VPAT vs ACR: What They Mean for Accessibility Compliance (and Procurement)

When an enterprise buyer asks for “your VPAT” or “an ACR,” they’re usually asking for evidence that your digital product meets accessibility requirements. But VPAT vs ACR can be confusing—especially because people often use the terms interchangeably. In reality, they’re related but not the same, and understanding the difference helps you respond to procurement requests faster, avoid compliance missteps, and set accurate expectations about conformance.

This article breaks down what a VPAT is, what an ACR is, how they map to WCAG and Section 508, and what accessibility-minded buyers actually want.

Quick definitions: VPAT vs ACR

What is a VPAT?

VPAT stands for Voluntary Product Accessibility Template. It’s a standardized template published by the ITI (Information Technology Industry Council) and used to document how a product conforms to accessibility standards and regulations. The VPAT itself is the form—a structured table and set of instructions for reporting conformance.

What is an ACR?

ACR stands for Accessibility Conformance Report. An ACR is the completed report created using the VPAT template. In other words:

  • VPAT = the blank template
  • ACR = your filled-out VPAT document (your results and claims)

That’s the simplest distinction, but there are practical implications: buyers generally want the ACR (your completed report), while vendors often say “VPAT” as shorthand for “our completed VPAT/ACR.”

Why procurement cares: risk, comparability, and accountability

Organizations use VPATs/ACRs to make purchasing decisions because accessibility is a legal, contractual, and operational risk issue. A credible conformance report helps buyers:

  • Compare vendors consistently across the same criteria (e.g., WCAG 2.1 AA).
  • Identify exceptions (what doesn’t conform and how that impacts users).
  • Plan remediation and determine whether a product can be used with accommodations or alternative workflows.
  • Create an audit trail for compliance programs and internal governance.

In regulated environments—government, higher education, financial services, healthcare—this documentation can determine whether you make it past the first procurement gate.

What standards do VPATs/ACRs typically cover?

The VPAT template supports reporting against multiple standards. The most common are:

  • Revised Section 508 (U.S. federal accessibility requirements for ICT)
  • WCAG (Web Content Accessibility Guidelines), typically WCAG 2.1 Level AA or increasingly WCAG 2.2 AA
  • EN 301 549 (European accessibility standard for ICT procurement)

Which one you need depends on your buyer and region. For example, U.S. public sector buyers frequently focus on Section 508/WCAG, while EU procurement may prioritize EN 301 549 alignment.

Procurement and accessibility teams reviewing a VPAT-style conformance report on a laptop

So what do buyers actually want: a VPAT or an ACR?

Most buyers want a current, complete ACR (even if they say “send your VPAT”). A strong ACR is:

  • Specific: it references product areas, user flows, and known limitations—rather than generic statements.
  • Evidence-based: it reflects real testing (automated + manual) and includes clear remarks.
  • Up to date: versioned and tied to a release or date range.
  • Honest: it doesn’t mark everything “Supports” without nuance.

If you want a deeper take on what procurement teams expect and how to position the documentation, see VPAT vs. ACR: What’s the Difference and Which One Do Buyers Actually Want?.

Common misconceptions (and how to avoid them)

Misconception 1: “We passed an automated scan, so we can claim full support.”

Automated testing is useful, but it can’t validate many WCAG success criteria (e.g., meaningful focus order, correct labels, error prevention, alt text quality). Overstating conformance is a fast way to lose trust in security/compliance reviews and later fail buyer acceptance testing.

Misconception 2: “An ACR is a certification.”

An ACR is not a certification and typically isn’t issued by a regulator. It’s a conformance report. Buyers evaluate its credibility by looking at testing methods, remarks, and whether claims align with their own spot checks.

Misconception 3: “One VPAT works forever.”

Accessibility is affected by product changes, UI redesigns, new components, content updates, and third-party integrations. A report that’s two years old may not reflect the current state of the product, especially for fast-moving SaaS.

How to create a credible VPAT/ACR (practical approach)

1) Define scope and versioning

Be explicit about what you tested: product name, platform (web, iOS, Android), environments (browsers), and the exact version or release window. Buyers want to know what the ACR represents.

2) Test like users: manual + automated + assistive tech

A credible ACR is grounded in real testing, including:

  • Keyboard-only navigation
  • Screen reader checks (e.g., NVDA/JAWS/VoiceOver depending on your market)
  • Color contrast and zoom/reflow behavior
  • Form labels, instructions, and error recovery
Procurement and accessibility teams reviewing a VPAT-style conformance report on a laptop

3) Write useful “Remarks and Explanations”

This is where strong ACRs stand out. Instead of “Supports,” include short, actionable notes such as:

  • Where an issue occurs (which page/component)
  • Who is affected (screen reader users, keyboard users, low vision users)
  • Workarounds (if any)
  • Planned remediation timeline or roadmap reference (if appropriate)

4) Align your ACR with your accessibility program

Procurement teams often ask follow-up questions: Do you have an accessibility statement? Do you monitor regressions? What’s your process for bugs? Pairing an ACR with ongoing monitoring is often more persuasive than a one-time report.

Platforms like Corpowid (corpowid.ai) can support this by running automated accessibility audits, tracking issues over time, and helping teams maintain an accessibility statement that reflects current progress—useful context alongside a VPAT/ACR during vendor review.

VPAT/ACR expectations for SaaS vendors

If you sell software into enterprise accounts, accessibility documentation can directly impact sales cycles. Buyers may require a VPAT/ACR before a security questionnaire is even approved. For SaaS teams building a repeatable process, these guides can help:

Industry angle: why travel and airlines often scrutinize conformance reports

Industries with high-volume consumer transactions and time-sensitive tasks—like booking, check-in, itinerary changes, and payment—often face stronger accessibility scrutiny because barriers can immediately block completion. If your product touches travel workflows (booking engines, loyalty portals, employee tools), your ACR should carefully document critical user journeys (search, selection, passenger details, payment, confirmation, and notifications).

For more context on inclusive design and compliance pressures in these sectors, see Digital Accessibility for the Travel & Hospitality Industry: WCAG, Inclusive Design, and Compliance and Digital Accessibility for Airlines: WCAG, Inclusive Booking, and Compliance.

Procurement and accessibility teams reviewing a VPAT-style conformance report on a laptop

Which should you say in your process: VPAT or ACR?

Internally, it’s fine to say “VPAT” as shorthand, but in formal communication it helps to be precise:

  • When asked for a “VPAT,” respond with: “Yes—here is our current ACR (completed VPAT) for version X.”
  • When you’re building from scratch, say: “We’re completing a VPAT to produce an ACR.”

Takeaways

  • VPAT is the template; ACR is the completed conformance report.
  • Buyers want documentation that’s current, specific, and evidence-based, not just optimistic checkboxes.
  • A strong ACR is backed by repeatable testing and an accessibility program that can prevent regressions.

If you’re operationalizing this across releases, Corpowid (corpowid.ai) can help teams continuously audit and monitor WCAG issues so your ACR updates are based on measurable, trackable findings rather than one-off snapshots.

Corpowid is recognized by Gartner

Corpowid has been recognized by Gartner, a leading global research and advisory firm, for our innovation and performance in digital accessibility. These badges reflect our commitment to creating inclusive, AI-powered web experiences.

Have questions about Corpowid?

Let’s connect.

We will get back to you as soon as possible.