RFP 2025-01-CSDecember 2025
Proposal Response

District of North Saanich
Website Redesign

A comprehensive proposal for modernizing North Saanich's digital presence—creating an accessible, WCAG 2.2 AA compliant, and community-focused website that serves all residents effectively.

WCAG 2.2 AA Compliant
Drupal CMS + Next.js
Responsive Design
24/7 Critical Support

Submitted By

L&H Web Solutions

Submission Date

December 12, 2025

Proposal Valid Until

March 12, 2026

Your New Website — Live Demo

We've built a fully functional prototype to demonstrate our vision for North Saanich's digital presence.

Open Full Site
https://northsaanich-demo.lh-solutions.ca/

Drupal CMS Integrated

Full CMS backend included. Staff can edit content, manage pages, and publish updates.

WCAG 2.2 AA Compliant

Full accessibility with keyboard navigation, screen reader support, and high contrast.

Mobile-First Design

Responsive layout optimized for all devices.

Sub-2 Second Load

Optimized performance with Next.js and modern image delivery.

01

Letter of Introduction

L&H Web Solutions

180 George St., Ottawa, ON K1N 0A1office@lh-solutions.ca+1 (514) 449-3368lhwebsolutions.ca

December 12, 2025

Dan Moreton

Procurement Coordinator

District of North Saanich

purchasing@northsaanich.ca

Re: RFP 2025-01-CS - Website Redesign Proposal

Dear Mr. Moreton,

Thank you for the opportunity to propose on the District of North Saanich's website redesign.

I'm Lina, Project Lead at L&H Web Solutions. My team has built some fairly demanding systems over the years, including control tower software for airports like Hong Kong International and New York JFK, healthcare management platforms, and business systems with payment processing and multi-user environments. The kind of projects where reliability and precision aren't negotiable.

This project isn't just a visual refresh. You need a complete rebuild: new information architecture, full WCAG 2.2 AA accessibility compliance, modern CMS implementation, meeting and payment integrations, and a system your staff can confidently maintain long-term. We understand that. I've delivered similar solutions in environments with complex workflows and high expectations.

Our Technical Lead, Hugo, manages infrastructure for MTW Services, which works closely with government bodies. He built their website where multiple staff collaborate on essentially the same multi-editor environment the District requires. I've delivered complex management platforms including Yosrart Art School's system (Stripe payment processing, instructor dashboards, student management, role-based permissions) and previously worked in cybersecurity roles at Nokia, a large telecom company, which makes me acutely aware of the security threats and protections a municipal website needs.

One practical detail: while our office is in Ottawa, our workday is flexible, meaning we can align to Pacific Time business hours (9 AM–5 PM PST) for North Saanich project communications, so we're available when you need us. Full team details, references, and portfolio links are provided in Section 05.

We'd be honored to partner with the District of North Saanich on this project. Please feel free to reach out with any questions.

Best regards,

Lina M.

Project Lead, L&H Web Solutions

office@lh-solutions.ca+1 (514) 449-3368lhwebsolutions.ca
02

Understanding of Project Requirements

A comprehensive analysis of the District's needs based on our thorough review of RFP 2025-01-CS and assessment of the current website.

The District of North Saanich is seeking a full redesign of its corporate website (northsaanich.ca) to strengthen service delivery, improve citizen access to information, modernize the visual identity, and ensure full compliance with accessibility and privacy standards.

From our review of the RFP and our assessment of the District's current website, we understand this project is not simply a visual refresh—but a complete redevelopment of the website's information architecture, user experience, technical infrastructure, and long-term maintainability. The RFP clearly identifies specific technical requirements, integration needs, security standards, and ongoing support expectations that form the foundation of this project.

Current Website Challenges (As Identified in RFP)

1

Navigation is difficult for both new and returning visitors

2

Accessibility compliance does not meet WCAG 2.2 AA standards

3

Key services and high-traffic tasks are not easily discoverable

4

The mobile experience is limited

5

Search functionality does not support task-driven lookup

6

Policies, bylaws, and meeting information are hard to browse

7

The homepage layout is cluttered and visually dated

8

The meeting portal is not user-friendly and lacks clarity

RFP Requirements & Project Objectives

1. Improve User Experience & Usability

  • Intuitive navigation and reconfigured menu structure
  • Modern, visually appealing design using staff-provided images
  • Clear presentation of key citizen services (payments, permits, meetings)
  • Search tools including general search and 'I Want To' search functionality
  • Flexible page layouts and design components that staff can update

