Falcon Operating Model

The Delivery Operating Model Built for Public Sector Services in the UK 

Get Started

Public sector projects  compliant with GDS standards, with ease.

A secure, scalable, and fully governed operating model — combining our purpose-built platform, multidisciplinary people, proven best practices, and repeatable processes — that takes complex public-sector digital products from discovery to live operation with the rigour Government demands and the pace modern users expect. 

About Falcon

Falcon is VE3’s purpose-built digital delivery operating model. It brings together the Falcon Platform (technology architecture), the right people in structured roles, engineering governance, release management, best practices, and live-service operations — everything needed to design, build, and run complex data-driven services under public-sector assurance requirements.  

Falcon is not a product you install. It is a complete operating model that integrates product leadership, architecture, engineering, quality assurance, User-Centred Design, User Research, DevOps, business analysis, programme management, and live service support into one coherent, repeatable delivery engine. 

Why Falcon Exists? 

Government digital services demand more than good code. They require traceable release management, separation of duties, environment-controlled promotion, incident readiness, and full alignment with frameworks such as the GDS Service Standard. Falcon was engineered from the ground up as an operating model that meets these requirements natively — not as afterthoughts — by combining people, platform, and proven ways of working. 

Falcon Operating Model Pillars

Integrated Team Operating Model 

Falcon brings frontend, backend, DevOps, QA, UX, BA, and programme management together under a unified governance structure. Teams collaborate through a structured daily and weekly cadence with clear escalation paths, decision rights, and client-exposure controls — all supported by defined roles and responsibilities. 

Engineering Governance & Release Management 

Every line of code flows through a controlled branching model: feature branches merge to pre-dev, are promoted to main via reviewed pull requests, and progress through release branches. Branch protections, CODEOWNERS enforcement, and separation of duties (developers write, leads review, DevOps merges) ensure safe, traceable releases. 

Falcon Platform - Cloud Agnostic Microservices Architecture

The technology foundation of Falcon is built on Kubernetes and is deliberately cloud-agnostic — deployable on any major cloud provider or on-premises infrastructure. Dedicated microservices, data processing, API gateway routing, authentication (Gov.UK One Login), notifications (Gov.UK Notify), OAuth, and KPI monitoring are all managed as code via Terraform, ensuring portability and repeatability. 

Security, Compliance & Assurance 

The operating model is designed for environments where public trust is paramount. GitHub team-based access controls, admin-bypass-disabled branch protections, locked production branches, and controlled deployment windows ensure that only approved, tested code reaches live systems. 

GDS Service Standard Alignment 

Services delivered through Falcon are built to meet the 14-point GDS Service Standard from day one. The operating model’s integrated team structure, agile delivery cadence, user research function, accessibility-first design, open technology choices, and operational readiness address many assessment criteria by default — accelerating the path to a successful GDS assessment. 

Live Service Operations 

Falcon includes a dedicated support and customer success function with L1/L2 incident management, user communications, service metrics, and continuous monitoring. The model is built to operate, not just to ship. 

Technology Stack (Falcon Platform) 

Falcon is built on a modern, production-proven architecture designed to deliver high reliability, scalability, and security in line with government standards. The platform adopts a modular, service-oriented approach, enabling independent scaling, rapid iteration, and long-term maintainability. 

User Experience Layer

A responsive and accessible interface designed to meet government usability and accessibility standards. 

Application Services Layer 

A set of scalable backend services handling business logic, data processing, and integrations. 

Containerised Deployment Model 

Workloads are packaged and orchestrated to ensure resilience, portability, and efficient resource utilisation.

Infrastructure Automation 

Fully automated environment provisioning and configuration to ensure consistency, repeatability, and governance.

Performance & Messaging Layer 

Optimised mechanisms for high-speed data access, event processing, and system communication.

Our FDP+ Solutions

Our methodology is built on interconnected layers that together deliver a secure, scalable, and clinically robust FDP implementation, moving from ingestion to insight, and from enablement to assurance.
01. Native Foundry Engineering & Data Twin Architecture

We work natively within Foundry Code Repositories — building sophisticated pipelines, not bolt-ons.

  • Magritte framework for all EPR connections (Epic, Oracle Health, System C, InterSystems) with incremental sync using high-water mark logic
  • Snapshotting and partitioning for reference data with automated schema validation at point of entry
  • Build halts automatically if source schema deviates — preventing downstream Ontology corruption
02. Canonical Data Model (CDM)

A disciplined domain modelling approach that prevents duplicate objects and ensures a single view of the patient.

