Compliance by Architecture: A Case Study in Regulatory-Driven SAAS Design for UK Children's Residential Care

Children’s residential care homes in the United Kingdom operate under a statutory inspection regime in which Ofsted evaluates care quality against the Social Care Common Inspection Framework (SCCIF), a structured judgement model requiring evidence across children’s progress, safeguarding, and leadership effectiveness. Existing compliance software organises records by operational category rather than by the regulatory evidence structure used during inspection; no published work has demonstrated how inspection framework structure can be embedded as a first-class software architecture concern. This paper argues that regulatory compliance problems are fundamentally architectural: regulatory frameworks can serve as organising models for data, access control, and interface design — a principle termed compliance by architecture — with the potential to reduce evidence retrieval burden and improve inspection preparedness. KingCare, a deployed multi-tenant SaaS platform for UK children’s residential care homes, is presented as a case study implementing this principle through ASP.NET Core, Blazor Server, Entity Framework Core global query filters, Azure SQL, and SCCIF-mapped evidence views; evaluation combined functional validation, expert review, and a System Usability Scale (SUS) study with 29 participants. Findings indicate that embedding SCCIF structure into the data architecture reduced expert evidence retrieval time from eight minutes to 45 seconds and produced a mean SUS score of 83.3, significantly exceeding the 68-point acceptability benchmark (t(28)=5.353, p<0.001, Cohen’s d=0.99). The paper contributes a transferable software engineering pattern for compliance-critical domains; limitations including single-expert validation and absence of longitudinal inspection-cycle data are discussed.