EAA Compliance Audit — Human-Tested WCAG 2.2, Fixed Price
The European Accessibility Act has been enforceable in all 27 EU member states since June 28, 2025 — and the quick fix is gone: the FTC fined the biggest overlay vendor $1M for deceptive claims. We run real audits with real assistive technology, fix the code, and prove it with a re-audit. €990, delivered in 5 business days.
Automated tools catch only 30–40% of accessibility barriers. We hand-test the rest — keyboard-only and with NVDA/VoiceOver.
The overlay era is over. Enforcement is not.
Since June 28, 2025, the European Accessibility Act has been enforceable across all 27 EU member states, with national market-surveillance bodies active — Germany and France most visibly. If your site sells to EU consumers, checkout and account flows are now a compliance surface, not just a UX one.
The fake-solution category imploded alongside it. The FTC ordered accessiBe, the largest overlay-widget vendor, to pay $1 million in January 2025 for deceptive claims that its AI widget made websites fully compliant. An overlay sitting on a non-compliant site now documents that you knew about the problem and chose a cosmetic fix instead.
And automated scanners alone catch only 30–40% of real accessibility barriers — a “100/100” score from a free tool is not a legal defense. Focus order, meaningful alt text, form error handling, and screen-reader logic all require human testing and real code changes.
Audit. Fix. Prove. Monitor.
We sell one outcome: a compliance-defensible audit report — prioritized failures, WCAG references, plain-English fixes — and, for remediation clients, issues verifiably fixed and confirmed by re-audit. You can stop after any rung of the ladder; the report is written so any developer can execute it, ours or yours.
Audit — €990
Prioritized failures, WCAG 2.2 references, severity, plain-English fixes, top-5 failures on video, exec summary, 45-minute walkthrough.
Remediation — €2,000–10,000
Fixed quote generated from the audit. We fix the code; every named issue is confirmed by re-audit, and anything that fails is fixed free.
Monitoring — from €150/mo
Monthly automated scans, quarterly manual spot checks, regression alerts, and accessibility statement upkeep.
How it works — the Nano Method, applied to compliance
Assess → Pilot → Prove → Scale → Operate. Assess is a free scan plus a 20-minute scoping call that ends in a signed audit order. Pilot is the audit itself — automated scans, a full keyboard-only pass, and manual NVDA and VoiceOver testing on your key user journeys — delivered within 5 business days or you get 20% off.
Prove is the remediation sprint: issue-by-issue code fixes with per-issue verification and a re-audit certificate. Scale drafts your accessibility statement and wires axe checks into your CI, with a recorded handover session for your developers. Operate is the monitoring retainer — monthly scans, quarterly manual spot checks, regression alerts, and standard watch, including EN 301 549 updates.
Fixed prices. Printed here, honored in the invoice.
The EAA Compliance Audit is €990, covering a representative sample of your key user journeys — checkout, search, forms, account flows — tested against WCAG 2.2 AA within 5 business days. Larger scopes (multi-domain, web apps, native apps) are quoted between €500 and €2,000 before we start, and the audit is paid upfront.
Remediation is a fixed €2,000–10,000 quote generated from the report, 50% on start and 50% on verified completion. Monitoring starts at €150/month, cancel with 30 days' notice. Web agencies get wholesale rates and white-label reports through the partner program.
What you can inspect before you pay
Before published case studies exist, we show you the artifacts themselves: a full anonymized sample audit report, a 3-minute video of a screen-reader user hitting real barrier patterns on a demo store, and the free scanner itself — our methodology, self-serve. We never fabricate logos or testimonials.
Our auditors are trained to the IAAP WAS body of knowledge, working toward certification. We will never sell, resell, or install an accessibility overlay — that pledge is absolute.
Platforms we audit and fix
We audit and remediate Shopify, WooCommerce, Magento, TYPO3, Webflow, and custom React/Next.js/Vue applications, with native mobile audited at launch (remediation quoted case-by-case). Our method stack is public: axe-core, Playwright, Lighthouse, NVDA, VoiceOver, keyboard-only protocols, and color-contrast analysis, mapped to WCAG 2.2 AA checklists and EN 301 549. Findings can be delivered as GitHub or GitLab issues on request, and axe CI integration is included in the Scale stage.
Vendors who hide their method are selling scans. Ours is reproducible — that is the point.
Pricing
The audit → remediation → monitoring ladder is the product. Start anywhere, stop after any rung.
Automated scans, full keyboard-only pass, manual NVDA/VoiceOver testing on key user journeys, WCAG 2.2 references, severity ratings, plain-English fixes, top-5 failures on video, executive summary, and a 45-minute walkthrough. Larger scopes quoted €500–2,000 before start. Paid upfront.
