A VPAT is a blank template. The document a buyer wants is an ACR.
ITI publishes the template; you complete it for your own product and the result is an Accessibility Conformance Report that nobody certifies.
We do not produce or sign VPATs · not legal advice
- The current edition listed by ITI, dated April 2025
- 2.5Rev
- Editions of the template: 508, EU, WCAG and INT
- 4
- Conformance terms a row in the report can carry
- 5
- The only tables where Not Evaluated may be used
- Level AAA
Read on ITI's own VPAT page and on Section508.gov's guidance for sellers, 11 September 2026. We do not produce, complete or sign these, and nothing on this page is legal advice.
Four editions, and picking the wrong one wastes the work
ITI publishes the template in four variants, differing in which standard's criteria the tables contain.
| Edition | What its tables contain |
|---|---|
| 508 Edition | US federal standards — use it when a request cites Section 508 and its WCAG 2.0 Level A and AA reference. |
| EU Edition | Built around EN 301 549, the European ICT accessibility standard. |
| WCAG Edition | WCAG on its own, covering 2.0, 2.1 and 2.2. |
| INT Edition | All three combined; most often asked for when selling into several markets at once. |
The conformance terms, as Section508.gov defines them
The two chips in amber and red are the ones that force you to write remarks.
| Term | The definition |
|---|---|
| Supports | The functionality of the product has at least one method that meets the criterion without known defects or meets with equivalent facilitation. |
| Partially Supports | Some functionality of the product does not meet the criterion. Remarks required. |
| Does Not Support | The majority of product functionality does not meet the criterion. Remarks required. |
| Not Applicable | The criterion is not relevant to the product. |
| Not Evaluated | May only be used for Level AAA tables. |
What this does not do
- We do not produce or sign a VPAT or ACR.
- There is no report generator here, no template export, and nothing we will put a signature on.
- We do not certify.
- No certificate, no audit letter, no conformance claim of any kind, and no accessibility overlay.
- It is not legal advice.
- Whether you are expected to supply a report, and what you are exposed to if it is wrong, are questions for a qualified adviser.
- A scan cannot fill in most rows.
- Automated rules reach 23 of the 55 WCAG 2.2 AA criteria on our engine, and even those are partial coverage of the criteria they touch.
Frequently asked questions
A VPAT is a template, published free by ITI, that translates accessibility requirements and standards into actionable testing criteria. Once it has been completed for a specific product, the resulting document is an Accessibility Conformance Report (ACR) — so a VPAT is the blank form and an ACR is the filled-in one.
The VPAT is the empty template, which ITI describes as a free template that translates accessibility requirements and standards into actionable testing criteria. The Accessibility Conformance Report is what you get once it has been completed for a specific product — so when a buyer asks for your VPAT, what they want is your ACR.
The vendor fills it in, and nobody certifies it. ITI says the original equipment manufacturer is likely the best source to conduct the testing needed; there is no issuing authority, no registry and no countersignature, so it is a self-assessment.
The template is voluntary; being considered is not. Section508.gov puts it bluntly: although the template is called voluntary, completing an ACR is mandatory for vendors who want to be considered for government purchase.
There is no fixed expiry. Section508.gov's guidance is that an updated report may be needed every time your product is changed or updated, and that reports written against pre-2017 standards need bringing onto the Revised Section 508 Standards.
Related
- Web ScannerAudit any URL with WCAG 2.0 / 2.1 / 2.2 rules
- Workflow AnalyzerCatch accessibility issues in live, dynamic user flows
- Authenticated ScanningScan pages behind login (cookie, form, or header auth)
- All of AccessibilityAutomated WCAG scanning, workflow audits, and reports
- PricingPer-seat test management and per-thread device testing, priced on the page
Bring measurement to the report, not the other way round
Clear the machine-checkable findings, get an explicit list of what nothing has checked, and write the remarks from evidence instead of from memory.