2. Accessibility, Compliance & Device Optimization

  • Meet WCAG 2.2 Level AA accessibility standards where possible
  • Accessible design features for all users
  • Full mobile device optimization and responsive design
  • Compatible with all major browsers (Edge, Chrome, Safari, Firefox)
  • FOIPPA compliance with Canadian data residency

3. Compatibility with Existing Municipal Tools

  • Seamless integration with iCompass for meeting management
  • Integration with Vadim for online payment services
  • Templates for pages hosted by related systems
  • Coordination with District's IT contractor for third-party integrations

4. Security, Authentication & Backup Requirements

  • Full HTTPS security across entire site
  • Premium security plugins (e.g., Wordfence Premium)
  • Hidden or obscured login screen
  • MFA enforced for all CMS and hosting control panel logins
  • Unique credentials for all control panel access
  • External Web Application Firewall (WAF)
  • Daily offsite backups stored for minimum of 30 days
  • 24/7 reachability for critical issues (downtime, security incidents)

5. Technical & CMS Platform Requirements

  • Built on open, well-supported CMS (WordPress, Drupal, or equivalent)
  • Easy for District staff to update and maintain content
  • Modern, maintainable technology stack
  • Regular security updates and patching (critical updates within 24 hours)
  • Printer-friendly page layouts

6. Forms, Communication Tools & Integrations

  • Forms with reCAPTCHA protection (CMS-based or FormAssembly/Formstack)
  • Email subscription tools for residents
  • Emergency alert banner system
  • Social media embeds as needed
  • Option for users to sign up for page change notifications
  • Tools to showcase projects with engagement/feedback capabilities

7. Content Migration & Site Transition

  • Content inventory and mapping from old to new structure
  • Assisted migration of content from current to new site
  • Clear explanation of migration costs
  • Ability to keep current site fully functional during migration

Training & Post-Launch Support

  • Editor and administrator training for three staff members
  • Both live training sessions and recorded sessions for future reference
  • Customer support included at no added cost for six months after launch
  • Clear explanation of ongoing support options and annual costs, including hosting

Cost & Transparency Requirements

  • Hourly rates for each team member and all sub-consultants
  • Number of hours anticipated for each team member
  • Total upset price (maximum fee)
  • Clear breakdown of upfront, annual, and optional costs
  • Separate costing for any recommendations beyond current scope

Our Understanding Summary

This project is a full-scale redevelopment combining user experience improvements, accessibility modernization, technical platform migration, security hardening, content migration, and staff enablement. The District requires a website that is not only visually modern but also technically robust, fully accessible, easy for staff to maintain, and compatible with existing municipal systems (iCompass and Vadim).

Having successfully delivered similar projects for healthcare platforms like Oryx Medical and educational institutions like Yosrart Art School, and having studied extensively from BC municipal sites including sidney.ca, sooke.ca, and saanich.ca, our team understands both the technical requirements specified in this RFP and the operational realities of municipal web management. We're prepared to address every requirement outlined in the Scope of Work with our proven methodology and experienced team.

03

Methodology & Proposed Solutions

Our project methodology and proposed solutions to address each element of the Scope of Work, informed by best practices from similar municipal websites.

1. Platform & Technical Foundation

CMS Platform: Drupal (Fully Self Hosted on Canadian Servers)

Enterprise-Grade Open-Source CMS

Drupal is a fully open-source, enterprise-level CMS used by governments across Canada due to its strong security model, scalability, and long-term stability. It is completely self hosted, giving the District full control of all data, all code, and all infrastructure. Drupal is ideal for large content teams, complex page hierarchies, and municipal workflow requirements.

Our recommended deployment includes hosting on Canadian servers to meet data residency requirements and internal IT policies.

If the District prefers WordPress or a modern headless alternative, we are prepared to build with those platforms as well. Our recommendation is based on long-term stability and governance needs.

