diff --git a/.github/actions/build-docs/action.yml b/.github/actions/build-docs/action.yml
index 4c0d17d..f27f398 100644
--- a/.github/actions/build-docs/action.yml
+++ b/.github/actions/build-docs/action.yml
@@ -12,9 +12,12 @@ runs:
     - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
       with:
         node-version: 22
-    - name: Npm cli install
-      run: npm ci --workspace=docs --workspace=src/cloudevents
+        cache: 'pnpm'
+        cache-dependency-path: 'docs/pnpm-lock.yaml'
+    - name: Install pnpm dependencies
+      run: pnpm install --frozen-lockfile
       shell: bash
+      working-directory: ./docs
     - name: Setup Ruby
       uses: ruby/setup-ruby@3783f195e29b74ae398d7caca108814bbafde90e # v1.180.1
       with:
diff --git a/.github/workflows/cicd-1-pull-request.yaml b/.github/workflows/cicd-1-pull-request.yaml
index fcf6cbb..0bb250e 100644
--- a/.github/workflows/cicd-1-pull-request.yaml
+++ b/.github/workflows/cicd-1-pull-request.yaml
@@ -22,6 +22,7 @@ jobs:
       build_timestamp: ${{ steps.variables.outputs.build_timestamp }}
       build_epoch: ${{ steps.variables.outputs.build_epoch }}
       nodejs_version: ${{ steps.variables.outputs.nodejs_version }}
+      pnpm_version: ${{ steps.variables.outputs.pnpm_version }}
       python_version: ${{ steps.variables.outputs.python_version }}
       terraform_version: ${{ steps.variables.outputs.terraform_version }}
       version: ${{ steps.variables.outputs.version }}
@@ -41,6 +42,7 @@ jobs:
           echo "build_timestamp=$(date --date=$datetime -u +'%Y%m%d%H%M%S')" >> $GITHUB_OUTPUT
           echo "build_epoch=$(date --date=$datetime -u +'%s')" >> $GITHUB_OUTPUT
           echo "nodejs_version=$(grep "^nodejs\s" .tool-versions | cut -f2 -d' ')" >> $GITHUB_OUTPUT
+          echo "pnpm_version=$(grep "^pnpm\s" .tool-versions | cut -f2 -d' ')" >> $GITHUB_OUTPUT
           echo "python_version=$(grep "^python\s" .tool-versions | cut -f2 -d' ')" >> $GITHUB_OUTPUT
           echo "terraform_version=$(grep "^terraform\s" .tool-versions | cut -f2 -d' ')" >> $GITHUB_OUTPUT
           echo "version=$(echo $version)" >> $GITHUB_OUTPUT
@@ -67,6 +69,7 @@ jobs:
           export BUILD_TIMESTAMP="${{ steps.variables.outputs.build_timestamp }}"
           export BUILD_EPOCH="${{ steps.variables.outputs.build_epoch }}"
           export NODEJS_VERSION="${{ steps.variables.outputs.nodejs_version }}"
+          export PNPM_VERSION="${{ steps.variables.outputs.pnpm_version }}"
           export PYTHON_VERSION="${{ steps.variables.outputs.python_version }}"
           export TERRAFORM_VERSION="${{ steps.variables.outputs.terraform_version }}"
           export VERSION="${{ steps.variables.outputs.version }}"
@@ -82,6 +85,7 @@ jobs:
       build_timestamp: "${{ needs.metadata.outputs.build_timestamp }}"
       build_epoch: "${{ needs.metadata.outputs.build_epoch }}"
       nodejs_version: "${{ needs.metadata.outputs.nodejs_version }}"
+      pnpm_version: "${{ needs.metadata.outputs.pnpm_version }}"
       python_version: "${{ needs.metadata.outputs.python_version }}"
       terraform_version: "${{ needs.metadata.outputs.terraform_version }}"
       version: "${{ needs.metadata.outputs.version }}"
@@ -95,6 +99,7 @@ jobs:
       build_timestamp: "${{ needs.metadata.outputs.build_timestamp }}"
       build_epoch: "${{ needs.metadata.outputs.build_epoch }}"
       nodejs_version: "${{ needs.metadata.outputs.nodejs_version }}"
+      pnpm_version: "${{ needs.metadata.outputs.pnpm_version }}"
       python_version: "${{ needs.metadata.outputs.python_version }}"
       terraform_version: "${{ needs.metadata.outputs.terraform_version }}"
       version: "${{ needs.metadata.outputs.version }}"
@@ -109,6 +114,7 @@ jobs:
       build_timestamp: "${{ needs.metadata.outputs.build_timestamp }}"
       build_epoch: "${{ needs.metadata.outputs.build_epoch }}"
       nodejs_version: "${{ needs.metadata.outputs.nodejs_version }}"
+      pnpm_version: "${{ needs.metadata.outputs.pnpm_version }}"
       python_version: "${{ needs.metadata.outputs.python_version }}"
       terraform_version: "${{ needs.metadata.outputs.terraform_version }}"
       version: "${{ needs.metadata.outputs.version }}"
@@ -123,6 +129,7 @@ jobs:
       build_timestamp: "${{ needs.metadata.outputs.build_timestamp }}"
       build_epoch: "${{ needs.metadata.outputs.build_epoch }}"
       nodejs_version: "${{ needs.metadata.outputs.nodejs_version }}"
+      pnpm_version: "${{ needs.metadata.outputs.pnpm_version }}"
       python_version: "${{ needs.metadata.outputs.python_version }}"
       terraform_version: "${{ needs.metadata.outputs.terraform_version }}"
       version: "${{ needs.metadata.outputs.version }}"
diff --git a/.github/workflows/cicd-3-deploy.yaml b/.github/workflows/cicd-3-deploy.yaml
index 3a8f3aa..f7b35a5 100644
--- a/.github/workflows/cicd-3-deploy.yaml
+++ b/.github/workflows/cicd-3-deploy.yaml
@@ -31,6 +31,7 @@ jobs:
       build_timestamp: ${{ steps.variables.outputs.build_timestamp }}
       build_epoch: ${{ steps.variables.outputs.build_epoch }}
       nodejs_version: ${{ steps.variables.outputs.nodejs_version }}
+      pnpm_version: ${{ steps.variables.outputs.pnpm_version }}
       python_version: ${{ steps.variables.outputs.python_version }}
       terraform_version: ${{ steps.variables.outputs.terraform_version }}
       version: ${{ steps.variables.outputs.version }}
@@ -46,6 +47,7 @@ jobs:
           echo "build_timestamp=$(date --date=$datetime -u +'%Y%m%d%H%M%S')" >> $GITHUB_OUTPUT
           echo "build_epoch=$(date --date=$datetime -u +'%s')" >> $GITHUB_OUTPUT
           echo "nodejs_version=$(grep "^nodejs\s" .tool-versions | cut -f2 -d' ')" >> $GITHUB_OUTPUT
+          echo "pnpm_version=$(grep "^pnpm\s" .tool-versions | cut -f2 -d' ')" >> $GITHUB_OUTPUT
           echo "python_version=$(grep "^python\s" .tool-versions | cut -f2 -d' ')" >> $GITHUB_OUTPUT
           echo "terraform_version=$(grep "^terraform\s" .tool-versions | cut -f2 -d' ')" >> $GITHUB_OUTPUT
           echo "version=$(head -n 1 .version 2> /dev/null || echo unknown)" >> $GITHUB_OUTPUT
diff --git a/.github/workflows/stage-1-commit.yaml b/.github/workflows/stage-1-commit.yaml
index a20106a..24b51f3 100644
--- a/.github/workflows/stage-1-commit.yaml
+++ b/.github/workflows/stage-1-commit.yaml
@@ -19,6 +19,10 @@ on:
         description: "Node.js version, set by the CI/CD pipeline workflow"
         required: true
         type: string
+      pnpm_version:
+        description: "pnpm version, set by the CI/CD pipeline workflow"
+        required: true
+        type: string
       python_version:
         description: "Python version, set by the CI/CD pipeline workflow"
         required: true
diff --git a/.github/workflows/stage-2-test.yaml b/.github/workflows/stage-2-test.yaml
index dc9ecaf..23bb41c 100644
--- a/.github/workflows/stage-2-test.yaml
+++ b/.github/workflows/stage-2-test.yaml
@@ -19,6 +19,10 @@ on:
         description: "Node.js version, set by the CI/CD pipeline workflow"
         required: true
         type: string
+      pnpm_version:
+        description: "pnpm version, set by the CI/CD pipeline workflow"
+        required: true
+        type: string
       python_version:
         description: "Python version, set by the CI/CD pipeline workflow"
         required: true
diff --git a/.github/workflows/stage-3-build.yaml b/.github/workflows/stage-3-build.yaml
index ef36cd3..359c0e5 100644
--- a/.github/workflows/stage-3-build.yaml
+++ b/.github/workflows/stage-3-build.yaml
@@ -19,6 +19,10 @@ on:
         description: "Node.js version, set by the CI/CD pipeline workflow"
         required: true
         type: string
+      pnpm_version:
+        description: "pnpm version, set by the CI/CD pipeline workflow"
+        required: true
+        type: string
       python_version:
         description: "Python version, set by the CI/CD pipeline workflow"
         required: true
@@ -33,6 +37,21 @@ on:
         type: string
 
 jobs:
+  artefact-jekyll-docs:
+    name: "Build Docs"
+    runs-on: ubuntu-latest
+    timeout-minutes: 3
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - name: "Setup pnpm"
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
+        with:
+          version: "${{ inputs.pnpm_version }}"
+      - name: "Build docs"
+        uses: ./.github/actions/build-docs
+        with:
+          version: "${{ inputs.version }}"
   artefact-1:
     name: "Artefact 1"
     runs-on: ubuntu-latest
diff --git a/.github/workflows/stage-4-acceptance.yaml b/.github/workflows/stage-4-acceptance.yaml
index 7259bcd..0e9263a 100644
--- a/.github/workflows/stage-4-acceptance.yaml
+++ b/.github/workflows/stage-4-acceptance.yaml
@@ -19,6 +19,10 @@ on:
         description: "Node.js version, set by the CI/CD pipeline workflow"
         required: true
         type: string
+      pnpm_version:
+        description: "pnpm version, set by the CI/CD pipeline workflow"
+        required: true
+        type: string
       python_version:
         description: "Python version, set by the CI/CD pipeline workflow"
         required: true
diff --git a/.tool-versions b/.tool-versions
index 7ac5094..74dcb07 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -2,6 +2,7 @@ act 0.2.64
 gitleaks 8.24.0
 jq 1.6
 nodejs 22.15.1
+pnpm 10.33.0
 pre-commit 3.6.0
 terraform 1.10.1
 terraform-docs 0.19.0
diff --git a/Makefile b/Makefile
index 46ccfb3..ea70e95 100644
--- a/Makefile
+++ b/Makefile
@@ -11,6 +11,7 @@ dependencies: # Install dependencies needed to build and test the project @Pipel
 	# TODO: Implement installation of your project dependencies
 
 build: # Build the project artefact @Pipeline
+	(cd docs && make build)
 
 publish: # Publish the project artefact @Pipeline
 	# TODO: Implement the artefact publishing step
@@ -23,6 +24,7 @@ clean:: # Clean-up project resources (main) @Operations
 	# TODO: Implement project resources clean-up step
 
 config:: _install-dependencies version # Configure development environment (main) @Configuration
+	(cd docs && make install)
 
 version:
 	rm -f .version
diff --git a/README.md b/README.md
index 4e5e824..d4bd001 100644
--- a/README.md
+++ b/README.md
@@ -1,196 +1,18 @@
-# NHS Notify Repository Template
+# NHS Notify Shared Modules
 
-[![CI/CD Pull Request](https://github.com/nhs-england-tools/repository-template/actions/workflows/cicd-1-pull-request.yaml/badge.svg)](https://github.com/nhs-england-tools/repository-template/actions/workflows/cicd-1-pull-request.yaml)
-[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=repository-template&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=repository-template)
+[![CI/CD Pull Request](https://github.com/NHSDigital/nhs-notify-shared-modules/actions/workflows/cicd-1-pull-request.yaml/badge.svg)](https://github.com/NHSDigital/nhs-notify-shared-modules/actions/workflows/cicd-1-pull-request.yaml)
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=NHSDigital_nhs-notify-shared-modules&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=NHSDigital_nhs-notify-shared-modules)
 
-Start with an overview or a brief description of what the project is about and what it does. For example -
+**Reusable infrastructure modules, pre-commit hooks, and GitHub Actions for NHS Notify services.**
 
-Welcome to our repository template designed to streamline your project setup! This robust template provides a reliable starting point for your new projects, covering an essential tech stack and encouraging best practices in documenting.
-
-This repository template aims to foster a user-friendly development environment by ensuring that every included file is concise and adequately self-documented. By adhering to this standard, we can promote increased clarity and maintainability throughout your project's lifecycle. Bundled within this template are resources that pave the way for seamless repository creation. Currently supported technologies are:
-
-- Terraform
-- Docker
-
-Make use of this repository template to expedite your project setup and enhance your productivity right from the get-go. Enjoy the advantage of having a well-structured, self-documented project that reduces overhead and increases focus on what truly matters - coding!
-
-## Table of Contents
-
-- [NHS Notify Repository Template](#nhs-notify-repository-template)
-  - [Table of Contents](#table-of-contents)
-  - [Documentation](#documentation)
-  - [Setup](#setup)
-    - [Prerequisites](#prerequisites)
-    - [Configuration](#configuration)
-  - [Usage](#usage)
-    - [Testing](#testing)
-  - [Design](#design)
-    - [Diagrams](#diagrams)
-    - [Modularity](#modularity)
-  - [Contributing](#contributing)
-  - [Contacts](#contacts)
-  - [Licence](#licence)
+This repository provides shared resources to maintain consistency, security, and quality across all NHS Notify service repositories.
 
