WCAG 2.2 · GIGW 3.0 · STQC · EN 301 549

By Ornate · ITQCR STQC-SAB-SETL-1

Accessibility re-verification, with evidence your auditor will accept.

Continuous WCAG 2.2 AA, GIGW 3.0 and STQC checks with screenshot proof per issue and engineering-ready remediation — the audit pack between your audits.

No card requiredPublic shareable reportResults in < 2 minutes4,700+ professionals visitedITQCR — GOI-authorized STQC testing lab

Try it now

Run a scan in under two minutes.

Scan form

Add phone (optional)

Built against

  • WCAG 2.2 AAW3C — current revision
  • GIGW 3.0Govt. of India, MeitY
  • STQCSurveillance audits
  • EN 301 549European procurement
  • IAAP-alignedCPACC + WAS methodology
  • Section 508US federal parity
GIGW 3.0 compliance is now mandatory for all Central and State government websites.What changed →

Why re-verification

An annual audit proves a moment. Compliance lives in every release.

Your IAAP or STQC certification documents what was true the day the auditor signed off. Three releases later — a redesigned header, a new circulars page, an updated form — the evidence on file is stale, and the next surveillance review starts with the gap.

AccessSure runs the re-verification pass between audits. Same standards. Same evidence format your reviewer already accepts. Continuously.

What you ship to legal

A scanner tells you what failed. Evidence tells you why it matters.

Screenshot evidence per issue

Every flagged violation ships with an annotated screenshot of the failing element in its real page context — not a DOM diff a developer has to decode.

Re-verification audit packs

STQC and GIGW surveillance reports formatted to the line items reviewers expect — exportable as PDF, DOCX or JSON. The format your auditor already uses.

Engineering remediation

Each finding includes the WCAG success criterion, the failing selector, the fix pattern and the priority — written for the developer who has to ship it.

The overlay problem

A widget cannot fix your code. STQC auditors know.

Some tools sell you a JavaScript widget that runs over your page and calls it remediated. Bring that to a STQC review. The auditor will open your source HTML, run NVDA, and the violations will still be there — because screen readers read the DOM, not the widget's runtime patch.

AccessSure is built by the team behind ITQCR — Ornate Software Solutions' GOI-authorized STQC testing division. We test the real page, build evidence from the real DOM, and hand developers the exact line of HTML that needs to change. Permanently.

CapabilityAccessSureOverlay toolManual audit only
Tests the actual source HTML
Evidence accepted by STQC / GIGW reviewers
Annotated screenshot per violationDepends on firm
Exact broken code + corrected fix
India-specific: GIGW 3.0 + bilingualVaries
Self-serve — no sales call needed
Continuous re-verification
PDF / document remediation
Built by a GOI-authorized STQC labVaries

Standards coverage

What gets checked, organised by WCAG principle.

AccessSure runs the deterministic axe-core ruleset alongside vision-model heuristics that read the rendered page. Below is a representative slice of what each scan covers — the full criterion list ships in the report appendix.

Perceivable

  • Color contrast (1.4.3 / 1.4.11)
  • Image alt text (1.1.1)
  • Captions & audio (1.2.x)
  • Resize & reflow (1.4.4 / 1.4.10)

Operable

  • Keyboard navigation (2.1.x)
  • Focus visible & order (2.4.7 / 2.4.3)
  • Skip links & landmarks (2.4.1)
  • Pointer & target size (2.5.x)

Understandable

  • Language of page (3.1.1)
  • Form labels & instructions (3.3.2)
  • Error identification (3.3.1)
  • Consistent navigation (3.2.3)

Robust

  • Valid name/role/value (4.1.2)
  • Status messages (4.1.3)
  • Parsing & ARIA hygiene
  • Document & PDF structure

The process

Four steps to defensible compliance.

  1. Point us at a URL

    Paste a domain, a sitemap, or a single page. We crawl with a real Chromium browser — same DOM your users see.

  2. Scan with axe + AI heuristics

    axe-core handles the deterministic rules. A vision model reviews each captured screenshot for issues a static analyzer can't see.

  3. Evidence is generated

    Every finding is paired with an annotated screenshot, the failing selector, and the WCAG criterion it maps to.

  4. Hand off the audit pack

    Export the GIGW / STQC formatted report. Engineering gets ticket-ready remediation; compliance gets the surveillance pack.

Built for

Three teams, one standard of evidence.

Government IT departments

Maintain GIGW 3.0 conformance between STQC surveillance cycles. Catch regressions the moment a circular or notification page ships.

Enterprise compliance teams

Annual IAAP audits prove a point in time. AccessSure re-verifies after every release so the evidence stays current — not eleven months stale.

Accessibility consultancies

Cover larger client portfolios with automated coverage layered under your manual review — in the evidence format your auditors already accept.

The full picture

India's only full-stack accessibility compliance platform.

