Skill Guide

VPAT / ACR authoring and procurement accessibility compliance

The technical and legal process of creating a Voluntary Product Accessibility Template (VPAT) or Accessibility Conformance Report (ACR) to document a product's conformance to accessibility standards (like WCAG, Section 508, EN 301 549) and using these reports to make informed, compliant procurement decisions.

This skill is highly valued because it directly mitigates legal risk (lawsuits, procurement bans) and expands market reach by ensuring digital products and services are usable by people with disabilities. It impacts business outcomes by enabling access to public sector contracts, reducing long-term remediation costs, and strengthening brand reputation as an inclusive organization.

1 Careers

1 Categories

9.1 Avg Demand

15% Avg AI Risk

How to Learn VPAT / ACR authoring and procurement accessibility compliance

1. Master the core standards: WCAG 2.1/2.2 AA, Section 508 (US), and EN 301 549 (EU). 2. Understand the VPAT structure (the template by the Information Technology Industry Council) and the role of each section (e.g., 'Remarks and Explanations'). 3. Learn the vocabulary: 'Supports,' 'Partially Supports,' 'Does Not Support,' 'Not Applicable,' and 'Not Evaluated.'

1. Move from reading reports to authoring them. Practice evaluating a simple web component (e.g., a modal dialog) against WCAG Success Criteria and writing clear, evidence-based remarks. 2. Study 'Partially Supports' claims; common mistake is vague language. Learn to document the specific condition, exception, and workaround. 3. Analyze a competitor's VPAT to understand how claims are structured and what level of detail is expected in the market.

1. Architect the end-to-end compliance lifecycle within an organization: integrating automated testing (axe, WAVE), manual audits (JAWS, NVDA, keyboard), and third-party certifications into the VPAT/ACR production pipeline. 2. Develop strategic procurement language for RFIs/RFPs that requires vendors to provide current ACRs and specify acceptable levels of non-conformance. 3. Mentor development and product teams on how to interpret ACRs to plan remediation roadmaps and prioritize fixes.

Practice Projects

Beginner

Project

Draft a VPAT for a Single UI Component

Scenario

You are given access to a live 'Date Picker' widget on a public website. Your task is to evaluate it against a subset of WCAG 2.1 AA criteria (e.g., 1.1.1 Non-text Content, 2.1.1 Keyboard, 4.1.2 Name, Role, Value) and create a VPAT excerpt.

How to Execute

1. Use the official VPAT 2.4Rev template. 2. Test the Date Picker using only a keyboard (Tab, Arrow, Enter, Escape). 3. Test it with a screen reader (NVDA or VoiceOver). 4. For each criterion, document your finding as 'Supports,' 'Partially Supports,' etc., and write a concise 'Remarks' entry describing the exact behavior observed and any failures.

Intermediate

Case Study/Exercise

Evaluate and Compare Vendor ACRs for Procurement

Scenario

You are a procurement officer for a state agency. You have received ACRs from two competing SaaS vendors for a project management tool. One ACR is 2 pages, lists all criteria as 'Supports.' The other is 15 pages, has several 'Partially Supports' entries with detailed notes. Your budget is fixed.

How to Execute

1. Red-flag the overly vague 2-page report; demand a complete, VPAT-formatted ACR. 2. For the detailed report, create a risk matrix: list all 'Partially Supports' items, note the impact (e.g., 'Keyboard trap in modal'), and assess the remediation effort (vendor-planned fix vs. your team's workaround). 3. Draft a follow-up questionnaire to the vendor asking for their remediation timeline for your top 5 high-impact findings. 4. Make a recommendation based on transparent risk, not just compliance percentage.

Advanced

Case Study/Exercise

Develop a Corporate ACR Procurement Policy & Scoring Rubric

Scenario

As the newly appointed Accessibility Lead, you are tasked with creating a mandatory policy for all technology purchases over $50k. The policy must be enforceable, practical, and legally defensible.

How to Execute

1. Draft policy language that mandates a current (within 12 months) VPAT ACR for all applicable products as a bid requirement. 2. Build a weighted scoring rubric for procurement teams: e.g., 40% on technical conformance, 30% on vendor's remediation commitment, 20% on product roadmap, 10% on cost. 3. Create a tiered system: 'Full Compliance' (no 'Does Not Support' on critical criteria), 'Conditional Approval' (requires VPAT remediation plan), 'Denial.' 4. Pilot the policy with a low-stakes software purchase and refine based on vendor and internal feedback.

Tools & Frameworks

Standards & Templates

VPAT® 2.4Rev (April 2024) by the ITIWCAG 2.2 Success CriteriaSection 508 Standards (36 CFR Part 1194)EN 301 549 V3.2.1 (EU)

These are the non-negotiable reference documents. The VPAT is the template; the others are the standards it maps to. Always cite the exact version used in your report header.

Testing & Validation Tools

axe DevTools (Deque)WAVE (WebAIM)JAWS (Freedom Scientific)NVDA (NV Access)Accessibility Insights for Web (Microsoft)

Use axe/WAVE for automated scans to find low-hanging fruit. Use JAWS/NVDA for manual screen reader testing to validate the 'Remarks' in a VPAT. Accessibility Insights provides guided manual tests for WCAG criteria that automation cannot catch.

Mental Models & Methodologies

Risk-Based Prioritization FrameworkVendor Due Diligence Questionnaire ModelAccessibility Maturity Model (W3C)

Apply risk prioritization to evaluate 'Partial Support' claims. Use the questionnaire model to gather missing information from vendors. Use the maturity model to assess a vendor's long-term commitment beyond a single ACR.

Interview Questions

Answer Strategy

The candidate must demonstrate the ability to validate a vendor's claim with evidence and navigate the discrepancy professionally. Sample Answer: 'The claim is likely incorrect. SC 1.4.13 requires hoverable content to be dismissible, hoverable, and persistent. If the tooltip vanishes, it fails the persistence requirement. I would document the specific failure with screen recordings, reference the exact criterion, and submit a formal clarification request to the vendor. I would also update our internal procurement risk log to note this as a potential gap, pending their response and remediation commitment.'

Answer Strategy

Tests influence, stakeholder management, and understanding of business risk. Sample Answer: 'I would first align with legal and compliance to quantify the risk-potential lawsuits, violation of policy, and cost of future retrofitting. Then, I would schedule a meeting with the business unit and present a clear risk-vs-reward analysis: the 'speed' of purchase versus the long-term cost of remediation, legal exposure, and potential exclusion of users. I would propose a middle path: a conditional purchase agreement where the vendor commits to fixing specific high-impact accessibility defects within 90 days, written into the contract with financial holdbacks.'