What Is a VPAT and When Does Your Organization Need One?

VPAT stands for Voluntary Product Accessibility Template. If you work in government procurement, federal contracting, or institutional technology purchasing, you have probably encountered this term. If you have not, you will.

Here is what it is, who creates it, and when you should be asking vendors to provide one.

What a VPAT Is

A VPAT is a document that describes how a technology product — software, a website, an app, a digital service — conforms to web accessibility standards, specifically WCAG and Section 508. The completed document is called an Accessibility Conformance Report (ACR).

A VPAT answers the question: does this product meet accessibility standards, and if not, where does it fall short? It works through each WCAG success criterion and notes whether the product supports it, partially supports it, does not support it, or whether the criterion is not applicable.

VPATs are self-reported by the vendor. They are not independently audited unless the vendor explicitly states otherwise. That means a VPAT is a vendor’s representation of their accessibility compliance, not a certification of it.

Who Creates a VPAT

The vendor creates the VPAT for their own product. If you are evaluating a web development agency, a software platform, or a digital service vendor, you would ask them to provide a VPAT or ACR documenting the accessibility of whatever they are selling you.

The VPAT template is published by the Information Technology Industry Council (ITI). Vendors fill out the template, publish it, and make it available to prospective clients. Some vendors maintain current VPATs; others have outdated ones or none at all.

When You Should Ask for a VPAT

Federal procurement: Any technology product purchased by a federal agency or contractor for federal use must meet Section 508 accessibility requirements. Vendors are required to document their compliance via VPAT. If your organization is selling to federal agencies or competing for federal contracts, you need a VPAT.

State and local government purchasing: Many state and local government procurement processes now require VPATs for technology vendors, particularly after the ADA Title II rule made government website accessibility a legal requirement. If you are a government agency evaluating a web platform, CMS, or other digital tool, requesting a VPAT is appropriate.

Grant-funded technology: Some foundation and federal grant programs require accessibility documentation for technology purchases funded by the grant. Check your grant terms.

Healthcare and higher education: Organizations subject to Section 504 of the Rehabilitation Act (which includes healthcare organizations receiving federal funding and most colleges and universities) may need to verify that their technology vendors are accessible. A VPAT is the standard documentation.

What to Look for in a VPAT

A VPAT is only as useful as its honesty. Red flags include VPATs that claim full support for every criterion without explanation, VPATs that are significantly out of date (more than two years old), and VPATs that cover only a subset of the product’s features.

Look for VPATs that acknowledge partial or no support for specific criteria and explain the limitation and any remediation plan. A vendor who is transparent about accessibility gaps is more trustworthy than one whose VPAT claims perfect conformance across every criterion.

Frequently Asked Questions

Do nonprofit organizations need VPATs?

Nonprofits generally do not create VPATs unless they are selling technology products to government or enterprise clients. Nonprofits may need to request VPATs from their own technology vendors — particularly platforms used for donor management, content management, or client services — when those purchases are grant-funded or subject to accessibility requirements.

Is a VPAT the same as an accessibility audit?

No. A VPAT is a vendor-produced self-assessment document. An accessibility audit is a professional evaluation of a specific website or product conducted by independent testers using automated tools and manual testing. An audit is more rigorous and more reliable; a VPAT is a disclosure document.

Do web agencies provide VPATs?

Some do, particularly agencies that work with federal clients or government contractors. ArcStone can provide accessibility documentation for websites we build, including the testing methodology used, the tools employed, and the conformance level achieved.

ArcStone builds WCAG 2.2 AA compliant WordPress websites and can provide accessibility documentation for government and institutional clients. Contact us to discuss your specific requirements.