What is a VPAT?
A VPAT (Voluntary Product Accessibility Template) is a standardized document created by the ITI (Information Technology Industry Council). It provides a framework for vendors to document how well their Information and Communication Technology (ICT) products conform to accessibility standards like Section 508, WCAG, and EN 301 549.
When a vendor fills out a VPAT, the resulting completed document is technically called an ACR (Accessibility Conformance Report).
Why Do You Need a VPAT?
If you sell software, hardware, or digital services, you will likely be asked for a VPAT during the procurement process.
- Federal agencies (and many state governments): Commonly request VPATs/ACRs in procurement to check products against Section 508 or their own accessibility policies.
- Universities and Higher Ed: Often ask for VPATs to manage legal risk and ensure equal access for students.
- Large companies: Increasingly ask for VPATs as part of vendor risk reviews.
Without an accurate VPAT, you may be ruled out of some contracts.
Understanding the VPAT Versions
There are four editions of the VPAT, currently at version 2.5:
- VPAT 2.5 508: Primarily for the US Federal market (Section 508 + WCAG 2.0/2.1).
- VPAT 2.5 EU: For the European market (EN 301 549 + WCAG 2.1).
- VPAT 2.5 WCAG: A generalized version focusing solely on WCAG guidelines.
- VPAT 2.5 INT: A comprehensive international version encompassing all three standards above.
How to Fill Out a VPAT
Filling out a VPAT takes more than ticking boxes. You need a thorough audit of your product and a good working knowledge of accessibility.
For each success criterion, you must provide:
- Conformance Level: Supports, Partially Supports, Does Not Support, or Not Applicable.
- Remarks and Explanations: A detailed justification for the conformance level. If a feature "Partially Supports," you must explicitly describe the specific scenarios where it fails and list known workarounds.
Creating a VPAT with AccessiSight
Writing a VPAT by hand can take weeks of expert auditing. AccessiSight generates a draft VPAT 2.5 / ACR from your scan results, in 33 editions. The scan is rule-based and runs in a real browser. Review the draft, and add results for the criteria that need manual testing, before you rely on it.