 ## Documentation
 
-- [Built](/)
-
-## Setup
-
-By including preferably a one-liner or if necessary a set of clear CLI instructions we improve user experience. This should be a frictionless installation process that works on various operating systems (macOS, Linux, Windows WSL) and handles all the dependencies.
-
-Clone the repository
-
-```shell
-git clone https://github.com/nhs-england-tools/repository-template.git
-cd nhs-england-tools/repository-template
-```
-
-### Prerequisites
-
-The following software packages, or their equivalents, are expected to be installed and configured:
-
-- [Docker](https://www.docker.com/) container runtime or a compatible tool, e.g. [Podman](https://podman.io/),
-- [asdf](https://asdf-vm.com/) version manager,
-- [GNU make](https://www.gnu.org/software/make/) 3.82 or later,
-
-> [!NOTE]<br>
-> The version of GNU make available by default on macOS is earlier than 3.82. You will need to upgrade it or certain `make` tasks will fail. On macOS, you will need [Homebrew](https://brew.sh/) installed, then to install `make`, like so:
->
-> ```shell
-> brew install make
-> ```
->
-> You will then see instructions to fix your [`$PATH`](https://github.com/nhs-england-tools/dotfiles/blob/main/dot_path.tmpl) variable to make the newly installed version available. If you are using [dotfiles](https://github.com/nhs-england-tools/dotfiles), this is all done for you.
-
-- [GNU sed](https://www.gnu.org/software/sed/) and [GNU grep](https://www.gnu.org/software/grep/) are required for the scripted command-line output processing,
-- [GNU coreutils](https://www.gnu.org/software/coreutils/) and [GNU binutils](https://www.gnu.org/software/binutils/) may be required to build dependencies like Python, which may need to be compiled during installation,
-
-> [!NOTE]<br>
-> For macOS users, installation of the GNU toolchain has been scripted and automated as part of the `dotfiles` project. Please see this [script](https://github.com/nhs-england-tools/dotfiles/blob/main/assets/20-install-base-packages.macos.sh) for details.
-
-- [Python](https://www.python.org/) required to run Git hooks,
-- [`jq`](https://jqlang.github.io/jq/) a lightweight and flexible command-line JSON processor.
-
-### Configuration
-
-Installation and configuration of the toolchain dependencies
-
-```shell
-make config
-```
-
-## Usage
-
-This repository provides shared resources for NHS Notify service repositories:
-
-### Terraform Modules
-
-Reusable Terraform modules are published as GitHub release assets. Service repos reference them via release URLs:
-
-```hcl
-module "lambda_example" {
-  source = "https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.29/terraform-lambda.zip"
-  # ... module configuration
-}
-```
-
-See [infrastructure/modules/](./infrastructure/modules/) for available modules.
-
-### Pre-commit Hooks
-
-Centralised pre-commit hooks are defined in [.pre-commit-hooks.yaml](./.pre-commit-hooks.yaml) and can be consumed by service repos:
-
-```yaml
-# In service repo's scripts/config/pre-commit.yaml
-repos:
-  - repo: https://github.com/NHSDigital/nhs-notify-shared-modules
-    rev: v2.1.0  # Use specific tag for version control
-    hooks:
-      - id: sort-dictionary
-      - id: scan-secrets
-        args: [check=whole-history]
-      - id: check-file-format
-        args: [check=branch]
-```
-
-**Available hooks:**
-
-- `sort-dictionary` - Sorts Vale dictionary files to avoid merge conflicts
-- `scan-secrets` - Scans for hard-coded secrets using Gitleaks
-- `check-file-format` - Validates EditorConfig compliance
-
-**Arguments:**
-
-- `scan-secrets`: `check={whole-history,last-commit,staged-changes}` (default: `staged-changes`)
-- `check-file-format`: `check={all,staged-changes,working-tree-changes,branch}` (default: `working-tree-changes`)
-
-### GitHub Composite Actions
-
-Reusable GitHub Actions can be referenced directly from service repository workflows:
-
-```yaml
-# In service repository's .github/workflows/*.yaml
-jobs:
-  scan-secrets:
-    steps:
-      - uses: actions/checkout@v4
-      - uses: NHSDigital/nhs-notify-shared-modules/.github/actions/scan-secrets@v2.1.0
-```
-
-See the `.github/actions/` directory for available actions.
-
-### Versioning Strategy
-
-- Use **semantic versioning** for releases (e.g., `v2.1.0`)
-- Service repositories should **pin specific tags** rather than using `main`
-- Update service repository references after testing new shared-modules releases
-- Breaking changes require major version bump
-
-### Testing
-
-There are `make` tasks for you to configure to run your tests.  Run `make test` to see how they work.  You should be able to use the same entry points for local development as in your CI pipeline.
-
-## Design
-
-### Diagrams
-
-The [C4 model](https://c4model.com/) is a simple and intuitive way to create software architecture diagrams that are clear, consistent, scalable and most importantly collaborative. This should result in documenting all the system interfaces, external dependencies and integration points.
-
-The source for diagrams should be in Git for change control and review purposes. Recommendations are [draw.io](https://app.diagrams.net/) and [Mermaids](https://github.com/mermaid-js/mermaid). Here is an example Mermaids sequence diagram:
-
-```mermaid
-sequenceDiagram
-    User->>+Service: GET /users?params=...
-    Service->>Service: auth request
-    Service->>Database: get all users
-    Database-->>Service: list of users
-    Service->>Service: filter users
-    Service-->>-User: list[User]
-```
-
-### Modularity
-
-Most of the projects are built with customisability and extendability in mind. At a minimum, this can be achieved by implementing service level configuration options and settings. The intention of this section is to show how this can be used. If the system processes data, you could mention here for example how the input is prepared for testing - anonymised, synthetic or live data.
-
-## Contributing
-
-Describe or link templates on how to raise an issue, feature request or make a contribution to the codebase. Reference the other documentation files, like
-
-- Environment setup for contribution, i.e. `CONTRIBUTING.md`
-- Coding standards, branching, linting, practices for development and testing
-- Release process, versioning, changelog
-- Backlog, board, roadmap, ways of working
-- High-level requirements, guiding principles, decision records, etc.
-
-## Contacts
-
-Provide a way to contact the owners of this project. It can be a team, an individual or information on the means of getting in touch via active communication channels, e.g. opening a GitHub discussion, raising an issue, etc.
-
-## Licence
-
-> The [LICENCE.md](./LICENCE.md) file will need to be updated with the correct year and owner
+> [View Full Documentation on GitHub Pages](https://nhsdigital.github.io/nhs-notify-shared-modules/)
 
-Unless stated otherwise, the codebase is released under the MIT License. This covers both the codebase and any sample code in the documentation.
+The documentation site provides comprehensive guides for:
 
