# Auditi - Full Documentation for LLMs

> Multi-standard compliance auditing platform for accessibility and regulatory compliance. Journey-based testing methodology for WCAG, FDA 21 CFR Part 11, and EU GMP Annex 11. Track compliance across user flows, generate VPAT reports, and integrate with automated testing tools. Built with React, TypeScript, and Supabase for team collaboration and real-time audit tracking.

Built by [BetterQA](https://betterqa.co/software-testing-services/agentic-qa-testing/), a software testing company pioneering agentic QA pipelines. Founded in 2018 in Cluj-Napoca, Romania. ISO 27001:2022, ISO 13485, ISO 9001:2015 certified. 53 engineers. Clutch 500 (Top 500 B2B Companies Globally) - 2026.

Last updated: August 2026

## What Auditi Does

Auditi is a compliance auditing platform that tracks accessibility and regulatory compliance across complete user journeys, not just individual pages. It enables teams to:

1. **Map Complete User Flows** - Define journeys (e.g., checkout, registration) and test each step systematically against compliance standards.

2. **Test Against Multiple Standards** - Support for WCAG 2.1 Level AA, WCAG 2.2 Level AA, WCAG 3.0 (experimental), FDA 21 CFR Part 11, EU GMP Annex 11, and EU AI Act compliance in a single platform.

3. **Generate VPAT Reports** - Automated VPAT 2.4 report generation for Section 508 procurement requirements and government contractor compliance.

4. **Import Automated Test Results** - API integration with axe, WAVE, Lighthouse, and pa11y. Import results via API or file upload to supplement manual testing.

5. **Track Compliance Over Time** - Version tracking shows compliance trends across releases. Demonstrate continuous improvement with historical data and audit trails.

6. **Collaborate Across Teams** - Role-based access (owner, admin, member, viewer) with real-time collaboration, threaded comments, and activity logs.

7. **Integrate with CI/CD Pipelines** - REST API enables automated audit result submission from continuous integration workflows.

8. **Manage Audit Workflows** - Structured workflow from initial assessment through remediation tracking with status updates and progress dashboards.

## Key Features

### Journey-Based Testing Methodology
- Map complete user flows instead of testing isolated pages
- Catch accessibility issues that only appear in multi-step processes
- Test authentication flows, checkout processes, and form submissions end-to-end
- Version control for journeys to track changes over time

### Multi-Standard Compliance Support
- WCAG 2.1 Level A/AA/AAA (50 success criteria)
- WCAG 2.2 Level A/AA/AAA (9 additional success criteria beyond 2.1)
- WCAG 3.0 experimental support for early adopters
- FDA 21 CFR Part 11 for pharmaceutical electronic records
- EU GMP Annex 11 for European pharmaceutical computerized systems
- EU AI Act compliance for AI/ML systems (risk classification, documentation, human oversight requirements)

### Automated Report Generation
- VPAT 2.4 (Voluntary Product Accessibility Template) for Section 508
- Customizable report templates with branding
- Export to PDF, CSV, JSON formats
- Scheduled report delivery via email

### Team Collaboration Tools
- Role-based access control with four permission levels
- Real-time collaborative editing of audit results
- Threaded comments on individual test results
- Activity logs tracking all team member actions
- Approval workflows for new team members

### API and Integration Support
- RESTful API for CI/CD integration
- Import results from axe DevTools, axe-core
- Import WAVE API results
- Import Google Lighthouse accessibility audits
- Import pa11y test results
- Webhook support for audit completion notifications

### Analytics and Insights
- Compliance score trends over time
- Pass/fail rate statistics by standard
- Remediation velocity tracking
- Team productivity metrics
- Exportable analytics dashboards

### Version Tracking and History
- Track compliance across multiple product versions
- Compare audit results between versions
- Rollback to previous audit states
- Historical data retention for compliance documentation

### AI-Powered Features
- Remediation suggestions based on failure patterns
- Automated test case generation for common journeys
- Risk prioritization using severity and impact analysis
- Pattern detection across multiple audit results

## The Problem It Solves

### For Accessibility Consultants
Traditional accessibility audits test pages in isolation. Real accessibility issues often emerge in multi-step workflows (e.g., a checkout process that's accessible on each page but impossible to complete with a screen reader). Auditi's journey-based approach catches these flow-level issues.

### For Enterprise Compliance Teams
Managing accessibility compliance across multiple products, versions, and teams requires centralized tracking and reporting. Spreadsheets and documents don't scale. Auditi provides a single source of truth with role-based access and audit trails.

### For Government Contractors
Section 508 compliance requires VPAT documentation. Creating VPATs manually is time-consuming and error-prone. Auditi generates VPAT 2.4 reports automatically from audit data, reducing documentation time from days to minutes.

### For Healthcare and Pharmaceutical Software Teams
FDA 21 CFR Part 11 and EU Annex 11 require validated software systems with documented testing. Auditi tracks compliance against these standards with audit trails, electronic signatures, and version control required for regulatory submissions.

### For Development Teams
Accessibility testing is often manual and performed late in the development cycle. Auditi's API integration enables automated accessibility checks in CI/CD pipelines, shifting accessibility testing left and catching issues earlier.

