PRICING
Plans that scale with your organization
Every plan includes the remediation workspace, multi-standard scanning, and team workflow. Choose the limits that fit your organization.
Annual plans are billed at 11 months. One month free.
Prices in USD. Your local currency and any tax are applied at checkout. VAT and GST reverse charge available. Full currency and tax detail.
Already have an account? Sign in to Pallas.
Starter
Best for individuals, freelancers, and small teams up to 3 members.
$149/mo
- 5 web assets, 10 document assets
- 20 scans per month
- 3 team members
- Remediation workspace
- Practitioner report
- PDF & CSV export
- Email support
Secure checkout via Stripe. OAuth signup after payment. Cancel anytime.
Growth
For teams that need the full remediation workflow: 25 web assets, 50 documents, 10 team members.
$399/mo
- 25 web assets, 50 document assets
- 100 scans per month
- 10 team members
- Full remediation workflow
- Exceptions register
- Executive reporting
- Accessibility statement, generated from your scan results and kept current as you remediate
- Rule configuration: disable rules, set severity, per organisation
- Email support
Secure checkout via Stripe. OAuth signup after payment. Cancel anytime.
Enterprise
For portfolios: unlimited assets, 50 team members, full governance and audit trail.
$999/mo
- Unlimited web & document assets
- Unlimited scans
- 50 team members
- Full governance suite and audit trail
- Custom retention policies
- Procurement evidence pack: VPAT/ACR, statement, scan history, audit-log extract, one download
- Per-regulation views: AODA, EAA, Section 508
- Time to remediate, by owner and by severity
- Email support
Secure checkout via Stripe. OAuth signup after payment. Cancel anytime.
Prices shown in USD. Displayed in your local currency at checkout via Stripe Adaptive Pricing. Tax is added at checkout where applicable. Business buyers with a valid VAT or GST number can enter it at checkout and may qualify for reverse-charge treatment.
Available in the United States, EU member states, the UK, Ireland, Australia, and Canada excluding Quebec. See our compliance frameworks for detail.
Ontario organizations with 20 or more employees: if you are one of the private-sector and not-for-profit organizations in Ontario, your AODA accessibility compliance report is due December 31, 2026, on a three-year cycle. Ontario public sector bodies report on a separate cycle running in even-numbered years. See what applies to you →
On every tier
Starter through Enterprise all ship with the same security, compliance, and accessibility floor. Every tier can do the fix: the remediation workspace, the practitioner report, and multi-standard scanning are on every plan.
- Full data export and account deletion, no support ticket required
- OAuth-only authentication (Google & Microsoft, no passwords)
- WCAG 2.2, Section 508 & EN 301 549 scanning, with AODA & EAA coverage
- Document colour-contrast checks (PDF; PPTX where colours are declared)
- Tamper-evident audit log (SHA-256)
- 7-year audit-trail retention floor (cannot be lowered)
- Row-level security tenant isolation
- Configurable data retention
- Encryption in transit and at rest, provided by the platform providers
Section 508 and EN 301 549 mappings are derived from the WCAG scan. Automated scanning covers the criteria that can be machine-tested; a manual review checklist covers the rest. Document colour contrast is decided for PDF text layers and declared PPTX theme colours; a file the check cannot decide is reported as such. For the full security, data-handling, and compliance detail, see our Procurement page.
Feature comparison
| Feature | Starter | Growth | Enterprise |
|---|---|---|---|
| Web assets | 5 | 25 | Unlimited |
| Document assets | 10 | 50 | Unlimited |
| Scans per month | 20 | 100 | Unlimited |
| Team members | 3 | 10 | 50 |
| Remediation workspace | Yes | Yes | Yes |
| Finding lifecycle management | Yes | Yes | Yes |
| Team role assignment | Yes | Yes | Yes |
| Manual findings | Yes | Yes | Yes |
| Bulk actions | No | Yes | Yes |
| Exceptions register | No | Yes | Yes |
| Compliance readiness dashboard | No | Yes | Yes |
| Custom retention policies | No | No | Yes |
| Executive reporting | No | Yes | Yes |
| Document colour-contrast checks | Yes | Yes | Yes |
| Accessibility statement generator | No | Yes | Yes |
| Rule configuration | No | Yes | Yes |
| Procurement evidence pack | No | No | Yes |
| Per-regulation views (AODA, EAA, Section 508) | No | No | Yes |
| Time to remediate by owner and severity | No | No | Yes |
| PDF export | Yes | Yes | Yes |
| CSV export | Yes | Yes | Yes |
| Support |
What happens after you check out
Payment comes first, then the account. There is no password at any point.
You pay through Stripe
Checkout is hosted by Stripe. Card details never touch a Lonia AI system. Your local currency and any applicable tax are applied there.
You land on the app
Stripe sends you straight to app.pallas.lonia.ai to finish setting up. Keep that tab open; it is where your organization gets created.
You sign in with Google or Microsoft
OAuth only. Choosing your work account is what activates your organization and makes you its first admin. No password is ever set or stored.
Your receipt arrives by email
Stripe emails the receipt and invoice to the address you paid with. If you close the tab before signing in, return to app.pallas.lonia.ai/login and sign in with that same address.
Signed in with the wrong account, or the address on your receipt does not match the one you signed in with? Email support@lonia.ai and we will reconcile it.
For procurement teams
The documents a review board asks for are published, not gated behind a sales call. The VPAT 2.5 conformance report, the sub-processor list, the DPA, data-residency detail, and the security controls are all available now.
Need a signed DPA, sub-processor change notices, a security questionnaire answered, or to report a vulnerability? Email support@lonia.ai.
Frequently asked questions
What standards does Pallas support?
Pallas supports WCAG 2.2 Level A, AA, and AAA; Section 508; and EN 301 549. Section 508 and EN 301 549 mappings are derived from the WCAG scan, and automated scanning covers the criteria that can be machine-tested; a manual review checklist covers the rest. You can configure which standards profile to apply per scan or per organization.
Can I scan documents, not just websites?
Yes. Pallas analyzes PDFs and DOCX files for accessibility issues including heading structure, alt text, reading order, color contrast, and language tagging.
What does the accessibility statement generator produce?
On Growth and Enterprise, Pallas generates your organisation's public accessibility statement from your scan results and a manual attestation form, and regenerates it on rescan. The statement records what the scan can test and what the attestation form declares. It is a statement, not a conformance guarantee.
How does the remediation workspace work?
Every finding from a scan enters a structured workflow: Open, In Progress, Needs Review, Retest, Passed, Closed. Assign findings to team members by role, track progress, and verify fixes through retesting.
How can I evaluate Pallas before I buy?
Run a free accessibility scan, no account needed. Enter any public URL, plus the email address the report should go to, and get a plain-English WCAG 2.2 AA report. When you're ready, choose a plan and check out through Stripe; you create your account with OAuth (Google or Microsoft) after checkout. You can cancel anytime from the billing portal.
How is my data protected?
Pallas uses OAuth-only authentication (no passwords stored), row-level security on all database queries, and encrypted data at rest and in transit, provided by the platform providers. Uploaded source files are analyzed and discarded by default.
Can multiple team members use the platform?
Yes. All plans include team seats. Assign findings to specific roles (Design, Frontend, Content, QA, and more) so everyone knows what they're responsible for.
Not sure yet? Start with a free scan
Free scan, no account needed. Your email is required so we can send the report. Paid plans use OAuth signup, no password, cancel anytime.