We don't just build websites. We build how an institution is trusted.
A studio for embassies, missions and mission-driven organisations — and we'll prove the point on your own domain before you ever speak to us.
Taking two new engagements this quarterSee your institution the way the internet sees it.
Protocol reads any public site the way a browser, a mail server and a search engine each read it, then tells you what they found — the mail domain, the certificate, the link preview, the language. Thirty seconds, eight checks, one number. No account, and the fixes are yours to keep.
PUBLIC DATA ONLY · NOTHING STORED WITHOUT YOUR CONSENT
Protocol runs eight checks across four areas that decide whether a visitor — or a foreign ministry — takes your site seriously.
- Mail authenticity — SPF, DKIM and DMARC. Without them, anyone on earth can send email that appears to come from your mission.
- Transport security — HTTPS enforcement, certificate validity, HSTS.
- Link presentation — Open Graph title, description and image. This is how your site looks when a journalist shares it.
- Findability — title, meta description, language declaration, mobile viewport.
One studio, the whole institutional stack.
Missions usually stitch together a designer, a web agency, a printer and an IT contractor — and spend most of their time translating between them. We hold all four.
Institutional portals
Public sites and internal platforms — consular services, news, appointments, staff directories, sector-scoped permissions and an audit trail.
Identity & protocol design
Marks, seals, letterhead, signage and the rules that keep a mission looking like one institution rather than nine.
Publications
Bulletins and reports built from one source, published to web, email and print at once.
Motion & broadcast
Ceremony films, podcast and studio graphics, multi-screen LED sets.
Secure cloud
Conditional access, mail authentication, backup and least-privilege roles.
AI systems, where they genuinely save an institution money
Translation pipelines, publication build systems, document automation — always with a human signing off before anything publishes.
Small studio. Institutional discipline.
Diplomatic Design is deliberately small and heavily automated. You work directly with the person doing the work — and the work still arrives with the paperwork, versioning and sign-off trail a public body requires.
Brief & audit
We run Protocol against everything you already have — site, mail domain, social, print. You get a written findings document naming what is broken, what it costs you, and what it would take to fix. Yours to keep whether or not we work together.
Blueprint
Sitemap, content model, permission matrix by sector, and a designed prototype of the three screens that matter most. Approved in writing before a line of production code is written — so scope arguments happen on paper, not on invoice.
Build
Fortnightly demos on a live staging link your team can click through. Every release is tagged and reversible. Content migration and staff training run in parallel, not after.
Handover & custody
Domains, certificates, tenant and repository stay in the institution's own name — always. You receive an operations manual, a recorded walkthrough, and a named person to call. If you leave us, everything leaves with you.
Work that had to survive a foreign ministry.
Every project below shipped for a real institution, with real sign-off, in more than one language.
AI-generated presenter
This is Nia. She isn't a person — she's a system we built, and we tell you so every time she speaks.
Nia hosts our explainers, walks through Protocol reports, and answers the questions institutions ask us most often — in English, Portuguese and French, in the same voice, at any hour.
We built her for the same reason we'd build one for you: a small organisation with something worth saying shouldn't need a film crew to say it. Every appearance carries an AI label, on this site and on every platform. Nobody at Diplomatic Design will ever pretend a machine is a colleague.
Fixed prices. Published openly.
Public institutions need a number they can put in a budget line before they can talk to you. So here are ours.
Trust Audit
A written assessment of everything an outsider can see: site, mail domain, cloud tenant, social presence, print. Delivered in ten working days.
- Full Protocol report, manually verified
- Mail spoofing and certificate risk review
- Prioritised remediation plan with costs
- Credited in full against a build
Mission Platform
A complete public site and internal platform for a mission — designed, built, migrated, secured and handed over. Billed across five milestones.
- Identity, blueprint and full build
- Bilingual or trilingual content migration
- Entra sign-in, sector permissions, audit trail
- Staff training and operations manual
Mission Retainer
The studio on call. Design, publishing, social and platform maintenance for missions that need continuous output rather than a one-off project.
- Monthly bilingual bulletin, built and sent
- Event and ceremony graphics
- Social management in two languages
- Platform updates, monitoring and backups
Cloud hosting is billed at cost on the institution's own subscription, never marked up. Prices in USD, exclusive of print production and third-party licences.
Tell us what you're up against.
Six questions. You'll get a written reply from a person within one working day — with an honest read on whether we're the right studio, and who to call if we aren't.
- Treated as confidential. Nothing about your institution is shared or published without written consent.
- Reply within one working day, in English, Portuguese or French.
- No sales sequence. One reply, from the person who would do the work.