Why We Recommend Drupal
  • Mature Security Model: Trusted by Government of Canada and BC municipalities
  • Full Self Hosting: All data and code reside on Canadian servers
  • 2-Factor Authentication: Enforced through Drupal's core authentication system
  • Extremely Scalable: Designed for hundreds or thousands of pages
  • Stable for 10+ Years: Designed for long-lifecycle public sector sites
  • Powerful Workflow: Drafts, moderation, reviews, and role-based access
  • Rich Ecosystem: Over 10,000 open-source modules, no vendor lock-in
  • Editor Friendly: Layout Builder, drag and drop editing, flexible page tools
Technology Foundation
  • Open Source: No licensing fees, full control, long-term independence
  • Proven in Government: Used by municipalities, universities, and federal agencies
  • Role Based Access: Two or more permission levels fully supported
  • Complex Hierarchy Support: 300+ pages, deep nesting, structured navigation
  • Automatic Navigation: Breadcrumbs, side navigation, and menus update automatically
  • Form Building: Webform module handles advanced forms, reCAPTCHA, conditional logic
  • Reusable Components: Custom blocks, global elements, templates
  • Developer Availability: Large talent pool familiar with Drupal
Security & Compliance
  • • Full HTTPS/SSL encryption
  • • FOIPPA-compliant Canadian hosting (AWS ca-central-1)
  • • Critical security patches within 24 hours
  • • Regular dependency updates and security audits
Technical Standards
  • • Mobile-first responsive design
  • • Cross-browser compatibility (Edge, Chrome, Safari, Firefox)
  • • Latest Node.js LTS with TypeScript
  • • Clean, semantic HTML5 with React/Next.js

2. Design, Usability & Accessibility

Our design prioritizes task completion over information display. Residents visit to pay taxes, find meeting agendas, or check bylaws—our architecture surfaces these pathways immediately.

Navigation & Search
  • • 3-tiered navigation: Primary departments, Quick Links, Contextual breadcrumbs
  • • "I Want To..." task bar for common actions
  • • AI-powered search with predictive suggestions
  • • Mega menu (desktop), slide-out (mobile)
WCAG 2.2 AA Compliance
  • • Full compliance at launch (not phased)
  • • Keyboard navigation for all elements
  • • Screen reader testing: NVDA, VoiceOver, JAWS
  • • 4.5:1 minimum color contrast
Accessibility Testing Protocol

Testing Leadership:

Saad M. leads all accessibility audits, ensuring compliance with WCAG 2.2 AA standards through rigorous testing protocols. His experience at Goldman Sachs and American Express in highly critical production environments ensures enterprise-grade quality standards.

Automated Testing:

  • axe DevTools: Automated accessibility scanning during development
  • WAVE: Web accessibility evaluation tool for comprehensive audits
  • Lighthouse: Performance and accessibility scoring (target: 95+ accessibility score)

Manual Testing:

  • Keyboard Navigation: All pages tested with keyboard-only navigation (Tab, Enter, Arrow keys, Escape)
  • Screen Reader Testing: NVDA on Windows, VoiceOver on Mac/iOS, JAWS validation for Windows users
  • Focus Indicators: Visual focus states tested for all interactive elements
  • Color Contrast: All text/background combinations verified against WCAG 2.2 AA standards

User Testing:

Minimum 2 sessions with residents using assistive technologies (if District can facilitate). This real-world testing ensures the site works for actual users, not just compliance checkboxes.

Third-Party Validation:

Optional external WCAG audit by certified firm available for $2,500. We recommend this for additional assurance, though our internal testing meets all compliance requirements.

3. Forms, Communications & Integrations

Forms & Engagement
  • • Built-in Drupal forms with reCAPTCHA v3
  • • PDF/paper form conversion to web forms
  • • Workflow automation for approvals
  • • Emergency alert banner system
Third-Party Integrations
  • • iCompass (meeting agendas, minutes)
  • • Vadim (property tax/payment)
  • • Mailchimp (District's current platform)
  • • RSS feeds for news distribution
Integration Experience & Technical Approach
Team Integration Expertise

Our team has successfully integrated complex third-party systems across multiple production platforms. Miguel leads integration architecture and testing, with proven expertise in:

  • Payment Gateway Integration: Stripe integration for Yosrart Art School (PCI-DSS compliant, multi-currency support)
  • REST API Integration: Secure authentication, rate limiting, error handling, and real-time data synchronization
  • Webhook Processing: Event-driven architecture for payment confirmations and system notifications
  • Iframe Embedding: Secure third-party portal embedding with proper sandboxing and CSP headers
  • Multi-System Architecture: Experience coordinating multiple integrated services in production environments
iCompass & Vadim Integration Approach
  • Early Engagement: Initial API discovery and documentation review in Week 1 of development phase, with early contact to iCompass/Vadim support teams
  • Sandbox Testing: Sandbox environment setup for thorough testing before production deployment
  • Secure Implementation: Secure credential management using AWS Secrets Manager, following best practices for government systems
  • Robust Error Handling: Error handling and fallback mechanisms for API downtime scenarios
  • Performance Optimization: Performance optimization to ensure integrations don't impact page load times
  • Comprehensive Testing: Extensive testing with District staff during QA phase, including integration-specific test scenarios
  • Vendor Support: Leveraging iCompass and Vadim's technical support resources throughout integration

