Deep dive

The citizen experience

A single app that spans every department. The citizen describes their situation; the agent handles the rest.

01

The home screen

What you see when you open the app. Government organised around your life, not around departments.

Home screen showing to-dos, agent tasks, topics, and services

The home screen for Anna, showing her to-dos, agent tasks, and personalised topics

The home screen opens with "Hello, [Name]" and a personalised view of everything that matters to the citizen right now. No department names, no service codes — just the things they need to deal with, organised by urgency and relevance.

The home screen is divided into five sections:

  • Your to-dos — citizen tasks grouped by subject, with due dates and sub-task counts. "Mini Cooper: 2 tasks, 2 in 4 months."
  • Agent to-dos — tasks the agent is handling in the background. "Check Tax-Free Childcare eligibility", "Verify council tax band is correct."
  • Topics — a personalised subset of categories, rendered based on relevance to the citizen's data. Benefits, Driving & Transport, Employment, Health & Disability.
  • Services — a horizontal carousel of 16 life events with service counts. Having a Baby, Death of Someone Close, Getting Married, Retiring.
  • Near you — location-based local government content by postcode. Bin collection, local council services.

Persistent navigation

A bottom navigation bar is always visible, regardless of where the citizen is in the app. A text input at the bottom of the home screen lets the citizen type, speak, or upload a document.

Home
Returns to the home screen
Dot
Opens a conversation from any position
To do
All tasks across all topics
Wallet
Verified credentials and data permissions
02

Topics

Government organised around your life. Each topic page is a personalised portal combining your data, your entitlements, and the services that apply to you.

The citizen sees a personalised subset of 11 topic categories. These are not static pages — they pull verified data from government systems and combine it with to-dos, eligibility checks, sub-topics, and conversation history relevant to the citizen's situation.

What a topic page contains

Each topic page opens with a carousel of data cards relevant to the citizen, followed by an "Ask about [Topic]" button that opens a scoped conversation, sub-topics with suggested questions, and related to-dos and conversation history.

Driving & Transport topic page with vehicle data cards

Driving & Transport vehicle cards with MOT status, tax dates, sub-topics

Benefits topic page with eligibility cards

Benefits current benefits, proactive eligibility alerts with amounts

Proactive eligibility

Topic pages do not just show what the citizen has — they show what they could have. The Benefits page includes proactive eligibility cards: "You may be eligible for Tax-Free Childcare — up to £2,000/year", "30 hours free childcare — eligible", "Marriage Allowance — check — up to £252/year." The citizen discovers entitlements they did not know existed, because the system has already checked their data against eligibility rules published in service descriptions.

03

Two ways in

There are two routes into any government service. Both converge on the same consent, fulfilment, and wallet flow.

Conversational triage

The citizen opens a conversation with Dot and describes their situation in their own words. The agent identifies the life event and relevant services, presents them as structured cards, and the citizen delegates or acts. No department names needed — just a description of what is happening in their life.

Conversational triage: Sarah describes her bereavement and the agent identifies services

Plan-based browsing

The citizen scrolls to the Services carousel on the home screen, selects a life event — "Death of Someone Close" — and sees a structured plan with all relevant services listed in priority order. They select "Start this plan" and the sequence begins. No conversation required.

Plan-based browsing: services carousel showing Having a Baby and Death of Someone Close

The end-to-end flow

Both routes converge on the same sequence:

Citizen speaks or browses
Identify needs
Plan & delegate
Consent & fulfil
Outcome & wallet

The conversational route starts with triage and builds a plan from the citizen's description. The browsing route starts with a pre-built plan. After that, the same consent, fulfilment, and credential flow applies. The citizen can switch between routes at any time — start browsing, then ask Dot a question mid-way.

04

The conversation

The citizen speaks naturally. The agent responds with empathy and structure. Conversation is the input; cards are the output.

When a citizen opens a conversation and describes their situation, the agent does not respond with more conversation. It responds with structured action. The agent identifies the life event, looks up all associated services in the service graph, and presents them as prioritised cards with clear next steps.