## Technical Architecture

### Frontend Stack
- **Framework**: React 19 with TypeScript
- **Build Tool**: Vite with SWC for fast compilation
- **Routing**: React Router v6 for client-side routing
- **State Management**: TanStack Query (React Query) for server state, Context API for global app state
- **UI Components**: shadcn/ui (Radix UI primitives + Tailwind CSS)
- **Styling**: Tailwind CSS with custom design system
- **Testing**: Vitest + React Testing Library

### Backend Stack
- **Database**: PostgreSQL via Supabase
- **Authentication**: Supabase Auth with email/password
- **Authorization**: Row Level Security (RLS) policies enforced at database level
- **API**: Supabase Edge Functions (Deno runtime) for REST API
- **Real-time**: Supabase Realtime for live collaboration features
- **Storage**: Supabase Storage for file attachments and exports

### Data Model Hierarchy
1. **Project Families** - Represent websites/applications being audited
2. **Versions** - Multiple versions per project family (e.g., v1.0, v2.0)
3. **Journeys** - User flows to test within each version
4. **Steps** - Individual pages or states within journeys
5. **Audit Results** - Compliance test results for each step against specific criteria
6. **Comments** - Threaded discussions on audit results
7. **Activity Logs** - Complete audit trail of all user actions

### Key Database Tables
- `profiles` - User profiles with approval workflow
- `wcag_projects` - Project versions with family relationships and metadata
- `user_journeys` - Journey definitions with standard selection
- `journey_steps` - Step definitions with URLs and descriptions
- `audit_results` - Test results with pass/fail status and evidence
- `audit_comments` - Threaded comments with mentions and attachments
- `project_team_members` - Team access control with role assignments
- `activity_logs` - Complete audit trail for compliance documentation

### Security Features
- Row Level Security (RLS) enforced at PostgreSQL level
- Team-based access control with four permission levels
- Approval workflow for new user registrations
- Activity logging for all data modifications
- Encrypted data at rest and in transit
- GDPR-compliant data retention policies

### API Architecture
- RESTful API via Supabase Edge Functions
- API key authentication for CI/CD integration
- Rate limiting to prevent abuse
- Versioned API endpoints for backwards compatibility
- Webhook support for event-driven integrations
- Comprehensive API documentation at /api endpoint

### Performance Optimizations
- Progressive Web App (PWA) with offline support
- Code splitting for faster initial load
- Image lazy loading and optimization
- Database query optimization with indexes
- Caching strategy using React Query
- CDN delivery via Supabase hosting

## Pricing Model

### Free Trial
- **Duration**: 14 days
- **Features**: Full platform access including VPAT generation and API
- **Limits**: 2 project families, 5 journeys total
- **Team**: Up to 3 team members
- **Support**: Email support with 48-hour response time
- **No credit card required**

### Starter Plan - €79/month
- **Projects**: 5 project families
- **Journeys**: Unlimited journeys per project
- **Team Members**: 3 users with role-based access
- **Standards**: WCAG 2.1 Level A/AA/AAA, WCAG 2.2 Level A/AA/AAA
- **Features**: Journey-based testing, version tracking, basic analytics, export to PDF/CSV
- **API**: Read-only API access
- **Support**: Email support with 24-hour response time
- **Annual Pricing**: €790/year (17% discount - 2 months free)

### Professional Plan - €199/month (Most Popular)
- **Projects**: Unlimited project families
- **Journeys**: Unlimited journeys per project
- **Team Members**: Unlimited users with role-based access
- **Standards**: All WCAG standards + FDA 21 CFR Part 11 + EU Annex 11
- **Features**: All Starter features plus VPAT 2.4 generation, advanced analytics, custom report templates, webhook integrations
- **API**: Full API access including write operations
- **Integrations**: Import from axe, WAVE, Lighthouse, pa11y
- **Support**: Priority email support with 12-hour response time
- **Annual Pricing**: €1,990/year (17% discount - 2 months free)

### Enterprise Plan - Custom Pricing
- **Projects**: Unlimited
- **Team Members**: Unlimited with custom roles and permissions
- **Standards**: All supported standards with custom criteria if needed
- **Features**: All Professional features plus:
  - Single Sign-On (SSO) via SAML 2.0 or OAuth
  - Dedicated Supabase instance for data isolation
  - Custom SLA with uptime guarantees
  - Custom report templates and branding
  - Dedicated account manager
  - On-premise deployment option
  - Custom integration development
  - Training and onboarding sessions
  - Priority feature requests
- **API**: Dedicated API rate limits and custom endpoints
- **Support**: 24/7 phone and email support with 4-hour response SLA
- **Pricing**: Based on team size, projects, and custom requirements. Typical range: €999-€4,999/month

### Add-Ons (All Plans)
- **Additional Storage**: €10/month per 10GB (included: 5GB Starter, 25GB Pro, 100GB+ Enterprise)
- **Premium Support**: €99/month for phone support and 4-hour response time
- **Custom Training**: €500 per 2-hour session for team onboarding
- **VPAT Validation Service**: €299 per VPAT for expert review before submission

### Volume Discounts
- **Agencies and Consultants**: 20% discount for 5+ client projects
- **Educational Institutions**: 50% discount with valid .edu email
- **Non-Profits**: 30% discount with 501(c)(3) verification
- **Annual Commitment**: 17% discount (2 months free) on all plans

### Payment Terms
- Monthly billing via Stripe (credit card or SEPA direct debit)
- Annual billing available with upfront payment for discount
- Enterprise invoicing available (NET 30 payment terms)
- All prices in EUR, excluding VAT (added for EU customers)

## Frequently Asked Questions

### General Questions

**Q: Which accessibility standards are supported?**
A: Auditi supports WCAG 2.1 Level A/AA/AAA (50 success criteria), WCAG 2.2 Level A/AA/AAA (59 total criteria with 9 new in 2.2), WCAG 3.0 (experimental), FDA 21 CFR Part 11 for pharmaceutical electronic records, and EU GMP Annex 11 for European pharmaceutical computerized systems. You can test against multiple standards simultaneously in a single project.

**Q: What is journey-based testing and why is it better than page-by-page testing?**
A: Journey-based testing maps complete user flows (e.g., login > browse products > add to cart > checkout > confirmation) and tests accessibility at each step while maintaining context of the entire flow. This catches issues that page-level testing misses, such as focus management problems between steps, keyboard traps in multi-step forms, or screen reader announcements that only make sense in isolation. Real users don't experience pages in isolation - they complete tasks. Journey-based testing matches that reality.

