VPAT / ACR Review Guide

How to read and evaluate Voluntary Product Accessibility Templates and Accessibility Conformance Reports.

Reading time: 15 minutes

Owner: Procurement + Accessibility PMO · Last reviewed: 2026-01-05 · Next review: 2026-04-05

What is a VPAT/ACR?

VPAT(Voluntary Product Accessibility Template)
A standardized template for documenting how a product conforms to accessibility standards. Created by ITIC.
ACR(Accessibility Conformance Report)
A completed VPAT—the actual report documenting a product's accessibility status.

Why Request VPATs?

  • Required for federal Section 508 compliance
  • Documents vendor commitment to accessibility
  • Helps identify potential barriers before purchase
  • Creates accountability for remediation

VPAT Versions

Version Standards Covered Best For
VPAT 2.5(Current) WCAG 2.2, Revised Section 508, EN 301 549 All new purchases
VPAT 2.4 WCAG 2.1, Revised Section 508, EN 301 549 Acceptable
VPAT 2.0–2.3 WCAG 2.0, Original Section 508 Outdated—request update

Document Structure

A complete VPAT/ACR includes these sections:

1. Product Information

2. WCAG Conformance Tables

The main content—tables showing conformance to each WCAG success criterion:

3. Section 508 Tables

For federal purchases—functional performance criteria:

4. Remarks and Explanations

The most important section—look for:

Understanding Conformance Levels

Level Meaning Evaluation
Supports Functionality fully meets criterion Ideal
Partially Supports Some functionality meets criterion Review remarks carefully
Does Not Support Majority of functionality fails criterion Significant concern
Not Applicable Criterion not relevant to product Verify legitimacy
Not Evaluated Has not been tested Request testing

"Partially Supports" Warning

This is the most ambiguous level. Always read the remarks—"Partially Supports" could mean 90% works or only 10% works. Ask vendors for specifics.

Red Flags to Watch For

Document Issues

  • Outdated report- More than 18 months old
  • Wrong version- Report doesn't match product version
  • Missing sections- Incomplete tables
  • No contact info- Can't ask questions
  • Self-reported only- No third-party testing

Content Issues

  • Too many "N/A"- May be avoiding issues
  • Vague remarks- "Some issues may exist"
  • No workarounds- For known issues
  • No roadmap- For fixing issues
  • "Perfect" report- 100% Supports is rare

Critical Failures

These "Does Not Support" entries are deal-breakers:

Evaluation Checklist

Document Quality

WCAG Level A (Must Have)

WCAG Level AA (Required)

Remarks Quality

Questions to Ask Vendors

About the Report

  1. Who conducted the accessibility evaluation—internal team or third party?
  2. What version of the product does this VPAT cover? Is it current?
  3. How often is the VPAT updated?
  4. Can you provide testing results or detailed audit findings?

About Issues

  1. For "Partially Supports" items—what specifically doesn't work?
  2. What is your remediation roadmap and timeline?
  3. Are there workarounds for current accessibility issues?
  4. Will you provide an updated VPAT after fixes are released?

About Commitment

  1. Do you have a dedicated accessibility team?
  2. Is accessibility included in your development lifecycle?
  3. Do you conduct regular accessibility testing?
  4. What is your process for responding to accessibility complaints?
  5. Will you include accessibility requirements in our contract?

Contract Language

Request that accessibility commitments be included in contracts:

  • Maintain WCAG 2.2 AA conformance
  • Remediate reported issues within specified timeframe
  • Provide updated VPAT with each major release
  • Notify UA of accessibility regressions

Step-by-Step VPAT Evaluation Process

Follow this systematic approach when reviewing a VPAT/ACR. Allow 30–60 minutes for a thorough evaluation.

Step 1: Verify Document Authenticity (5 minutes)

  1. Check the source— Request VPATs directly from the vendor or from their official accessibility page. Third-party repositories may have outdated versions.
  2. Confirm product alignment— Verify the product name and version exactly match what you intend to purchase. A VPAT for "ProductX Web App 3.0" doesn't cover "ProductX Desktop 3.0" or "ProductX Web App 4.0."
  3. Check the date— Reports older than 18 months should be treated as outdated. WCAG standards and products evolve; older reports may not reflect current accessibility status.
  4. Identify the evaluator— Note whether testing was conducted by the vendor's internal team, an independent third party, or a combination. Third-party evaluations from recognized firms (Deque, Level Access, WebAIM, TPGi) carry more weight.

Step 2: Review the Executive Summary (5 minutes)

  1. Read the product description— Understand what functionality is covered. Some VPATs only cover core features, not add-ons, integrations, or mobile apps.
  2. Note evaluation methods— Look for mentions of automated testing (axe, WAVE), manual testing, and assistive technology testing (screen readers, magnifiers). A robust VPAT describes multiple testing methods.
  3. Check scope limitations— Vendors may explicitly exclude certain modules, third-party integrations, or user-generated content areas.

