                                                                                 |
| Security contact        | Security researchers, procurement     | A security.txt file under /.well-known/ with a contact and an expiry date ([RFC 9116](https://www.rfc-editor.org/rfc/rfc9116.html))                                                            |

### Investor relations, if the company is listed

For a US-listed company, the website is part of disclosure practice. Under the SEC's [2008 guidance on company websites](https://www.sec.gov/files/rules/interp/2008/34-58288.pdf), whether a posting counts as public for Regulation FD depends on whether the site is a "recognized channel of distribution", whether the posting reaches the market in general, and whether investors have had time to react. One rule is specific: an issuer that maintains a corporate website must post its insiders' Forms 3, 4 and 5 by the end of the business day after filing and keep each one up for at least 12 months ([17 CFR 240.16a-3(k)](https://www.ecfr.gov/current/title-17/section-240.16a-3)).

What the section must publish is your securities counsel's call; the web team's job is to make it fast, accessible and clearly dated.

### Careers: let the applicant tracking system own the jobs

Don't copy job ads into the CMS by hand. Applicant tracking systems publish open roles through an API; Greenhouse's Job Board API needs no authentication to read them ([Greenhouse](https://developers.greenhouse.io/job-board.html)). Pull the roles into your own templates and add JobPosting structured data so they can appear in Google's job results. Google treats stale listings as a policy problem: a closed role needs a validThrough date in the past, a 404 or 410 response, or no markup, and failing to expire jobs "may result in a manual action" ([Google Search Central](https://developers.google.com/search/docs/appearance/structured-data/job-posting)).

### Languages: translate what you can maintain

Every language is another site to keep accurate. Google asks that each language version list itself and every other version, and ignores tags that don't point both ways ([Google Search Central](https://developers.google.com/search/docs/specialty/international/localized-versions)). Size the commitment honestly. When we retired 15 machine-translated languages on dardo.studio in October 2026, they made up 795 of the site's 954 URLs and brought about four search clicks a week; each now redirects to its English version. Our [multilingual SEO guide](https://dardo.studio/en/blog/multilingual-seo/) covers the setup. For the cost of each extra language, see [what website localization costs](https://dardo.studio/en/blog/website-localization-cost/).

## Governance: who can change what

A corporate site is edited by many people and owned by a few. Write the governance down before the build, because the platform tier, the roles and the workflow all follow from it.

| Role                                                                 | Responsible for                                                               | Access                                                         |
| -------------------------------------------------------------------- | ----------------------------------------------------------------------------- | -------------------------------------------------------------- |
| Site owner, usually marketing or communications                      | Priorities, standards and the final say on structure and design               | Administrator                                                  |
| Section owners: HR for careers, IR for investors, legal for policies | Accuracy of their pages, each with a next-review date                         | Edit their own sections only                                   |
| Approvers: legal, compliance, brand                                  | Sign-off before sensitive pages publish                                       | Review and approve, no structural changes                      |
| IT and security                                                      | Single sign-on, access reviews, vendor security reviews, DNS and certificates | The identity provider and the domain, not the content          |
| Developers or the agency                                             | Templates, components, integrations and releases                              | Staging and development; production through a reviewed release |

Then ask each platform and vendor for these controls:

- Single sign-on with your identity provider, plus SCIM or just-in-time provisioning, so someone who leaves loses CMS access the same day.
- Roles that limit who can publish where, down to a page or collection.
- A publishing workflow: staged changes, review, approval and a record of what went live.
- An audit log you can export for compliance or incident review.
- Review cycles: every page has an owner and a next-review date, and the privacy policy is reviewed whenever a new tool starts collecting data.
- Vendor offboarding: agency accounts closed or downgraded at handover.

## Stack options and what they cost

Prices below are from each vendor's own page, read on 7 November 2026, in US dollars.