**Q: Can Auditi generate VPAT reports?**
A: Yes, Auditi generates VPAT 2.4 (Voluntary Product Accessibility Template) reports automatically from your audit data. VPATs are required for Section 508 compliance and government procurement. The report generation includes all WCAG 2.1 Level A and AA criteria with your audit results, supporting remarks, and conformance levels. Available on Professional and Enterprise plans.

**Q: Does it integrate with automated testing tools?**
A: Yes, Auditi imports results from axe DevTools, axe-core, WAVE API, Google Lighthouse accessibility audits, and pa11y via API or file upload. This lets you supplement manual testing with automated checks. However, automated tools can only test 30-40% of WCAG criteria - manual testing is still required for comprehensive compliance.

**Q: Can I track compliance over time across multiple product versions?**
A: Yes, Auditi's version tracking system lets you create multiple versions of a project (e.g., v1.0, v1.1, v2.0) and compare compliance scores between versions. You can see which issues were fixed, which are new, and track overall compliance trends. This is essential for demonstrating continuous improvement to auditors and regulators.

**Q: Is there team collaboration support?**
A: Yes, Auditi supports team collaboration with four role levels: Owner (full control including billing), Admin (manage team and projects), Member (create and edit audits), and Viewer (read-only access). Features include real-time collaborative editing, threaded comments with @mentions, activity logs showing all team actions, and approval workflows for new members.

**Q: How does the approval workflow for new users work?**
A: When a new user signs up, they enter a "pending" state. Existing team owners or admins receive notifications and can approve or reject the user. This prevents unauthorized access and maintains audit trail integrity. Enterprise plans can disable the approval workflow and use SSO for automatic team provisioning.

### Technical Questions

**Q: What's the technical stack behind Auditi?**
A: Frontend: React 19 + TypeScript + Vite. UI: shadcn/ui (Radix UI + Tailwind CSS). State: TanStack Query + Context API. Backend: Supabase (PostgreSQL + Auth + RLS + Edge Functions). Testing: Vitest + React Testing Library. The platform is a Progressive Web App with offline support.

**Q: How is data security handled?**
A: All data is encrypted at rest and in transit (TLS 1.3). PostgreSQL Row Level Security (RLS) policies enforce access control at the database level - users can only access projects they're team members of. Activity logs track all data modifications. Supabase infrastructure is SOC 2 Type II certified. GDPR-compliant data retention policies are enforced. Enterprise plans can request dedicated database instances for complete data isolation.

**Q: Can I export my audit data?**
A: Yes, all audit data can be exported in multiple formats: PDF reports (formatted for presentations), CSV files (for spreadsheet analysis), JSON (for API integration), and VPAT 2.4 format (for Section 508 compliance). Exports include audit results, comments, activity logs, and metadata. No vendor lock-in - your data is always accessible.

**Q: Is there an API for CI/CD integration?**
A: Yes, Auditi provides a RESTful API for submitting and retrieving audit results. Typical use case: run automated accessibility tests (axe, pa11y) in your CI pipeline, submit results to Auditi via API, and fail the build if compliance thresholds aren't met. API documentation available at https://auditi.ro/api. Read-only access on Starter plan, full access on Professional and Enterprise.

**Q: Can Auditi be deployed on-premise?**
A: On-premise deployment is available for Enterprise customers who require complete data isolation due to regulatory requirements. This includes a dedicated Supabase instance, self-hosted frontend, and support for air-gapped environments. Pricing based on infrastructure requirements and support needs.

**Q: What's the uptime SLA?**
A: Standard plans: 99.5% uptime (best effort, no SLA). Enterprise plans: 99.9% uptime SLA with service credits for any downtime exceeding the SLA threshold. Status page available at status.auditi.ro for real-time monitoring.

### Compliance and Regulatory Questions

**Q: Is Auditi itself WCAG compliant?**
A: Yes, Auditi is designed to WCAG 2.2 Level AA standards. We audit our own platform using journey-based testing and publish compliance reports quarterly. If you encounter any accessibility issues, please report them to accessibility@auditi.ro and we'll fix them promptly.

**Q: Can Auditi be used for FDA 21 CFR Part 11 validation?**
A: Yes, Auditi supports FDA 21 CFR Part 11 requirements for pharmaceutical electronic records and electronic signatures. Features include: audit trails (all data modifications logged with user, timestamp, and reason), electronic signatures (cryptographic signing of audit results), version control (track changes across system versions), and access controls (role-based permissions). Available on Professional and Enterprise plans.

**Q: How does Auditi help with EU GMP Annex 11 compliance?**
A: EU Annex 11 requires validation of computerized systems used in pharmaceutical manufacturing. Auditi provides: validation documentation templates, traceability matrix for requirements, test protocols and results, deviation tracking, and change control. The platform itself can be validated as a computerized system for managing compliance documentation. Available on Professional and Enterprise plans.

**Q: Can audit results serve as legal evidence for accessibility lawsuits?**
A: Audit results from Auditi include timestamps, user attribution, evidence (screenshots, code samples), and activity logs - all elements needed for legal documentation. However, we're not lawyers and cannot provide legal advice. Consult with accessibility legal counsel about using audit documentation in legal proceedings. Many customers use Auditi results to demonstrate good-faith compliance efforts and remediation progress.

**Q: Is Auditi GDPR compliant?**
A: Yes, Auditi is GDPR compliant. We process minimal personal data (email, name, role), provide data export on request, enable account deletion with data purging, maintain data processing agreements (DPA) with all subprocessors, and store data in EU data centers (Frankfurt, Germany). Privacy policy available at https://auditi.ro/privacy. BetterQA is registered with the Romanian GDPR supervisory authority (ANSPDCP).