4. Security, Authentication & Backup

Access Control
  • • MFA required for all Drupal admin users
  • • Custom admin URL (not default /admin path)
  • • Role-based access control with granular permissions
  • • Session timeout enforcement
Infrastructure
  • • External WAF (AWS WAF) — network-level protection
  • • DDoS protection (AWS Shield)
  • • Third-party penetration test pre-launch
  • • Canadian data residency required
Backup & Recovery
  • • Daily automated backups with 60-day retention
  • • Monthly backup restoration testing to verify integrity
  • • Multi-region hosting (Vancouver + Montreal) for redundancy
  • • District notified immediately of any critical incidents

5. Content Migration Strategy

Content Migration Scope
Migration Process
  • • Complete content inventory (proponent-led)
  • • Quality assessment (keep/revise/archive)
  • • URL redirect mapping for SEO preservation
  • • Up to 300 pages in base scope
Zero-Downtime Launch
  • • Current site fully functional throughout
  • • Parallel development on staging
  • • DNS cutover during low-traffic window
  • • Immediate rollback capability
04

Strategy & Schedule

A structured, phase-driven methodology with clear team assignments, ensuring capacity, accountability, and timely completion.

Project Timeline

Work Begins

February 2, 2026

Project Completion

August 28, 2026

Total Team Hours

394-589 hours

This 6-month schedule includes 4 team members working in parallel where appropriate. Each phase has dedicated specialists with overlapping skills for redundancy. The hour range (394-589) reflects our detailed task analysis, with flexibility built in to absorb scope adjustments.

Resource Allocation & Team Capacity

North Saanich will be our primary engagement during February 2026 - August 2026. Team members work on this project alongside maintaining expertise through select other work. Below is our weekly hour commitment per team member:

Team MemberWeekly HoursPrimary Focus
Lina M.7-11 hrs/weekProject management, IA/UX design, visual design
Hugo B.6-9 hrs/weekTechnical architecture, CMS setup, infrastructure
Saad M.4-6 hrs/weekAccessibility audits, UX research, testing
Miguel6-9 hrs/weekAPI integrations, backend development, content migration
Total~15-23 hrs/weekFlexible based on phase requirements

Remote Collaboration Approach

Communication Structure:

  • Bi-weekly video check-ins during Pacific Time business hours (9 AM - 5 PM PST)
  • Shared Slack/Teams channel for real-time communication
  • Project dashboard (updated daily) for transparency on progress and hours
  • All team members operate on Pacific Time business hours for North Saanich project communications

While our office is in Ottawa, we've successfully delivered projects across Canada by structuring our workday around client time zones.

Change Order Management

We maintain complete transparency throughout the project. All scope changes require written approval before work begins.

Change Request Process:

  1. Change requests submitted via shared project tracker (Asana/Basecamp)
  2. Estimated hours and cost impact provided within 2 business days
  3. District approves/rejects before implementation
  4. Work begins only after written approval

Budget Tracking:

  • Monthly budget tracking reports show hours used vs. remaining
  • Real-time dashboard accessible to District project team
  • No surprise invoices—complete transparency on all costs
  • Early warning alerts when approaching phase budget limits
Phase 013 weeksLina, Saad, Miguel54-81 hrs

Project Initiation & Discovery

Feb 2026

Objective: Establish clear expectations, confirm project scope, gather information, and set the foundation for all subsequent work.

Key Activities

  • Kickoff meeting with District project team
  • Stakeholder interviews (communications, administration, IT, content owners)
  • User testing sessions with internal staff and small group of residents
  • Review of project goals, pain points, and priorities
  • Review of Google Analytics data (provided by District post-award)
  • Technical environment confirmation (Drupal CMS, Next.js, hosting, integrations)
  • Identification of key service workflows (payments, permits, public notices)
  • Full content inventory creation (proponent-led with staff support)
  • Review of District records retention policies for migration planning

Deliverables

  • Discovery Report (summary of insights, requirements, risks)
  • User Research Summary (top tasks, pain points, navigation insights)
  • Complete content inventory document
  • Initial IA & Navigation Blueprint
  • Confirmed project schedule and communication structure
  • Stakeholder interview summary
District Review: 5 business days
Phase 025 weeksLina, Saad62-92 hrs

Information Architecture & UX Design

Feb – Mar 2026

Objective: Redesign the site's structure, navigation, and top-level UX patterns to ensure citizens can easily find key services.