Ornate Software Solutions built AccessSure alongside ITQCR — a GOI-authorized STQC empanelled testing lab. The same team that certifies government websites built the tool. That means every part of the compliance surface is covered, not just the automated slice that's easy to productise.

Pricing

Start free. Scale when the evidence matters.

Full pricing

Free Snapshot

Homepage scan, instant public report.

₹0single scan
  • Single URL
  • WCAG 2.2 AA quick check
  • Public shareable report
Run a snapshot

Automated

Continuous re-verification across your site.

₹10,000/ month
  • Multi-page crawl
  • Screenshot evidence
  • Scheduled scans
  • Team access
Start automated

IAAP Audit

Manual + automated audit, IAAP-aligned.

₹50,000/ scan
  • Reviewer-led audit
  • STQC / GIGW pack
  • Remediation handoff
  • Re-test included
Book an audit

Questions

Things compliance teams actually ask.

Is GIGW 3.0 compliance mandatory for Indian government websites?

Yes. MeitY circulars require all Central and State government ministries, departments, and PSU portals to comply with GIGW 3.0 and obtain a STQC Certificate of Quality Website (CQW). Non-compliant portals risk failing government IT audits and procurement evaluations.

How is GIGW 3.0 different from WCAG 2.2?

GIGW 3.0 is a superset of WCAG 2.1 Level AA — not WCAG 2.2. It covers 88 mandatory checkpoints: 25 Quality, 50 Accessibility (the WCAG 2.1 AA layer), 3 Security (CERT-In VAPT), and 10 Lifecycle Management. A WCAG-compliant website is not automatically GIGW 3.0 compliant — GIGW adds 38 checkpoints covering content quality, broken links, security disclosures, and lifecycle governance that WCAG does not address.

Does the SEBI July 2025 accessibility mandate apply to private financial companies?

Yes. The SEBI circular SEBI/HO/ITD-1/ITD_VIAP/P/CIR/2025/111 applies to all SEBI-regulated entities — AIFs, brokers, mutual funds, portfolio managers, credit rating agencies, and depositories — regardless of whether they are public or private. Full WCAG 2.1/2.2 AA and IS 17802 compliance is required by July 31, 2026. Auditors must hold IAAP certification (CPACC or WAS); our ITQCR audit team is IAAP-certified.

What is IS 17802 and how does it relate to WCAG?

IS 17802 is India's Bureau of Indian Standards (BIS) ICT accessibility standard, harmonised with WCAG 2.1. RBI and SEBI both reference IS 17802 alongside WCAG compliance. An IS 17802 conformance test is effectively a WCAG 2.1 test performed under the BIS standard framework — AccessSure maps scan results to IS 17802 criteria automatically.

What is the difference between an accessibility audit and re-verification?

An audit is the initial conformance review against WCAG 2.2 AA or GIGW 3.0. Re-verification is the periodic re-test that proves the site still conforms after code changes, content updates, or a redesign. AccessSure handles continuous re-verification between formal audit cycles — catching regressions before they reach the STQC reviewer.

Can automated tools fully check GIGW 3.0 compliance?

No tool — including ours — can automate 100% of GIGW checks. Automated scanning reliably covers approximately 40–60% of testable criteria. The remainder — keyboard navigation, screen reader interaction, cognitive assessment, and CERT-In security disclosures — requires expert manual review. AccessSure flags every criterion that needs human review and packages it into the audit format reviewers already use.

What is a CQW Certificate and who issues it?

The Certificate of Quality Website is issued by STQC (Standardisation Testing and Quality Certification Directorate) under MeitY after a website passes all four pillars of GIGW 3.0: Quality, Accessibility, Security, and Lifecycle Management. The certification requires an audit by an STQC-empanelled laboratory like ITQCR, followed by STQC's own review and verification.

Does AccessSure replace a manual IAAP audit?

No. A formal IAAP-led manual audit is still required for CQW certification and SEBI compliance milestones. AccessSure runs automated re-verification between those audits, catches regressions early, and supplies the screenshot evidence pack and STQC-format report that reviewers ask for — dramatically reducing the time your auditors spend gathering evidence.

What evidence is included in the scan report?

For each finding: the WCAG success criterion reference (e.g., WCAG 2.2 AA – 1.4.3), severity level, failing element selector, an annotated screenshot, the page URL, and a developer-ready fix recommendation. Reports export as PDF, DOCX, or JSON for ingestion into GRC tools or direct STQC submission.

How does AccessSure compare to Deque axe, WAVE, or Siteimprove?

Deque axe, WAVE, and Siteimprove are global tools with no GIGW 3.0 awareness — they cannot map results to GIGW's 88-checkpoint structure, generate STQC-format audit reports, or integrate with the CQW certification pathway. AccessSure is the only scanner built specifically for the Indian government compliance ecosystem, operated by ITQCR — an STQC SAB SETL-1 empanelled laboratory.

Ready when you are.

Run a free snapshot of any URL. No card, no commitment — just see what's there.