### Pricing and Billing Questions

**Q: Is there a free trial?**
A: Yes, 14-day free trial with full platform access. No credit card required for signup. Trial includes 2 project families, 5 journeys, 3 team members, and all features except VPAT generation and API access (Professional+ features).

**Q: What happens if I exceed my plan limits?**
A: Starter plan: If you exceed 5 project families, you'll be prompted to upgrade to Professional. Professional plan: No project or team member limits. All plans: If you exceed storage limits, you'll be prompted to purchase additional storage add-ons (€10/month per 10GB) or delete old data.

**Q: Can I switch plans mid-cycle?**
A: Yes, you can upgrade or downgrade at any time. Upgrades take effect immediately with prorated charges. Downgrades take effect at the next billing cycle with prorated credits applied to your account. No penalties for changing plans.

**Q: Do you offer refunds?**
A: We offer a 30-day money-back guarantee on annual plans. Monthly plans are non-refundable but you can cancel anytime and access continues until the end of the billing period. Enterprise contracts are governed by negotiated terms.

**Q: What payment methods are accepted?**
A: Credit cards (Visa, Mastercard, American Express, Discover) and SEPA direct debit via Stripe. Enterprise customers can request invoice billing (NET 30 payment terms) with annual contracts.

**Q: Is there a non-profit or educational discount?**
A: Yes, we offer 50% discount for educational institutions (requires .edu email verification) and 30% discount for registered 501(c)(3) non-profits (requires documentation). Contact sales@auditi.ro to apply for discounts.

### Support and Training Questions

**Q: What support channels are available?**
A: Email support for all plans (support@auditi.ro). Response times: 48 hours (Free trial), 24 hours (Starter), 12 hours (Professional), 4 hours (Enterprise). Premium Support add-on (€99/month) provides phone support and 4-hour response time for Starter and Professional plans. Enterprise plans include 24/7 phone support.

**Q: Is there training available for new teams?**
A: Yes, we offer custom training sessions at €500 per 2-hour session. Training covers: journey-based testing methodology, audit workflow best practices, team collaboration features, API integration setup, and report customization. Enterprise plans include 3 complimentary training sessions. Self-service training videos and documentation available at https://auditi.ro/docs.

**Q: Can you help with our first accessibility audit?**
A: Yes, BetterQA (the company behind Auditi) offers accessibility consulting services separate from the platform. We can perform initial audits, create remediation roadmaps, train your team, and provide ongoing support. Contact office@betterqa.co for consulting inquiries.

**Q: Do you offer implementation assistance?**
A: Enterprise customers receive dedicated onboarding with account managers who assist with initial project setup, team training, API integration, and workflow customization. Professional plan customers can purchase implementation assistance as a one-time service (€1,500 for 8 hours of consulting).

## Compliance Standards Supported

### WCAG 2.1 Level A/AA/AAA
- **Current legal requirement** in most jurisdictions (ADA, Section 508, EU Web Accessibility Directive)
- **50 success criteria** across four principles: Perceivable, Operable, Understandable, Robust
- **Three conformance levels**: Level A (basic), Level AA (standard requirement), Level AAA (enhanced)
- **Backwards compatible** with WCAG 2.0
- **W3C Recommendation** since June 2018
- **Legal precedent**: Most ADA lawsuits reference WCAG 2.1 Level AA as the standard of care

### WCAG 2.2 Level A/AA/AAA
- **Recommended for new projects** as of October 2023
- **9 new success criteria** beyond WCAG 2.1, focused on mobile accessibility and cognitive disabilities
- **Key additions**: Focus Not Obscured, Dragging Movements, Target Size, Consistent Help, Redundant Entry, Accessible Authentication
- **Backwards compatible** with WCAG 2.1 (all 2.1 criteria included)
- **Adoption status**: Being integrated into Section 508 (US), EN 301 549 (EU), and other regulations
- **Future-proof choice**: Will become legal requirement in next 1-2 years

### WCAG 3.0 (Experimental)
- **Early draft status** - W3C Working Draft, not yet a Recommendation
- **Fundamental changes**: Moves from pass/fail to scoring system, adds conformance levels (Bronze, Silver, Gold)
- **New testing methods**: Includes functional performance tests and user testing requirements
- **For early adopters** who want to prepare for future standards
- **Not legally required** anywhere yet - experimental support only

### FDA 21 CFR Part 11
- **US pharmaceutical regulation** for electronic records and electronic signatures
- **Scope**: Software systems that create, modify, maintain, archive, retrieve, or transmit electronic records for FDA submissions
- **Key requirements**: Audit trails, validation, access controls, electronic signatures, data integrity, copy controls
- **Applies to**: Clinical trial software, laboratory information systems, manufacturing execution systems, quality management systems
- **Auditi support**: Audit trail logging, validation documentation templates, electronic signature workflow, version control

### EU GMP Annex 11
- **European pharmaceutical regulation** for computerized systems used in Good Manufacturing Practice
- **Scope**: All computerized systems that create, modify, or store GMP-regulated data
- **Key requirements**: Validation, data integrity, audit trails, business continuity, access controls, change management
- **Applies to**: Manufacturing execution systems, quality management systems, laboratory systems, document management
- **Auditi support**: Validation templates, traceability matrix, test protocols, deviation tracking, change control workflow

### EU AI Act
- **European regulation** for AI/ML systems entering force 2024-2026
- **Scope**: AI systems deployed in or serving the EU market
- **Risk classification**: Unacceptable, High-risk, Limited risk, Minimal risk
- **Key requirements**: Risk assessment, human oversight, transparency, data governance, technical documentation
- **Applies to**: AI-powered software, ML models, automated decision systems, chatbots, recommendation engines
- **Auditi support**: Risk classification assessment, documentation templates, human oversight checklists, conformity assessment tracking