| Option                                                                               | Published price                                                                                                                                                                                                                                                                                                               | Governance on that plan                                                                                                                       | Fits when                                           |
| ------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------- |
| [Webflow](https://webflow.com/pricing) Premium                                       | $25 a month per site, billed yearly; up to 20,000 CMS items                                                                                                                                                                                                                                                                   | Roles come from the Workspace plan: site-level roles and publishing permissions on Growth, $49 a month billed yearly                          | A few editors and no single sign-on requirement     |
| Webflow Team                                                                         | $2,500 a month, annual contract                                                                                                                                                                                                                                                                                               | 5 full and 5 limited seats, publishing workflows, page branching, a site activity log and API, 2 translation locales; no single sign-on       | Several editors and a staged publishing process     |
| Webflow Enterprise                                                                   | Not published: "Talk to us"                                                                                                                                                                                                                                                                                                   | Single sign-on with SCIM, custom roles, page-level access, design approvals, an audit logs API; 99.99% hosting uptime, against 99.00% on Team | Access must follow your directory                   |
| WordPress, self-hosted                                                               | Software free under the GPL; hosting, plugins and upkeep extra                                                                                                                                                                                                                                                                | Depends on the plugins and hosting you choose                                                                                                 | You have WordPress skills in-house                  |
| [WordPress VIP](https://wpvip.com/pricing/)                                          | Not published: Standard, Enhanced and Signature are each "Request pricing", on annual contracts                                                                                                                                                                                                                               | 99.95% uptime SLA on Standard, 99.99% above it; SAML single sign-on for the VIP Dashboard; an immutable audit log                             | High-traffic publishing on WordPress                |
| Headless CMS with Astro or Next.js                                                   | Astro and Next.js are free (MIT); [Sanity](https://www.sanity.io/pricing) Growth $15 per seat a month, Enterprise custom; hosting from $5 a month on [Cloudflare Workers](https://developers.cloudflare.com/workers/platform/pricing/) or $20 a month plus $20 per developer seat on [Vercel](https://vercel.com/pricing) Pro | Sanity: single sign-on and a full audit trail on Enterprise only. Vercel: SAML single sign-on $300 a month on Pro, audit logs on Enterprise   | Custom design, speed, several languages or channels |
| [Sitecore](https://www.sitecore.com/platform/content-management-system) (SitecoreAI) | Not published: "Request a demo"                                                                                                                                                                                                                                                                                               | Approval workflows before content publishes                                                                                                   | You need its marketing suite                        |
| Adobe Experience Manager Sites                                                       | Not published: "Get pricing"                                                                                                                                                                                                                                                                                                  | Not assessed here                                                                                                                             | You already run Adobe's marketing tools             |

Two things the table doesn't show. A platform fee buys hosting and an editor, not the design, content or integrations. And the jump between tiers usually comes from governance, not traffic: on Webflow, single sign-on and the audit logs API sit on Enterprise, above a Team plan that comes to $30,000 a year by our arithmetic.

How to narrow it down: For the full field of enterprise platforms, see our [enterprise CMS comparison](https://dardo.studio/en/blog/enterprise-cms/).

- A few editors, no directory requirement: Webflow Premium or a headless CMS on a growth plan. Our [Webflow pricing guide](https://dardo.studio/en/blog/webflow-pricing-2026/) and [Webflow vs WordPress](https://dardo.studio/en/blog/webflow-vs-wordpress/) compare the details.
- Single sign-on and audit logs required by procurement: quote Webflow Enterprise, WordPress VIP and an enterprise headless CMS side by side.
- Strict speed targets, several languages or content reused in apps: a headless CMS with Astro or Next.js. See [headless vs traditional CMS](https://dardo.studio/en/blog/headless-cms-vs-traditional-cms/) and [Astro vs Next.js](https://dardo.studio/en/blog/astro-vs-nextjs/).
- A marketing suite already chosen: Sitecore or Adobe, with a certified partner.

## Compliance and risk

This section is a plain-language summary for planning, not legal advice. Your counsel decides which rules apply.

### Accessibility: WCAG 2.2 AA

The Department of Justice's [guidance on web accessibility](https://www.ada.gov/resources/web-guidance/), published on 18 March 2022, says the ADA applies to the goods and services businesses offer on the web, that the department "does not have a regulation setting out detailed standards", and that existing standards such as WCAG provide helpful guidance. Courts have filled the gap unevenly; our guide to [ADA website compliance](https://dardo.studio/en/blog/ada-website-compliance/) covers the case law and lawsuit numbers.

The practical target is [WCAG 2.2](https://www.w3.org/WAI/standards-guidelines/wcag/new-in-22/) Level AA, a W3C Recommendation since 5 October 2023. Most sites miss it today: WebAIM's February 2026 scan found detectable WCAG failures on 95.9% of the top million home pages ([WebAIM](https://webaim.org/projects/million/)). On a corporate site, the riskiest content is often not the templates but the documents: annual reports, investor decks and press-release PDFs. Plan accessible versions of those, publish an accessibility statement, and check your templates with our [WCAG 2.2 checklist](https://dardo.studio/en/tools/wcag-2-2-checklist/).

