Skip to main content
For teams in the United States · updated 2026-10-12

What changes when you buy from the United States

Automated testing software for US engineering teams: WCAG 2.1 AA audits for the ADA Title II web rule, Section 508 conformance reports in the VPAT format, API and load testing, and security scans that ship their evidence. Priced in USD.

The laws a testing buyer in United States has to satisfy

Checked on 2026-10-12: 2 of 3 read at the statute, regulator or government page; the rest from law-firm or practitioner summaries, marked as such. A law changes; this table carries the date so you can tell when it needs re-checking.

Laws and standards for United States (checked 2026-10-12)
Law or standardWhat it requires of youStatus as checkedSource read
ADA Title II web rule (28 CFR part 35)State and local government web content and mobile apps must conform to WCAG 2.1 Level AA.Published 24 April 2024. An Interim Final Rule of 20 April 2026 moved the compliance dates to 26 April 2027 (entities serving 50,000 or more people) and 26 April 2028 (smaller entities and special district governments).www.federalregister.govprimary source
Section 508 (Revised 508 Standards)Federal agencies, and the ICT they procure, must meet WCAG 2.0 Level AA; buyers ask for an Accessibility Conformance Report, usually in the VPAT format.In effect since 18 January 2018.www.section508.govprimary source
State comprehensive privacy lawsProcessor obligations for personal data of residents of the states with comprehensive privacy statutes (California, Virginia, Colorado, Connecticut, Texas and others); none restricts a transfer to India.Around twenty-three state laws by 2026 according to industry trackers; the count is reported, not verified against each statute.iapp.orgsecondary source

Where your data goes, and what covers it

Customer data is hosted in Mumbai, India. No US federal law restricts the transfer; state privacy laws may require a processor agreement, which the Data Processing Addendum provides by reference on every plan. Enterprise customers can run the platform on their own infrastructure instead.

The full table of instruments by regime is section 5 of the Data Processing Addendum; the current state of every certification we do and do not hold is on the trust centre.

The accessibility target for United States

WCAG 2.1 AA for the Title II rule, WCAG 2.0 AA for Section 508. The audit runs against WCAG 2.2 A, AA and AAA, which contains both, and the VPAT export is generated from the scan rather than from a questionnaire.

Audits map findings to sixty-six country standards and export a conformance report; how the accessibility module works.

The words United States uses for the need, mapped

The same job has a different name in every market, and sometimes the honest answer is that the name describes a service we are not.

Test automation tools, automated testing software

A recorder that turns a browser flow into a regression test, with locator heals a person approves.

Test recorder

QA automation platform

UI, API, load, security and accessibility testing on one recorded asset.

Every module

API testing tool

REST, GraphQL, gRPC and SOAP with contract checks and collection runs.

API testing studio

Load testing tool

Load profiles from a recorded flow or a plain-language description; P50 to P99.9 in real time.

Performance and load

Pentest tool, penetration testing software

OWASP scans and authorised exploitation steps against targets whose ownership is proven, with the request and response attached to every confirmed finding.

Security testing

ADA website compliance checker, VPAT, Section 508 testing

WCAG 2.2 audits with a VPAT-format conformance report generated from the scan.

Accessibility audits

Billing and support hours

Prices are quoted in US dollars on every plan, before any tax your jurisdiction applies to imported software services. Self-serve plans are paid by card; Enterprise agreements are invoiced. If procurement needs a quotation with your tax identifiers, ask through the contact form (topic: billing).

US Eastern Time is 9.5 hours behind Indian Standard Time (10.5 hours in winter); Pacific Time is 12.5 hours behind (13.5 in winter). Support is answered from India; response targets by plan are on the service levels page.

Plans and caps are on the pricing page; response targets by plan are on the service levels page.

Questions teams in United States ask

Do you produce a VPAT?

Yes. The accessibility module generates an Accessibility Conformance Report in the VPAT format from a real scan of your application, with each criterion marked from what the audit found rather than from a self-declaration.

Which WCAG version should a US public body target?

WCAG 2.1 AA under the ADA Title II web rule, with compliance dates in April 2027 and April 2028 depending on population served; WCAG 2.0 AA under Section 508 for federal agencies. Auditing against WCAG 2.2 AA covers both.

Is there a US data centre?

No. Cloud tenants are hosted in Mumbai, India. No US federal law restricts the transfer; Enterprise customers who need the data to stay in the United States can run the platform on their own infrastructure with feature parity.

Can you answer a SOC 2 questionnaire?

We hold no SOC 2 report and say so rather than imply one. We answer security questionnaires in writing from the controls we hold, and the vendor evaluation checklist publishes our answers to thirty of the usual questions, including the ones we answer no to.

Next step

Start on the Free plan, or bring one flow from your own product and we record it live.

Your choice about analytics

We use one optional analytics tool, run on our own servers, to see which pages help people. It stays off unless you turn it on. Storage needed to sign you in, keep the site secure and remember this choice is always on. Cookie Policy