Key Activities

  • Full content inventory and mapping
  • Consolidation and simplification of navigation categories
  • Development of task-based "I Want To…" structure
  • Wireframes for all core templates (homepage, services, news, bylaws, meetings)
  • WCAG 2.2 AA accessibility review of IA patterns
  • Feedback loop with staff committee
  • User testing with representative residents (optional)

Deliverables

  • Finalized IA & Navigation Structure
  • Wireframes for all major page templates
  • UX specifications and interaction patterns
  • Content migration mapping document
District Review: 7 business days
Phase 034 weeksLina, Saad39-58 hrs

Visual Design & Component System

Apr 2026

Objective: Create a modern visual identity and reusable component library consistent with WCAG 2.2 AA standards.

Key Activities

  • Development of visual mockups for homepage and internal pages
  • Integration of staff-provided images and brand elements
  • Creation of component-based design system (headers, cards, forms, alerts, tables)
  • Printer-friendly layout design
  • Accessibility audit of color contrast, legibility, and UI elements
  • Mobile and tablet responsive design variants

Deliverables

  • Two (2) design concepts for District selection
  • Final approved design system and style guide
  • Responsive mockups for key templates (desktop, mobile, tablet)
  • Accessibility compliance checklist (Phase 1)
District Review: 7 business days
Phase 047 weeksHugo, Lina, Miguel108-162 hrs

Technical Development & Template Implementation

Apr – Jun 2026

Objective: Build the CMS, templates, navigation, accessibility features, and integrations in a secure and scalable environment.

Key Activities

  • Drupal CMS configuration and Next.js setup
  • Homepage and service page template development
  • Meeting/agenda integration templates (iCompass)
  • Vadim property tax/payment integration
  • "I Want To" task navigation module
  • Emergency alert banner system with multi-channel notification support
  • Smart search implementation with AI-powered predictive suggestions
  • Security hardening (MFA, WAF, custom admin URL)
  • Performance optimization and caching
  • Google Analytics 4 implementation

Deliverables

  • Fully built Drupal CMS + Next.js site in staging environment
  • All templates and components installed
  • All accessibility and security features implemented
  • Integration testing complete (iCompass, Vadim)
  • Emergency alert system tested and documented
  • Staging site access for District review
District Review: Ongoing staging access + bi-weekly checkpoints
Phase 056 weeksAll 4 team members93-139 hrs

Content Migration & QA Testing

Jun – Jul 2026

Objective: Populate the new website with reviewed, accessible content and conduct full QA, accessibility, and integration testing.

Key Activities

  • Full content migration as-is (District handles any rewriting)
  • Content reformatting for accessibility and readability
  • Verification of all links, files, PDFs, and external connections
  • Functional QA: forms, buttons, search, alerts, navigation
  • Cross-platform testing: desktop, mobile, tablet, all major browsers
  • Accessibility testing: WCAG 2.2 AA audit, NVDA, VoiceOver, JAWS screen readers
  • Third-party security penetration test
  • Performance testing and optimization
  • URL redirect mapping and implementation

Deliverables

  • Fully migrated staging site
  • QA Report (bugs found and resolved)
  • WCAG 2.2 AA Compliance Audit Report
  • Third-party penetration test report
  • Performance benchmark report
  • Redirect and launch readiness plan
District Review: 10 business days
Phase 062 weeksLina, Hugo, Saad23-35 hrs

Staff Training & Final Adjustments

Jul – Aug 2026

Objective: Ensure staff can confidently manage the website and finalize the site for launch.

Key Activities

  • Setup of training sandbox environment (duplicate site for practice)
  • Live training for 3 District staff (editors + administrators)
  • Delivery of recorded training modules
  • Creation of documentation (editor guides, content workflows, user-role definitions)
  • Final styling adjustments and content edits
  • Performance optimization and caching configuration
  • Final WAF and security configuration review
  • Pre-launch checklist completion

Deliverables

  • Training sandbox environment (safe practice site)
  • Training sessions (live + recorded)
  • Administrator and editor manuals
  • Quick-reference cards
  • Updated staging site ready for launch
District Review: Ongoing collaboration
Phase 072.5 weeksHugo, Lina, Miguel15-23 hrs

Launch & Post-Launch Support

Aug 2026

Objective: Deploy the new website, ensure a seamless transition, and provide support during the initial launch window.