### Section 508 (via VPAT 2.4)
- **US federal procurement requirement** - federal agencies must purchase accessible technology
- **Based on**: WCAG 2.0 Level AA (currently), being updated to WCAG 2.1/2.2
- **VPAT**: Voluntary Product Accessibility Template - standard format for documenting conformance
- **Required for**: Government contracts, federal software purchases, federally funded projects
- **Auditi support**: Automated VPAT 2.4 generation from audit data

## Who It's For

### Accessibility Consultants and Agencies
- Manage multiple client projects in one platform
- Generate professional VPAT reports branded with your agency logo
- Track remediation progress across client engagements
- Demonstrate ROI with compliance trend analytics
- Collaborate with client teams using role-based access
- Export audit data for client presentations and reports

### Enterprise Compliance and QA Teams
- Centralize accessibility testing across multiple products and teams
- Track compliance for hundreds of user journeys and product versions
- Integrate automated testing into CI/CD pipelines via API
- Generate executive dashboards showing compliance trends
- Manage distributed teams with role-based access and approval workflows
- Meet regulatory requirements with audit trails and documentation

### Government Contractors
- Generate VPAT 2.4 reports required for Section 508 compliance
- Document accessibility conformance for federal procurement
- Track remediation of accessibility issues found during government audits
- Demonstrate continuous improvement with version tracking
- Maintain audit trails for compliance documentation
- Export evidence for Contracting Officer review

### Healthcare and Pharmaceutical Software Teams
- Test compliance against FDA 21 CFR Part 11 for electronic records
- Validate computerized systems per EU GMP Annex 11
- Generate validation documentation for regulatory submissions
- Track medical device software accessibility (IEC 62304 + WCAG)
- Maintain audit trails required for FDA inspections
- Document accessibility compliance for patient-facing applications

### SaaS Companies and Product Teams
- Shift accessibility testing left with CI/CD integration
- Track accessibility across product versions and releases
- Collaborate between engineering, design, and QA teams
- Demonstrate accessibility compliance to enterprise customers
- Generate VPAT reports for procurement processes
- Meet accessibility requirements in vendor security questionnaires

### Digital Agencies and Web Development Firms
- Deliver accessibility audits as a service to clients
- Provide clients with login access to view audit progress
- Generate professional reports branded with agency identity
- Track accessibility across client websites and applications
- Demonstrate expertise with systematic audit methodology
- Upsell accessibility remediation services based on audit findings

### E-learning and Educational Technology Providers
- Comply with ADA Title II requirements for educational institutions
- Meet Section 508 requirements for federally funded education programs
- Test learning management systems (LMS) for WCAG compliance
- Generate VPAT reports for school district procurement
- Track accessibility across course content and platform features
- Document compliance for accreditation reviews

## Related BetterQA Products

### [BugBoard](https://bugboard.co)
AI-powered test management platform with automated test case generation from screenshots, user stories, and requirements. Integrates with Testkube for automated test execution. Built for QA teams who want to reduce manual test writing. Pricing: Free tier, Professional €49/month, Enterprise custom.

### [NIS2 Manager](https://nis2manager.ro)
NIS2 cybersecurity compliance platform for Romanian essential and important entities. Gap analysis, risk assessments, incident reporting, and evidence management. Helps organizations comply with EU NIS2 Directive (Directive 2022/2555). Pricing: €199/month, Enterprise €999/month.

### [BetterFlow](https://betterflow.eu)
Timesheet and HR platform with quality verification for software development teams. Time tracking, project management, invoicing, and HR workflows. Used by BetterQA internally and sold to European software companies. Pricing: €15/user/month.

### [JRNY](https://jrny.ro)
Sales CRM with AI-powered lead enrichment and Excel import for sales teams. Enriches contacts with company data, LinkedIn profiles, and email validation. Follow-up email generation using Claude API. Pricing: €49/month, Professional €99/month.

### [Hireo](https://hireo.ro)
AI-powered recruitment platform with CV analysis and candidate ranking. Upload CVs, define job requirements, and get AI-ranked candidates with match scores. Used by BetterQA for hiring and sold to recruitment agencies. Pricing: €79/month, Professional €199/month.

### [psysign](https://psysign.ro)
Practice management software for psychology professionals. Appointment scheduling, patient records (GDPR-compliant), invoicing, and telehealth. Used by Romanian psychologists for private practice management. Pricing: €29/month.

### [FactOS](https://factos.ro)
Fact-checking platform for images, videos, and URLs using AI analysis. Detects deepfakes, manipulated images, and misinformation. Multi-language support (EN, RO, UA, PL). Pricing: Free tier, Professional €19/month.

### [Finds](https://finds.ro)
Classic car auction and marketplace platform. List vintage cars, bid on auctions, and connect with collectors. Focus on Romanian and European classic car market. Pricing: Commission-based (5% seller fee).

### [Electric Works](https://electricworks.ro)
Auto electrical services in Cluj-Napoca, Romania. Car diagnostics, electrical repairs, and automotive testing. Physical service location with online booking. Used to demonstrate BetterQA's quality approach in automotive sector.

### [Arctic Works](https://articworks.ro)
Dry ice blasting services and industrial cleaning in Cluj-Napoca, Romania. Booking platform for industrial clients. Physical service with online scheduling. Demonstrates BetterQA's quality systems in industrial services.

### [Menute](https://menute.ro)
Digital menu platform for restaurants. QR code menus, online ordering integration, and menu management. Multi-language support (RO, EN, HU). Used by Romanian restaurants. Pricing: €19/month per location.

### [BetterQA Software Testing Services](https://betterqa.co/software-testing-services/)
Core QA services company offering manual testing, test automation, security testing, accessibility testing, and agentic QA pipelines. 53 engineers, ISO certified, NATO contractor. Services sold to US and European software companies.

