Independent VPAT Audit and Testing Services for ICT Vendors

If you sell technology to government agencies, universities, or enterprise buyers, your VPAT is a legal representation of your product’s accessibility. Microassist produces accurate, defensible Accessibility Conformance Reports — backed by a government-contracted accessibility team with over 30 years of experience.

Federal law, specifically Section 508 of the Rehabilitation Act, requires federal agencies to procure ICT that meets defined accessibility standards. Many state and local governments have enacted similar or aligned requirements. The most common way vendors document accessibility is through an Accessibility Conformance Report (ACR), completed using the VPAT template published by the Information Technology Industry Council (ITI). When you submit a VPAT as part of a government or enterprise procurement, you are making a formal representation about your product’s accessibility. That claim needs to be accurate.


Need a VPAT for an upcoming contract or RFP? Tell us about your product and the standards your buyer requires. Email our Accessibility Team, and let’s talk about your product and what your buyer requires


Vendors who trust Microassist with their VPATs

Microassist has completed VPAT audits and Accessibility Conformance Reports for ICT vendors across enterprise SaaS, security software, HR technology, healthcare IT, and industrial systems.

  • Technology and SaaS
    • Eightfold
    • KnowBe4
    • Blancco
    • Hexagon
  • Education and EdTech
    • Encoura
    • Classchat.us
    • LINQ
  • Healthcare
    • Automated Health Systems
    • Catapult Health
  • Financial Services
    • Washington Trust Bank
  • Enterprise and Consumer
    • Boston Beer Company

What Microassist Delivers: Your VPAT Audit, Start to Finish

Microassist evaluates your ICT product against the accessibility standards your buyers require, then documents the findings in a complete Accessibility Conformance Report (ACR). We test against WCAG 2.1 AA and Section 508 requirements (which incorporate WCAG 2.0 AA), as well as WCAG 2.2 and EN 301 549 for European market needs. The result is a completed ACR, delivered in the VPAT format, that accurately reflects your product’s real conformance levels, including criteria that support, partially support, or do not support accessibility requirements, with the supporting detail procurement teams expect. We also document known limitations, exceptions, and available workarounds or mitigations, which are standard in a thorough VPAT and signal to buyers that the evaluation was conducted with care.

How Our VPAT Audit Process Works

Step 1 — Scoping call We review your product together to understand what needs to be evaluated — including which components, interfaces, and user workflows are in scope. You’ll tell us what your buyer requires, and we’ll identify which VPAT template versions apply (Section 508, WCAG, EN 301 549, or International Edition). Contact us to schedule your scoping call.

Step 2 — Proposal and agreement We provide a written proposal outlining scope, standards to be evaluated, and timeline. Work begins once you’ve reviewed and signed off.

Step 3 — Product accessibility evaluation Our team evaluates your product against each applicable accessibility criterion using assistive technologies including JAWS, NVDA, and VoiceOver, along with keyboard-only navigation testing.

Step 4 — ACR documentation and results review We document findings in a completed VPAT. Each criterion is rated Supports, Partially Supports, Does Not Support, or Not Applicable — with explanatory remarks including known limitations and available workarounds. We walk through the results with you so you understand the findings before final delivery.

Step 5 — Final delivery We deliver a final signed ACR ready for submission with your bid or contract.

Step 6 — VPAT updates As your product evolves, Microassist can update your VPAT for new releases. Updates are scoped and priced separately based on what has changed in the product.

Lower Risk with Accurate VPATs

An inaccurate VPAT is not just a paperwork problem. It can function as a contractual representation. When a government or enterprise buyer relies on your VPAT to make a procurement decision, that document may become part of the contractual record or be treated as a formal representation of accessibility. If your product does not perform as described, you may face contract disputes, remediation requirements, and reputational damage with buyers who have accessibility obligations defined by law or internal policy.

To lower that risk, you can engage Microassist to help you evaluate and accurately document your ICT products and services. As a government-contracted accessibility services firm with nearly 40 years of experience, we can help you generate a more accurate assessment of your offering. We can also help you produce the documentation that agencies require as part of the procurement process and that meets contract requirements.