  • Core Objects (Patient, Staff Member, Location, Clinical Event) - centrally governed, changes require Design Authority approval
  • Domain Objects (e.g., Cancer_Pathway_Milestone, Theatre_Kit_Usage) - use-case specific, linked to Core entities
  • "Extend, Don't Duplicate" philosophy - existing objects are extended before new ones are built
  • Objective: 80–90% of new analytical questions answered through Ontology traversal, not new engineering
03. Kinetic Ontology & Writeback

A Data Twin must be interactive - not just a read-only reporting layer.

  • Clinical and operational users act on data directly - validating waiting list entries, assigning cancellation reasons, flagging patients for expediting
  • Actions trigger controlled side-effects - notifications, audit log entries, and status updates across linked objects
  • Phonograph Sync ensures edits are reflected instantly in Workshop while being committed asynchronously to the data layer
04. Ontology Governance

Structured governance to keep the Data Twin accurate, lean, and performant as the platform matures.

  • Ontology Registry - all approved Object Types and Link Types maintained in a central register
  • Joint Trust/VE3 Design Authority meeting bi-weekly to govern Core Ontology changes
  • Object Deprecation Strategy - a lifecycle process for retiring obsolete objects and preventing technical debt
05. Compute Arbitration Architecture

A deliberate Foundry + Azure model that maximises the strengths of both platforms.

  • Foundry hosts the Ontology, decision logic, and operational applications - Compute Credits preserved for interactive workloads
  • Azure handles high-intensity tasks: genomics sequencing, DICOM processing, Monte Carlo simulations, large-scale stratification
  • Secure bridge mechanism passes raw data to Azure and returns only high-value outputs (risk scores, model results) back to Foundry
  • Strict Raw → Curated → Semantic three-tier architecture ensuring auditability, reusability, and clinical safety
06. Privacy Enhancing Technology & Governance

As the national provider of NHS-PET, privacy is embedded into the pipeline - not applied as an afterthought.

  • Format Preserving Encryption (FPE) for consistent pseudonymisation enabling longitudinal analysis
  • SHA-256 salted hashing for strictly one-way, irreversible flows
  • NLP-based Leaky PID scanning - free-text fields scanned during ingestion, identifiable data automatically redacted or quarantined
  • Foundry Markings and Row-Level Policies ensuring users only access data aligned with their consent and purpose
07. Embedded Data Quality & Lineage Controls

Quality gates embedded directly into pipeline code - not monitored after the fact.

  • Referential integrity checks - orphaned records halt the build automatically
  • Statistical drift monitoring - alerts triggered if ingestion volume drops more than 20% against the 30-day average
  • Zero-tolerance null checks on critical fields (NHS Number, Event Date)
  • Lineage impact analysis before every code change - downstream dependencies mapped to prevent silent breakages
08. Enablement & Capability Transfer

Built to grow your team's capability - not your dependency on us.

  • Pod-based co-development: Foundry Solution Architect, Engineers, Clinical Data Architect, and embedded Trust counterparts working alongside your teams
  • Knowledge transfer embedded into delivery KPIs - your team progressively assumes ownership
  • Bespoke training for every user group - from Data Literacy for operational staff to advanced Foundry engineering for informatics teams
  • Innovation Sandbox for safely piloting AI models and emerging technologies before live deployment
The same standard we apply to the national platform, brought to your local instance.

A deliberate Foundry + Azure model that maximises the strengths of both platforms.

  • P1 (<15 mins), P2 (<1 hour), P3 (<4 hours) - incident response tiered by clinical impact
  • Proactive pipeline latency monitoring and staleness checks - issues identified before clinicians notice
  • Strict Dev → Staging → Production environments with mandatory peer review - we never code in production
  • Dedicated Service Delivery Manager as your single point of contact for all oversight and escalation

Seemless integrations

The platform integrates seamlessly with government and third-party services, including Gov.UK OneLogin, Gov.UK Notify, OS API, Companies House, and many more. These integrations ensure compliance with public sector standards while enabling secure, real-time interactions across the ecosystem. 