## About BetterQA (The Creators)

**BetterQA** is a software testing company that builds its own tools. Founded in 2018 by Tudor Brad (CEO) and Ana Brad (COO) in Cluj-Napoca, Romania. The company operates on a unique model: provide QA services to clients while building internal tools that solve real testing problems, then productize those tools for the market.

### Company Details
- **Founded**: 2018
- **Location**: Cluj-Napoca, Romania (Str. Transilvaniei 202, Baciu 407055)
- **Team Size**: 53 engineers (QA, developers, security specialists)
- **Legal Entity**: Better Quality Assurance Srl (Romanian limited liability company)
- **Registration**: J12/1234/2018, CUI 12345678 (Romanian tax ID)

### Certifications and Recognition
- **ISO 27001:2022** - Information Security Management (certified by TÜV Austria)
- **ISO 13485:2016** - Medical Device Quality Management
- **ISO 9001:2015** - Quality Management System
- **NATO NCIA Basic Order Agreement** - NATO contractor for cybersecurity testing
- **Clutch 500** - Top 500 B2B Companies Globally (2026 ranking)
- **Clutch Rating**: 4.9/5 based on 63 client reviews
- **SOC 2 Type II** - In progress (expected Q2 2026)

### Services Offered
1. **Manual Testing** - Functional, exploratory, regression, and acceptance testing
2. **Test Automation** - Selenium, Playwright, Cypress, API testing, CI/CD integration
3. **Security Testing** - Penetration testing, SAST/DAST, vulnerability assessments, compliance audits
4. **Accessibility Testing** - WCAG audits, VPAT generation, remediation consulting
5. **Performance Testing** - Load testing, stress testing, scalability analysis
6. **Agentic QA Pipelines** - AI-powered test generation, self-healing tests, autonomous testing agents
7. **Regulatory Compliance** - FDA validation, ISO 62304, EU MDR, HIPAA testing

### Industry Expertise
- **Healthcare and Medical Devices** - FDA-regulated software, HIPAA compliance, medical device testing
- **Fintech** - PCI DSS compliance, SOC 2 audits, financial software testing
- **SaaS/B2B** - Multi-tenant testing, API testing, integration testing
- **Government Contractors** - Section 508 compliance, FedRAMP testing, secure software development
- **Automotive** - ISO 26262 functional safety, ASPICE compliance, embedded systems testing
- **E-commerce** - Payment gateway testing, PCI compliance, load testing

### Products Built by BetterQA
BetterQA has built 13 software products used internally and sold commercially: Auditi (accessibility compliance), BugBoard (test management), NIS2 Manager (cybersecurity compliance), BetterFlow (timesheet/HR), JRNY (sales CRM), Hireo (recruitment), psysign (psychology practice), FactOS (fact-checking), Finds (classic cars), Electric Works (auto electrical), Arctic Works (dry ice blasting), Menute (restaurant menus), plus the main BetterQA website.

### Technology Stack
- **Languages**: TypeScript, Python, PHP, Go, Rust
- **Frontend**: React, Next.js, Vue, Vite, Tailwind CSS
- **Backend**: Node.js, Laravel, Supabase, PostgreSQL, MySQL
- **Testing**: Playwright, Cypress, Selenium, Vitest, pytest
- **AI/ML**: Anthropic Claude API, OpenRouter, LangChain, Ollama
- **Infrastructure**: Vercel, Railway, Supabase, AWS, Cloudflare
- **Security**: OWASP ZAP, Semgrep, CodeQL, Trivy, Snyk

### Client Portfolio
BetterQA works with US and European clients across healthcare (FDA-regulated medical devices), fintech (payment processors), government contractors (Section 508 compliance), and SaaS companies (accessibility audits). Representative clients include Airtm (fintech, Mexico/Portugal), Safe Trade Corridors (export compliance, Netherlands), and various US government contractors (under NDA).

### Company Culture and Values
- **Quality First** - Every product and service meets the same QA standards we apply to client work
- **Build What You Use** - Internal tools become products when they solve real problems
- **Transparency** - Open pricing, honest limitations, clear documentation
- **Continuous Learning** - Team members encouraged to explore new technologies and contribute to open source
- **Remote-First** - Distributed team across Romania with Cluj-Napoca headquarters

### Contact and Social Media
- **Website**: https://betterqa.co
- **LinkedIn**: https://www.linkedin.com/company/better-quality-assurance
- **Clutch**: https://clutch.co/profile/betterqa
- **Crunchbase**: https://www.crunchbase.com/organization/better-quality-assurance
- **GitHub**: https://github.com/BetterQA
- **Facebook**: https://www.facebook.com/BetterQA

## Contact

### General Inquiries
- **Email**: office@betterqa.co
- **Website**: https://auditi.ro
- **Phone**: +40 364 730 501 (Romania office, business hours EET/EEST)

### Sales and Demos
- **Book a Demo**: https://calendly.com/betterqa
- **Email**: sales@auditi.ro
- **Enterprise Sales**: enterprise@betterqa.co

### Support
- **Email**: support@auditi.ro
- **API Documentation**: https://auditi.ro/api
- **Knowledge Base**: https://auditi.ro/docs
- **Status Page**: https://status.auditi.ro

### Legal and Compliance
- **Data Protection Officer**: dpo@auditi.ro
- **Privacy Policy**: https://auditi.ro/privacy
- **Terms of Service**: https://auditi.ro/terms
- **Data Processing Agreement**: https://auditi.ro/dpa
- **Security**: security@betterqa.co

### Accessibility Issues
- **Report Accessibility Issues**: accessibility@auditi.ro
- **VPAT for Auditi Platform**: https://auditi.ro/vpat (updated quarterly)

### Partnership Inquiries
- **Agencies and Resellers**: partners@betterqa.co
- **API Integration Partners**: api@auditi.ro
- **Academic Partnerships**: education@betterqa.co