Sarah describes her bereavement and the agent responds with empathy and service cards

Sarah types "My husband died three weeks ago. I don't know what to do." The agent responds with empathy and surfaces the most important services first.

Progressive disclosure. The agent does not dump all services at once. It opens with reassurance — "I'm so sorry about David" — then explains: "There are a few things that will need to happen, but none of them need to happen right now." Complexity is revealed gradually, with the most urgent tasks presented first.

Each service appears as a card with a due date, a brief explanation, and a "Do this" button. The first card might read: "Register David's death — needs to happen within 5 days and is the first step before everything else." The second: "Tell Us Once — notify HMRC, DWP, DVLA, Passport Office, local council, and electoral register in one go."

The agent's conversational ability comes from a language model, but it is constrained by published service descriptions. It can rephrase, explain, and empathise, but it cannot make policy decisions or alter data requirements. The conversation is the how; service descriptions are the what.

Life event triage

The service graph maps 16 life events to the government services relevant to each. When the agent identifies a life event during triage, it looks up all associated services and builds a plan ordered by dependency and urgency. Bereavement connects to death registration (GRO), probate (HMCTS), bereavement support payment (DWP), estate notification (HMRC), pension cessation (DWP), council tax adjustment (local authority), and more. A single conversation can identify and sequence all of these.

Follow-on and scrutiny

The conversation is never closed. The citizen can return at any time to ask questions, request clarification, or start new services. In Sarah's case, she returns later to ask about the bereavement payment — the agent already knows her context and can pick up immediately.

Sarah asks a follow-on question about bereavement payment

Follow-on Sarah asks about the bereavement payment

Payment confirmation for bereavement support payment

Payment confirmed with reference number

05

Plans

The structured alternative: a life event plan with services in priority order, dependencies, and a clear task split between citizen and agent.

When the citizen selects a life event from the Services carousel on the home screen, they see a structured plan. The plan lists every relevant service in order of importance, grouped by dependency. Some services must be completed before others can begin. The plan makes this explicit.

Sarah's home screen scrolled to show services carousel

Sarah scrolls to the services carousel and selects "Death of Someone Close"

Register the death service expanded with eligibility info and start button

Service detail eligibility, requirements, and "Start this service"

Plan structure

The Death of Someone Close plan contains eight services across multiple departments, organised into dependency groups:

Start here — these must be completed first:

  • Register the death — at the local register office. Required before probate, Tell Us Once, and bereavement payments.
  • Funeral Expenses Payment — one-off payment toward funeral costs if on a qualifying benefit. Must claim within 6 months.
  • Bereavement Support Payment — lump sum plus monthly payments if spouse/partner died and the citizen is under State Pension age.

After register the death — unlocked by death registration:

  • Guardian's Allowance, Statutory Parental Bereavement Pay & Leave, Council Tax single person discount

After Tell Us Once or obtaining certificates:

  • Notify OPG of death, Inheritance Tax return, cancel driving licence

Task split

Selecting "Start this plan" expands each service card to show exactly what the agent will do and what the citizen needs to provide. The plan is structured for eligibility — some services only become available once other documents or certificates have been issued. The citizen can start individual services within the plan in any order, as long as dependencies are met.

06

Delegation and the agent brief

Every delegated task starts with a structured brief. The citizen sees exactly what the agent will do, what data it will access, and whether it will check back before acting.

Delegation is not an edge case — it is the primary interaction model. Every task card has three options: delegate to Dot, accept it yourself, or dismiss. When the citizen delegates, they see a structured brief before anything happens.

Delegation screen showing tasks the agent will handle

Sarah delegates tasks, each with a "Do this" action

Agent brief showing objective, steps, and data access

The agent brief objective, steps, data accessed

Agent brief with confirm delegation button

Information needed and confirm delegation

The agent brief

When a citizen delegates a task, they see a structured brief that acts as a contract between them and the agent:

Objective What the task is about. "Your Mini Cooper MOT expires on 22 March 2026. Book a test before then to stay legal."
What Dot will do Numbered steps: 1. Check current MOT/tax status via DVLA records. 2. Find available dates and nearby testing centres. 3. Present options for you to confirm.
Data accessed Named fields: vehicle registration number, current MOT expiry date, registered keeper details.
Needed from you Anything the agent cannot get automatically: preferred location or postcode, preferred date range.
Will Dot check? "Yes — before any action." The agent confirms before booking, paying, or submitting on the citizen's behalf.