Code-level fixes for every issue in your audit report, in Shopify, WooCommerce, Magento, or custom React/Next.js codebases. Every named issue is confirmed by re-audit; anything that fails is fixed free. 50% on start, 50% on verified completion.
Monthly automated scans, quarterly manual spot checks, regression alerts, and accessibility statement upkeep, including EN 301 549 standard watch. Cancel with 30 days' notice.
Audit in 5 business days or 20% off — the clock starts when we receive access credentials. Every issue we fix is confirmed by re-audit; any named issue that fails re-audit is fixed free.
Frequently asked questions
Our fixed-price EAA Compliance Audit is €990 and covers a representative sample of your site's key user journeys — checkout, search, forms, account flows — tested against WCAG 2.2 AA. Larger scopes (multi-domain, web apps, native apps) are quoted between €500 and €2,000 before we start, and the price on the proposal is the price on the invoice. Remediation, if you want us to fix what we find, runs €2,000–10,000 depending on issue count and codebase, and ongoing monitoring starts at €150/month. The audit is paid upfront; remediation is 50% on start, 50% on verified completion.
Five business days from receipt of access credentials to the delivered report — and that deadline is contractual: if the report is late, you get 20% off the audit. Remediation timelines depend on scope; most €2,000–5,000 engagements complete in two to four weeks, and every fixed issue is confirmed by a re-audit before we call it done. If you are working against a hard external deadline, tell us at booking and we schedule the walkthrough call around it.
If EU consumers can buy your product or use your service through your site, you are in scope — the EAA follows the customer, not your registered address, on the same extraterritorial logic as GDPR. E-commerce is explicitly covered by the Act, and the obligations fall on the economic operator offering the service in the EU market, which includes non-EU merchants selling into member states. There is a limited exemption for microenterprise service providers (fewer than 10 staff and under €2M turnover), but it is narrower than most sellers assume. The free scan plus a 20-minute scoping call settles your specific case.
You can — but it won't make you compliant, and it may increase your exposure. The US FTC fined accessiBe, the largest overlay vendor, $1 million in January 2025 for deceptive claims that its AI widget could make websites fully compliant. Automated tools of every kind catch only 30–40% of real accessibility barriers; the rest — focus order, meaningful alt text, form error handling, screen-reader logic — require human testing and code changes. Worse, an overlay sitting on a non-compliant site documents that you knew about the problem and chose a cosmetic fix. We audit with real assistive technology and fix the underlying code.
A prioritized report of every failure found across your key user journeys, tested three ways: automated scans (axe-core), full keyboard-only navigation, and manual screen-reader testing with NVDA and VoiceOver. Each issue includes the WCAG 2.2 success criterion it violates, a severity rating, a plain-English explanation, and a recommended code-level fix. The five worst failures come as short screen recordings, so your developers see exactly what a blind or keyboard-only user experiences. You also get an executive summary written for legal and procurement audiences, and a 45-minute walkthrough call. The report is yours to hand to any developer — ours or your own.
EAA conformity is assessed against the European harmonized standard EN 301 549, which currently incorporates WCAG 2.1 AA — so 2.1 AA is the legal baseline today. We test to WCAG 2.2 AA anyway, because the standard is expected to be updated and the criteria added in 2.2 — focus appearance, dragging alternatives, accessible authentication among them — are cheap to fix during remediation and expensive to retrofit later. Your report separates the two clearly: what you must fix for the current legal baseline, and what we recommend fixing now so the next standard update is a non-event.
GDPR-first, under a signed data processing agreement. We ask for read-only or staging access wherever possible — never production admin rights. Credentials are stored in a scoped vault and deleted at engagement close-out, with deletion confirmed in the final report. Audit evidence such as screenshots and recordings is captured against test data or anonymized views, stored on EU-region infrastructure, and retained for 90 days to cover the re-audit window unless you request earlier deletion. Our delivery team operates from Cairo under contractual GDPR processor commitments — the same model EU agencies use for any non-EU processor. The DPA template is available before you sign anything.
Both — that is the point of the ladder. Most audit clients take the remediation option: a fixed €2,000–10,000 quote generated from the report, under which our developers fix the issues in your codebase — Shopify, WooCommerce, Magento, or custom React/Next.js — and every named issue is verified by re-audit. Anything that fails re-audit is fixed free. If you have your own developers, the report is written so they can execute it without us, and we offer a per-hour Q&A line during your fix window. Web agencies can resell the entire ladder white-label under their own brand — see our partner program.
Chat on WhatsApp