-Any HTML or Markdown documentation is [© Crown Copyright](https://www.nationalarchives.gov.uk/information-management/re-using-public-sector-information/uk-government-licensing-framework/crown-copyright/) and available under the terms of the [Open Government Licence v3.0](https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/).
+- **[Terraform Modules](https://nhsdigital.github.io/nhs-notify-shared-modules/#-terraform-modules)** - Reusable IaC components
+- **[Pre-commit Hooks](https://nhsdigital.github.io/nhs-notify-shared-modules/pre-commit-hooks.html)** - Code quality and security checks
+- **[GitHub Actions](https://nhsdigital.github.io/nhs-notify-shared-modules/github-actions.html)** - Reusable workflow actions
diff --git a/docs/.gitignore b/docs/.gitignore
new file mode 100644
index 0000000..7cc3035
--- /dev/null
+++ b/docs/.gitignore
@@ -0,0 +1,9 @@
+_site
+.sass-cache
+.jekyll-cache
+.jekyll-metadata
+.bundle
+vendor
+*Zone.Identifier
+node_modules
+_config.version.yml
diff --git a/docs/.vscode/launch.json b/docs/.vscode/launch.json
new file mode 100644
index 0000000..c70893c
--- /dev/null
+++ b/docs/.vscode/launch.json
@@ -0,0 +1,19 @@
+{
+  "configurations": [
+    {
+      "console": "integratedTerminal",
+      "name": "Debug",
+      "preLaunchTask": "stop-already-running",
+      "request": "launch",
+      "runtimeArgs": [
+        "debug"
+      ],
+      "runtimeExecutable": "make",
+      "skipFiles": [
+        "<node_internals>/**"
+      ],
+      "type": "node"
+    }
+  ],
+  "version": "0.2.0"
+}
diff --git a/docs/.vscode/tasks.json b/docs/.vscode/tasks.json
new file mode 100644
index 0000000..6f55306
--- /dev/null
+++ b/docs/.vscode/tasks.json
@@ -0,0 +1,13 @@
+{
+  "tasks": [
+    {
+      "command": "kill $(lsof -ti :4000); exit 0;",
+      "label": "stop-already-running",
+      "options": {
+        "cwd": "${workspaceFolder}"
+      },
+      "type": "shell"
+    }
+  ],
+  "version": "2.0.0"
+}
diff --git a/docs/404.html b/docs/404.html
new file mode 100644
index 0000000..086a5c9
--- /dev/null
+++ b/docs/404.html
@@ -0,0 +1,25 @@
+---
+permalink: /404.html
+layout: default
+---
+
+<style type="text/css" media="screen">
+  .container {
+    margin: 10px auto;
+    max-width: 600px;
+    text-align: center;
+  }
+  h1 {
+    margin: 30px 0;
+    font-size: 4em;
+    line-height: 1;
+    letter-spacing: -1px;
+  }
+</style>
+
+<div class="container">
+  <h1>404</h1>
+
+  <p><strong>Page not found :(</strong></p>
+  <p>The requested page could not be found.</p>
+</div>
diff --git a/docs/Gemfile b/docs/Gemfile
new file mode 100644
index 0000000..5ee5033
--- /dev/null
+++ b/docs/Gemfile
@@ -0,0 +1,37 @@
+source "https://rubygems.org"
+# Hello! This is where you manage which Jekyll version is used to run.
+# When you want to use a different version, change it below, save the
+# file and run `bundle install`. Run Jekyll with `bundle exec`, like so:
+#
+#     bundle exec jekyll serve
+#
+# This will help ensure the proper Jekyll version is running.
+# Happy Jekylling!
+gem "jekyll", "~> 4.4.1"
+# This is the default theme for new Jekyll sites. You may change this to anything you like.
+gem "minima", "~> 2.5"
+# If you want to use GitHub Pages, remove the "gem "jekyll"" above and
+# uncomment the line below. To upgrade, run `bundle update github-pages`.
+# gem "github-pages", group: :jekyll_plugins
+# If you have any plugins, put them here!
+group :jekyll_plugins do
+  gem "jekyll-feed", "~> 0.12"
+  gem "jekyll-drawio"
+end
+
+# Windows and JRuby does not include zoneinfo files, so bundle the tzinfo-data gem
+# and associated library.
+platforms :mingw, :x64_mingw, :mswin, :jruby do
+  gem "tzinfo", ">= 1", "< 3"
+  gem "tzinfo-data"
+end
+
+# Performance-booster for watching directories on Windows
+gem "wdm", "~> 0.1.1", :platforms => [:mingw, :x64_mingw, :mswin]
+
+# Lock `http_parser.rb` gem to `v0.6.x` on JRuby builds since newer versions of the gem
+# do not have a Java counterpart.
+gem "http_parser.rb", "~> 0.6.0", :platforms => [:jruby]
+
+gem "just-the-docs", "~> 0.12.0"
+gem 'jemoji'
diff --git a/docs/Gemfile.lock b/docs/Gemfile.lock
new file mode 100644
index 0000000..0262611
--- /dev/null
+++ b/docs/Gemfile.lock
@@ -0,0 +1,155 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    activesupport (8.1.1)
+      base64
+      bigdecimal
+      concurrent-ruby (~> 1.0, >= 1.3.1)
+      connection_pool (>= 2.2.5)
+      drb
+      i18n (>= 1.6, < 2)
+      json
+      logger (>= 1.4.2)
+      minitest (>= 5.1)
+      securerandom (>= 0.3)
+      tzinfo (~> 2.0, >= 2.0.5)
+      uri (>= 0.13.1)
+    addressable (2.9.0)
+      public_suffix (>= 2.0.2, < 8.0)
+    base64 (0.3.0)
+    bigdecimal (4.1.2)
+    cgi (0.5.1)
+    colorator (1.1.0)
+    concurrent-ruby (1.3.6)
+    connection_pool (3.0.2)
+    csv (3.3.5)
+    drb (2.2.3)
+    em-websocket (0.5.3)
+      eventmachine (>= 0.12.9)
+      http_parser.rb (~> 0)
+    erb (4.0.4)
+      cgi (>= 0.3.3)
+    eventmachine (1.2.7)
+    ffi (1.17.4-arm64-darwin)
+    ffi (1.17.4-x86_64-linux-gnu)
+    forwardable-extended (2.6.0)
+    gemoji (4.1.0)
+    google-protobuf (4.34.1-arm64-darwin)
+      bigdecimal
+      rake (~> 13.3)
+    google-protobuf (4.34.1-x86_64-linux-gnu)
+      bigdecimal
+      rake (~> 13.3)
+    html-pipeline (2.14.3)
+      activesupport (>= 2)
+      nokogiri (>= 1.4)
+    http_parser.rb (0.8.1)
+    i18n (1.14.8)
+      concurrent-ruby (~> 1.0)
+    jekyll (4.4.1)
+      addressable (~> 2.4)
+      base64 (~> 0.2)
+      colorator (~> 1.0)
+      csv (~> 3.0)
+      em-websocket (~> 0.5)
+      i18n (~> 1.0)
+      jekyll-sass-converter (>= 2.0, < 4.0)
+      jekyll-watch (~> 2.0)
+      json (~> 2.6)
+      kramdown (~> 2.3, >= 2.3.1)
+      kramdown-parser-gfm (~> 1.0)
+      liquid (~> 4.0)
+      mercenary (~> 0.3, >= 0.3.6)
+      pathutil (~> 0.9)
+      rouge (>= 3.0, < 5.0)
+      safe_yaml (~> 1.0)
+      terminal-table (>= 1.8, < 4.0)
+      webrick (~> 1.7)
+    jekyll-drawio (1.1.1)
+      erb (>= 2.2, < 5.0)
+      jekyll (~> 4.3)
+      nokogiri (~> 1.12)
+    jekyll-feed (0.17.0)
+      jekyll (>= 3.7, < 5.0)
+    jekyll-include-cache (0.2.1)
+      jekyll (>= 3.7, < 5.0)
+    jekyll-sass-converter (3.1.0)
+      sass-embedded (~> 1.75)
+    jekyll-seo-tag (2.9.0)
+      jekyll (>= 3.8, < 5.0)
+    jekyll-watch (2.2.1)
+      listen (~> 3.0)
+    jemoji (0.13.0)
+      gemoji (>= 3, < 5)
+      html-pipeline (~> 2.2)
+      jekyll (>= 3.0, < 5.0)
+    json (2.19.5)
+    just-the-docs (0.12.0)
+      jekyll (>= 3.8.5)
+      jekyll-include-cache
+      jekyll-seo-tag (>= 2.0)
+      rake (>= 12.3.1)
+    kramdown (2.5.2)
+      rexml (>= 3.4.4)
+    kramdown-parser-gfm (1.1.0)
+      kramdown (~> 2.0)
+    liquid (4.0.4)
+    listen (3.10.0)
+      logger
+      rb-fsevent (~> 0.10, >= 0.10.3)
+      rb-inotify (~> 0.9, >= 0.9.10)
+    logger (1.7.0)
+    mercenary (0.4.0)
+    minima (2.5.2)
+      jekyll (>= 3.5, < 5.0)
+      jekyll-feed (~> 0.9)
+      jekyll-seo-tag (~> 2.1)
+    minitest (6.0.0)
+      prism (~> 1.5)
+    nokogiri (1.18.10-arm64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.18.10-x86_64-linux-gnu)
+      racc (~> 1.4)
+    pathutil (0.16.2)
+      forwardable-extended (~> 2.6)
+    prism (1.6.0)
+    public_suffix (7.0.5)
+    racc (1.8.1)
+    rake (13.4.2)
+    rb-fsevent (0.11.2)
+    rb-inotify (0.11.1)
+      ffi (~> 1.0)
+    rexml (3.4.4)
+    rouge (4.7.0)
+    safe_yaml (1.0.5)
+    sass-embedded (1.99.0-arm64-darwin)
+      google-protobuf (~> 4.31)
+    sass-embedded (1.99.0-x86_64-linux-gnu)
+      google-protobuf (~> 4.31)
+    securerandom (0.4.1)
+    terminal-table (3.0.2)
+      unicode-display_width (>= 1.1.1, < 3)
+    tzinfo (2.0.6)
+      concurrent-ruby (~> 1.0)
+    unicode-display_width (2.6.0)
+    uri (1.1.1)
+    webrick (1.9.2)
+
+PLATFORMS
+  arm64-darwin-25
+  x86_64-linux
+
+DEPENDENCIES
+  http_parser.rb (~> 0.6.0)
+  jekyll (~> 4.4.1)
+  jekyll-drawio
+  jekyll-feed (~> 0.12)
+  jemoji
+  just-the-docs (~> 0.12.0)
+  minima (~> 2.5)
+  tzinfo (>= 1, < 3)
+  tzinfo-data
+  wdm (~> 0.1.1)
+
+BUNDLED WITH
+   2.5.10
diff --git a/docs/Makefile b/docs/Makefile
new file mode 100644
index 0000000..48692ea
--- /dev/null
+++ b/docs/Makefile
@@ -0,0 +1,40 @@
+BASE_URL ?= "/"
+VERSION ?= ""
+SHELL = /bin/bash
+
+default: install
+
+h help:
+	@egrep '^\S|^$$' Makefile
+
+install:
+	pnpm --ignore-workspace install --frozen-lockfile
+	bundle config set --local path vendor/bundle
+	bundle install
+
+s serve:
+	bundle exec jekyll serve --trace --livereload
+
+define baseurlparam =
+$(if $(BASE_URL),-- --baseurl $(BASE_URL),-- --baseurl "")
+endef
+
+build: version
+	pnpm --ignore-workspace run build $(baseurlparam)
+
+debug: version
+	pnpm --ignore-workspace run debug
+
+version:
+	touch _config.version.yml
+	if [[ $(VERSION) == "" ]]; then \
+		(cd .. && make version); \
+		ver=$$(head -n 1 ../.version 2> /dev/null || echo unknown); \
+		echo "version: $$ver" > _config.version.yml; \
+		echo "$$ver" > .version; \
+	else \
+		echo "version: $(VERSION)" > _config.version.yml; \
+		echo "$(VERSION)" > .version; \
+	fi
+
+	echo "{ \"schemaVersion\": 1, \"label\": \"version\", \"message\": \"$$(head -n 1 .version 2> /dev/null || echo unknown)\", \"color\": \"orange\" }" > version.json
diff --git a/docs/_config.dev.yml b/docs/_config.dev.yml
new file mode 100644
index 0000000..53d08cd
--- /dev/null
+++ b/docs/_config.dev.yml
@@ -0,0 +1,3 @@
+
+baseurl: "" # the subpath of your site, e.g. /blog
+url: ""
diff --git a/docs/_config.yml b/docs/_config.yml
new file mode 100644
index 0000000..026a762
--- /dev/null
+++ b/docs/_config.yml
@@ -0,0 +1,94 @@
+# Welcome to Jekyll!
+#
+# This config file is meant for settings that affect your whole blog, values
+# which you are expected to set up once and rarely edit after that. If you find
+# yourself editing this file very often, consider using Jekyll's data files
+# feature for the data you need to update frequently.
+#
+# For technical reasons, this file is *NOT* reloaded automatically when you use
+# 'bundle exec jekyll serve'. If you change this file, please restart the server process.
+#
+# If you need help with YAML syntax, here are some quick references for you:
+# https://learn-the-web.algonquindesign.ca/topics/markdown-yaml-cheat-sheet/#yaml
+# https://learnxinyminutes.com/docs/yaml/
+#
+# Site settings
+# These are used to personalize your new site. If you look in the HTML files,
+# you will see them accessed via {{ site.title }}, {{ site.email }}, and so on.
+# You can create any custom variable you would like, and they will be accessible
+# in the templates via {{ site.myvariable }}.
+
+title: NHS Notify Shared Modules
+# email: your-email@example.com
+description: >- # this means to ignore newlines until "baseurl:"
+  Shared Modules documentation for the NHS Notify Platform.
+baseurl: "" # the subpath of your site, e.g. /blog
+
+collections_dir: collections
+
+# Build settings
+theme: just-the-docs
+plugins:
+  - jekyll-feed
+  - jemoji
+
+color_scheme: nhs
+mermaid:
+  # Version of mermaid library
+  # Pick an available version from https://cdn.jsdelivr.net/npm/mermaid/
+  version: "10.9.1"
+
+aux_links:
+  "NHS Notify Shared Modules on GitHub":
+    - "//github.com/NHSDigital/nhs-notify-shared-modules"
+
+aux_links_new_tab: false
+
+# Footer "Edit this page on GitHub" link text
+gh_edit_link: true # show or hide edit this page link
+gh_edit_link_text: "Edit this page on GitHub."
+gh_edit_repository: "https://github.com/NHSDigital/nhs-notify-shared-modules" # the github URL for your repo
+gh_edit_branch: "main" # the branch that your docs is served from
+# gh_edit_source: docs # the source that your files originate from
+gh_edit_view_mode: "tree" # "tree" or "edit" if you want the user to jump into the editor immediately
+
+nav_external_links:
+  - title: NHS Notify
+    url: https://notify.nhs.uk/
+    hide_icon: false # set to true to hide the external link icon - defaults to false
+    opens_in_new_tab: true # set to true to open this link in a new tab - defaults to false
+
+callouts:
+  warning:
+    title: Warning
+    color: red
+  note:
+    title: Warning
+    color: blue
+
+# Exclude from processing.
+# The following items will not be processed, by default.
+# Any item listed under the `exclude:` key here will be automatically added to
+# the internal "default list".
+#
+# Excluded items can be processed by explicitly listing the directories or
+# their entries' file path in the `include:` list.
+#
+
+include:
+  - .version
+  - version.json
+exclude:
+  - pnpm-lock.yaml
+  - package.json
+  - Makefile
+#   - .sass-cache/
+#   - .jekyll-cache/
+#   - gemfiles/
+#   - Gemfile
+#   - Gemfile.lock
+#   - node_modules/
+#   - vendor/bundle/
+#   - vendor/cache/
+#   - vendor/gems/
+#   - vendor/ruby/
diff --git a/docs/_includes/.gitkeep b/docs/_includes/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/docs/_includes/fullscreen.html b/docs/_includes/fullscreen.html
new file mode 100644
index 0000000..49c3710
--- /dev/null
+++ b/docs/_includes/fullscreen.html
@@ -0,0 +1,3 @@
+<button type="button" name="fullScreenButton" id="fullScreenButton" class="btn" onclick="fullScreenToggle()">
+  Full Screen View
+</button>
diff --git a/docs/_includes/nhs-notify-head.html b/docs/_includes/nhs-notify-head.html
new file mode 100644
index 0000000..5ec4016
--- /dev/null
+++ b/docs/_includes/nhs-notify-head.html
@@ -0,0 +1,2 @@
+<link rel="icon" type="image/x-icon" href="{{ '/assets/favicon.ico' | relative_url }}">
+<script src="{{ '/assets/js/nhs-notify.js' | relative_url }}"></script>
diff --git a/docs/_includes/notify-repo-list.html b/docs/_includes/notify-repo-list.html
new file mode 100644
index 0000000..c2f8218
--- /dev/null
+++ b/docs/_includes/notify-repo-list.html
@@ -0,0 +1,11 @@
+<h2>Repository List</h2>
+
+<ul>
+{% for repo in site.notify-repos %}
+  <li>
+      <a href="{{site.baseurl}}/notify-repos/{{repo.repo-name}}.html">
+      {{ repo.name }} - {{ repo.description }}
+    </a>
+  </li>
+{% endfor %}
+</ul>
diff --git a/docs/_includes/notify-repo-table.html b/docs/_includes/notify-repo-table.html
new file mode 100644
index 0000000..aaa0efa
--- /dev/null
+++ b/docs/_includes/notify-repo-table.html
@@ -0,0 +1,18 @@
+<h2>Repository List</h2>
+
+<table>
+  <tr>
+    <th>Repository Name</th>
+    <th>More Info</th>
+  </tr>
+  {% for repo in site.notify-repos %}
+  <tr>
+    <td>{{repo.repo-name}}</td>
+    <td>
+      <a href="{{site.baseurl}}/notify-repos/{{repo.repo-name}}.html">
+        {{ repo.name }} - {{ repo.description }}
+      </a>
+    </td>
+  </tr>
+  {% endfor %}
+</table>
diff --git a/docs/_includes/page-info-details.html b/docs/_includes/page-info-details.html
new file mode 100644
index 0000000..fc6cddb
--- /dev/null
+++ b/docs/_includes/page-info-details.html
@@ -0,0 +1,55 @@
+{% if page.is_not_draft %}{% else %} {% assign is_draft = true %} {% endif %} {%
+  assign wordWarning = 200 %} {% assign wordCount = content | number_of_words%} {%
+  assign readTime = wordCount | divided_by: 100.0 | ceil %}
+
+  <div class="page-info">
+    <p class="text-small text-grey-dk-300 mb-0">
+      {% if page.last_modified_date %} {{ page.last_modified_date | date:
+      "%Y-%m-%d"}} | {% else %} 2022-07-01 | {% endif %} 📑 {{ wordCount }} words
+      | ⏱ {{readTime}} mins {% if site.gh_edit_link and site.gh_edit_link_text and
+      site.gh_edit_repository and site.gh_edit_branch and site.gh_edit_view_mode
+      %} |
+      <a
+        href="{{ site.gh_edit_repository }}/commits/{{ site.gh_edit_branch }}{% if site.gh_edit_source %}/{{ site.gh_edit_source }}{% endif %}/{{ page.path }}"
+        id="edit-this-page"
+        >🧾 History</a
+      >
+
+      {% endif %} | {% if page.author %} ✍ {{page.author}} {% else %} ✍ Ross
+      Buggins {% endif %} | {% if page.owner %} 🔑 {{page.owner}} {% else %} 🔑
+      Ross Buggins {% endif %}