Key Activities

  • Final pre-launch review meeting
  • Launch during approved window with zero downtime
  • DNS cutover and SSL verification
  • Monitor site performance and error logs
  • Validate all redirects, forms, and integrations
  • Provide priority support during stabilization period
  • Begin six-month no-cost support cycle

Deliverables

  • Official site launch
  • Launch validation report
  • Redirect verification report
  • Six-month maintenance plan
  • Emergency contact procedures
District Review: Priority support available

Our Approach to Timeline Management

Parallel Workstreams: IA, design, and content planning progress simultaneously where dependencies allow, maximizing efficiency without rushing decisions.

Built-in Buffer: Phase 5 (Migration & QA) includes 2 weeks of contingency time to absorb delays from earlier phases without impacting launch.

Clear Review Windows: Every phase includes dedicated District review time. We don't proceed until you approve.

Transparent Progress: Bi-weekly status meetings, staging site access, and a live progress dashboard keep everyone aligned.

05

Experience, References & Portfolio

Team qualifications, project history, and links to recently designed websites. Specializing in accessible, secure platforms for organizations serving diverse communities.

15+
Production Deployments
3
Critical Infrastructure Projects
100%
On-Time Delivery
Zero
Security Incidents

Project Team

Each member is allocated dedicated hours weekly to this project, ensuring consistent progress.

Lina M.

Lina M.

Co-Founder & Project Lead

Computer Science graduate from uOttawa. Software Engineer at Searidge Technologies (airport control tower software - Hong Kong International, JFK). Frontend Developer at Nokia. Led business platform development for Yosrart Art School (Stripe payments, multi-role CMS) and Oryx Medical's healthcare platform. Specializes in frontend architecture, accessibility, and project management.

Next.js/ReactDrupal CMSComplex UI/UXTeam Leadership
Hugo B.

Hugo B.

Co-Founder & Technical Lead

Computer Engineering graduate from uOttawa. Manages infrastructure for MTW Services (multi-editor environment). Expert in various CMS integration, server optimization and AWS infrastructure.

WordPress IntegrationAWS InfrastructureMulti-User SystemsPerformance Optimization
Saad M.

Saad M.

Accessibility & Backend Specialist

Engineering background with experience at Goldman Sachs and American Express in highly critical production environments. Expert in accessibility compliance, screen reader testing, keyboard navigation, and building accessible web applications for regulated industries.

WCAG 2.2 AABackend DevelopmentScreen Reader TestingInclusive Design
Miguel

Miguel

Full-Stack & Integration Specialist

Computer Engineering graduate from uOttawa. Full-stack developer specializing in API integrations, payment gateways, and frontend-backend coordination. Led integration testing and deployment for complex platforms requiring secure third-party connections.

API IntegrationPayment GatewaysFull-Stack DevelopmentTesting & QA

Transferable Expertise to Municipal Projects

While our portfolio includes education and healthcare platforms rather than municipal websites, the core competencies required are identical:

Multi-Stakeholder Collaboration:

Yosrart Art School required coordinating content from 8+ instructors, similar to municipal departments. Our experience managing multiple content contributors translates directly to municipal multi-department workflows.

Payment Integration Security:

Oryx Medical processes sensitive healthcare payments under HIPAA-equivalent standards, same rigor required for property tax payments. Miguel's experience with secure payment gateways ensures Vadim integration meets all security requirements.

Regulatory Compliance:

Healthcare platforms must meet strict privacy laws (PHIPA), transferable to FOIPPA requirements. Our team understands the importance of data residency, access controls, and audit trails required for government systems.

Public-Facing Accessibility:

Yosrart serves diverse learners including accessibility needs, same inclusive design principles for municipal residents. Saad's experience at Goldman Sachs and American Express in highly critical production environments ensures enterprise-grade accessibility standards.

Hugo's Government Contract Experience:

Partnered with Majd Saaloukeh at MTW Services on government contracts requiring strict public sector security and compliance standards. Hugo's work at MTW Services included public sector clients requiring compliance with government data residency and security standards, with Hugo architecting secure multi-tenant systems for regulated environments.

Municipal websites require expertise in accessibility, security, payment processing, and multi-user content management, domains where our team has proven delivery capability.