Step 3: Analyze WCAG Level A Criteria (10 minutes)

Level A represents the absolute minimum accessibility requirements. Failures here create fundamental barriers.

  1. Count the conformance levels— Tally how many criteria are marked "Supports," "Partially Supports," "Does Not Support," and "Not Applicable."
  2. Scrutinize "Does Not Support"— Any Level A failures are serious. Prioritize reviewing:
    • 1.1.1 Non-text Content— Can users with screen readers understand images?
    • 1.3.1 Info and Relationships— Is content structure programmatically determinable?
    • 2.1.1 Keyboard— Can all functionality be operated via keyboard?
    • 2.1.2 No Keyboard Trap— Can users navigate away from any component?
    • 4.1.2 Name, Role, Value— Do interactive elements expose proper accessibility information?
  3. Read remarks for "Partially Supports"— Determine whether 80% works or 20% works. Vague remarks like "some issues may exist" are unacceptable.

Step 4: Analyze WCAG Level AA Criteria (10 minutes)

Level AA is required for Title II compliance and most institutional policies. Focus on criteria that affect daily use.

  1. Check color contrast (1.4.3, 1.4.11)— Text and UI components must meet minimum contrast ratios. Failures affect users with low vision.
  2. Verify text resizing (1.4.4, 1.4.10)— Content must work when zoomed to 200% and reflow at 320px viewport width.
  3. Review focus indicators (2.4.7)— Keyboard users must see where they are on the page.
  4. Examine form handling (3.3.1, 3.3.2, 3.3.3)— Errors must be identified, labels provided, and suggestions offered.
  5. Check heading structure (2.4.6)— Headings and labels must describe topic or purpose.

Step 5: Evaluate Remarks Quality (10 minutes)

The remarks column reveals vendor transparency and commitment to accessibility.

Good Remarks

  • "Partially Supports: Alt text is provided for all images except user-uploaded content in the Comments module. Users can add alt text manually. Fix planned for v4.2 (Q2 2026)."
  • "Does Not Support: Data visualization charts do not expose values to screen readers. Workaround: Data tables with equivalent information are provided below each chart."

Poor Remarks

  • "Partially Supports: Some issues may exist."
  • "Does Not Support" (with no explanation)
  • "N/A" (for criteria that clearly apply)

Step 6: Assess Overall Risk (5 minutes)

Assign a risk rating based on your analysis:

Rating Criteria Recommendation
Low Risk Mostly "Supports" at Level A and AA; detailed remarks; clear remediation plans; recent evaluation Proceed with standard contract language
Medium Risk Several "Partially Supports" with acceptable workarounds; some gaps in remarks; older report Request vendor demo; add remediation milestones to contract
High Risk Multiple "Does Not Support" at Level A; vague or missing remarks; no roadmap; critical criteria failures Escalate to Accessibility PMO; consider alternatives; require remediation before deployment

Supplementing VPATs with Live Evaluation

A VPAT is a vendor's self-reported claim. Always verify with hands-on testing before major purchases.

Request an Accessibility Demo

Ask vendors to demonstrate their product using assistive technology:

Conduct Your Own Quick Test

If you have trial access, spend 15 minutes checking:

  1. Tab through the main interface— Can you reach all interactive elements? Does focus order make sense?
  2. Check color contrast— Use a browser extension like axe DevTools or WAVE to identify contrast failures.
  3. Test a key workflow— Complete the most common task (e.g., creating a document, submitting a form) using only keyboard.
  4. Listen with a screen reader— Even 5 minutes with NVDA or VoiceOver reveals major issues.

VPAT Scoring Matrix

Use this scoring approach to compare multiple products objectively. Assign points based on conformance level and criterion importance.

Weighting by WCAG Level

Conformance Level Level A Criteria Level AA Criteria
Supports 3 points 2 points
Partially Supports 1 point 1 point
Does Not Support 0 points 0 points
Not Applicable Exclude from calculation Exclude from calculation

Critical Criteria Multiplier (2×)

Apply a 2× multiplier to these criteria due to their impact on fundamental access:

Calculate Overall Score

Sum all points and divide by maximum possible points to get a percentage. Compare products using this normalized score.

Example:Product A scores 85/100 (85%), Product B scores 72/100 (72%). Product A demonstrates stronger accessibility conformance.

Authoritative Sources

This guide draws from established accessibility procurement frameworks and standards organizations.

Official Standards & Templates

Procurement Guidance

Evaluation Methodology

Higher Education Resources