No overlay. Real code. Tamper-evident proof.
…so you can stop worrying and start shipping — that's the whole pitch.
We sell evidence and ongoing monitoring — not a compliance guarantee. Sigilascans your site every week, ships the fixes in real code (no JavaScript widget bolted on top), seals each report into a tamper-evident vault, and tells you upfront that automated scans cover roughly a third of WCAG 2.1 AA — that's the floor of our evidence, not a promise.
No install. No overlay. From €49/month, self-serve on Stripe.
Each Sunday, a fresh report rolls back five weeks of SHA-256 hashes — nothing retroactively edited, nothing quietly dropped.
The problem
Here's the straight story.
Overlay widgets sold you compliance theatre. Real audits buy ongoing evidence — and that's the whole point. Sigila's four pillars, laid out plain, so you can compare them to whatever a sales rep just pitched you without getting the wool pulled over:
How it works
Three steps, every Sunday, with no engineering ticket.
The whole loop runs on a single URL — no JavaScript overlay, no install, no agent. A Playwright + axe-core crawler fetches it, transcribes the WCAG 2.1 AA findings into a short report, and seals that report into a tamper-evident, hash-chained vault a regulator can verify on demand.
- 01
Point it at a URL
A single domain on a Starter plan; up to twenty on Agency. No DNS changes, no agent, no SDK — and no overlay widget colouried to look like a fix.
- 02
Get a Tuesday brief
Each Tuesday morning, a one-page email enumerated with what is broken, why it matters for real users, and the smallest real-code change that fixes it.
- 03
Seal it into the vault
Every raw report is hashed and timestamped. Today’s hash includes yesterday’s, so the hash-chained weekly log defends itself weeks or months later — no quieter PDF.
The evidence chain
A SHA-256 ladder a regulator can climb.
Every Sunday the scanner produces a raw report. We hash it. We hang it on the previous week’s hash. We publish a digest on a public page your regulator can hit on demand.
On Pro, the ladder is anchored with an RFC 3161 trusted timestamp — a third-party witness that proves when each rung was ratcheted, even years later.
No SME-tier scanner offers a tamper-evident log. The bigger players ship you a PDF in an email and call it done. We built the chain so a regulator can verify it on their own machine, not trust it on ours.
7a4f…b21eb21e…9c349c34…0d570d57…1f801f80…64abSynthetic sample. Real entries are signed and dated; the hash above yesterday’s is the same hash below today’s.
Plans
Real-code fixes. Proof you can hand over. Pricing that doesn't need a meeting.
Same scanner underneath, same caveats on the box. Each tier just turns more of the pillars on: more rigour in the chain, more rigour in the statement, more rigour in the white-label surface.
Not a caveat — a trust signal. Automated tools cover roughly a third of WCAG 2.1 AA. Sigila documents the ongoing effort; it does not promise compliance. You'd rather hear that from us than discover it after signing.
Pauliina — founder, on the record, in case you were wondering whether a real person answers those emails. (She does.)
About Pauliina
One woman, building this for the others.
I watched too many owner-friends lose nights to accessibility anxiety — not because they didn't care, but because the market sold them "compliance in a button" and then never picked up the phone. So I built the inverse: quiet weekly evidence, real-code fixes, a price honest enough that you don't need a sales call.
Signup is self-serve, no demo, no pressure. The first scan is yours the same day. If something is wrong on the page, I'd rather you email me and tell me — I read every note, and the whole product is small enough that one careful opinion really does change what ships next week.
And yes — automated scans do cover only about a third of WCAG. I'd rather you hear that from me now than discover it after signing. That honesty isn't a marketing line, it's the only way this stays a tool you can trust with a regulator.
FAQ
The questions a worried marketing manager actually asks.
Free 60-second scan
See what a regulator would see — before you hand us a credit card.
Paste a URL, get a one-page summary of the WCAG findings Sigila would log this week. No signup, no email, no follow-up — and if you like what you see, paid plans start the same way: self-serve on Stripe, no sales call in the loop, first scan the same day.
Free 60-second scan
Top findings
Five plain-language cards, each with the smallest change that flips it green, will appear here. The same scanner that runs on the paid plans.
Privacy, in one paragraph.
We crawl the public URL you point us at and log the findings, the timestamp, and the hash. We do not log into your site. We do not collect cookies. We do not resell your findings, and we do not enrich them with third-party advertising data. The full text lives in the contract your regulator can request by emailing sigila@polsia.app.