VPAT and ACR services for software and websites
Enterprise and government buyers keep asking vendors for a VPAT or an ACR. I write them from a real manual audit, in the edition your buyer needs, so every claim in the report can be backed up.
Last updated November 1, 2026
Details
What a VPAT and an ACR are
A VPAT (Voluntary Product Accessibility Template) is the blank form created by the Information Technology Industry Council. An ACR (Accessibility Conformance Report) is the completed form for one product and version, which you give to buyers. Government agencies, universities and large companies often ask software vendors for one before they buy. Read the plain-English guide.
The four editions
| Edition | Use it when | Standard reported |
|---|---|---|
| WCAG | Your buyer asks for WCAG conformance | WCAG 2.x |
| Revised Section 508 | You sell to US federal agencies | Revised Section 508 standards |
| EN 301 549 | You sell to European public bodies or companies | EN 301 549 |
| International (INT) | You want one report for all three | WCAG, Section 508 and EN 301 549 |
What you get
- A completed ACR in the edition you need, with a conformance level for each criterion (Supports, Partially Supports, Does Not Support or Not Applicable)
- A remarks column that explains what works, what doesn't and how it was tested
- The audit report behind it, so every statement can be backed up
Why I only write an ACR from an audit
Buyers test products too, and a report that marks everything "Supports" without testing damages trust. An ACR is only as credible as the audit behind it. So I add an ACR to an audit of your product, instead of selling the document alone. The report states the version tested, the browsers and assistive technologies used, and the date.
A worked ACR entry
This constructed example shows reporting detail, not the conformance of a real client product.
| Conformance level | Remarks and explanations |
|---|---|
| Partially Supports | In the evaluated sample, the standard navigation and form controls operate by keyboard. On the tested product template, the custom size selector requires a pointer, preventing keyboard completion of that purchase journey. See finding A-01 and the evaluated version and environment in the report scope. |
The completed report must use the selected ITI template edition and its reporting instructions. One example row does not establish a product-wide conformance result.
How it works
- Tell me the product, the version and the edition your buyer wants.
- I audit the product by hand against WCAG 2.2 AA, plus the clauses your edition requires.
- I write the ACR from the findings and send it with the audit report.
- You fix what you can, I retest, and we update the ACR if the results change.
What it costs
An ACR is a $300 to $500 add-on to an audit, depending on the edition and the size of the product. The audit is priced separately: a small business audit is $499 for 5 to 8 key pages, and larger products get a fixed quote within 24 hours. See pricing.
Your agreed audit scope
The quote lists the representative pages or screens, complete user journeys, browsers, assistive technologies and standard versions to be evaluated. The $499 small business package covers 5 to 8 agreed key pages. Extra templates, documents, apps or journeys are quoted separately. Findings describe the tested scope and point in time; they are not a guarantee about every page of a website or a legal conclusion.
One retest of the original findings is included when requested within 60 days of receiving the report. Your developers implement the fixes; new features or pages require a separate scope.
Who does the work
I'm Rohit Yadav, a DHS Trusted Tester (Section 508) and accessibility auditor with about five years of hands-on testing. Every audit is done by me, by hand, with a keyboard and NVDA, JAWS and VoiceOver, against WCAG 2.2 AA. About me · See a sample report
Common questions
What is the difference between a VPAT and an ACR?
The VPAT is the blank template. The ACR is the completed report for a specific product and version.
Which edition do I need?
Ask your buyer. US federal buyers usually want Revised Section 508, European public bodies want EN 301 549, and most others accept WCAG. The International edition covers all three.
Can you write a VPAT without an audit?
No. A credible ACR rests on testing. I add it to an audit of your product.
How often should an ACR be updated?
After major releases that change the interface, and whenever you fix significant issues. The report states the version and date tested.
Do you test mobile apps?
Mobile apps are tested separately from the website. Tell me what you need and I'll confirm scope in the quote.
Need an ACR to close a sale?
Tell me the product and the edition your buyer wants, and I'll quote the audit and the report together.
Sources and standards
Sources reviewed November 1, 2026. Requirements depend on the applicable standard, product and jurisdiction.