### Privacy and cookie consent

- California. The CCPA covers for-profit businesses doing business in California with gross annual revenue of $26.625 million or more (since 1 January 2025), or that buy, sell or share the personal information of 100,000 or more California residents or households, or earn half their revenue from selling or sharing it. They must link the privacy policy from the home page with the word "privacy", offer a "Do Not Sell or Share My Personal Information" or "Your Privacy Choices" link, and honor signals such as Global Privacy Control ([California Privacy Protection Agency](https://cppa.ca.gov/faq.html)).
- The European Union. The GDPR reaches a company outside the EU when it offers goods or services to people in the EU or monitors their behaviour there ([GDPR, Article 3(2)](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679)). Separately, the ePrivacy Directive requires consent before storing or reading information on a visitor's device, except where that is strictly necessary for the service the visitor asked for ([Article 5(3)](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:02002L0058-20091219)). In practice: no analytics or advertising cookies before consent for those visitors.
- Everywhere. Inventory every tag and form, make the privacy policy match what the site collects, and use a consent tool that blocks tags until the visitor's choice allows them.

### Security headers and a security contact

Set these on every response; the values are [OWASP's](https://cheatsheetseries.owasp.org/cheatsheets/HTTP%5FHeaders%5FCheat%5FSheet.html) recommendations:

| Header                    | Recommended value                                             | What it prevents                                                                                       |
| ------------------------- | ------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ |
| Strict-Transport-Security | max-age=63072000; includeSubDomains; preload                  | Connections downgraded to plain HTTP. Read OWASP's warning first: a mistake here can lock visitors out |
| Content-Security-Policy   | A policy that lists your script sources, with frame-ancestors | Injected scripts and clickjacking                                                                      |
| X-Content-Type-Options    | nosniff                                                       | Browsers treating files as a different, executable type                                                |
| Referrer-Policy           | strict-origin-when-cross-origin                               | Full URLs leaking to other sites                                                                       |

Check the platform before you promise headers to IT: Webflow lists HSTS and custom security headers on Team and Enterprise, while its Basic and Premium security rows list two-factor authentication and DDoS protection. On a site you deploy yourself, headers live in your configuration. Add a security.txt file too: RFC 9116 makes its Contact and Expires fields mandatory.

## Process and timeline

Corporate projects follow the same phases as any website, with more people at each gate:

1. Discovery: audiences, goals, governance, a content inventory, the integrations (applicant tracking, CRM, IR feed, consent, single sign-on) and legal requirements.
2. Information architecture and content model: pages, URL patterns and CMS collections for people, offices, releases and jobs.
3. Design system: accessible components built once.
4. Build and integrations, on a password-protected staging site.
5. Content: writing, approvals, translation and migration, with a redirect for every URL that changes; our [website migration SEO checklist](https://dardo.studio/en/blog/website-migration-seo-checklist/) covers that step.
6. Testing: keyboard and screen reader checks, security headers, speed, forms, analytics and consent.
7. Launch and handover: editor training, written governance and an access review.

Published timelines are ranges. iDesign, a web design agency, puts small-business sites at 10 to 16 weeks and enterprise or highly custom projects at six months to a year, and calls late content "the single most common cause of timeline slippage" ([iDesign](https://idesignny.com/blog/how-long-does-a-website-project-take)). Clutch, which collects verified client reviews, says most web design projects reviewed on its platform last 7 months ([Clutch](https://clutch.co/web-designers/pricing)). Legal and IR reviews take calendar time too, so book them into the plan. Our guide on [how long it takes to build a website](https://dardo.studio/en/blog/how-long-to-build-a-website/) breaks the phases down. If you're replacing an existing site, our [website redesign timeline](https://dardo.studio/en/blog/website-redesign-timeline/) breaks the phases down by scope.

## Budget

We found no survey of corporate website costs specifically. The closest published data is Clutch's web design pricing guide, updated 21 September 2026: an average project cost of $38,105, a note that most projects reviewed there cost under $10,000, and US firms at $100 to $149 an hour ([Clutch](https://clutch.co/web-designers/pricing)). The average is pulled up by a minority of large projects, and Clutch publishes no median.