+    </p>
+
+    <p class="text-small text-grey-dk-300 mb-0">
+      {% for tag in page.tags %}<a class="text-small" href="/tags/{{tag}}.html"
+        >{{tag}}</a
+      >,{% endfor %}
+    </p>
+
+    {% if wordCount < wordWarning %}
+    <p class="text-small text-grey-dk-300 mb-0">
+      🚧 This page has less that {{wordWarning}} words. So it looks like this page
+      is still under construction.
+    </p>
+    {% endif %} {% if page.description %}
+    <p class="text-grey-dk-300 mb-0"><i>{{page.description}}</i></p>
+    {% endif %} {% if page.todo or is_draft %}
+    <p class="text-small text-grey-dk-300 mb-0"><b>Known Issues / Todo</b></p>
+
+    <ul>
+      {% if page.is_not_draft %}{% else %}
+      <li class="text-small text-grey-dk-300 mb-0">
+        ⛅ <b>This page is draft</b> and is subject to rapid change, and may not
+        be fully accurate or complete
+      </li>
+      {% endif %} {% for todo in page.todo %}
+      <li class="text-small text-grey-dk-300 mb-0">{{todo}}</li>
+      {% endfor %}
+    </ul>
+    {% endif %}
+  </div>
+
+  <div>
+  {% include fullscreen.html %}
+</div>
+<div></div>
diff --git a/docs/_includes/page-info-header.html b/docs/_includes/page-info-header.html
new file mode 100644
index 0000000..3a86d60
--- /dev/null
+++ b/docs/_includes/page-info-header.html
@@ -0,0 +1,10 @@
+{% if page.is_not_draft %}{% else %} {% assign is_draft = true %} {% endif %} {%
+  assign wordWarning = 200 %} {% assign wordCount = content | number_of_words%} {%
+  assign readTime = wordCount | divided_by: 100.0 | ceil %} {% if page.sub_title
+  %}
+  <h1>{{ page.title }}</h1>
+  <p class="text-medium text-grey-dk-300 mb-0">{{ page.summary }}</p>
+  {% else %}
+  <h1>{{ page.title }}</h1>
+  {% endif %}
+  {% include page-info-details.html %}
diff --git a/docs/_layouts/.gitkeep b/docs/_layouts/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/docs/_layouts/default.html b/docs/_layouts/default.html
new file mode 100644
index 0000000..17c3a6d
--- /dev/null
+++ b/docs/_layouts/default.html
@@ -0,0 +1,48 @@
+---
+layout: table_wrappers
+---
+
+<!DOCTYPE html>
+
+<html lang="{{ site.lang | default: 'en-US' }}">
+{% include head.html %}
+{% include nhs-notify-head.html %}
+<body>
+  <a class="skip-to-main" href="#main-content">Skip to main content</a>
+  {% include icons/icons.html %}
+  {% if page.nav_enabled == true %}
+    {% include components/sidebar.html %}
+  {% elsif layout.nav_enabled == true and page.nav_enabled == nil %}
+    {% include components/sidebar.html %}
+  {% elsif site.nav_enabled != false and layout.nav_enabled == nil and page.nav_enabled == nil %}
+    {% include components/sidebar.html %}
+  {% endif %}
+  <div class="main" id="top">
+    {% include components/header.html %}
+    <div class="main-content-wrap">
+      {% include components/breadcrumbs.html %}
+      <div id="main-content" class="main-content">
+        <main>
+          {% if site.heading_anchors != false %}
+            {% include vendor/anchor_headings.html html=content beforeHeading="true" anchorBody="<svg viewBox=\"0 0 16 16\" aria-hidden=\"true\"><use xlink:href=\"#svg-link\"></use></svg>" anchorClass="anchor-heading" anchorAttrs="aria-labelledby=\"%html_id%\"" %}
+          {% else %}
+            {{ content }}
+          {% endif %}
+
+          {% if page.has_children == true and page.has_toc != false %}
+            {% include components/children_nav.html %}
+          {% endif %}
+        </main>
+        {% include components/footer.html %}
+      </div>
+    </div>
+    {% if site.search_enabled != false %}
+      {% include components/search_footer.html %}
+    {% endif %}
+  </div>
+
+  {% if site.mermaid %}
+    {% include components/mermaid.html %}
+  {% endif %}
+</body>
+</html>
diff --git a/docs/_layouts/page.html b/docs/_layouts/page.html
new file mode 100644
index 0000000..7b94930
--- /dev/null
+++ b/docs/_layouts/page.html
@@ -0,0 +1,7 @@
+---
+layout: default
+---
+
+{% include page-info-header.html %}
+
+{{ content }}
diff --git a/docs/_plugins/external_markdown.rb b/docs/_plugins/external_markdown.rb
new file mode 100644
index 0000000..69db890
--- /dev/null
+++ b/docs/_plugins/external_markdown.rb
@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+# Adapted from jekyll-remote-include by netrics
+# https://github.com/netrics/jekyll-remote-include
+
+module Jekyll
+  class ExternalMarkdownTag < Liquid::Tag
+    def initialize(tag_name, markup, tokens)
+      super
+      @markup = markup.strip
+    end
+
+    def render(context)
+      # Get site from context
+      site = context.registers[:site]
+
+      # Get the site root directory (parent of docs/)
+      site_root = File.expand_path('..', site.source)
+
+      # Construct the full path
+      full_path = File.join(site_root, @markup)
+
+      unless File.exist?(full_path)
+        return "<p><strong>Error:</strong> File not found: <code>#{@markup}</code></p>"
+      end
+
+      # Read the content and force UTF-8 encoding
+      content = File.read(full_path).force_encoding('utf-8')
+
+      # Convert markdown to HTML using Jekyll's markdown converter
+      converter = site.find_converter_instance(Jekyll::Converters::Markdown)
+      html = converter.convert(content)
+
+      # Return HTML wrapped in a way that prevents escaping
+      html
+    end
+  end
+end
+
+Liquid::Template.register_tag('external_markdown', Jekyll::ExternalMarkdownTag)
diff --git a/docs/_sass/color_schemes/example-variables.scss b/docs/_sass/color_schemes/example-variables.scss
new file mode 100644
index 0000000..dd87178
--- /dev/null
+++ b/docs/_sass/color_schemes/example-variables.scss
@@ -0,0 +1,137 @@
+//Reference Links
+
+$color-scheme: dark;
+$body-background-color: $grey-dk-300;
+$body-heading-color: $grey-lt-000;
+$body-text-color: $grey-lt-300;
+$link-color: $blue-000;
+$nav-child-link-color: $grey-dk-000;
+$sidebar-color: $grey-dk-300;
+$base-button-color: $grey-dk-250;
+$btn-primary-color: $blue-200;
+$code-background-color: #31343f; // OneDarkJekyll default for syntax-one-dark-vivid
+$code-linenumber-color: #dee2f7; // OneDarkJekyll .nf for syntax-one-dark-vivid
+$feedback-color: darken($sidebar-color, 3%);
+$table-background-color: $grey-dk-250;
+$search-background-color: $grey-dk-250;
+$search-result-preview-color: $grey-dk-000;
+$border-color: $grey-dk-200;
+
+
+// To be set in colour scheme
+
+// prettier-ignore
+$body-font-family: system-ui, -apple-system, blinkmacsystemfont, "Segoe UI",
+  roboto, "Helvetica Neue", arial, sans-serif, "Segoe UI Emoji" !default;
+$mono-font-family: "SFMono-Regular", menlo, consolas, monospace !default;
+$root-font-size: 16px !default; // DEPRECATED: previously base font-size for rems
+$body-line-height: 1.4 !default;
+$content-line-height: 1.6 !default;
+$body-heading-line-height: 1.25 !default;
+
+// Font size
+// `-sm` suffix is the size at the small (and above) media query
+
+$font-size-1: 0.5625rem !default;
+$font-size-1-sm: 0.625rem !default;
+$font-size-2: 0.6875rem !default; // h4 - uppercased!, h6 not uppercased, text-small
+$font-size-3: 0.75rem !default; // h5
+$font-size-4: 0.875rem !default;
+$font-size-5: 1rem !default; // h3
+$font-size-6: 1.125rem !default; // h2
+$font-size-7: 1.5rem !default;
+$font-size-8: 2rem !default; // h1
+$font-size-9: 2.25rem !default;
+$font-size-10: 2.625rem !default;
+$font-size-10-sm: 3rem !default;
+
+// Colors
+
+$white: #fff !default;
+$grey-dk-000: #959396 !default;
+$grey-dk-100: #5c5962 !default;
+$grey-dk-200: #44434d !default;
+$grey-dk-250: #302d36 !default;
+$grey-dk-300: #27262b !default;
+$grey-lt-000: #f5f6fa !default;
+$grey-lt-100: #eeebee !default;
+$grey-lt-200: #ecebed !default;
+$grey-lt-300: #e6e1e8 !default;
+$purple-000: #7253ed !default;
+$purple-100: #5e41d0 !default;
+$purple-200: #4e26af !default;
+$purple-300: #381885 !default;
+$blue-000: #2c84fa !default;
+$blue-100: #2869e6 !default;
+$blue-200: #264caf !default;
+$blue-300: #183385 !default;
+$green-000: #41d693 !default;
+$green-100: #11b584 !default;
+$green-200: #009c7b !default;
+$green-300: #026e57 !default;
+$yellow-000: #ffeb82 !default;
+$yellow-100: #fadf50 !default;
+$yellow-200: #f7d12e !default;
+$yellow-300: #e7af06 !default;
+$red-000: #f77e7e !default;
+$red-100: #f96e65 !default;
+$red-200: #e94c4c !default;
+$red-300: #dd2e2e !default;
+
+// Spacing
+
+$spacing-unit: 1rem; // 1rem == 16px
+
+$spacers: (
+  sp-0: 0,
+  sp-1: $spacing-unit * 0.25,
+  sp-2: $spacing-unit * 0.5,
+  sp-3: $spacing-unit * 0.75,
+  sp-4: $spacing-unit,
+  sp-5: $spacing-unit * 1.5,
+  sp-6: $spacing-unit * 2,
+  sp-7: $spacing-unit * 2.5,
+  sp-8: $spacing-unit * 3,
+  sp-9: $spacing-unit * 3.5,
+  sp-10: $spacing-unit * 4,
+) !default;
+$sp-1: map-get($spacers, sp-1) !default; // 0.25 rem == 4px
+$sp-2: map-get($spacers, sp-2) !default; // 0.5  rem == 8px
+$sp-3: map-get($spacers, sp-3) !default; // 0.75 rem == 12px
+$sp-4: map-get($spacers, sp-4) !default; // 1    rem == 16px
+$sp-5: map-get($spacers, sp-5) !default; // 1.5  rem == 24px
+$sp-6: map-get($spacers, sp-6) !default; // 2    rem == 32px
+$sp-7: map-get($spacers, sp-7) !default; // 2.5  rem == 40px
+$sp-8: map-get($spacers, sp-8) !default; // 3    rem == 48px
+$sp-9: map-get($spacers, sp-9) !default; // 3.5  rem == 56px
+$sp-10: map-get($spacers, sp-10) !default; // 4  rem == 64px
+
+// Borders
+
+$border: 1px solid !default;
+$border-radius: 4px !default;
+$border-color: $grey-lt-100 !default;
+
+// Grid system
+
+$gutter-spacing: $sp-6 !default;
+$gutter-spacing-sm: $sp-4 !default;
+$nav-width: 16.5rem !default;
+$nav-width-md: 15.5rem !default;
+$nav-list-item-height: $sp-6 !default;
+$nav-list-item-height-sm: $sp-8 !default;
+$nav-list-expander-right: true;
+$content-width: 50rem !default;
+$header-height: 3.75rem !default;
+$search-results-width: $content-width - $nav-width !default;
+$transition-duration: 400ms;
+
+// Media queries in pixels
+
+$media-queries: (
+  xs: 20rem,
+  sm: 31.25rem,
+  md: $content-width,
+  lg: $content-width + $nav-width,
+  xl: 87.5rem,
+) !default;
diff --git a/docs/_sass/color_schemes/nhs.scss b/docs/_sass/color_schemes/nhs.scss
new file mode 100644
index 0000000..5265053
--- /dev/null
+++ b/docs/_sass/color_schemes/nhs.scss
@@ -0,0 +1,38 @@
+@import "./color_schemes/light";
+
+@font-face {
+  font-family: "Frutiger W01";
+  font-style: normal;
+  src: url("https://assets.nhs.uk/fonts/FrutigerLTW01-55Roman.woff2")
+    format("woff2");
+}
+
+@font-face {
+  font-family: "Frutiger W01";
+  font-weight: 800;
+  font-style: normal;
+  src: url("https://assets.nhs.uk/fonts/FrutigerLTW01-65Bold.woff2")
+    format("woff2");
+}
+
+// Typography
+
+// prettier-ignore
+$body-font-family: Frutiger W01,Arial,Sans-serif;
+$mono-font-family: Frutiger W01, Arial, Sans-serif;
+
+$blue-000: #005eb8;
+$grey-dk-000: #d8dde0;
+$grey-dk-100: #f0f4f5;
+$grey-dk-300: #212b32;
+$sidebar-color: $grey-dk-100;
+$body-background-color: $grey-dk-100;
+$link-color: $blue-000;
+
+$font-size-7: 1.25rem;
+$font-size-6: 2rem;
+$font-size-8: 3rem;
+//$font-size-5: 1.188rem; // h3
+
+$nav-width: 20rem;
+$content-width: 130rem;
diff --git a/docs/_sass/custom/custom.scss b/docs/_sass/custom/custom.scss
new file mode 100644
index 0000000..3340d0e
--- /dev/null
+++ b/docs/_sass/custom/custom.scss
@@ -0,0 +1,81 @@
+// Totally custom here.
+
+//@import "../node_modules/nhsuk-frontend/packages/core/all";
+//@import "../node_modules/nhsuk-frontend/packages/components/do-dont-list/_do-dont-list";
+//@import "sass-mq.scss";
+
+// Need to look at problem with mq.
+// $mq-breakpoints: (
+//   xs: 0px,
+//   sm: 0px,
+//   md: 0px,
+//   lg: 0px,
+//   xl: 0px,
+// );
+
+.nav-category {
+  text-transform: none;
+  color: $grey-dk-300;
+  @include fs-4;
+  font-weight: 600;
+}
+
+.main-content {
+  ul > {
+    li::before {
+      color: $grey-dk-300;
+    }
+  }
+}
+.site-title {
+  font-weight: 600;
+  font-size: 1.2rem !important;
+}
+
+.nav-list {
+  .nav-list-item {
+    @include fs-4;
+    font-weight: 400;
+    -webkit-font-smoothing: antialiased;
+  }
+}
+
+body {
+  color: $grey-dk-300;
+  font-size: 1.2rem !important;
+  //line-height: 28px;
+  //@include fs-5;
+}
+
+@media (min-width: 31.25rem) {
+  h1,
+  .text-alpha {
+    font-size: 3rem !important;
+    font-weight: 600;
+  }
+}
+
+@media (min-width: 31.25rem) {
+  h2,
+  .text-alpha {
+    font-size: 2rem !important;
+    font-weight: 600;
+  }
+}
+
+@media (min-width: 31.25rem) {
+  h3,
+  .text-alpha {
+    font-size: 1.5rem !important;
+    font-weight: 600;
+  }
+}
+
+.table-wrapper {
+  display: inline-block;
+  width: unset;
+  }
+
+  th, td {
+    min-width: 1%;
+    }
diff --git a/docs/assets/favicon.ico b/docs/assets/favicon.ico
new file mode 100644
index 0000000..ee9b711
Binary files /dev/null and b/docs/assets/favicon.ico differ
diff --git a/docs/assets/js/nhs-notify.js b/docs/assets/js/nhs-notify.js
new file mode 100644
index 0000000..426448b
--- /dev/null
+++ b/docs/assets/js/nhs-notify.js
@@ -0,0 +1,109 @@
+// Quick poc for view full screen
+
+window.addEventListener("load", (event) => {
+  var fullScreenParamName = "fullscreen";
+  var urlParams = new URLSearchParams(document.location.search);
+  var param = urlParams.get(fullScreenParamName);
+  if (param) {
+    tempViewFullScreen();
+  } else {
+    setViewAtStart();
+  }
+});
+
+let nhsNotify = nhsNotifyDefaults();
+
+function nhsNotifyDefaults() {
+  var defaults = {};
+  defaults.storageName = "cb-checked";
+  defaults.buttonName = "fullScreenButton";
+  defaults.standard = "Standard";
+  defaults.fullScreen = "Full Screen";
+  return defaults;
+}
+
+function tempViewFullScreen() {
+  viewFullScreen();
+  var buttons = document.getElementsByName(nhsNotify.buttonName);
+  buttons.forEach((item) => {
+    item.style.display = "none";
+  });
+}
+
+function viewFullScreen() {
+  var sideBar = document.getElementsByClassName("side-bar")[0];
+  var main = document.getElementsByClassName("main")[0];
+  var pageInfo = document.getElementsByClassName("page-info")[0];
+  sideBar.style.display = "none";
+  main.style.maxWidth = "100%";
+  main.style.marginLeft = "0px";
+  if (pageInfo) pageInfo.style.display = "none";
+}
+function setFullScreen() {
+  viewFullScreen();
+  afterChange(nhsNotify.standard, nhsNotify.fullScreen);
+}
+
+function setStandard() {
+  var sideBar = document.getElementsByClassName("side-bar")[0];
+  var main = document.getElementsByClassName("main")[0];
+  var pageInfo = document.getElementsByClassName("page-info")[0];
+  sideBar.style.display = "";
+  main.style.maxWidth = "";
+  main.style.marginLeft = "";
+  if (pageInfo) pageInfo.style.display = "";
+  afterChange(nhsNotify.fullScreen, nhsNotify.standard);
+}
+
+function setViewAtStart() {
+  var currentStatus = localStorage.getItem(nhsNotify.storageName);
+  if (currentStatus == nhsNotify.fullScreen) makeChange(currentStatus);
+}
+
+function makeChange(newStatus) {
+  if (newStatus == nhsNotify.fullScreen) {
+    setFullScreen();
+  } else {
+    setStandard();
+  }
+}
+
+function afterChange(currentStatus, newStatus) {
+  var storageName = nhsNotify.storageName;
+  var buttonName = nhsNotify.buttonName;
+  var buttons = document.getElementsByName(buttonName);
+  localStorage.setItem(storageName, newStatus);
+
+  buttons.forEach((item) => {
+    item.textContent = currentStatus + " View";
+  });
+}
+
+function fullScreenToggle() {
+  var standard = nhsNotify.standard;
+  var fullScreen = nhsNotify.fullScreen;
+  var storageName = nhsNotify.storageName;
+  var currentStatus = "";
+  var newStatus = "";
+
+  currentStatus = localStorage.getItem(storageName);
+
+  if (
+    currentStatus == "false" ||
+    currentStatus == "undefined" ||
+    currentStatus == null
+  ) {
+    currentStatus = standard;
+    newStatus = fullScreen;
+  }
+
+  if (currentStatus == standard) {
+    newStatus = fullScreen;
+    currentStatus = standard;
+  } else {