References

MTW Services

Hi, I'm Majd from MTW Services and wanted to share our experience working with L&H Web Solutions. Hugo and Lina handled our website, our fleet management tool, and several custom features we specifically asked for, including an estimate calculator fleet manager, and a blog post manager.

...
2024

Majd Saaloukeh, Co-Founder

Final product

View
Modern DesignMulti-User WorkflowsSEO-optimized

Yosrart Art School

I am Yosra Ben Mbarka, artist, teacher, and founder of Yosrart Art School. I would like to share my experience with L&H Web Solutions, who created the website for my school. Working with Lina was an excellent experience. From the very beginning of the project, she understood my needs, the universe of my school, and the professional image I wanted to convey.

...
2025

Yosra Ben Mbarka, Artiste, Enseignante et Fondatrice

yosrartiste@gmail.com(819) 664-8372

Final product

View
Custom DesignModern InterfaceUser-Friendly

Oryx Medical

I'm writing this reference as Co-Founder of Oryx Medical. L&H Web Solutions developed our AI patient assistance platform that's now operating in several clinics across Dubai. Working with this team was honestly a relief. From our first meetings, they understood what we were trying to accomplish.

...
2025

Maha Khamlichi, Co-Founder

Final product

View
AI IntegrationHealthcare PlatformMulti-Location

Credentials & Insurance

Professional Liability Insurance:

  • Coverage: $2,000,000
  • Certificate available upon request

Background Checks:

All team members: Security clearance available for District verification upon request.

Risk Mitigation & Business Continuity

Team Redundancy:

  • Every critical skill covered by 2+ team members
  • Lina & Hugo: Both full-stack, can cover development
  • Lina & Saad: Both handle UX/IA
  • Hugo & Miguel: Both handle integrations

If Team Member Becomes Unavailable:

  • All project documentation in shared repository
  • No single point of failure for any deliverable
  • Standard technologies (Next.js, Drupal) = easy contractor handoff

Code & Asset Ownership:

  • District owns all code, designs, and content
  • Repository access provided from day one
  • No proprietary dependencies
  • Any developer can continue work if needed

Worst-Case Scenario Protection:

  • All work tracked in Git with detailed commit history
  • Complete technical documentation delivered at each phase
  • CMS training enables District to self-manage content
06

Fee Schedule

Transparent pricing with detailed task breakdown, hour estimates, and rate calculations.

Estimated Investment Range

Based on detailed task analysis per RFP 2025-01-CS

$43,340 – $64,790

CAD + applicable taxes (at $110/hr)

394589
Total Hours Range
4
team members
6 mo
Support Included

We provide a range estimate to be transparent about project complexity. Low range assumes efficient workflows; high range accounts for additional revision cycles and complexity.

Detailed Task Breakdown by Phase

TaskLow HrsHigh Hrs
1. Initiation & Discovery
Project Kick-off & Mgmt Setup79
Technical Environment Audit47
Content Inventory & IA Strategy1115
Discovery Report Generation79
Phase Subtotal2940
2. IA & UX Design
Sitemap & Navigation Structure913
Wireframing (4 Core Templates)2844
Accessibility Planning (WCAG Pre-check)47
District Staff Meetings711
Phase Subtotal4875
3. Visual Design
Visual Mockups (2 Concepts)2233
Component System Design2233
Mobile & Tablet Variants1117
Accessibility Contrast Audit47
Phase Subtotal5990
4. Technical Development
CMS Schema Setup (Drupal CMS)4466
Next.js Frontend Build4466
Project Showcase Module913
Search Implementation913
Vadim/iCompass Integration Wrappers2233
Forms & Alert Banners1115
Printing Format Presets (CSS)79
Security & MFA Setup69
24/7 Monitoring Setup24
Phase Subtotal154228
5. Migration & QA
Content Migration (150 pages)4466
Site-wide WCAG 2.2 AA Accessibility Audit1722
Cross-Browser/Device Testing1117
Redirect Mapping (SEO Preservation)69
Phase Subtotal78114
6. Training & Launch
Documentation (Editor Guide)913
Training Sessions (Live + Recorded)79
Launch Day Execution69
Post-Launch Stabilization611
Phase Subtotal2842
TOTAL HOURS394589

Total Upset Cost

Maximum fee calculated using high range hours at $110/hr blended rate.