The scope in this guide is what makes a project large: HR and IR integrations, several languages, legal review, accessibility testing and a platform tier with single sign-on. Price each as its own line and add the recurring costs from the stack table. Our [US website cost guide](https://dardo.studio/en/blog/website-cost-united-states/) shows how hours and rates become a quote, and the [website cost calculator](https://dardo.studio/en/tools/website-cost-calculator/) gives a range from published prices. Dardo quotes each project from its scope in an itemized written proposal ([pricing](https://dardo.studio/en/pricing/)).

## Vendor-selection checklist

Send every vendor the same brief, which our free [website RFP template](https://dardo.studio/en/tools/website-rfp-template/) helps you write, and compare their answers to these:

1. Similar work: live corporate or B2B sites with several editors, approvals or languages. Visit them on your phone.
2. A platform recommendation with reasons, including the tier your governance needs and its price.
3. Accessibility: the standard (WCAG 2.2 AA), manual testing with assistive technology, and who writes the statement.
4. Security: single sign-on setup, headers, who has production access and how they answer your questionnaire.
5. Integrations: who builds and who maintains each one.
6. Content and migration: who writes, who migrates and how redirects are tested.
7. Ownership: domain, hosting and CMS accounts in your company's name; code and design files handed over.
8. The team: who does the work, overlapping hours and what happens if someone leaves.
9. After launch: response times, a maintenance price and editor training.
10. The exit: how you would move to another vendor or platform.

Our guide on [how to compare web design studios](https://dardo.studio/en/blog/compare-design-studios/) adds a scoring sheet, and our [B2B website examples](https://dardo.studio/en/blog/b2b-website-examples/) show how established companies structure the pages buyers check.

## What to do next

Write the brief first, with the audiences, pages, governance and integrations from this guide. If you'd like Dardo to propose the build, see [web development](https://dardo.studio/en/services/web-development/), or [B2B website design](https://dardo.studio/en/services/b2b-website-design/) if the site sells to buying committees. If accessibility is urgent, start with a [web accessibility](https://dardo.studio/en/services/web-accessibility/) audit, or [send us your brief](https://dardo.studio/en/contact/).

## Common questions

**What is a corporate website?**

It is a company's official website about itself, as opposed to a product or campaign site. It serves buyers, investors, journalists, candidates, partners and regulators, with pages such as about and leadership, a newsroom, investor relations, careers, locations, legal and policy pages and an accessibility statement.

**What is an enterprise website?**

A corporate website run at a larger scale: several brands, regions or languages, many editors and an IT and procurement process around it. It needs single sign-on, roles, approval workflows, audit logs, contractual uptime and vendor security reviews, features that usually sit on a platform's top, quote-only tier.

**How long does corporate website development take?**

Published ranges vary with scope. iDesign, a web design agency, puts enterprise or highly custom projects at six months to a year and small-business sites at 10 to 16 weeks; Clutch says most web design projects reviewed on its platform last 7 months. Content and approvals, more than code, usually set the date.

**How much does a corporate website cost?**

No survey covers corporate sites specifically. Clutch's guide, updated 21 September 2026, puts the average web design project at $38,105, with most under $10,000 and US firms at $100 to $149 an hour. Platform fees come on top: Webflow Team is $2,500 a month on an annual contract, and Webflow Enterprise, WordPress VIP, Sitecore and Adobe are quote-only.

**Which CMS is best for a corporate website?**

The one whose plan covers your governance at a price you accept. A few editors without single sign-on can work well on Webflow Premium or a headless CMS; if procurement requires single sign-on and audit logs, quote Webflow Enterprise, WordPress VIP and an enterprise headless CMS side by side.

**Does a corporate website have to meet ADA requirements?**

The Department of Justice's position is that the ADA covers the goods and services businesses offer on the web, but there is no regulation setting a technical standard for private businesses. WCAG 2.2 Level AA is the defensible target. Your counsel decides which obligations apply.

## Sources & further reading

Sources behind this page, with further detail from the original publishers.