Confirmation and receipt

Once the citizen has chosen which tasks to delegate, they see a confirmation summary listing everything the agent will do on their behalf. This is the last chance to alter the approach before the agent acts.

Confirmation card summarising all delegated tasks

Confirmation summary of everything the agent will do

Receipt card with timestamps and data sharing link

Receipt timestamped acknowledgement with data sharing details

The receipt card acknowledges the citizen's choices, timestamps the request, and provides a link to interrogate what personal data has been shared and on what terms. Every action the agent takes is receipted with a permanent, auditable record.

08

Cards

Four card types. Everything the citizen sees is built from these. The full visual catalogue is available in the card catalogue.

Cards are structured data surfaces that appear inline in the conversation. They replace traditional form pages. Cards are how the system collects information, displays verification status, presents consent requests, confirms payments, and delivers outcomes. The citizen never leaves the conversation to fill in a form on a separate screen.

Form card

Labelled fields with validation rules. Supports text, select, date, and number inputs. Fields can be pre-filled from persona data and marked as verified (read-only) or editable.

Confirm your contact and housing details for your Universal Credit claim.

Consent card

Each data-sharing grant shown with purpose, source, duration. Required vs optional clearly marked. The citizen agrees or declines grant by grant.

Data sharing permissions

Review and approve data sharing before we proceed.

Share identity details with HMRC

Required

To verify your identity for tax credit eligibility

Data to be shared:

full name date of birth NI number address

Source: personal data store · Duration: one time

Share employment history with DWP

To assess Universal Credit entitlement

Data to be shared:

employer name employment dates salary

Payment card

Sort code, account number, amount, and payee. Used for both fees (citizen pays) and benefits (citizen receives).

Pay the required fee for your driving licence renewal.

Amount due £14.00

Outcome card

Confirmation of what was submitted, to whom, when, and the result. Reference numbers, next steps, and a permanent receipt.

Department for Work and Pensions

Universal Credit — first payment confirmed

Ref UC-7A3F-2E91

Monthly amount

£1,248.60

Payment date 28th of each month
Account Barclays ····4521
Assessment period 20 Feb – 19 Mar 2026
Payment scheduled to your bank account

Issued 20 March 2026

See the full card catalogue →

Verified fields. When a field value comes from a Tier 1 source, it is displayed as read-only with a "Verified" badge. The citizen can see the value but cannot change it. This prevents accidental errors and provides assurance to the department receiving the data.

Conditional fields. Cards support conditional visibility rules. A field like "Expected due date" only appears if the citizen has indicated they are pregnant. This keeps forms short and relevant, just as a good caseworker would only ask questions that apply to the situation.

09

The wallet

Verified credentials, data permissions, and earned credentials from service completions. Three tiers of data trust.

Sarah's wallet showing death certificate and data permissions

Sarah's wallet showing the death certificate credential and data permissions

The wallet is the citizen's data vault. It holds government-issued digital credentials — driving licence, passport, veteran status card, disability badge — alongside credentials earned from service completions, like a death certificate or a probate grant. Every credential carries data permissions showing what has been shared, with whom, and on what terms.

Standing consent preferences also appear in the wallet as editable cards, so the citizen can review and revoke data sharing at any time.

Three tiers of data trust

Tier 1: Verified

Government-issued credentials

Data from authoritative sources: GOV.UK One Login, HMPO, DVLA, HMRC. Read-only in forms. Displayed with a "Verified" badge. The department receiving the data can trust it completely.

Tier 2: Submitted

Citizen-entered data

Data the citizen has entered in previous interactions. Pre-filled as suggestions in new forms. Editable — the citizen can update it. Examples: phone number, email, employer details, bank account.

Tier 3: Inferred

Agent-derived conclusions

Information the agent has derived from conversation context. Flagged clearly: "Based on what you have told me, I believe you are self-employed." Never submitted without explicit citizen confirmation.

