ORENTARA

Four weeks. Two scopes. One fixed price.

Not a discovery phase, and not a retainer that turns into a project. Two packages with the scope written down before anything starts, on a framework you own afterwards. Here is everything that is in them.

About 4 weeks · Fixed scope · Hosted in Germany or the UAE

Start with the free screeningSkip to the scope

Authority is Foundation, plus six parts

The six parts below go live with every build. Authority sets six more on top, so the larger package is the same system with more reach, not a different one.

Foundation · in every buildAuthority adds · included in the larger package

  • Domain

    New or existing, always yours

  • Business email

    Set up when you are new

  • Website

    Up to seven pages, yours to edit

  • Consent and privacy

    Gate, consent log, policies

  • Enquiry to CRM

    Every enquiry captured

  • Live dashboard

    Speed, enquiries, consent rate

Ten pages

Instead of seven

Live insights blog

Not just the structure

Launch content

Three articles at launch

Migration

Articles and redirects moved

Pillar guide

One, written for authority

AI-search foundation

llms.txt and citable copy

What we need from you

That is the whole list. It is short because the scope is fixed and the compliance layer is pre-built as product rather than invented per project.

  1. Your logo files and brand colours.
  2. Access to your domain.
  3. One person who can answer questions.
  4. Ninety minutes for the content round.
  5. Two rounds of feedback.

Build

Two packages

Both are fixed-scope, delivered in about four weeks, and built to the UAE PDPL, Federal Decree-Law No. 45 of 2021. Authority contains Foundation.

Two packages rather than one, on purpose. A single package leaves you only yes or no. Two move the question from whether to how much, and they let us discount over scope instead of over rate, which is the only kind of discount that does not quietly cost you something.

Foundation

Up to seven pages, compliance layer, first-party lead capture.

Delivery
about 4 weeks
Revisions
2

  • Up to seven pages, built on PayloadA modern open-source framework, not a page builder. Your content, your brand and your data are yours, and you can take them with you. The platform layer underneath is licensed for as long as we work together, and your site keeps running on it afterwards.

  • Ready to publishBlog and archive structure set up, even if you start without a single post.

  • Consent gateNothing non-essential loads before opt-in, with an auditable consent log.

  • Policies written for youPrivacy and cookie policy seeded to your actual regime, naming the right controller and a real contact.

  • A working data-rights routeRequest form, verified handling, plus a privacy mailbox.

  • SEO and GEO baselineCorrect schema and entity, social tags, clean headings, sitemap.

  • Lead captureFirst-party, straight into your CRM.

  • Domain and business email for a new companyWe set up a registrar account for your company, register the domain in its name, create the mailboxes and publish SPF, DKIM and DMARC, then hand over every login. Already have a domain, or prefer to register it yourself and give us access? That works just as well.

  • Imagery includedUsable photography from your current site carried over, and AI-generated imagery where it helps. Licensed stock photography only if you ask for it, billed at cost.

  • Certified hosting in GermanyData centres certified to ISO 27001, ISO 27701, ISO 9001 and ISO 14001. We run it, so extensions, permissions and updates are ours to answer for rather than yours to chase.

  • Hosting in the UAE on requestWhere sector rules or a contract require the data to stay in the country, the site runs in a UAE data centre instead. Priced separately, and the operator is named in the proposal.

  • RevisionsOne content round and two revisions.

  • Admin and handoverDeployed on our managed infrastructure, with an admin you can edit yourself and a handover document. Deployment onto your own systems is possible on request, against requirements agreed in writing.

  • A live dashboard on our own infrastructure, tenant-separatedSpeed, uptime, indexed pages, search impressions, visitors, enquiries by source and your consent rate. Baseline measured before we change anything, so the effect is visible rather than claimed.

Authority

Up to ten pages plus insights blog with three articles, full compliance layer, content migrated.

Delivery
about 4 weeks
Revisions
3

Everything in Foundation, plus:

  • Ten pages and a live blogUp to ten pages plus a full insights blog, not just the structure.

  • Launch contentThree blog articles written, designed and published, so the blog goes live with content rather than a placeholder.

  • MigrationYour existing articles moved over, with every redirect mapped before anything goes live.

  • Pillar guideOne, written for authority rather than volume.

  • AI-search foundationAI-crawler policy, a real llms.txt entity brief, and copy written to be citable.

  • AI editing accessYour site connected to Claude or any other AI assistant that supports MCP. Ask for text and SEO changes in plain language; they arrive as drafts in your admin, and nothing goes live until you publish it.

  • RevisionsThree.

A site that is compliant on the day it ships does not stay compliant on its own.

Keep

Care plans

Every build carries one. Compliance on launch day is a state, not a property.

Dependencies age, third-party scripts change what they send, and the PDPL executive regulations are still to issue. That is why keeping consent and policies current sits in the floor tier and not in the upper one: it is not an upgrade, it is the condition for the word compliant to still apply in six months.

Care Essentials

  • Certified hostingIn Germany (ISO 27001, ISO 27701, ISO 9001, ISO 14001) with uptime monitoring, or on request in a UAE data centre.

  • Tested backupsA restore that is actually tested rather than assumed.

  • Updates and speedSecurity and dependency updates, and Core Web Vitals watched rather than assumed.

  • Compliance kept currentConsent and policies updated as the PDPL executive regulations issue. A compliant site cannot go stale, so this sits in the floor tier and not above it.

  • Dashboard kept liveSpeed, uptime, enquiries and consent rate, updated on our infrastructure for as long as the plan runs.

  • Monthly reportOne page.

Care Extended

Everything in Care Essentials, plus:

  • Content editsText, images and page changes, within a fair monthly allowance.

  • Quarterly re-checkCompliance reviewed every quarter, with the result in writing.

  • Priority supportPriority response and a named contact.

  • AI editing accessYour site connected to Claude or any other AI assistant that supports MCP, so you can draft text and SEO changes in plain language. Drafts only; publishing stays with you.

Founder bonus. If your trade licence is no more than six months old when you sign the build, your first care plan year costs nine months: pay annually and get three months free.

Where the legal line runs

We build the technical layer and hand you artefacts a lawyer can review: a documented data map, an auditable consent log, and policies written to your actual regime with a real controller and a real contact. The legal assessment stays with your counsel, and we work alongside them.

We also do not quote fine figures. The law does not fix them, the executive regulations that will are not issued, and a number invented to move a sale is the fastest way to lose the argument you were trying to win.

What you own at the end

The code and the content. The site is built on Payload, an open-source framework rather than a page builder, with an admin you edit yourself and a handover document that explains it. Deployment onto your own systems is possible on request, against requirements agreed in writing.

The care plan is how we keep it working, not how we keep hold of it.

Where it runs

Orentara hosts client sites in Germany, on infrastructure certified to the standards below. The certificates are held by our hosting partner, not by Orentara, and you can see them rather than take our word for it. We run the hosting, so extensions, permissions and updates are ours to answer for rather than yours to chase.

Where sector rules or a contract require the data to stay in the country, the site can run in a UAE data centre instead. That is available on request and priced separately, and the operator is named in the proposal.

  • ISO 27001
  • ISO 27701
  • ISO 9001
  • ISO 14001

Next step

The next step is a screening, not a quote

Send us your site and we measure it against the PDPL as it stands, and against what a buyer can check for themselves in about four minutes. You get the finding in writing, by email, within minutes. Which of the two packages we recommend follows from it, and so does the figure.

Send my URL for the free checkAll three engagements
  • Direct reply from the founder
  • No obligation, no sales sequence
  • Your details handled per the PDPL

Share this page