- [Webflow: Pricing (site, platform and Workspace plans)](https://webflow.com/pricing) · webflow.com
- [WordPress VIP: Pricing](https://wpvip.com/pricing/) · wpvip.com
- [WordPress VIP Documentation: Single Sign-On for the VIP Dashboard](https://docs.wpvip.com/manage-user-access/vip-dashboard/sso/) · docs.wpvip.com
- [WordPress VIP Documentation: Audit Log](https://docs.wpvip.com/logs/audit-log/) · docs.wpvip.com
- [Sanity: Pricing](https://www.sanity.io/pricing) · sanity.io
- [Vercel: Pricing](https://vercel.com/pricing) · vercel.com
- [Cloudflare Workers: Pricing](https://developers.cloudflare.com/workers/platform/pricing/) · developers.cloudflare.com
- [Sitecore: Content Management System (SitecoreAI)](https://www.sitecore.com/platform/content-management-system) · sitecore.com
- [Adobe: Experience Manager Sites pricing](https://business.adobe.com/products/experience-manager/sites/pricing.html) · business.adobe.com
- [SEC: Commission Guidance on the Use of Company Web Sites, Release 34-58288 (2008)](https://www.sec.gov/files/rules/interp/2008/34-58288.pdf) · sec.gov
- [eCFR: 17 CFR 240.16a-3, reporting transactions and holdings](https://www.ecfr.gov/current/title-17/section-240.16a-3) · ecfr.gov
- [Greenhouse: Job Board API](https://developers.greenhouse.io/job-board.html) · developers.greenhouse.io
- [Google Search Central: Job posting structured data](https://developers.google.com/search/docs/appearance/structured-data/job-posting) · developers.google.com
- [Google Search Central: Organization structured data](https://developers.google.com/search/docs/appearance/structured-data/organization) · developers.google.com
- [Google Search Central: Localized versions of your pages](https://developers.google.com/search/docs/specialty/international/localized-versions) · developers.google.com
- [U.S. Department of Justice: Guidance on web accessibility and the ADA (2022)](https://www.ada.gov/resources/web-guidance/) · ada.gov
- [W3C WAI: What's new in WCAG 2.2](https://www.w3.org/WAI/standards-guidelines/wcag/new-in-22/) · w3.org
- [W3C WAI: Developing an accessibility statement](https://www.w3.org/WAI/planning/statements/) · w3.org
- [WebAIM: The WebAIM Million (February 2026)](https://webaim.org/projects/million/) · webaim.org
- [California Privacy Protection Agency: Frequently asked questions](https://cppa.ca.gov/faq.html) · cppa.ca.gov
- [EUR-Lex: General Data Protection Regulation (EU) 2016/679](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679) · eur-lex.europa.eu
- [EUR-Lex: ePrivacy Directive 2002/58/EC (consolidated)](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:02002L0058-20091219) · eur-lex.europa.eu
- [OWASP: HTTP Headers Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/HTTP%5FHeaders%5FCheat%5FSheet.html) · cheatsheetseries.owasp.org
- [RFC 9116: A File Format to Aid in Security Vulnerability Disclosure](https://www.rfc-editor.org/rfc/rfc9116.html) · rfc-editor.org
- [Clutch: Web design pricing guide (updated 21 September 2026)](https://clutch.co/web-designers/pricing) · clutch.co
- [iDesign (web design agency): How long does a website project take? (May 2026)](https://idesignny.com/blog/how-long-does-a-website-project-take) · idesignny.com

[Nicolás Cerón](https://www.linkedin.com/in/nicoceron/)

Nicolás Cerón is the founder of Dardo, a brand, web design and development studio in Bogotá, Colombia.

## Related articles

- [**B2B website examples: 12 real sites from different industries and the patterns worth copying**12 B2B websites read on 17 October 2026, from Stripe to GE Vernova: how each says who it's for, where it puts proof and prices, and what to copy.](https://dardo.studio/en/blog/b2b-website-examples/)
- [**How to compare web design studios before you hire one: criteria, questions and red flags**A fair way to tell the studios on your shortlist apart: what to check on their live client sites, what to ask, and the red flags to watch for.](https://dardo.studio/en/blog/compare-design-studios/)
- [**How much does a website cost in Colombia in 2026?**Website prices in pesos and dollars by type of site, as 12 Colombian providers published them on 7 November 2026, plus domain, hosting, maintenance and IVA.](https://dardo.studio/en/blog/website-cost-colombia/)
- [**How much does a website cost in the US in 2026? Published rates, platform fees and what moves a quote**What a website costs in the US in 2026, from published sources: builder plans, freelancer and agency rates, web app budgets and the costs that recur.](https://dardo.studio/en/blog/website-cost-united-states/)

## Keep exploring.

- [Service · **Web development for the US and Latin America**](https://dardo.studio/en/services/web-development/)

- [Your project · **Start a conversation**](https://dardo.studio/en/contact/)