+    newStatus = standard;
+    currentStatus = fullScreen;
+  }
+
+  makeChange(newStatus);
+}
diff --git a/docs/github-actions.md b/docs/github-actions.md
new file mode 100644
index 0000000..33a0aa5
--- /dev/null
+++ b/docs/github-actions.md
@@ -0,0 +1,48 @@
+---
+layout: default
+title: GitHub Actions
+parent: Home
+nav_order: 4
+has_children: true
+---
+
+## GitHub Actions
+
+This repository provides reusable composite actions for NHS Notify projects.
+
+## Available Actions
+
+- [Build Docs](github-actions/build-docs.html) - Builds Jekyll documentation site
+- [Check English Usage](github-actions/check-english-usage.html) - Validates writing style using Vale
+- [Check File Format](github-actions/check-file-format.html) - Validates file formatting standards
+- [Check Markdown Format](github-actions/check-markdown-format.html) - Checks Markdown files with markdownlint
+- [Check PR Title Format](github-actions/check-pr-title-format.html) - Validates PR titles against regex
+- [Check TODO Usage](github-actions/check-todo-usage.html) - Validates TODO comment format
+- [Create Lines of Code Report](github-actions/create-lines-of-code-report.html) - Counts lines of code
+- [Lint Terraform](github-actions/lint-terraform.html) - Lints and formats Terraform
+- [Perform Static Analysis](github-actions/perform-static-analysis.html) - Runs static analysis tools
+- [Scan Dependencies](github-actions/scan-dependencies.html) - Scans for dependency vulnerabilities
+- [Scan Secrets](github-actions/scan-secrets.html) - Scans Git history for secrets
+- [Setup](github-actions/setup.html) - Installs dependencies and runs make config
+- [Sync Template Repo](github-actions/sync-template-repo.html) - Syncs repository template changes
+- [Trivy](github-actions/trivy.html) - General Trivy security scanner
+- [Trivy IaC](github-actions/trivy-iac.html) - Scans Terraform IaC with Trivy
+- [Trivy Package](github-actions/trivy-package.html) - Scans packages with Trivy
+
+## Usage
+
+Reference actions in your workflow files:
+
+```yaml
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: NHSDigital/nhs-notify-shared-modules/.github/actions/setup@v1.0.0
+
+      - uses: NHSDigital/nhs-notify-shared-modules/.github/actions/scan-secrets@v1.0.0
+```
+
+Replace `v1.0.0` with the latest release tag.
diff --git a/docs/github-actions/build-docs.md b/docs/github-actions/build-docs.md
new file mode 100644
index 0000000..e6bd937
--- /dev/null
+++ b/docs/github-actions/build-docs.md
@@ -0,0 +1,50 @@
+---
+layout: default
+title: Build Docs
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 1
+---
+
+## Build Docs
+
+Builds Jekyll documentation site.
+
+### Description
+
+This composite action builds the Jekyll documentation site by:
+
+1. Setting up Node.js (v22)
+2. Installing npm dependencies
+3. Setting up Ruby 3.2 and bundler
+4. Building the Jekyll site with production settings
+5. Uploading the built site as a Pages artifact
+
+### Inputs
+
+| Name | Description | Required |
+|------|-------------|----------|
+| `version` | Version number for the documentation build | Yes |
+
+### Usage
+
+```yaml
+jobs:
+  build-docs:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Build documentation
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/build-docs@v1.0.0
+        with:
+          version: "1.2.3"
+```
+
+### Details
+
+- Node workspaces: `docs`, `src/cloudevents`
+- Ruby version: 3.2
+- Jekyll environment: production
+- Output directory: `docs/_site/`
+- Automatically uploads artifact for GitHub Pages deployment
diff --git a/docs/github-actions/check-english-usage.md b/docs/github-actions/check-english-usage.md
new file mode 100644
index 0000000..65356e2
--- /dev/null
+++ b/docs/github-actions/check-english-usage.md
@@ -0,0 +1,34 @@
+---
+layout: default
+title: Check English Usage
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 2
+---
+
+## Check English Usage
+
+Validates English usage and writing style using Vale.
+
+### Description
+
+This composite action checks English usage, grammar, and style across documentation using Vale linter.
+
+### Usage
+
+```yaml
+jobs:
+  check-docs:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check English usage
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-english-usage@v1.0.0
+```
+
+### Details
+
+- Tool: Vale linter
+- Checks: Grammar, style, terminology consistency
+- Configuration: Repository-specific Vale rules
diff --git a/docs/github-actions/check-file-format.md b/docs/github-actions/check-file-format.md
new file mode 100644
index 0000000..158cfc9
--- /dev/null
+++ b/docs/github-actions/check-file-format.md
@@ -0,0 +1,34 @@
+---
+layout: default
+title: Check File Format
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 3
+---
+
+## Check File Format
+
+Validates file formatting standards across the repository.
+
+### Description
+
+This composite action checks files for formatting issues and ensures consistent formatting standards.
+
+### Usage
+
+```yaml
+jobs:
+  check-format:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check file formatting
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-file-format@v1.0.0
+```
+
+### Details
+
+- Validates file formatting consistency
+- Enforces repository formatting standards
+- Runs across all file types
diff --git a/docs/github-actions/check-markdown-format.md b/docs/github-actions/check-markdown-format.md
new file mode 100644
index 0000000..9458f5f
--- /dev/null
+++ b/docs/github-actions/check-markdown-format.md
@@ -0,0 +1,34 @@
+---
+layout: default
+title: Check Markdown Format
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 4
+---
+
+## Check Markdown Format
+
+Checks Markdown files for formatting issues using markdownlint.
+
+### Description
+
+This composite action validates Markdown files against markdownlint rules to ensure consistent documentation formatting.
+
+### Usage
+
+```yaml
+jobs:
+  check-markdown:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check Markdown format
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-markdown-format@v1.0.0
+```
+
+### Details
+
+- Tool: markdownlint
+- Checks: Markdown syntax, formatting consistency
+- Configuration: Repository-specific markdownlint rules
diff --git a/docs/github-actions/check-pr-title-format.md b/docs/github-actions/check-pr-title-format.md
new file mode 100644
index 0000000..0953a33
--- /dev/null
+++ b/docs/github-actions/check-pr-title-format.md
@@ -0,0 +1,41 @@
+---
+layout: default
+title: Check PR Title Format
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 5
+---
+
+## Check PR Title Format
+
+Validates pull request titles against the required format.
+
+### Description
+
+This composite action validates that PR titles follow the NHS Notify convention: `CCM-1234: Description`
+
+### Inputs
+
+| Name | Description | Required |
+|------|-------------|----------|
+| `title` | Pull request title to validate | Yes |
+
+### Usage
+
+```yaml
+jobs:
+  validate-pr:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Validate PR title
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-pr-title-format@v1.0.0
+        with:
+          title: ${{ github.event.pull_request.title }}
+```
+
+### Format Requirements
+
+- Must match pattern: `^CCM-[0-9]+: .+$`
+- Example: `CCM-1234: Add new feature`
+- Jira ticket prefix required
+- Colon and description required
diff --git a/docs/github-actions/check-todo-usage.md b/docs/github-actions/check-todo-usage.md
new file mode 100644
index 0000000..3cea5a1
--- /dev/null
+++ b/docs/github-actions/check-todo-usage.md
@@ -0,0 +1,41 @@
+---
+layout: default
+title: Check TODO Usage
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 6
+---
+
+## Check TODO Usage
+
+Validates TODO comments follow the required format with Jira ticket IDs.
+
+### Description
+
+This composite action ensures all TODO comments in code include a Jira ticket reference.
+
+### Usage
+
+```yaml
+jobs:
+  check-todos:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check TODO usage
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/check-todo-usage@v1.0.0
+```
+
+### Format Requirements
+
+TODO comments must include Jira ticket IDs:
+
+- Valid: `// TODO: CCM-1234 - Fix this issue`
+- Invalid: `// TODO: Fix this issue`
+
+### Details
+
+- Enforces TODO tracking via Jira
+- Prevents orphaned TODO comments
+- Ensures accountability for technical debt
diff --git a/docs/github-actions/create-lines-of-code-report.md b/docs/github-actions/create-lines-of-code-report.md
new file mode 100644
index 0000000..2f90168
--- /dev/null
+++ b/docs/github-actions/create-lines-of-code-report.md
@@ -0,0 +1,34 @@
+---
+layout: default
+title: Create Lines of Code Report
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 7
+---
+
+## Create Lines of Code Report
+
+Counts and reports lines of code in the repository.
+
+### Description
+
+This composite action generates a lines of code report for tracking codebase metrics.
+
+### Usage
+
+```yaml
+jobs:
+  code-metrics:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Count lines of code
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/create-lines-of-code-report@v1.0.0
+```
+
+### Details
+
+- Counts lines of code across the repository
+- Generates metrics report
+- Useful for tracking codebase growth
diff --git a/docs/github-actions/lint-terraform.md b/docs/github-actions/lint-terraform.md
new file mode 100644
index 0000000..bb98340
--- /dev/null
+++ b/docs/github-actions/lint-terraform.md
@@ -0,0 +1,35 @@
+---
+layout: default
+title: Lint Terraform
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 8
+---
+
+## Lint Terraform
+
+Lints and formats Terraform code.
+
+### Description
+
+This composite action validates Terraform code formatting using `terraform fmt`.
+
+### Usage
+
+```yaml
+jobs:
+  lint-terraform:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Lint Terraform
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/lint-terraform@v1.0.0
+```
+
+### Details
+
+- Tool: `terraform fmt`
+- Checks: Terraform code formatting
+- Validates: HCL syntax and style
+- Ensures: Consistent formatting across IaC
diff --git a/docs/github-actions/perform-static-analysis.md b/docs/github-actions/perform-static-analysis.md
new file mode 100644
index 0000000..3b8a3f4
--- /dev/null
+++ b/docs/github-actions/perform-static-analysis.md
@@ -0,0 +1,35 @@
+---
+layout: default
+title: Perform Static Analysis
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 9
+---
+
+## Perform Static Analysis
+
+Runs static analysis tools on the codebase.
+
+### Description
+
+This composite action performs static code analysis to identify potential issues and code quality problems.
+
+### Usage
+
+```yaml
+jobs:
+  static-analysis:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run static analysis
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/perform-static-analysis@v1.0.0
+```
+
+### Details
+
+- Performs static code analysis
+- Identifies code quality issues
+- Detects potential bugs
+- Ensures code quality standards
diff --git a/docs/github-actions/scan-dependencies.md b/docs/github-actions/scan-dependencies.md
new file mode 100644
index 0000000..71c9253
--- /dev/null
+++ b/docs/github-actions/scan-dependencies.md
@@ -0,0 +1,35 @@
+---
+layout: default
+title: Scan Dependencies
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 10
+---
+
+## Scan Dependencies
+
+Scans project dependencies for known vulnerabilities.
+
+### Description
+
+This composite action scans project dependencies to identify known security vulnerabilities.
+
+### Usage
+
+```yaml
+jobs:
+  scan-deps:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Scan dependencies
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/scan-dependencies@v1.0.0
+```
+
+### Details
+
+- Scans: npm packages, Ruby gems, Python packages
+- Checks: Known vulnerabilities (CVEs)
+- Reports: Security advisories
+- Alerts: High-risk dependencies
diff --git a/docs/github-actions/scan-secrets.md b/docs/github-actions/scan-secrets.md
new file mode 100644
index 0000000..7ebb001
--- /dev/null
+++ b/docs/github-actions/scan-secrets.md
@@ -0,0 +1,43 @@
+---
+layout: default
+title: Scan Secrets
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 11
+---
+
+## Scan Secrets
+
+Scans the entire Git history for secrets and sensitive information.
+
+### Description
+
+This composite action scans the Git history to detect accidentally committed secrets, credentials, and sensitive data.
+
+### Usage
+
+```yaml
+jobs:
+  scan-secrets:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Full history required
+
+      - name: Scan for secrets
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/scan-secrets@v1.0.0
+```
+
+### Details
+
+- Scans: Full Git history
+- Detects: API keys, passwords, tokens, certificates
+- Tools: Secret scanning tools
+- Scope: All commits, all branches
+
+### Important Notes
+
+- Requires full Git history (`fetch-depth: 0`)
+- Runs on entire repository history
+- Prevents accidental credential exposure
diff --git a/docs/github-actions/setup.md b/docs/github-actions/setup.md
new file mode 100644
index 0000000..8b160c5
--- /dev/null
+++ b/docs/github-actions/setup.md
@@ -0,0 +1,46 @@
+---
+layout: default
+title: Setup
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 12
+---
+
+## Setup
+
+Installs dependencies and executes make config.
+
+### Description
+
+This composite action runs the repository setup script to install all required dependencies and configure the development environment.
+
+### Usage
+
+```yaml
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup environment
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/setup@v1.0.0
+
+      - name: Run tests
+        run: make test
+```
+
+### Details
+
+- Runs: `scripts/setup/setup.sh`
+- Installs: All development dependencies
+- Configures: Development environment
+- Prepares: Repository for build/test operations
+
+### What Gets Installed
+
+- asdf/mise tools from `.tool-versions`
+- Ruby gems via Bundler
+- Node packages via npm/pnpm
+- Python packages via pip
+- Pre-commit hooks
diff --git a/docs/github-actions/sync-template-repo.md b/docs/github-actions/sync-template-repo.md
new file mode 100644
index 0000000..401f851
--- /dev/null
+++ b/docs/github-actions/sync-template-repo.md
@@ -0,0 +1,41 @@
+---
+layout: default
+title: Sync Template Repo
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 13
+---
+
+## Sync Template Repo
+
+Synchronizes changes from the nhs-notify-repository-template.
+
+### Description
+
+This composite action keeps the repository synchronized with the latest changes from the NHS Notify repository template.
+
+### Usage
+
+```yaml
+jobs:
+  sync-template:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Sync with template
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/sync-template-repo@v1.0.0
+```
+
+### Details
+
+- Source: `NHSDigital/nhs-notify-repository-template`
+- Updates: Shared configurations, workflows, scripts
+- Ensures: Consistency across NHS Notify repositories
+- Merges: Template changes into current repository
+
+### Use Cases
+
+- Keeping CI/CD workflows up to date
+- Synchronizing shared tooling configurations
+- Maintaining consistent repository standards
diff --git a/docs/github-actions/trivy-iac.md b/docs/github-actions/trivy-iac.md
new file mode 100644
index 0000000..d304f05
--- /dev/null
+++ b/docs/github-actions/trivy-iac.md
@@ -0,0 +1,44 @@
+---
+layout: default
+title: Trivy IaC
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 15
+---
+
+## Trivy IaC
+
+Scans Terraform Infrastructure as Code using Trivy.
+
+### Description
+
+This composite action scans Terraform code for security misconfigurations and compliance issues.
+
+### Usage
+
+```yaml
+jobs:
+  scan-iac:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Scan Terraform IaC
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/trivy-iac@v1.0.0
+```
+