Pre-fill logic

When a card is shown, the system follows a strict precedence order: check Tier 1 credentials first (pre-fill and lock), then Tier 2 submitted data (pre-fill as editable), then Tier 3 inferences (pre-fill with an "Inferred" label requiring confirmation), and finally leave remaining fields empty. For a bereavement scenario with six services across four departments, this pre-fill logic can reduce total data entry by 80% or more.

Earned credentials

Service outputs become wallet items. When Sarah's death registration completes, the death certificate appears in her wallet as a verifiable credential with its own data permissions. When the bereavement support payment is confirmed, the payment receipt and reference number appear. Each credential carries metadata: which department issued it, when, and what data it contains.

These earned credentials then become inputs for later services. The death certificate is required for probate. The IHT reference number is required for the probate application. Data cascades from earlier service outputs to later service inputs — the citizen does not re-enter data.

Death certificate credential issued to Sarah's wallet

Death certificate issued as a verifiable credential in Sarah's wallet

10

Choosing your agent

Three modes of interaction. Trust calibration, not a binary on/off. The entire app works without an agent at all.

Tapping the chevron next to the citizen's name on the home screen opens the agent selector. Three modes are available, each with a clear confirmation screen explaining exactly what to expect.

Agent selector showing Dot, Max, and No Agent options

The agent selector with three trust levels

Dot confirmation: cautious and transparent
Max confirmation: proactive and fast
No agent: manual mode

Dot — cautious and careful

Checks with you before every step. Explains why information is needed. You approve every action. Nothing happens without your say-so.

Step-by-step Transparent You decide

Max — proactive and fast

Acts on your behalf automatically. Auto-fills forms from your records. Gets things done quickly. Always double-check what Max has done.

Proactive Autonomous Fast

No agent — manual mode

Browse services and visit GOV.UK directly. No AI, no chat, no automation. Direct links to GOV.UK. You can switch to an agent at any time.

Manual Direct links You do everything

Graceful degradation

When no agent is selected, the entire app still works. The "Dot" tab in the bottom navigation becomes "Services" — a browsable list of services organised by life event, linking directly to GOV.UK content and forms. All to-dos become citizen to-dos (no agent to-dos section). Topics, to-dos, and wallet remain the same. This is digital inclusion by design — the app is useful even for citizens who do not trust or want AI.

11

The to-do system

Two tracks of work: what the citizen needs to do and what the agent is handling. Division of labour, visible at a glance.

Task detail card showing title, due date, agent steps, and action buttons

Task detail with due date, agent steps, and delegation options

Citizen to-dos are things only the citizen can do: provide a document, make a decision, confirm information. Agent to-dos are things the agent is handling in the background: checking eligibility, verifying a council tax band, submitting a form.

To-dos can be generated automatically by the platform based on date or need, generated by the citizen, expanded to reveal sub-tasks, or swiped right-to-left to delete.

Task detail card

Each task card contains:

  • Title and related tags
  • Due date with urgency indicators
  • What the agent will do — numbered steps
  • Four actions: Add to calendar, Delegate to Dot, Accept task, Dismiss

To-do page

The dedicated to-do page organises tasks by topic type (driving, benefits, family) and splits citizen and agent tasks. A completed history section shows what has been resolved.

12

Worked example: Sarah's bereavement

Sarah Okafor, age 58, Chelmsford. Her husband David died on 26 February 2026. She is named executor. Estate approximately £645,000. Two adult children. She works part-time as a library assistant.

Sarah opens the app and types: "My husband died three weeks ago. I don't know what to do. David always handled everything."

She does not know which services exist, which departments are involved, or what deadlines apply. She does not know about Bereavement Support Payment, or that there is a time limit to claim it. She does not know that probate requires an inheritance tax reference number, or that Tell Us Once can notify nine departments at once.

From a brief conversation — the agent asks whether the death has been registered and whether she is named executor — the system identifies bereavement as the life event and matches it to six services across four departments.

6
Services triggered
4
Departments involved
20
Canonical fields needed
7
Fields Sarah must provide

The 13 stages

Sarah's journey through the conversational route passes through 13 distinct stages, from first message to final payment.