Why an Independent VPAT matters to your buyers

VPATs are self-reported documents, and vendors are not legally required to use a third party to complete them.

However, federal and enterprise procurement teams are increasingly experienced in evaluating VPAT quality. A self-reported VPAT that overestimates conformance is often identifiable during review and can affect credibility in the evaluation process.

An independently completed VPAT signals to buyers that the vendor has invested in a structured accessibility evaluation and that the resulting Accessibility Conformance Report is less likely to contain unsupported claims.

For federal contracts in particular, an independently completed Accessibility Conformance Report can strengthen the credibility of accessibility representations and may help reduce the risk of post-award scrutiny, including audits, complaints, or remediation requirements.

Microassist completes VPATs as an independent third party with no stake in the outcome. We report what we find.

Standards and VPAT versions we cover

Vendors often need to determine which VPAT template and accessibility standards apply to their specific buyers. Requirements vary across federal, enterprise, and international procurement, and selecting the correct version is part of producing an accurate Accessibility Conformance Report.

VPAT WCAG Edition
Used for products sold to buyers who require WCAG conformance, including WCAG 2.0, 2.1, or 2.2. This edition covers web content, software, and documents.

Revised Section 508 Edition
Used for US federal procurement. This edition aligns with the Section 508 standards updated in 2018 and incorporates WCAG 2.0 AA requirements.

EN 301 549 Edition
Used for European public sector procurement. This standard aligns with WCAG 2.1 AA and includes additional criteria for hardware and real-time communication technologies.

International Edition
Combines WCAG, Section 508, and EN 301 549 requirements into a single document. This is commonly used for products sold across multiple markets.

Not sure which version you need? Tell us who your buyer is, and we will identify the appropriate VPAT template before the engagement begins.

VPAT Audit FAQs

What is a VPAT audit?

A VPAT audit is an evaluation of a technology product’s accessibility against standards such as WCAG 2.x, Section 508 requirements, and EN 301 549. The results are documented in an Accessibility Conformance Report (ACR), which buyers review during procurement.

A VPAT audit includes manual testing, assistive technology testing, and a criterion-by-criterion assessment. The final ACR shows whether each requirement supports, partially supports, or does not support accessibility.

Can I complete my own VPAT, or do I need a third party?

Yes, vendors can complete their own VPAT because it is a self-reported document. However, many government and enterprise buyers expect a higher level of accuracy and detail than most self-reported VPATs provide.

A third-party VPAT evaluation adds credibility, reduces the risk of overstating conformance, and helps avoid accessibility issues during procurement or after contract award.

How long does a VPAT audit take?

Most VPAT audits take 2 to 4 weeks for web applications and SaaS products. The timeline depends on product complexity, number of screens, and required testing.

More complex systems, including mobile apps, desktop software, or multi-component platforms, may take longer. Accelerated timelines are often possible for procurement deadlines.

Which VPAT version do I need?

The VPAT version depends on your target buyer. US federal agencies typically use the Revised Section 508 Edition, while European buyers align with EN 301 549. Many enterprise and education buyers request WCAG 2.1 AA using the WCAG Edition.

Selecting the correct VPAT template ensures your ACR matches the accessibility requirements expected in procurement.

What happens if my product does not fully support all accessibility criteria?

Most products do not fully support every accessibility requirement. A VPAT is not a pass-or-fail certification; it is a detailed conformance report.

Each criterion is rated as Supports, Partially Supports, Does Not Support, or Not Applicable. Buyers expect honest reporting, and accurate documentation of gaps is more credible than overstating compliance.

How much does a VPAT audit cost?

The cost of a VPAT audit depends on product complexity, testing scope, and the number of standards evaluated. Simple web applications cost less than complex platforms with multiple components.

Do VPATs need to be updated for new product releases?

Yes, VPATs should be updated when a product changes in ways that affect accessibility. An outdated VPAT can create risk during procurement or contract performance.