+### Details
+
+- Tool: Trivy IaC scanner
+- Targets: Terraform (.tf) files
+- Checks: Security misconfigurations
+- Standards: AWS security best practices
+- Reports: Terraform-specific vulnerabilities
+
+### What It Detects
+
+- Insecure resource configurations
+- Missing encryption settings
+- Public access misconfigurations
+- IAM permission issues
+- Non-compliant security group rules
diff --git a/docs/github-actions/trivy-package.md b/docs/github-actions/trivy-package.md
new file mode 100644
index 0000000..76025eb
--- /dev/null
+++ b/docs/github-actions/trivy-package.md
@@ -0,0 +1,42 @@
+---
+layout: default
+title: Trivy Package
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 16
+---
+
+## Trivy Package
+
+Scans project packages and dependencies using Trivy.
+
+### Description
+
+This composite action scans package dependencies for known vulnerabilities using Trivy.
+
+### Usage
+
+```yaml
+jobs:
+  scan-packages:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Scan packages
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/trivy-package@v1.0.0
+```
+
+### Details
+
+- Tool: Trivy package scanner
+- Targets: Package manifest files
+- Scans: npm, Ruby gems, Python packages
+- Checks: Known CVEs and vulnerabilities
+- Reports: Dependency security issues
+
+### Package Types Scanned
+
+- Node.js: `package.json`, `package-lock.json`
+- Ruby: `Gemfile`, `Gemfile.lock`
+- Python: `requirements.txt`, `Pipfile`
diff --git a/docs/github-actions/trivy.md b/docs/github-actions/trivy.md
new file mode 100644
index 0000000..bda9c94
--- /dev/null
+++ b/docs/github-actions/trivy.md
@@ -0,0 +1,40 @@
+---
+layout: default
+title: Trivy
+parent: GitHub Actions
+grand_parent: Home
+nav_order: 14
+---
+
+## Trivy
+
+General Trivy security scanner.
+
+### Description
+
+This composite action runs Trivy security scanner for vulnerability detection.
+
+### Usage
+
+```yaml
+jobs:
+  security-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Trivy scan
+        uses: NHSDigital/nhs-notify-shared-modules/.github/actions/trivy@v1.0.0
+```
+
+### Details
+
+- Tool: Trivy security scanner
+- Scans: Multiple security aspects
+- Detects: Vulnerabilities, misconfigurations, secrets
+- Reports: Security findings
+
+### Related Actions
+
+- [Trivy IaC](trivy-iac.html) - Infrastructure as Code scanning
+- [Trivy Package](trivy-package.html) - Package dependency scanning
diff --git a/docs/index.md b/docs/index.md
new file mode 100644
index 0000000..135ef95
--- /dev/null
+++ b/docs/index.md
@@ -0,0 +1,64 @@
+---
+layout: default
+title: Home
+nav_order: 1
+has_children: true
+---
+
+## NHS Notify Shared Modules
+
+Reusable infrastructure modules, pre-commit hooks, and GitHub Actions for NHS Notify services.
+
+### [Terraform Modules](terraform-modules.html)
+
+Production-ready Terraform modules for AWS infrastructure including Lambda functions, KMS keys, S3 buckets, SQS queues, EventBridge publishers, and more.
+
+**Quick Start:**
+
+```hcl
+module "lambda_function" {
+  source = "github.com/NHSDigital/nhs-notify-shared-modules//infrastructure/terraform/modules/lambda?ref=vX.Y.Z"
+
+  function_name = "my-function"
+  handler       = "index.handler"
+  runtime       = "nodejs20.x"
+}
+```
+
+[View all Terraform modules →](terraform-modules.html)
+
+### [Pre-commit Hooks](pre-commit-hooks.html)
+
+Code quality and security hooks for secret scanning, file format checking, Markdown linting, Vale writing checks, Terraform validation, and more.
+
+**Quick Start:**
+
+```yaml
+repos:
+  - repo: https://github.com/NHSDigital/nhs-notify-shared-modules
+    rev: vX.Y.Z
+    hooks:
+      - id: scan-secrets
+      - id: lint-terraform
+      - id: check-todo-usage
+```
+
+[View all pre-commit hooks →](pre-commit-hooks.html)
+
+### [GitHub Actions](github-actions.html)
+
+Composite actions for CI/CD including setup, documentation builds, security scanning, dependency checks, Terraform linting, static analysis, and more.
+
+**Quick Start:**
+
+```yaml
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: NHSDigital/nhs-notify-shared-modules/.github/actions/setup@vX.Y.Z
+      - uses: NHSDigital/nhs-notify-shared-modules/.github/actions/scan-secrets@vX.Y.Z
+```
+
+[View all GitHub Actions →](github-actions.html)
diff --git a/docs/package.json b/docs/package.json
new file mode 100644
index 0000000..bbbcd8b
--- /dev/null
+++ b/docs/package.json
@@ -0,0 +1,18 @@
+{
+  "author": "",
+  "dependencies": {
+    "nhsuk-frontend": "^8.1.1"
+  },
+  "description": "",
+  "devDependencies": {},
+  "engines": {},
+  "keywords": [],
+  "license": "ISC",
+  "name": "nhs-notify",
+  "private": true,
+  "scripts": {
+    "build": "JEKYLL_ENV=production bundle exec jekyll build --trace --config _config.yml,_config.version.yml",
+    "debug": "JEKYLL_ENV=development BUNDLE_GEMFILE=Gemfile bundle exec jekyll serve --config _config.yml,_config.dev.yml,_config.version.yml --limit_posts 100 --trace"
+  },
+  "version": "1.0.0"
+}
diff --git a/docs/pnpm-lock.yaml b/docs/pnpm-lock.yaml
new file mode 100644
index 0000000..9db3c7f
--- /dev/null
+++ b/docs/pnpm-lock.yaml
@@ -0,0 +1,23 @@
+lockfileVersion: '9.0'
+
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
+importers:
+
+  .:
+    dependencies:
+      nhsuk-frontend:
+        specifier: ^8.1.1
+        version: 8.3.0
+
+packages:
+
+  nhsuk-frontend@8.3.0:
+    resolution: {integrity: sha512-oln8/+0ZJwQgWPrEWcI7+4SeHdAfr3dkvZ5PAKswa6+66f7dbnwYq/IU+Aaqzp25EJsQuSlwElZghJHUKIUOqg==}
+    engines: {node: '>=20.0.0'}
+
+snapshots:
+
+  nhsuk-frontend@8.3.0: {}
diff --git a/docs/pre-commit-hooks.md b/docs/pre-commit-hooks.md
new file mode 100644
index 0000000..a60c2b7
--- /dev/null
+++ b/docs/pre-commit-hooks.md
@@ -0,0 +1,144 @@
+---
+layout: default
+title: Pre-commit Hooks
+parent: Home
+nav_order: 3
+---
+
+## Pre-commit Hooks
+
+This repository provides reusable pre-commit hooks for NHS Notify projects.
+
+### Available Hooks
+
+#### sort-dictionary
+
+Sorts dictionary files alphabetically to maintain consistency.
+
+**Usage:**
+
+```yaml
+- repo: https://github.com/NHSDigital/nhs-notify-shared-modules
+  rev: vX.Y.Z
+  hooks:
+    - id: sort-dictionary
+```
+
+#### scan-secrets
+
+Scans the entire Git history for secrets and sensitive information.
+
+**Usage:**
+
+```yaml
+- repo: https://github.com/NHSDigital/nhs-notify-shared-modules
+  rev: vX.Y.Z
+  hooks:
+    - id: scan-secrets
+```
+
+#### check-file-format
+
+Validates file formatting standards across the repository.
+
+**Usage:**
+
+```yaml
+- repo: https://github.com/NHSDigital/nhs-notify-shared-modules
+  rev: vX.Y.Z
+  hooks:
+    - id: check-file-format
+```
+
+#### check-markdown-format
+
+Checks Markdown files for formatting issues using markdownlint.
+
+**Usage:**
+
+```yaml
+- repo: https://github.com/NHSDigital/nhs-notify-shared-modules
+  rev: vX.Y.Z
+  hooks:
+    - id: check-markdown-format
+```
+
+#### check-english-usage
+
+Validates English usage and style using Vale.
+
+**Usage:**
+
+```yaml
+- repo: https://github.com/NHSDigital/nhs-notify-shared-modules
+  rev: vX.Y.Z
+  hooks:
+    - id: check-english-usage
+```
+
+#### lint-terraform
+
+Lints and formats Terraform code using terraform fmt.
+
+**Usage:**
+
+```yaml
+- repo: https://github.com/NHSDigital/nhs-notify-shared-modules
+  rev: vX.Y.Z
+  hooks:
+    - id: lint-terraform
+```
+
+#### generate-terraform-docs
+
+Generates and validates Terraform module documentation.
+
+**Usage:**
+
+```yaml
+- repo: https://github.com/NHSDigital/nhs-notify-shared-modules
+  rev: vX.Y.Z
+  hooks:
+    - id: generate-terraform-docs
+```
+
+#### check-todo-usage
+
+Validates TODO comments follow the required format with Jira ticket IDs.
+
+**Usage:**
+
+```yaml
+- repo: https://github.com/NHSDigital/nhs-notify-shared-modules
+  rev: vX.Y.Z
+  hooks:
+    - id: check-todo-usage
+```
+
+## Setup in Your Repository
+
+Add to your `.pre-commit-config.yaml`:
+
+```yaml
+repos:
+  - repo: https://github.com/NHSDigital/nhs-notify-shared-modules
+    rev: vX.Y.Z  # Use the latest release tag
+    hooks:
+      - id: scan-secrets
+      - id: check-file-format
+      - id: check-markdown-format
+      - id: lint-terraform
+      # Add other hooks as needed
+```
+
+Then install:
+
+```bash
+pre-commit install
+```
+
+## Notes
+
+- All hooks run with `pass_filenames: false` - they operate on the entire repository
+- The `scan-secrets` hook checks the entire Git history for security
+- Hooks reference scripts in either `scripts/githooks/` or `.github/actions/`
diff --git a/docs/terraform-modules.md b/docs/terraform-modules.md
new file mode 100644
index 0000000..e683da7
--- /dev/null
+++ b/docs/terraform-modules.md
@@ -0,0 +1,62 @@
+---
+layout: default
+title: Terraform Modules
+parent: Home
+nav_order: 2
+has_children: true
+---
+
+## Terraform Modules
+
+Reusable Terraform modules for consistent, secure infrastructure patterns across NHS Notify services.
+
+### Available Modules
+
+{% for module in site.pages %}
+  {% if module.dir contains '/terraform-modules/' and module.name != 'index.md' and module.name != 'README.md' %}
+
+- [{{ module.title }}]({{ module.url | relative_url }})
+  {% endif %}
+{% endfor %}
+
+### Usage
+
+Reference modules from GitHub releases:
+
+```hcl
+module "example" {
+  source = "github.com/NHSDigital/nhs-notify-shared-modules//infrastructure/terraform/modules/MODULE_NAME?ref=vX.Y.Z"
+
+  # Module-specific variables...
+}
+```
+
+See individual module documentation for specific inputs, outputs, and examples.
+
+### How It Works
+
+The documentation uses a custom Jekyll plugin (`_plugins/external_markdown.rb`) to include module READMEs without duplicating content. The module READMEs in `infrastructure/terraform/modules/` are the single source of truth, and the docs pages simply include them.
+
+### Adding a New Module
+
+To document a new Terraform module:
+
+1. Create a new `.md` file in `docs/terraform-modules/` named after your module
+2. Add appropriate frontmatter:
+
+   ```yaml
+   ---
+   layout: default
+   title: Module Name
+   parent: Terraform Modules
+   nav_order: N
+   ---
+   ```
+
+3. Use the `external_markdown` tag to include the README:
+
+   ```liquid
+   {% external_markdown infrastructure/terraform/modules/MODULE_NAME/README.md %}
+   ```
+
+The module README is automatically included and rendered with full markdown support including tables.
diff --git a/docs/terraform-modules/README.md b/docs/terraform-modules/README.md
new file mode 100644
index 0000000..4b89d36
--- /dev/null
+++ b/docs/terraform-modules/README.md
@@ -0,0 +1,50 @@
+# Terraform Modules Documentation
+
+This directory contains documentation pages for the Terraform modules in `infrastructure/terraform/modules/`.
+
+## How It Works
+
+The documentation uses a custom Jekyll plugin (`_plugins/external_markdown.rb`) to include the module READMEs without duplicating content.
+
+### Plugin: `external_markdown`
+
+The `external_markdown` Liquid tag allows you to include markdown files from outside the docs directory:
+
+```liquid
+{% external_markdown path/to/file.md %}
+```
+
+The path is relative to the repository root (parent of the docs/ folder).
+
+### Adding a New Module
+
+To document a new Terraform module:
+
+1. Create a new `.md` file in `docs/terraform-modules/` named after your module
+2. Add appropriate frontmatter:
+
+   ```yaml
+   ---
+   layout: default
+   title: Module Name
+   parent: Terraform Modules
+   nav_order: N
+   ---
+   ```
+
+3. Use the `external_markdown` tag to include the README:
+
+   ```liquid
+   {% external_markdown infrastructure/terraform/modules/MODULE_NAME/README.md %}
+   ```
+
+### Benefits
+
+- **No Duplication**: Module READMEs are the single source of truth
+- **Always Up-to-Date**: Documentation automatically reflects changes to module READMEs
+- **No Build Scripts**: Pure Jekyll solution with no pre-processing needed
+- **Easy to Maintain**: Just add a simple stub page for each new module
+
+### Example
+
+See `terraform-modules/lambda.md` for a complete example.
diff --git a/docs/terraform-modules/amp-branch.md b/docs/terraform-modules/amp-branch.md
new file mode 100644
index 0000000..9dd9b01
--- /dev/null
+++ b/docs/terraform-modules/amp-branch.md
@@ -0,0 +1,10 @@
+---
+layout: default
+title: AMP Branch Module
+parent: Terraform Modules
+grand_parent: Home
+nav_order: 7
+---
+
+
+{% external_markdown infrastructure/terraform/modules/amp_branch/README.md %}
diff --git a/docs/terraform-modules/aws-backup-source.md b/docs/terraform-modules/aws-backup-source.md
new file mode 100644
index 0000000..ad34de7
--- /dev/null
+++ b/docs/terraform-modules/aws-backup-source.md
@@ -0,0 +1,10 @@
+---
+layout: default
+title: AWS Backup Source Module
+parent: Terraform Modules
+grand_parent: Home
+nav_order: 8
+---
+
+
+{% external_markdown infrastructure/terraform/modules/aws-backup-source/README.md %}
diff --git a/docs/terraform-modules/eventpub.md b/docs/terraform-modules/eventpub.md
new file mode 100644
index 0000000..64094dc
--- /dev/null
+++ b/docs/terraform-modules/eventpub.md
@@ -0,0 +1,9 @@
+---
+layout: default
+title: EventPub Module
+parent: Terraform Modules
+grand_parent: Home
+nav_order: 5
+---
+
+{% external_markdown infrastructure/terraform/modules/eventpub/README.md %}
diff --git a/docs/terraform-modules/kms.md b/docs/terraform-modules/kms.md
new file mode 100644
index 0000000..0104987
--- /dev/null
+++ b/docs/terraform-modules/kms.md
@@ -0,0 +1,10 @@
+---
+layout: default
+title: KMS Module
+parent: Terraform Modules
+grand_parent: Home
+nav_order: 2
+---
+
+
+{% external_markdown infrastructure/terraform/modules/kms/README.md %}
diff --git a/docs/terraform-modules/lambda.md b/docs/terraform-modules/lambda.md
new file mode 100644
index 0000000..39ffc12
--- /dev/null
+++ b/docs/terraform-modules/lambda.md
@@ -0,0 +1,9 @@
+---
+layout: default
+title: Lambda Module
+parent: Terraform Modules
+grand_parent: Home
+nav_order: 1
+---
+
+{% external_markdown infrastructure/terraform/modules/lambda/README.md %}
diff --git a/docs/terraform-modules/obs-datasource.md b/docs/terraform-modules/obs-datasource.md
new file mode 100644
index 0000000..4db99e3
--- /dev/null
+++ b/docs/terraform-modules/obs-datasource.md
@@ -0,0 +1,10 @@
+---
+layout: default
+title: Observability Datasource Module
+parent: Terraform Modules
+grand_parent: Home
+nav_order: 9
+---
+
+
+{% external_markdown infrastructure/terraform/modules/obs-datasource/README.md %}
diff --git a/docs/terraform-modules/s3bucket.md b/docs/terraform-modules/s3bucket.md
new file mode 100644
index 0000000..1fa805e
--- /dev/null
+++ b/docs/terraform-modules/s3bucket.md
@@ -0,0 +1,10 @@
+---
+layout: default
+title: S3 Bucket Module
+parent: Terraform Modules
+grand_parent: Home
+nav_order: 3
+---
+
+
+{% external_markdown infrastructure/terraform/modules/s3bucket/README.md %}
diff --git a/docs/terraform-modules/sqs.md b/docs/terraform-modules/sqs.md
new file mode 100644
index 0000000..cd3c964
--- /dev/null
+++ b/docs/terraform-modules/sqs.md
@@ -0,0 +1,10 @@
+---
+layout: default
+title: SQS Module
+parent: Terraform Modules
+grand_parent: Home
+nav_order: 4
+---
+
+
+{% external_markdown infrastructure/terraform/modules/sqs/README.md %}
diff --git a/docs/terraform-modules/ssl.md b/docs/terraform-modules/ssl.md
new file mode 100644
index 0000000..745f012
--- /dev/null
+++ b/docs/terraform-modules/ssl.md
@@ -0,0 +1,10 @@
+---
+layout: default
+title: SSL Module
+parent: Terraform Modules
+grand_parent: Home
+nav_order: 6
+---
+
+
+{% external_markdown infrastructure/terraform/modules/ssl/README.md %}
diff --git a/infrastructure/terraform/modules/amp_branch/README.md b/infrastructure/terraform/modules/amp_branch/README.md
index c397468..e1a8c7c 100644
--- a/infrastructure/terraform/modules/amp_branch/README.md
+++ b/infrastructure/terraform/modules/amp_branch/README.md
@@ -2,11 +2,13 @@
 <!-- markdownlint-disable -->
 <!-- vale off -->
 