1

Home

Sarah clicks Dot in the bottom nav to start a conversation about her husband's death.

2

Triage

The agent makes sense of Sarah's request, understanding which departments and services are relevant. It presents the most important tasks in order of urgency. The first two: register David's death, and notify all departments through Tell Us Once.

GRO DWP HMRC HMCTS
3

Delegation

By clicking "Do this" on each service card, Sarah delegates tasks to the agent. The steps and processes are submitted on her behalf.

4

Confirmation

A confirmation card outlines what the agent will do on Sarah's behalf and gives her an opportunity to alter any tasks or approaches.

5

Receipt

A receipt card acknowledges Sarah's choices, timestamps the request, and provides a link to interrogate what personal data has been shared and on what terms.

6

Consent

Before any data is passed to services, Sarah gives consent for her and David's details to be shared with government departments. Each department is listed, along with the data to be shared, and she can agree or decline.

7

Preferences

After agreeing, Sarah can set her data sharing preferences for future interactions.

8

Terms

Sarah chooses the scope: share data just this once, always for bereavement services, or always with all departments.

9

Fulfilment

Results cards appear with relevant content. The Tell Us Once service has been initiated with a reference number that can be copied.

DWP
10

Credentials

The death certificate has been issued and is now visible in Sarah's wallet as a verifiable credential.

General Register Office
11

Wallet

The death certificate appears in the wallet with data permissions shown (Legal Data — Allowed).

12

Follow-on

Sarah returns to ask about the bereavement payment. The agent already knows her context and picks up immediately.

13

Payment

Having already identified Sarah's bank account, the bereavement support payment is confirmed with a reference number.

DWP
Stage 1: Home

Home

Stage 2: Triage

Triage

Stage 3: Delegation

Delegation

Stage 4: Confirmation

Confirmation

Stage 6: Consent

Consent

Stage 9: Fulfilment

Fulfilment

Stage 11: Wallet

Wallet

Stage 13: Payment

Payment

The service sequence

The agent proposes a plan ordered by dependency and urgency. Each service cascades data to the next — Sarah provides information once, and the agent fans it out to every service that needs it.

1

Register the death

Legal registration within 5 days. This unlocks everything else. The death registration reference number cascades to every subsequent service.

General Register Office
2

Death certificate

Official certificate posted to Sarah's address. Required as evidence for probate and estate administration.

General Register Office
3

Tell Us Once

Notify HMRC, DWP, DVLA, Passport Office, council, and electoral register in one go. The Tell Us Once principle — notify government once, not repeatedly — extended across every relevant department.

DWP
4

Bereavement Support Payment

£3,500 lump sum plus 18 monthly payments of £350. Time-limited — the agent prioritises this because of the 3-month deadline. Sarah's bank details are collected once and shared with consent.

DWP
5

Inheritance tax return

IHT400 filed. Estate £645,000 is below the threshold — no tax due. The IHT reference number cascades to the probate application.

HMRC
6

Apply for probate

Grant of probate as named executor of David's will. Requires the inheritance tax reference number from HMRC.

HM Courts & Tribunals Service

Field deduplication

Each service defines its own field names for the same data. HMRC calls it "applicant_full_name", DWP calls it "claimant_name", GRO calls it "informant_name" — but they all mean Sarah's name. The field merger maps all variants to canonical fields.

87
Raw service fields across 6 services
20
Canonical fields after deduplication

Of those 20 canonical fields, 8 are already in Sarah's wallet (name, date of birth, NI number, address, contact details). A further 5 are held by other departments (deceased's NI number from HMRC, pension details from DWP). Two fields cascade from earlier services (death registration reference, IHT reference number). That leaves 7 pieces of information only Sarah can provide: her relationship to David, their marriage certificate, the place of death, David's occupation, her bank details, the estate assets, and David's will.

Without deduplication, Sarah would answer 87 separate questions across 6 government services — many asking for the same information in slightly different ways. With the field merger, she confirms 20 pieces of information, and of those, 13 are already known. She provides 7 new pieces of data. The rest is handled.

← Back to platform overview