When an enterprise buyer asks for “your VPAT” or “an ACR,” they’re usually asking for evidence that your digital product meets accessibility requirements. But VPAT vs ACR can be confusing—especially because people often use the terms interchangeably. In reality, they’re related but not the same, and understanding the difference helps you respond to procurement requests faster, avoid compliance missteps, and set accurate expectations about conformance.
This article breaks down what a VPAT is, what an ACR is, how they map to WCAG and Section 508, and what accessibility-minded buyers actually want.
VPAT stands for Voluntary Product Accessibility Template. It’s a standardized template published by the ITI (Information Technology Industry Council) and used to document how a product conforms to accessibility standards and regulations. The VPAT itself is the form—a structured table and set of instructions for reporting conformance.
ACR stands for Accessibility Conformance Report. An ACR is the completed report created using the VPAT template. In other words:
That’s the simplest distinction, but there are practical implications: buyers generally want the ACR (your completed report), while vendors often say “VPAT” as shorthand for “our completed VPAT/ACR.”
Organizations use VPATs/ACRs to make purchasing decisions because accessibility is a legal, contractual, and operational risk issue. A credible conformance report helps buyers:
In regulated environments—government, higher education, financial services, healthcare—this documentation can determine whether you make it past the first procurement gate.
The VPAT template supports reporting against multiple standards. The most common are:
Which one you need depends on your buyer and region. For example, U.S. public sector buyers frequently focus on Section 508/WCAG, while EU procurement may prioritize EN 301 549 alignment.

Most buyers want a current, complete ACR (even if they say “send your VPAT”). A strong ACR is:
If you want a deeper take on what procurement teams expect and how to position the documentation, see VPAT vs. ACR: What’s the Difference and Which One Do Buyers Actually Want?.
Automated testing is useful, but it can’t validate many WCAG success criteria (e.g., meaningful focus order, correct labels, error prevention, alt text quality). Overstating conformance is a fast way to lose trust in security/compliance reviews and later fail buyer acceptance testing.
An ACR is not a certification and typically isn’t issued by a regulator. It’s a conformance report. Buyers evaluate its credibility by looking at testing methods, remarks, and whether claims align with their own spot checks.
Accessibility is affected by product changes, UI redesigns, new components, content updates, and third-party integrations. A report that’s two years old may not reflect the current state of the product, especially for fast-moving SaaS.
Be explicit about what you tested: product name, platform (web, iOS, Android), environments (browsers), and the exact version or release window. Buyers want to know what the ACR represents.
A credible ACR is grounded in real testing, including:

This is where strong ACRs stand out. Instead of “Supports,” include short, actionable notes such as:
Procurement teams often ask follow-up questions: Do you have an accessibility statement? Do you monitor regressions? What’s your process for bugs? Pairing an ACR with ongoing monitoring is often more persuasive than a one-time report.
Platforms like Corpowid (corpowid.ai) can support this by running automated accessibility audits, tracking issues over time, and helping teams maintain an accessibility statement that reflects current progress—useful context alongside a VPAT/ACR during vendor review.
If you sell software into enterprise accounts, accessibility documentation can directly impact sales cycles. Buyers may require a VPAT/ACR before a security questionnaire is even approved. For SaaS teams building a repeatable process, these guides can help:
Industries with high-volume consumer transactions and time-sensitive tasks—like booking, check-in, itinerary changes, and payment—often face stronger accessibility scrutiny because barriers can immediately block completion. If your product touches travel workflows (booking engines, loyalty portals, employee tools), your ACR should carefully document critical user journeys (search, selection, passenger details, payment, confirmation, and notifications).
For more context on inclusive design and compliance pressures in these sectors, see Digital Accessibility for the Travel & Hospitality Industry: WCAG, Inclusive Design, and Compliance and Digital Accessibility for Airlines: WCAG, Inclusive Booking, and Compliance.

Internally, it’s fine to say “VPAT” as shorthand, but in formal communication it helps to be precise:
If you’re operationalizing this across releases, Corpowid (corpowid.ai) can help teams continuously audit and monitor WCAG issues so your ACR updates are based on measurable, trackable findings rather than one-off snapshots.