Abmahnung waves under the BFSGDemand letters targeting e-commerce. Responding with a dated evidence file changes the conversation.
Continuous monitoring · Recorded journeys · Guided audits
Compliance is a process. This is its evidence backbone.
A continuously maintained evidence file for the European Accessibility Act — all 50 WCAG 2.1 AA criteria, each covered by the right method and proven on an append-only ledger. Never “automated compliance.”
Prefer to see it on your own pages first? Begin with a complimentary assessment.
EU-hosted scanningGDPR-clean by designBuilt to WCAG 2.1 AA
50 / 50 CRITERIA EVIDENCED
EXPORT · CONFORMANCE REPORT · EN 301 549
Evidence ledger — example.de
APPEND-ONLY
- scan.completed1,412 pages · 0 new critical
- human.verified2.1.2 No Keyboard Trap — signed off, M. Keller (QA)
- journey.recordedCheckout — 14 steps, 2 findings
- verify.restoredDNS TXT re-detected
- verify.warningTXT missing — 72 h grace started
Every scan, journey and sign-off lands here, timestamped — including the awkward entries. A ledger that only tells the good story wouldn’t be evidence.
50 / 50WCAG 2.1 AA criteria covered & evidenced
3evidence sources: crawler, journeys, human audits
27+national enforcement regimes tracked
∞domains & subdomains within your scan capacity
01EXHIBIT
Enforcement · verified events only
The enforcement wave is not coming. It is here.
Demand letters, injunctions, inspection sweeps and daily-accumulating penalty orders are already moving across the EU. A dated evidence file is what turns a letter into a deadline instead of an escalation.
Civil-society injunctionsProceedings brought against major retailers, including Auchan, Carrefour, E.Leclerc and Picard.
ACM active enforcementInformation requests and inspection sweeps — regulators asking companies to show their work.
Daily penalty ordersNOK 50,000 per day, accumulating until the failure is fixed and documented.
PTS supervision sweepsSector reviews with follow-up obligations for the companies inspected.
We lead with what is verifiably happening — letters, injunctions, sweeps, penalty orders. Never fine-ceiling fear-mongering. Urgency from facts is the line we hold.
02EXHIBIT
Enforcement tracker · 27+ regimes
One directive. Twenty-seven ways to be enforced.
Each country transposed the EAA into its own law, its own regulator and its own penalties. Germany searches for BFSG, not “EAA” — so does its regulator. Pick a country to see its regime.
Tile map: every country gets an equal, keyboard-reachable target — and every country has a full file: law, regulator, penalties, live events.
| Country | National instrument | Status |
|---|
03EXHIBIT
The coverage doctrine
100% of WCAG 2.1 AA — covered and evidenced.
Not “100% automated.” Nobody honest can sell that. Every one of the 50 success criteria is tested by the right method and holds exactly one state in your coverage matrix — the document EU procurement and regulators actually ask for.
- Auto-pass (31)
- Auto-fail (4)
- Needs human (9)
- Human-verified (5)
- Not applicable (1)
50 / 50criteria covered — 9 awaiting sign-off. Export as a continuously maintained conformance report (EN 301 549).
Server-side crawler
Headless-browser scans of every page on every domain and subdomain, on schedule or per deploy. The machine-checkable share — findings deduplicated to template-level root causes with developer fix lists.
Journey extension
One authorized developer or QA tester records your real checkout, login and account flows in their own browser during an audit sprint. Credentials never leave their machine; payloads are redacted to selectors and rule IDs.
Guided manual audits
Structured checklists for what machines can’t judge — keyboard traps, focus logic, whether a screen reader announces something a human can act on. Signed off by name, into the ledger.
Why we will never say “fully automated”
A vendor that marketed “30% compliant immediately, AI closes the rest” is now under a $1M FTC order (final April 2025) barring exactly that claim. Roughly a third to half of WCAG criteria are machine-checkable; the rest need journeys and humans. We state that limit openly — and cover all of it anyway.
04EXHIBIT
Evidence layer
An append-only file your lawyer will love.
Every scan, recorded journey, human sign-off and verification event lands in a timestamped, append-only ledger. When a letter or an information request arrives, you export the story — dated, complete, honest.
ledger · shop.example.de · newest first
APPEND-ONLY
- scan.completedWeekly full crawl — 1,412 pages, 0 new critical, 3 resolved
- human.verified2.4.3 Focus Order — verified by M. Keller (QA), checklist EAA-M7
- journey.recordedCheckout flow — 14 steps, 2 findings routed to triage
- verify.restoredDomain verification restored — TXT record re-detected
- verify.warningTXT record missing — 72-hour grace period started, scans continue
- violation.new1.4.3 Contrast — 61 instances, 1 template root cause
Note the pair on 03–04 August: even a verification wobble is logged, warned about and resolved on the record. The grace period keeps your evidence continuous; the ledger keeps it honest.
Complimentary assessment
See your own evidence gap first.
A one-off automated review of your public pages — the machine-checkable share only, run by the same EU-hosted engine as monitored plans. It is the first entry of an evidence file, not the whole of one, and the report says so.
05EXHIBIT
Plans · metered by scan capacity
Pay for capacity. Never per scan.
Per-scan pricing punishes you for monitoring — which is the whole point. Every plan includes unlimited root domains and subdomains within its capacity, the coverage matrix and the evidence ledger.
Free
€0
- 1 domain, monthly snapshot
- Public-page assessment + fix list
- Your first ledger entries
Growth
€149 /mo
- 5,000 pages · weekly scans
- Verified monitoring + ledger
- Coverage matrix + manual audits
Agency
€990 /mo
- 150,000 pages · per-deploy hooks
- Multi-site workspace, white-label
- Client Reseller Kit included
Launch pricing — full comparison on the pricing page. Prices exclude VAT.
For web agencies · the primary wedge
Your clients are the ones getting the letters.
Buy capacity once, monitor every client site, resell monitoring on retainer and keep the spread. White-label reports, a workspace per client, and a Reseller Kit with the retainer template and the margin math already done.