+
 ## Requirements
 
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.9.0 |
+
 ## Inputs
 
 | Name | Description | Type | Default | Required |
@@ -28,14 +30,13 @@
 | <a name="input_project"></a> [project](#input\_project) | The name of the terraformscaffold project calling the module | `string` | n/a | yes |
 | <a name="input_region"></a> [region](#input\_region) | The AWS Region | `string` | n/a | yes |
 | <a name="input_stage"></a> [stage](#input\_stage) | Determine what stage is being deployed for | `string` | `null` | no |
-## Modules
 
-No modules.
 ## Outputs
 
 | Name | Description |
 |------|-------------|
 | <a name="output_name"></a> [name](#output\_name) | Name of the Amplify branch |
+
 <!-- vale on -->
 <!-- markdownlint-enable -->
 <!-- END_TF_DOCS -->
diff --git a/infrastructure/terraform/modules/aws-backup-source/README.md b/infrastructure/terraform/modules/aws-backup-source/README.md
index 419aa6c..aa03b35 100644
--- a/infrastructure/terraform/modules/aws-backup-source/README.md
+++ b/infrastructure/terraform/modules/aws-backup-source/README.md
@@ -47,9 +47,11 @@ module "test_aws_backup" {
 <!-- markdownlint-disable -->
 <!-- vale off -->
 
+
 ## Requirements
 
 No requirements.
+
 ## Inputs
 
 | Name | Description | Type | Default | Required |
@@ -75,12 +77,11 @@ No requirements.
 | <a name="input_restore_testing_plan_start_window"></a> [restore\_testing\_plan\_start\_window](#input\_restore\_testing\_plan\_start\_window) | Start window from the scheduled time during which the test should start | `number` | `1` | no |
 | <a name="input_vault_max_retention_days"></a> [vault\_max\_retention\_days](#input\_vault\_max\_retention\_days) | Maximum retention days for the vault lock | `number` | `35` | no |
 | <a name="input_vault_min_retention_days"></a> [vault\_min\_retention\_days](#input\_vault\_min\_retention\_days) | Minimum retention days for the vault lock | `number` | `7` | no |
-## Modules
 
-No modules.
 ## Outputs
 
 No outputs.
+
 <!-- vale on -->
 <!-- markdownlint-enable -->
 <!-- END_TF_DOCS -->
diff --git a/infrastructure/terraform/modules/eventpub/README.md b/infrastructure/terraform/modules/eventpub/README.md
index 8a88106..96a9a6c 100644
--- a/infrastructure/terraform/modules/eventpub/README.md
+++ b/infrastructure/terraform/modules/eventpub/README.md
@@ -2,11 +2,13 @@
 <!-- markdownlint-disable -->
 <!-- vale off -->
 
+
 ## Requirements
 
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.9.0 |
+
 ## Inputs
 
 | Name | Description | Type | Default | Required |
@@ -38,12 +40,7 @@
 | <a name="input_project"></a> [project](#input\_project) | The name of the terraformscaffold project calling the module | `string` | n/a | yes |
 | <a name="input_region"></a> [region](#input\_region) | The AWS Region | `string` | n/a | yes |
 | <a name="input_sns_success_logging_sample_percent"></a> [sns\_success\_logging\_sample\_percent](#input\_sns\_success\_logging\_sample\_percent) | Enable SNS Delivery Successful Sample Percentage | `number` | `0` | no |
-## Modules
 
-| Name | Source | Version |
-|------|--------|---------|
-| <a name="module_s3bucket_event_cache"></a> [s3bucket\_event\_cache](#module\_s3bucket\_event\_cache) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/3.0.3/terraform-s3bucket.zip | n/a |
-| <a name="module_sqs_queue"></a> [sqs\_queue](#module\_sqs\_queue) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/3.1.4/terraform-sqs.zip | n/a |
 ## Outputs
 
 | Name | Description |
@@ -51,6 +48,7 @@
 | <a name="output_publishing_anomaly_alarm"></a> [publishing\_anomaly\_alarm](#output\_publishing\_anomaly\_alarm) | CloudWatch anomaly detection alarm details for SNS publishing |
 | <a name="output_s3_bucket_event_cache"></a> [s3\_bucket\_event\_cache](#output\_s3\_bucket\_event\_cache) | S3 Bucket ARN and Name for event cache |
 | <a name="output_sns_topic"></a> [sns\_topic](#output\_sns\_topic) | SNS Topic ARN and Name |
+
 <!-- vale on -->
 <!-- markdownlint-enable -->
 <!-- END_TF_DOCS -->
diff --git a/infrastructure/terraform/modules/eventpub/lambda_function.tf b/infrastructure/terraform/modules/eventpub/lambda_function.tf
index c90b5f5..f5f9f61 100644
--- a/infrastructure/terraform/modules/eventpub/lambda_function.tf
+++ b/infrastructure/terraform/modules/eventpub/lambda_function.tf
@@ -42,4 +42,3 @@ resource "aws_lambda_event_source_mapping" "sqs_to_lambda" {
     maximum_concurrency = 24
   }
 }
-
diff --git a/infrastructure/terraform/modules/kms/README.md b/infrastructure/terraform/modules/kms/README.md
index 4410c3d..3fd7173 100644
--- a/infrastructure/terraform/modules/kms/README.md
+++ b/infrastructure/terraform/modules/kms/README.md
@@ -2,11 +2,13 @@
 <!-- markdownlint-disable -->
 <!-- vale off -->
 
+
 ## Requirements
 
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.9.0 |
+
 ## Inputs
 
 | Name | Description | Type | Default | Required |
@@ -23,9 +25,7 @@
 | <a name="input_name"></a> [name](#input\_name) | A unique name to distinguish this module invocation from others within the same CSI scope | `string` | n/a | yes |
 | <a name="input_project"></a> [project](#input\_project) | The name of the terraformscaffold project calling the module | `string` | n/a | yes |
 | <a name="input_region"></a> [region](#input\_region) | The AWS Region | `string` | n/a | yes |
-## Modules
 
-No modules.
 ## Outputs
 
 | Name | Description |
@@ -36,6 +36,7 @@ No modules.
 | <a name="output_replica_key_arn"></a> [replica\_key\_arn](#output\_replica\_key\_arn) | ARN of the Replica KMS key |
 | <a name="output_replica_key_id"></a> [replica\_key\_id](#output\_replica\_key\_id) | ID of the Replica KMS key |
 | <a name="output_user_policy_arn"></a> [user\_policy\_arn](#output\_user\_policy\_arn) | ARN of the user IAM policy |
+
 <!-- vale on -->
 <!-- markdownlint-enable -->
 <!-- END_TF_DOCS -->
diff --git a/infrastructure/terraform/modules/lambda/README.md b/infrastructure/terraform/modules/lambda/README.md
index 05b4a2e..9eb2e44 100644
--- a/infrastructure/terraform/modules/lambda/README.md
+++ b/infrastructure/terraform/modules/lambda/README.md
@@ -2,11 +2,13 @@
 <!-- markdownlint-disable -->
 <!-- vale off -->
 
+
 ## Requirements
 
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.12 |
+
 ## Inputs
 
 | Name | Description | Type | Default | Required |
@@ -57,9 +59,7 @@
 | <a name="input_system_log_level"></a> [system\_log\_level](#input\_system\_log\_level) | The detail level of the Lambda platform event logs sent to CloudWatch | `string` | `"WARN"` | no |
 | <a name="input_timeout"></a> [timeout](#input\_timeout) | Timeout in seconds of the lambda function invocation | `number` | n/a | yes |
 | <a name="input_vpc_config"></a> [vpc\_config](#input\_vpc\_config) | Lambdas can run in a VPC, should be a map containing a subnet\_ids list and a security\_group\_ids list | `map(any)` | `null` | no |
-## Modules
 
-No modules.
 ## Outputs
 
 | Name | Description |
@@ -72,6 +72,7 @@ No modules.
 | <a name="output_function_qualified_arn"></a> [function\_qualified\_arn](#output\_function\_qualified\_arn) | Qualified ARN of the Lambda function, including version or alias |
 | <a name="output_iam_role_arn"></a> [iam\_role\_arn](#output\_iam\_role\_arn) | ARN of the IAM role associated with the Lambda function |
 | <a name="output_iam_role_name"></a> [iam\_role\_name](#output\_iam\_role\_name) | Name of the IAM role associated with the Lambda function |
+
 <!-- vale on -->
 <!-- markdownlint-enable -->
 <!-- END_TF_DOCS -->
diff --git a/infrastructure/terraform/modules/obs-datasource/README.md b/infrastructure/terraform/modules/obs-datasource/README.md
index 2ce7fee..8b09837 100644
--- a/infrastructure/terraform/modules/obs-datasource/README.md
+++ b/infrastructure/terraform/modules/obs-datasource/README.md
@@ -2,11 +2,13 @@
 <!-- markdownlint-disable -->
 <!-- vale off -->
 
