For SaaS and web software vendors
VPAT® for SaaS: what your customer is asking for, and how to get it right.
“Please send your VPAT” usually means: send an Accessibility Conformance Report for your product, written on ITI’s VPAT® template. Here is what that involves, which edition you need, and how we deliver one in five business days for $1,490.
Who this is for
Small software teams with a buyer waiting.
SaaS, edtech and govtech companies without an accessibility specialist on staff, whose customer is a public university, a state or local government, a federal agency, or a large company’s procurement team — and whose deal now has an accessibility step in it.
If you already have an ACR, the same questions apply: is it for the version you ship today, does it say how the product was tested, and would its remarks survive a reviewer who tries your product with a keyboard?
In one minute
VPAT® and ACR: the template and the report.
- The VPAT® (Voluntary Product Accessibility Template) is a free template published by the Information Technology Industry Council (ITI). The current version is 2.5Rev, dated April 2025.
- Once it is completed for a specific product, it becomes an Accessibility Conformance Report (ACR). That is ITI’s own definition.
- An ACR lists each criterion of a standard, a conformance level — Supports, Partially Supports, Does Not Support or Not Applicable — and a remark explaining it.
- There is no VPAT® certification, and ITI does not review or approve reports. The ACR is the vendor’s own statement.
Which edition
Match the edition to the buyer who asked.
ITI publishes four editions of the template. Each one reports on a different standard.
| Your buyer | The standard behind the request | Edition | Price |
|---|---|---|---|
| Public university or college | WCAG 2.1 AA — the standard in the ADA Title II rule and in the HECVAT’s accessibility questions | WCAG | $1,490 |
| State or local government | WCAG 2.1 AA (ADA Title II rule) | WCAG | $1,490 |
| Federal agency | Revised Section 508 Standards — WCAG 2.0 A and AA plus the 508 chapters | 508 | $1,990 |
| Public-sector buyer in the EU | EN 301 549 | EU | $1,990 |
| Several of the above | All three standards in one report | INT | $1,990 |
| Large private company | Whatever their questionnaire names — typically a WCAG version and level | WCAG | $1,490 |
Which WCAG version? In ITI’s current templates, the 508 edition uses WCAG 2.0, the EU edition WCAG 2.1, and the WCAG and INT editions include WCAG 2.2 — you may report on 2.1 only. The ADA Title II rule requires WCAG 2.1 AA. We evaluate WCAG 2.1 A and AA by default and WCAG 2.2 on request, at the same price.
What reviewers look for
What makes an ACR credible.
- The product name and version, and a report date — ITI requires at least the month and year.
- An “Evaluation Methods Used” section that says how the product was tested: tools, assistive technology, who tested.
- A conformance level and a specific remark for every criterion in the levels reported.
- “Partially Supports” wherever it applies, naming the feature and the failure.
- A date recent enough for the version under review — the HECVAT asks about the past 12 months.
Red flags to avoid
- “Supports” on every row.
- Remarks that repeat the criterion’s title instead of describing the product.
- No evaluation method.
- A report for a version you no longer ship.
- The words “certified” or “fully compliant.” GSA’s guidance to buyers notes that “Partially Supports” means the product does not conform — so a reviewer expects to see where, not a slogan.
How we deliver it
$1,490, five business days, no calls.
You send the request
Your product URL, the buyer’s email or questionnaire, and your deadline. We reply within one U.S. business day with a fixed price, the scope (up to 15 screens or key flows) and a delivery date.
You start it
50% by card payment link and a test account. The clock starts when both are in.
We test and write
Automated scan, keyboard-only pass, accessibility tree, VoiceOver with Safari, contrast, zoom and reflow, forms and errors. The method and its limits.
You receive
The ACR (Word on ITI’s template, plus accessible HTML), a prioritized fix list, a draft accessibility statement, and one retest within 90 days. See a full sample.
Doing it yourself
You can write your own ACR.
ITI says the product owner is likely the best source for the testing behind a VPAT®, and that a third party is not required — unless a solicitation asks for one. What it takes: someone who can test all 50 WCAG 2.1 Level A and AA criteria with a keyboard, a screen reader and contrast tools, and then write a defensible remark for each.
If you have that person, download ITI’s free template and start there. If you don’t, or your deadline is next week, that is the work we do.
What we don’t do
Plainly out of scope.
- Certify your product or promise that a buyer will accept it.
- Give legal advice or sign accessibility warranties for you.
- Write your code fixes or install an overlay.
- Evaluate native iOS or Android apps.
Questions
Short answers.
Our customer said “VPAT.” Is an ACR the same thing?
For practical purposes, yes. Buyers ask for “the VPAT”; what they need is the completed report — the ACR — for your product.
Will our ACR say “Supports” everywhere?
Only where it is true. If your product fails criteria, the report says where and how, and the fix list tells you what to change first. You can fix, use the included retest, and send the updated ACR.
Our product has a mobile app too.
We evaluate the web product, including its responsive views in a mobile browser. We don’t evaluate native iOS or Android apps; the report states that they are out of scope.
Sources
Primary sources only. Each was read on September 26, 2026.
- VPAT® — current version 2.5Rev (April 2025), four editions, FAQs — Information Technology Industry Council (ITI).
- Web Content Accessibility Guidelines (WCAG) 2.1 — W3C Recommendation (current version dated May 6, 2025) — W3C.
- Web Content Accessibility Guidelines (WCAG) 2.2 — W3C Recommendation (current version dated December 12, 2024) — W3C.
- 28 CFR 35.200 — Requirements for web and mobile accessibility (ADA Title II) — eCFR, current text (up to date as of September 24, 2026).
- Higher Education Community Vendor Assessment Toolkit (HECVAT 4, current version 4.1.6) — IT Accessibility questions ITAC-01 to ITAC-18 — EDUCAUSE.
- Understanding Vendor Claims in Accessibility Conformance Reports for Section 508 Conformance — Section508.gov, GSA.
- EN 301 549 V3.2.1 (2021-03) — the version used by ITI’s EU and INT editions — ETSI / CEN / CENELEC.
Get a quote
Forward us the request. We’ll tell you exactly what it needs.
Fixed price, scope and delivery date in writing, within one U.S. business day.