Based on 589 hours (high range)

at $110/hr blended rate

CA$ 64,790.00

+ applicable taxes

Optional Additional Costs

Canadian-based third party penetration testing (strongly recommended)

Comprehensive security audit including all API integrations (iCompass/Vadim). We strongly recommend including third-party penetration testing for any site handling financial transactions.

$6,000

Travel

(Number of members and visits to be determined)

$500 per team member per visit

Drone photography

Included at with travel cost. Showcases North Saanich's beautiful landscapes on the website's most visible sections.

$0

SMS / Mail Provider

We will collaborate with the District to use their existing Mailchimp accounts, which will not impact their costs in that aspect.

$0

Premium Content Refresh

Professional editing and new copywriting beyond as-is migration

60$/h (est. 1-2h per page)

Additional Training Sessions

Additional sessions available

$400 per session

Post-6-month Support

Monthly retainer options after included support period

TBD

Estimated Monthly AWS Operating Costs

Costs depend on traffic. Two scenarios are provided.

Scenario A: 5,000 visits per month

Hosting
CloudFront bandwidth~$1.30
S3 storage and requests~$2
Lambda and API Gateway~$5
RDS db.t3.micro~$25
Hosting subtotal$33 to $35 CAD
Security
Shield Standardincluded
AWS WAF$30 to $40 CAD
CloudWatch logs and metrics$10 CAD
Security subtotal$40 to $50 CAD
Total monthly$73 to $85 CAD

Scenario B: 15,000 visits per month

Hosting
CloudFront bandwidth~$4
S3 storage and requests~$3
Lambda and API Gateway~$8
RDS db.t3.micro~$25
Hosting subtotal$40 CAD
Security
Shield Standardincluded
AWS WAF$30 to $45 CAD
CloudWatch logs and metrics$15 to $25 CAD
Security subtotal$45 to $70 CAD
Total monthly$85 to $110 CAD

24/7 Critical Support Details

What Qualifies as "Critical"
  • • Complete site downtime
  • • Security breach or active attack
  • • Payment system failure
  • • Data loss incident
Response Time Commitment
  • • Critical issues: 30 minutes
  • • High priority: 4 hours during business hours
  • • Standard: Next business day
How We Provide 24/7 Coverage
  • • Primary on-call: Hugo & Miguel (rotating schedule)
  • • Backup: Lina (secondary escalation)
  • • Response time: 30 minutes for critical issues
  • • Track record: 99.97% uptime on current projects
After 6-Month Included Period
  • • Critical support: $500/month retainer (includes 2 critical incidents)
  • • OR pay-per-incident: $150/hour (2-hour minimum)
Non-Critical Support
  • • Content questions, training refreshers, minor styling changes
  • • Included for 6 months, then $110/hour (1-hour minimum)

Our Commitment

Transparent pricing. We provide hour ranges to be upfront about project variables. Any work beyond agreed scope will be quoted in advance with written approval required.

Professional Liability: $2,000,000

07

Conclusion

Thank you for the opportunity to submit this proposal for the District of North Saanich's website redesign project. We are excited about the possibility of working with your team to deliver a modern, accessible, and user-friendly website that serves your community effectively.

We look forward to the opportunity to discuss this proposal further and answer any questions you may have.

Sincerely,

Signature

Lina M.

Project Lead, L&H Web Solutions

A

Website Security & Accessibility Audit

Comprehensive Site Audit

L&H Web Solutions conducted a thorough technical audit of northsaanich.ca covering security posture, accessibility compliance, performance metrics, and information architecture. The following represents key findings requiring attention.

1. Information Architecture Analysis

Full Website Structure

Complete visualization of all pages across 7 main navigation categories, revealing structural complexity and organization issues.

Complete sitemap of North Saanich website showing all 150+ pages

Detail View

Key sections including Business & Development, Contact Us, and "I Want To" quick links. Empty pages marked, inconsistent depth levels visible.

Zoomed sitemap view showing page structure details
Structural Findings
Multiple empty/placeholder pages
Inconsistent navigation depth (2-5 levels)
Duplicate content across sections
Orphan pages without clear paths
"I Want To" section has 20+ unorganized links
Critical services buried 3+ clicks deep

Summary

This audit identifies security vulnerabilities, accessibility barriers, and performance issues requiring attention. The current website presents compliance risks under the Accessible Canada Act, security concerns with the payment portal, and user experience problems that prevent residents from accessing municipal services effectively.

L&H Web Solutions will address all identified issues through our proposed Drupal CMS + Next.js architecture, delivering a secure, accessible, and high-performance website that meets regulatory requirements.