Foundations
Community management foundations in England: models and law
Community management foundations in England: four operating models, the law and regulators that apply, budget lines and six checks before you release spend.
What to take away
- Use community management foundations to build the budget, not the label: platform licence, moderation hours, integration, assurance and exit are five separate budget lines.
- Prove demand from observed work, such as unanswered questions and staff time already spent, before signing anything.
- Compare in-house, agency, hosted and open-source on cost, control, moderation and exit rather than feature lists.
- The Online Safety Act 2023 and the UK GDPR apply across the UK, including England, and shape moderation records and member data handling.
- Settle ownership of policy, escalation, exports and the exit plan before releasing spend.
Answer first: build a budget around the work
Community management has no single published rate card, so cost is the sum of five components, each priced from a current quote or a dated source.
- Platform or hostingsubscription, seat tier or managed hosting fee, plus setup charge.
- Moderation and member supportpaid hours, including evening and weekend cover if the community runs then.
- Integration and implementationconnecting identity, email, CRM, analytics and the help desk.
- Assurance: data protection review, security testing and accessibility checking before launch.
- Exit and migration reservethe cost of exporting, deleting and rebuilding elsewhere.
The assurance line usually covers a data protection impact assessment, security testing and accessibility checking. A public sector body's website or mobile application is presumed to conform with the accessibility requirement for public sector sites when it meets Level A and AA Success Criteria of the Web Content Accessibility Guidelines, so those Success Criteria are the practical benchmark to check for any platform you buy.
For the people line, use published earnings context such as the ONS Annual Survey of Hours and Earnings (ASHE), checking that its population and measure fit your roles. The community management budget template can help organise setup, cover, assurance and exit lines before you request quotes.
Agency retainers replace the salary line, so the retainer must state hours, the cover window and escalation duties. Where a supplier's people work through their own companies, the off-payroll working rules (IR35) apply: a medium or large end client, or a public sector client of any size, decides the contractor's employment status for tax and issues a Status Determination Statement, while small private-sector clients are outside those rules. HMRC enforces them.
Compare four operating models
Each route shifts cost between people, software and risk.
Cost shape
- In-house team
- Salaries, employer National Insurance, pension, cover
- Agency or managed service
- Retainer plus project fees
- Hosted platform
- Subscription by seat or tier
- Open-source software
- No licence fee; hosting and patching paid
Control
- In-house team
- Highest, slowest to scale
- Agency or managed service
- Shared; rights belong in the contract
- Hosted platform
- Vendor roadmap and terms
- Open-source software
- Highest technical control
Moderation
- In-house team
- Staff apply your policy
- Agency or managed service
- Supplier runs first line
- Hosted platform
- Tools supplied, judgement yours
- Open-source software
- You build the workflow
Exit
- In-house team
- Records stay with you
- Agency or managed service
- Contract names export and handover
- Hosted platform
- Notice period sets your exit cost
- Open-source software
- You own data and migration
Compare each route across cost, control, moderation and exit rather than a feature list.
Service and software models
Model
- Internal team
- Context, but coverage questions
- Agency or managed
- Capacity, but decision rights
- Hosted software
- Faster start, vendor responsibility
- Self-hosted
- Control, but deployment work
- Broad collaboration
- Familiar, but not sufficient
Trade-off
- Internal team
- Agency or managed
- Hosted software
- Self-hosted
- Broad collaboration
Circle, Discourse, Kajabi and Mighty Networks are examples of community platforms. Their capability pages describe what their makers claim, not independent evidence of suitability in England. The linked provider comparison is a separate resource for comparing suppliers with English operations before requesting quotes.
What the law adds to the plan
The Online Safety Act 2023 puts duties on user-to-user services, including duties relating to illegal content and children's safety, with Ofcom as regulator. Ofcom's Illegal Content Codes of Practice and its codes of practice on children's safety explain how relevant duties are implemented; check which provisions apply to the service. The Act applies across the UK, including England.
Data protection runs alongside it. The Data Protection Act 2018 supplements the UK GDPR. The ICO's advice for small organisations covers records, retention and member requests when a small team runs the platform. Put controller and processor roles in the contract, then check the practice matches the wording.
Check whether the organisation must pay a data protection fee to the ICO and appear on its register of fee payers; the ICO publishes the tiers and the exemptions.
Map each data flow
- Why information is collected
- Where it is stored
- Who may see it
- How long it is retained
- How rights are exercised
- Exports to analytics, support, event, identity, email
- Exit: export, delete, retain, verify
The CMA's reviews guidance covers misleading reviews and endorsements, the ASA advertising codes cover advertising and influencer content, and the NCSC small organisations guide covers cyber security basics for small teams. Date every source you rely on.
Six checks before releasing budget
- Name the member problem and the population it affects.
- Assign policy, moderation, support and platform administration to named roles.
- Show recurring demand from observed work rather than enthusiasm.
- Map every data flow, including exports, analytics and volunteer access.
- Test an export and a restore in a structured, commonly used, machine-readable format, record how deletion is evidenced, then confirm the exit route in writing.
- Record which reviewer accepts the remaining risk.
A budget that cannot name the exit route is a subscription, not a plan.
Our software selection guide builds the shortlist from member journeys rather than feature lists, which keeps the comparison tied to real work.
Common questions
How should I plan a community management budget?
There is no single published rate. Build the figure from the five components above, using a current quote, your own cover pattern or relevant ONS earnings data for each line.
Does the Online Safety Act 2023 apply to my community?
If users can encounter each other's content, the service may be a user-to-user service and duties about illegal content may apply. Check Ofcom's Illegal Content Codes of Practice and its codes of practice on children's safety to assess the applicable duties.
Should I hire in-house or use an agency?
In-house keeps context and policy control but needs recruitment and out-of-hours cover. An agency adds capacity, so the contract must fix who decides policy and who answers at the weekend.
How do I keep member metrics honest?
Name the population behind every rate. Keep automated, staff and member activity separate, and read a structured sample of discussions and exits.
In this guide
- What England's community management market is worth, and why nobody can say exactlyEstimate England's community management market from defined buyer groups, public business data and documented assumptions, without inventing a total.
- The signs an organisation needs community management before anyone asks for itIdentify ten observable signs of demand for community management in England, from member behaviour and support pressure through to governance risk.
- Four community management business models compared by cost and riskCompare in-house, managed-service, hosted-platform and open-source community models by control, staffing, cost exposure and operational risk.
- Before you launch a community offer, test need, scope, data, moderation and exitUse this market-entry checklist to test an English community offer, covering member need, service scope, data, moderation, security and exit.
- How to assess paid community work opportunities in the UK, from customer education to migrationAssess paid community work opportunities in the UK: customer education, membership, feedback, moderation, intelligence and migration by testing owner and evidence.
