All About VPAT: What You Need to Know
Your FAQ Guide to VPATs, Digital Accessibility, and Compliance
What is a VPAT?
VPAT® stands for Voluntary Product Accessibility Template.
It’s a standardized document used by vendors to disclose how their software, hardware, or digital content complies with Section 508 of the Rehabilitation Act, as well as WCAG, EN 301 549, and other accessibility standards.
It’s not a certification, but a self-reported assessment tool that helps organizations determine how accessible a product is for people with disabilities.
Voluntary Product Accessibility Template (VPAT) is a registered trademark of the Information Technology Industry Council (ITI).
Who Needs a VPAT?
Any company selling digital products or services to U.S. federal agencies or organizations receiving federal funding (like universities, nonprofits, or government contractors) may be required to provide a VPAT.
Private-sector companies also use VPATs when:
- Selling to the public sector
- Responding to RFPs that include accessibility requirements
- Demonstrating accessibility commitments to clients or partners
- Working to proactively reduce legal risk under the ADA
What Does a VPAT Include?
A VPAT typically includes:
- A description of the product or service
- Contact information for the vendor
- An evaluation of how the product meets specific accessibility standards
- Notes explaining any gaps or partial compliance
The current version of the VPAT is VPAT 2.4, which supports four editions:
- WCAG (Web Content Accessibility Guidelines)
- Section 508 (U.S. federal)
- EN 301 549 (EU accessibility standards)
- INT (International edition covering all three)
Is a VPAT Legally Required?
A VPAT is not legally mandated in itself, but if you sell to government entities in the U.S. or abroad, demonstrating accessibility via a VPAT is often required to comply with procurement laws. For example, Section 508 requires federal agencies to buy accessible technology wherever possible.
Even if you’re not selling to government agencies, providing a VPAT can demonstrate good faith accessibility efforts and reduce your legal exposure under the Americans with Disabilities Act (ADA).
Web and Digital Accessibility for Small Business by Charlotte Howard
How Do You Create a VPAT?
You can download the VPAT template from the Information Technology Industry Council (ITI) and complete it yourself. However, because a VPAT is a technical document, it’s often created with the help of:
- Accessibility consultants
- Manual and automated accessibility audits
- Testing with assistive technologies like screen readers or keyboard-only navigation
Your VPAT should be honest, clear, and backed by documentation. Overstating compliance may lead to reputational or legal problems down the road.
Can a VPAT Be Used for Websites?
Yes. VPATs are commonly used for:
- Websites and web apps
- Software platforms
- SaaS products
- Mobile apps
- Hardware interfaces (like kiosks, ATMs, etc.)
If your business provides a public-facing or enterprise-level web product, having a VPAT demonstrates your accessibility maturity and readiness for larger contracts.
How Often Should a VPAT Be Updated?
You should update your VPAT:
- Whenever you release major updates to the product
- If accessibility standards change (like a new version of WCAG)
- At least once a year, as a best practice
Keeping your VPAT current ensures that your accessibility claims reflect reality and remain valid for procurement teams and legal compliance.
Does a VPAT Prove My Product is Fully Accessible?
No. A VPAT is a self-assessment, not a certification. It outlines what’s accessible, partially accessible, or not supported, and provides commentary. A well-completed VPAT is transparent about limitations and plans for future improvements.
If you want a formal declaration of accessibility, consider a third-party audit and conformance statement, or pursue certification through trusted accessibility firms.
Why Should Businesses Without Government Clients Still Care About VPATs?
A VPAT signals your commitment to inclusivity, builds trust with larger buyers, and helps you stay ahead of evolving accessibility laws. It also supports:
- Brand reputation
- SEO (accessible websites tend to perform better)
- Risk reduction (ADA lawsuits are on the rise)
- Better user experience for all users
What are the Risks of Not Having a VPAT?
- Lost contracts: Many enterprise and government buyers require a VPAT before purchase.
- Legal risk: ADA and Section 508-related lawsuits are increasing every year.
- Brand damage: Failing to prioritize accessibility can alienate customers and generate bad press.
According to the 2024 UsableNet Report, there were over 4,600 ADA website accessibility lawsuits filed in the U.S. in 2023, a 14% increase from the previous year. Source: UsableNet, 2024 ADA Website Lawsuit Report
What is an ACR (Accessibility Conformance Report)?
An ACR, or Accessibility Conformance Report, is the final formatted report generated from a completed VPAT. While the VPAT is the blank template provided by the Information Technology Industry Council (ITI), the ACR is the finished document that details how your digital product meets, or doesn’t meet, accessibility standards like:
- WCAG 2.1 (Web Content Accessibility Guidelines)
- Section 508 (U.S. federal accessibility requirements)
- EN 301 549 (European standard for ICT accessibility)
Think of it this way:
VPAT = the form.
ACR = the filled-out, customized report.
Helpful Resources for VPAT and Accessibility Compliance
Here are official and non-commercial resources to help you get started:
Final Thoughts
Whether you’re working with government contracts or simply want to future-proof your product, a VPAT is a smart step toward digital inclusivity and accessibility compliance. It’s not just about checking boxes. It’s about creating better experiences for everyone.
If you’re ready to make your website ADA-compliant, schedule a call with us at Accelerated Web Systems. We can help!