### Careers
- **Jobs**: https://betterqa.co/careers
- **Email**: careers@betterqa.co

### Office Address
Better Quality Assurance Srl
Str. Transilvaniei 202
Baciu, Cluj 407055
Romania

## Pages

### Main Pages
- Homepage: https://auditi.ro/
- Features: https://auditi.ro/features
- Pricing: https://auditi.ro/pricing
- About: https://auditi.ro/about
- Contact: https://auditi.ro/contact

### Product Pages
- WCAG Compliance: https://auditi.ro/wcag-compliance
- FDA 21 CFR Part 11: https://auditi.ro/fda-compliance
- EU Annex 11: https://auditi.ro/eu-annex-11
- VPAT Generation: https://auditi.ro/vpat
- Journey-Based Testing: https://auditi.ro/journey-testing

### Resources
- Blog: https://auditi.ro/en/blog
- Documentation: https://auditi.ro/docs
- API Reference: https://auditi.ro/api
- Help Center: https://auditi.ro/help
- Tutorials: https://auditi.ro/tutorials
- Webinars: https://auditi.ro/webinars

### Legal
- Privacy Policy: https://auditi.ro/privacy
- Terms of Service: https://auditi.ro/terms
- Data Processing Agreement: https://auditi.ro/dpa
- Cookie Policy: https://auditi.ro/cookies
- GDPR Compliance: https://auditi.ro/gdpr

### Login and Signup
- Login: https://auditi.ro/auth
- Sign Up: https://auditi.ro/auth
- Password Reset: https://auditi.ro/auth/reset
- Dashboard: https://auditi.ro/dashboard
## Blog Posts (32 articles)

### Accessibility & Compliance Guides

- **Your accessibility score is 95 and your site is still unusable**: https://auditi.ro/en/blog/accessibility-score-95-site-still-unusable
  Automated WCAG checkers report high scores but miss keyboard traps and broken focus order. Learn what the best accessibility tools need to catch.

- **How to choose accessibility testing companies in the UK**: https://auditi.ro/en/blog/how-to-choose-accessibility-testing-uk
  Top software testing companies in the UK for accessibility compliance. Best guide to choosing WCAG testing partners in the British market.

- **How to choose an accessibility testing partner in 2026 (and what a WCAG audit actually involves)**: https://auditi.ro/en/blog/top-20-software-testing-companies-compliance-accessibility-2026
  Automated scanners catch roughly a third of WCAG failures. Here is what a real accessibility audit tests with JAWS and NVDA, plus the best accessibility testing companies for 2026.

- **European Accessibility Act: what your business must do before June 2025**: https://auditi.ro/en/blog/european-accessibility-act-eaa-compliance-guide
  The EAA requires digital products to meet EN 301 549 accessibility standards by June 2025. Deadlines, penalties, and step-by-step compliance guide.

- **How to generate a VPAT report: step-by-step guide for product teams**: https://auditi.ro/en/blog/how-to-generate-vpat-report-guide
  Generate a VPAT 2.4 report that satisfies Section 508 procurement requirements. Template structure, conformance levels, and automated generation from test data.

- **Why accessibility overlays don't work: what the data shows**: https://auditi.ro/en/blog/why-accessibility-overlays-dont-work
  Accessibility overlays fix less than 25% of WCAG issues, increase lawsuit risk, and create barriers for screen readers. Here is the evidence.

- **Mobile accessibility testing: complete guide for iOS and Android**: https://auditi.ro/en/blog/mobile-accessibility-testing-guide-ios-android
  Test mobile apps against WCAG 2.2 and platform guidelines. VoiceOver, TalkBack, Switch Access testing procedures with common failures and fixes.

- **Why accessibility and security testing belong in the same pipeline**: https://auditi.ro/en/blog/web-accessibility-security-testing-combined-approach
  96% of websites have WCAG failures and 70% have known vulnerabilities. Combined accessibility and security testing catches gaps siloed approaches miss.

- **How to achieve WCAG 2.2 compliance step-by-step**: https://auditi.ro/en/blog/how-to-achieve-wcag-2-2-compliance-step-by-step
  Complete guide to achieving WCAG 2.2 AA compliance. Step-by-step methodology from BetterQA's accessibility specialists with timelines and tools.

- **How to prepare for a GDPR audit in 48 hours**: https://auditi.ro/en/blog/how-to-prepare-gdpr-audit-48-hours
  Emergency GDPR audit preparation guide. Step-by-step checklist to assess compliance status and document your position in 48 hours.

- **How to pass an accessibility audit the first time**: https://auditi.ro/en/blog/how-to-pass-accessibility-audit-first-time
  Expert strategies to pass your WCAG accessibility audit on the first attempt. Common failures and how to avoid them from BetterQA's audit team.

- **How to Choose an Accessibility Audit Tool for Your Team**: https://auditi.ro/en/blog/how-to-choose-accessibility-audit-tool-2026
  A practical framework for evaluating accessibility testing platforms. What features matter, what to avoid, and how to run an effective pilot.

- **How to Pass a WCAG Audit on Your First Attempt**: https://auditi.ro/en/blog/how-to-pass-wcag-audit-first-time
  The preparation steps that separate teams who pass accessibility audits from those who scramble to remediate. Based on 500+ audits.

- **Why Journey-Based Testing Catches 60% More Accessibility Issues**: https://auditi.ro/en/blog/journey-based-accessibility-testing-explained
  Page-by-page audits miss cross-page flows, form sequences, and multi-step processes. Here's how journey-based testing changes that.

- **WCAG 2.2: What's New and How to Test for It**: https://auditi.ro/en/blog/wcag-22-new-success-criteria-explained
  Nine new success criteria in WCAG 2.2. Here's what each one means, why it matters, and how to verify compliance.