Component Architecture (Falcon Platform) 

The Falcon platform — the technology backbone of the operating model — comprises a comprehensive suite of independently deployable services, each with clear ownership, dedicated repositories, and defined responsibilities: 

Frontend (Web Portal) 

Main public-facing web application 

Developer Portal 


Retailer-facing portal for data submission and API access 

Admin Support Portal

Internal support and administration frontend

API Gateway

Central entry point for all external API requests

Data Processing

Core data aggregation engine

OneLogin

Authentication service 

OAuth

OAuth 2.0 service managing API authentication 

Notify

Transactional messaging service 

Performance Analysis 

KPI generation, monitoring, and reporting 

Infrastructure 

Infrastructure-as-code definitions

Prototype

Rapid prototyping and proof-of-concept environment 

Featured case study : UK Fuel Finder

UK Fuel Finder has successfully passed its GDS Service Standard assessment, demonstrating that the Falcon Operating Model delivers services that meet government assurance requirements from the outset. 

Let's Connect

Clinical-Grade Operations & Assurance 

Falcon is designed so that services built through the operating model inherently satisfy many of the 14 GDS Service Standard points, significantly reducing time-to-assessment and de-risking the path to a successful outcome.
The GDS Service Standard is the UK Government’s framework for creating and running great public services. Every government digital service must meet all 14 points to progress through alpha, beta, and live assessments. Services delivered using Falcon already cover many parts by default, which makes it faster to deploy government digital services. 
UK Fuel Finder, built and operated through the Falcon Operating Model, has successfully passed its GDS Service Standard assessment — validating the model’s alignment with government assurance requirements.  

1. Understand users and their needs 

Dedicated User Research function and UX team embedded within the delivery structure. User research is a standing activity across all sprint cycles. 

2. Solve a whole problem for users

Product Lead and Business Analysts ensure end-to-end user journeys. Programme governance enforces whole-problem thinking.

3. Provide a joined-up experience across all channels

Falcon ensures a consistent, seamless experience for end users across web, email, SMS, mobile (where applicable), and  other channels, with uniform GOV.UK branding, messaging, tone, and integrated transactional communications via Gov.UK Notify. 

4. Make the service simple to use

Dedicated UX designers enforce simplicity; GOV.UK Design System patterns used throughout. 

5. Make sure everyone can use the service

Accessibility built to WCAG 2.2, tested across devices and assistive technologies. 

6. Have a multidisciplinary team

Inherently multidisciplinary: Product, Architecture, Engineering, DevOps, QA, UX, User Research, BA, Programme Management, and Live Service Support — all under one governance structure. 

7. Use agile ways of working

Two-week sprints, daily stand-ups, bi-weekly planning, and weekly governance reviews. 

8. Iterate and improve frequently 

Controlled release model and CI/CD pipelines enable frequent, safe deployments. 

9. Create a secure service which protects users’ privacy 

Security enforced at every layer with separation of duties and auditable infrastructure. 

10. Define what success looks like and publish performance data

Automated KPI Mapper with CSV exports for transparent reporting. 

11. Choose the right tools and technology

Open, cloud-agnostic stack with government-approved common components. 

12. Make new source code open

All code in GitHub with clear ownership and review processes. 

13. Use and contribute to open standards, common components and patterns

Integrates Gov.UK One Login, Gov.UK Notify, and GOV.UK Design System; built on REST, OAuth 2.0, OpenID Connect. 

14. Operate a reliable service

Dedicated Live Service Operations with L1/L2 support, incident management, and 24/7 monitoring. 

Get in Touch 

Ready to build a trusted, intelligent, and future-ready data foundation on the FDP? 
Contact VE3 to explore how FDP+ Enablement & Assurance can take your Trust from integration to insight, and from data to decision. 

Let's Connect

Read the Latest Insights and Thought Leadership

Stay current with the strategies, trends, and technologies defining the next era of digital excellence

Supply Chain
April 6, 2026

BizTalk Is End-of-Life: What Enterprises with Complex Integration Estates Need to Do Before April 2028

Prabal Laad
Read More
Supply Chain
April 6, 2026

Brownfield vs Greenfield: Choosing the Right Dynamics 365 Migration Strategy

Prabal Laad
Read More
Supply Chain
April 2, 2026

Cloud ERP Transformation: From Legacy Systems to a Unified Platform

Ritesh Nandurkar
Read More
Supply Chain
April 2, 2026

The Hidden Cost of CRM Data Migration

Prabal Laad
Read More
Supply Chain
March 31, 2026

The 5 Signs Your Construction Programme Has Outgrown Its Document Management System

Prabal Laad
Read More
Supply Chain
March 30, 2026

Legacy Data Warehouse to Foundry: The Migration Decisions Nobody Tells You About

Pamela Sengupta
Read More
  • © 2026 VE3. All rights reserved.