+
 ## Requirements
 
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.9.0 |
+
 ## Inputs
 
 | Name | Description | Type | Default | Required |
@@ -23,14 +25,13 @@
 | <a name="input_project"></a> [project](#input\_project) | The name of the terraformscaffold project calling the module | `string` | n/a | yes |
 | <a name="input_region"></a> [region](#input\_region) | The AWS Region | `string` | n/a | yes |
 | <a name="input_resource_types"></a> [resource\_types](#input\_resource\_types) | The resource types to include in the OAM link. | `list(string)` | <pre>[<br/>  "AWS::CloudWatch::Metric",<br/>  "AWS::Logs::LogGroup"<br/>]</pre> | no |
-## Modules
 
-No modules.
 ## Outputs
 
 | Name | Description |
 |------|-------------|
 | <a name="output_log_subscription_role_arn"></a> [log\_subscription\_role\_arn](#output\_log\_subscription\_role\_arn) | The ARN of the log subscription IAM role. |
+
 <!-- vale on -->
 <!-- markdownlint-enable -->
 <!-- END_TF_DOCS -->
diff --git a/infrastructure/terraform/modules/s3bucket/README.md b/infrastructure/terraform/modules/s3bucket/README.md
index 8e0e793..c596e57 100644
--- a/infrastructure/terraform/modules/s3bucket/README.md
+++ b/infrastructure/terraform/modules/s3bucket/README.md
@@ -2,11 +2,13 @@
 <!-- markdownlint-disable -->
 <!-- vale off -->
 
+
 ## Requirements
 
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.9.0 |
+
 ## Inputs
 
 | Name | Description | Type | Default | Required |
@@ -31,9 +33,7 @@
 | <a name="input_public_access"></a> [public\_access](#input\_public\_access) | Object representing the public access rules of the bucket | <pre>object({<br/>    block_public_acls       = bool<br/>    block_public_policy     = bool<br/>    ignore_public_acls      = bool<br/>    restrict_public_buckets = bool<br/>  })</pre> | <pre>{<br/>  "block_public_acls": true,<br/>  "block_public_policy": true,<br/>  "ignore_public_acls": true,<br/>  "restrict_public_buckets": true<br/>}</pre> | no |
 | <a name="input_region"></a> [region](#input\_region) | The AWS Region | `string` | n/a | yes |
 | <a name="input_versioning"></a> [versioning](#input\_versioning) | Toggle for versioning the bucket. Defaults to true | `bool` | `true` | no |
-## Modules
 
-No modules.
 ## Outputs
 
 | Name | Description |
@@ -47,6 +47,7 @@ No modules.
 | <a name="output_id"></a> [id](#output\_id) | The ID of the S3 bucket |
 | <a name="output_policy"></a> [policy](#output\_policy) | The policy of the S3 bucket |
 | <a name="output_region"></a> [region](#output\_region) | The AWS region where the S3 bucket is located |
+
 <!-- vale on -->
 <!-- markdownlint-enable -->
 <!-- END_TF_DOCS -->
diff --git a/infrastructure/terraform/modules/sqs/README.md b/infrastructure/terraform/modules/sqs/README.md
index a898c54..7510278 100644
--- a/infrastructure/terraform/modules/sqs/README.md
+++ b/infrastructure/terraform/modules/sqs/README.md
@@ -2,11 +2,13 @@
 <!-- markdownlint-disable -->
 <!-- vale off -->
 
+
 ## Requirements
 
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.9.0 |
+
 ## Inputs
 
 | Name | Description | Type | Default | Required |
@@ -35,9 +37,7 @@
 | <a name="input_sqs_kms_key_arn"></a> [sqs\_kms\_key\_arn](#input\_sqs\_kms\_key\_arn) | ARN of the KMS key to encrypt SQS queue messages | `string` | n/a | yes |
 | <a name="input_sqs_policy_overload"></a> [sqs\_policy\_overload](#input\_sqs\_policy\_overload) | Optional additional policy to extend the SQS Resource Policy | `string` | `""` | no |
 | <a name="input_visibility_timeout_seconds"></a> [visibility\_timeout\_seconds](#input\_visibility\_timeout\_seconds) | The visibility timeout for the queue. An integer from 0 to 43200 (12 hours) | `number` | `300` | no |
-## Modules
 
-No modules.
 ## Outputs
 
 | Name | Description |
@@ -52,6 +52,7 @@ No modules.
 | <a name="output_sqs_queue_oldest_message_alarm_arn"></a> [sqs\_queue\_oldest\_message\_alarm\_arn](#output\_sqs\_queue\_oldest\_message\_alarm\_arn) | The ARN of the CloudWatch alarm for oldest visible message age in the SQS queue |
 | <a name="output_sqs_queue_oldest_message_alarm_name"></a> [sqs\_queue\_oldest\_message\_alarm\_name](#output\_sqs\_queue\_oldest\_message\_alarm\_name) | The name of the CloudWatch alarm for oldest visible message age in the SQS queue |
 | <a name="output_sqs_queue_url"></a> [sqs\_queue\_url](#output\_sqs\_queue\_url) | The URL of the SQS queue |
+
 <!-- vale on -->
 <!-- markdownlint-enable -->
 <!-- END_TF_DOCS -->
diff --git a/infrastructure/terraform/modules/ssl/README.md b/infrastructure/terraform/modules/ssl/README.md
index d7ecda3..3d3a41d 100644
--- a/infrastructure/terraform/modules/ssl/README.md
+++ b/infrastructure/terraform/modules/ssl/README.md
@@ -2,12 +2,14 @@
 <!-- markdownlint-disable -->
 <!-- vale off -->
 
+
 ## Requirements
 
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.10.1 |
 | <a name="requirement_tls"></a> [tls](#requirement\_tls) | 4.1.0 |
+
 ## Inputs
 
 | Name | Description | Type | Default | Required |
@@ -25,9 +27,7 @@
 | <a name="input_subject_organization"></a> [subject\_organization](#input\_subject\_organization) | Organization for certificate subject | `string` | `"NHS England"` | no |
 | <a name="input_subject_organizational_unit"></a> [subject\_organizational\_unit](#input\_subject\_organizational\_unit) | Organizational unit for certificate subject | `string` | `"NHS Notify"` | no |
 | <a name="input_subject_province"></a> [subject\_province](#input\_subject\_province) | Province for certificate subject | `string` | `"West Yorkshire"` | no |
-## Modules
 
-No modules.
 ## Outputs
 
 | Name | Description |
@@ -35,6 +35,7 @@ No modules.
 | <a name="output_cacert_pem"></a> [cacert\_pem](#output\_cacert\_pem) | Truststore |
 | <a name="output_server_crt"></a> [server\_crt](#output\_server\_crt) | Server Certificate |
 | <a name="output_server_key"></a> [server\_key](#output\_server\_key) | Server Key |
+
 <!-- vale on -->
 <!-- markdownlint-enable -->
 <!-- END_TF_DOCS -->
diff --git a/scripts/config/terraform-docs.yml b/scripts/config/terraform-docs.yml
index e49d91f..9151101 100644
--- a/scripts/config/terraform-docs.yml
+++ b/scripts/config/terraform-docs.yml
@@ -11,10 +11,13 @@ sections:
 
 content: |-
   {{ .Header }}
+
   {{ .Requirements }}
+
   {{ .Inputs }}
-  {{ .Modules }}
+
   {{ .Outputs }}
+
   {{ .Footer }}
 
 output:
diff --git a/scripts/config/vale/styles/config/vocabularies/words/accept.txt b/scripts/config/vale/styles/config/vocabularies/words/accept.txt
index f02f1fa..88d99fc 100644
--- a/scripts/config/vale/styles/config/vocabularies/words/accept.txt
+++ b/scripts/config/vale/styles/config/vocabularies/words/accept.txt
@@ -1,28 +1,39 @@
 [A-Z]+s
+[Bb]undler
 Bitwarden
 bot
 Cognito
+config
 Cyber
 Dependabot
 draw.io
 drawio
 endcapture
 endfor
+endif
 endraw
+external_markdown
+fmt
+frontmatter
 Git[Hh]ub
 GitHub
 Gitleaks
 Grype
 idempotence
 Jira
+markdownlint
+npm
 OAuth
 Octokit
 onboarding
 Podman
 Python
 rawContent
+relative_url
+[Rr]epo
 sed
 Syft
-Terraform
 toolchain
+Trivy
 Trufflehog
+[Tt]erraform
diff --git a/scripts/docker/examples/python/.tool-versions.example b/scripts/docker/examples/python/.tool-versions.example
deleted file mode 100644
index 9209311..0000000
--- a/scripts/docker/examples/python/.tool-versions.example
+++ /dev/null
@@ -1,2 +0,0 @@
-# python, SEE: https://hub.docker.com/_/python/tags
-# docker/python 3.11.4-alpine3.18@sha256:0135ae6442d1269379860b361760ad2cf6ab7c403d21935a8015b48d5bf78a86
diff --git a/scripts/docker/examples/python/Dockerfile b/scripts/docker/examples/python/Dockerfile
deleted file mode 100644
index d0780aa..0000000
--- a/scripts/docker/examples/python/Dockerfile
+++ /dev/null
@@ -1,33 +0,0 @@
-# `*:latest` will be replaced with a corresponding version stored in the '.tool-versions' file
-# hadolint ignore=DL3007
-FROM python:latest as base
-
-# === Builder ==================================================================
-
-FROM base AS builder
-COPY ./assets/hello_world/requirements.txt /requirements.txt
-WORKDIR /packages
-RUN set -eux; \
-    \
-    # Install dependencies
-    pip install \
-        --requirement /requirements.txt \
-        --prefix=/packages \
-        --no-warn-script-location \
-        --no-cache-dir
-
-# === Runtime ==================================================================
-
-FROM base
-ENV \
-    LANG="C.UTF-8" \
-    LC_ALL="C.UTF-8" \
-    PYTHONDONTWRITEBYTECODE="1" \
-    PYTHONUNBUFFERED="1" \
-    TZ="UTC"
-COPY --from=builder /packages /usr/local
-COPY ./assets/hello_world /hello_world
-WORKDIR /hello_world
-USER nobody
-CMD [ "python", "app.py" ]
-EXPOSE 8000
diff --git a/scripts/docker/examples/python/Dockerfile.effective b/scripts/docker/examples/python/Dockerfile.effective
deleted file mode 100644
index 3f1ea6b..0000000
--- a/scripts/docker/examples/python/Dockerfile.effective
+++ /dev/null
@@ -1,54 +0,0 @@
-# `*:latest` will be replaced with a corresponding version stored in the '.tool-versions' file
-FROM python:3.11.4-alpine3.18@sha256:0135ae6442d1269379860b361760ad2cf6ab7c403d21935a8015b48d5bf78a86 as base
-
-# === Builder ==================================================================
-
-FROM base AS builder
-COPY ./assets/hello_world/requirements.txt /requirements.txt
-WORKDIR /packages
-RUN set -eux; \
-    \
-    # Install dependencies
-    pip install \
-        --requirement /requirements.txt \
-        --prefix=/packages \
-        --no-warn-script-location \
-        --no-cache-dir
-
-# === Runtime ==================================================================
-
-FROM base
-ENV \
-    LANG="C.UTF-8" \
-    LC_ALL="C.UTF-8" \
-    PYTHONDONTWRITEBYTECODE="1" \
-    PYTHONUNBUFFERED="1" \
-    TZ="UTC"
-COPY --from=builder /packages /usr/local
-COPY ./assets/hello_world /hello_world
-WORKDIR /hello_world
-USER nobody
-CMD [ "python", "app.py" ]
-EXPOSE 8000
-
-# === Metadata =================================================================
-
-ARG IMAGE
-ARG TITLE
-ARG DESCRIPTION
-ARG LICENCE
-ARG GIT_URL
-ARG GIT_BRANCH
-ARG GIT_COMMIT_HASH
-ARG BUILD_DATE
-ARG BUILD_VERSION
-LABEL \
-    org.opencontainers.image.base.name=$IMAGE \
-    org.opencontainers.image.title="$TITLE" \
-    org.opencontainers.image.description="$DESCRIPTION" \
-    org.opencontainers.image.licenses="$LICENCE" \
-    org.opencontainers.image.url=$GIT_URL \
-    org.opencontainers.image.ref.name=$GIT_BRANCH \
-    org.opencontainers.image.revision=$GIT_COMMIT_HASH \
-    org.opencontainers.image.created=$BUILD_DATE \
-    org.opencontainers.image.version=$BUILD_VERSION
diff --git a/scripts/docker/examples/python/VERSION b/scripts/docker/examples/python/VERSION
deleted file mode 100644
index 8acdd82..0000000
--- a/scripts/docker/examples/python/VERSION
+++ /dev/null
@@ -1 +0,0 @@
-0.0.1
diff --git a/scripts/docker/examples/python/assets/hello_world/app.py b/scripts/docker/examples/python/assets/hello_world/app.py
deleted file mode 100644
index 4844e89..0000000
--- a/scripts/docker/examples/python/assets/hello_world/app.py
+++ /dev/null
@@ -1,12 +0,0 @@
-from flask import Flask
-from flask_wtf.csrf import CSRFProtect
-
-app = Flask(__name__)
-csrf = CSRFProtect()
-csrf.init_app(app)
-
-@app.route("/")
-def index():
-    return "Hello World!"
-
-app.run(host='0.0.0.0', port=8000)
diff --git a/scripts/docker/examples/python/assets/hello_world/requirements.txt b/scripts/docker/examples/python/assets/hello_world/requirements.txt
deleted file mode 100644
index d36bdce..0000000
--- a/scripts/docker/examples/python/assets/hello_world/requirements.txt
+++ /dev/null
@@ -1,12 +0,0 @@
-blinker==1.6.2
-click==8.1.7
-Flask-WTF==1.2.0
-Flask==3.1.3
-itsdangerous==2.1.2
-Jinja2==3.1.6
-MarkupSafe==2.1.3
-pip==26.0
-setuptools==65.5.1
-Werkzeug==3.1.6
-wheel==0.46.2
-WTForms==3.0.1
diff --git a/scripts/docker/examples/python/tests/goss.yaml b/scripts/docker/examples/python/tests/goss.yaml
deleted file mode 100644
index 589db37..0000000
--- a/scripts/docker/examples/python/tests/goss.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-package:
-  python:
-    installed: true
-
-command:
-  pip list | grep -i flask:
-    exit-status: 0
-    timeout: 60000