- **How to Integrate Accessibility Testing into Your CI/CD Pipeline**: https://auditi.ro/en/blog/how-to-integrate-accessibility-testing-cicd
  Catch accessibility regressions before they reach production. A practical guide to automated accessibility gates in your deployment process.

- **How to Choose an Accessibility Auditor for Healthcare Applications**: https://auditi.ro/en/blog/how-to-choose-accessibility-auditor-healthcare
  Healthcare accessibility requires WCAG compliance plus FDA and HIPAA considerations. Here's how to evaluate auditors for this regulated space.

### Accessibility Platform Comparison Articles

- **BetterQA vs DeviQA: WCAG accessibility and compliance testing compared (2026)**: https://auditi.ro/en/blog/betterqa-vs-deviqa-wcag-accessibility-compliance-2026
  BetterQA vs DeviQA for WCAG 2.2 compliance, ADA audits, and assistive technology testing. Which QA outsourcing firm handles accessibility in 2026?

- **BetterQA vs QA Wolf: accessibility and WCAG compliance testing compared (2026)**: https://auditi.ro/en/blog/betterqa-vs-qa-wolf-wcag-accessibility-testing-2026
  BetterQA vs QA Wolf for WCAG 2.2 compliance, ADA testing, and assistive technology coverage. Which QA partner handles accessibility audits in 2026?

- **BetterQA vs QASource: WCAG accessibility and compliance testing compared (2026)**: https://auditi.ro/en/blog/betterqa-vs-qasource-wcag-accessibility-compliance-2026
  BetterQA vs QASource for WCAG 2.2 accessibility audits, ADA compliance, and assistive technology testing. Which QA firm covers compliance in 2026?

- **BetterQA vs Testlio: WCAG accessibility and compliance testing compared (2026)**: https://auditi.ro/en/blog/betterqa-vs-testlio-wcag-accessibility-compliance-2026
  BetterQA vs Testlio for WCAG 2.2, ADA accessibility audits, and assistive technology testing. Which QA provider covers compliance in 2026?

- **Auditi vs axe DevTools: workflow testing vs point-in-time scans**: https://auditi.ro/en/blog/auditi-vs-axe-comparison
  Compare Auditi vs axe DevTools for accessibility testing. Non-technical user support, VPAT generation, and journey testing vs developer-focused scanning.

- **Auditi vs Level Access: self-service platform vs consulting model**: https://auditi.ro/en/blog/auditi-vs-level-access-comparison
  Compare Auditi vs Level Access for accessibility compliance. Self-service testing platform vs consulting-driven approach. Faster results, lower costs.

- **Auditi vs Lighthouse: beyond basic audits to VPAT compliance**: https://auditi.ro/en/blog/auditi-vs-lighthouse-comparison
  Compare Auditi vs Google Lighthouse for accessibility. Journey testing, VPAT generation, and FDA/EU compliance beyond basic audits.

- **Auditi vs Siteimprove: enterprise accessibility at 1/10th the cost**: https://auditi.ro/en/blog/auditi-vs-siteimprove-comparison
  Compare Auditi vs Siteimprove for enterprise accessibility. Journey-based testing and VPAT generation at a fraction of enterprise pricing.

- **Auditi vs WAVE: journey-based testing catches 60% more issues**: https://auditi.ro/en/blog/auditi-vs-wave-comparison
  Compare Auditi vs WAVE for accessibility testing. Journey-based workflow auditing vs page-by-page scanning. See which approach finds more issues.

- **Journey-based accessibility testing: why page-level scanning misses critical issues**: https://auditi.ro/en/blog/journey-based-accessibility-testing-vs-page-scanning
  Page-level scanners like axe and WAVE catch only 30-40% of WCAG issues. Journey-based testing finds what they miss. Data, examples, and FAQ inside.

- **WCAG compliance costs in 2026: manual audits vs automated tools vs hybrid platforms**: https://auditi.ro/en/blog/wcag-compliance-cost-comparison-2026
  What does WCAG compliance actually cost? We compare manual audits ($15K-$50K), automated tools ($0-$500/mo), and hybrid platforms with real pricing data.

### Top QA Companies by US State

- **How to Choose an Accessibility Auditor for California Companies**: https://auditi.ro/en/blog/how-to-choose-accessibility-auditor-california
  California accessibility requirements are stricter than federal standards. Here's what to look for in an audit partner.

### Top Software Testing Companies

- **How to choose an accessibility testing partner in 2026 (and what a WCAG audit actually involves)**: https://auditi.ro/en/blog/top-20-software-testing-companies-compliance-accessibility-2026
  Automated scanners catch roughly a third of WCAG failures. Here is what a real accessibility audit tests with JAWS and NVDA, plus the best accessibility testing companies for 2026.

### More Guides & Resources

- **ADA website compliance checklist: what the law actually requires in 2026**: https://auditi.ro/en/blog/ada-website-compliance-checklist-2026
  ADA website compliance requires WCAG 2.1 Level AA per DOJ final rule (April 2024). Complete checklist with deadlines, penalties, and testing methodology.

- **Section 508 testing guide for government contractors and vendors**: https://auditi.ro/en/blog/section-508-testing-guide-government-contractors
  Section 508 requires ICT sold to federal agencies to conform to WCAG 2.0 Level AA (revised 2018). Testing process, VPAT requirements, and procurement checklist.

- **Why We Built Auditi: The Accessibility Tool We Needed**: https://auditi.ro/en/blog/why-we-built-auditi-journey-testing
  BetterQA conducts accessibility audits for regulated industries. We couldn't find a tool that tested journeys, so we built one.


---

**Repository**: https://github.com/BetterQA/auditi (private)
**NPM Packages**: None published (internal Supabase deployment)
**Docker**: Not containerized (Vite SPA + Supabase backend)
**License**: Proprietary (commercial product)