What is an Accessibility Conformance Report (ACR)?
An Accessibility Conformance Report is a document in which a software vendor states how its product meets accessibility standards, criterion by criterion. Buyers use it to compare products and to decide what extra help their users with disabilities will need.
VPAT or ACR: what is the difference?
The VPAT® (Voluntary Product Accessibility Template) is the blank template, published by the Information Technology Industry Council (ITI's VPAT page). Once a vendor fills it in for a product, the result is an Accessibility Conformance Report. In practice buyers use the two names for the same thing: "send us your VPAT" means "send us your completed ACR".
The current template is VPAT 2.5. It comes in four editions:
| Edition | Standard it reports against | Usually asked for by |
|---|---|---|
| WCAG | WCAG 2.0, 2.1 and 2.2 (Levels A, AA and AAA) | Universities, school districts, companies, many states |
| Section 508 | Revised Section 508 (US federal), which uses WCAG 2.0 | US federal agencies and their contractors |
| EU | EN 301 549, the European standard | Public buyers in the EU |
| INT | All three of the above in one report | Vendors selling in several markets; some states and districts |
Each row of the report is one success criterion (for example "1.4.3 Contrast (Minimum)"), answered with Supports, Partially Supports, Does Not Support or Not Applicable, plus a remark that explains the answer. In VPAT 2.5, "Not Evaluated" is only allowed for Level AAA, so every Level A and AA row must be answered.
Who requires an ACR
Any vendor whose product has a user interface can be asked, whatever its size. These are examples of published rules (links go to the buyer's own page):
- US federal agencies. GSA's guidance for buyers: "To be considered for award, the ACR must be complete" (section508.gov: request accessibility information). GSA also describes an optional Issue Detail Supplement that rates each issue. Some agencies set stricter rules: the EPA wants custom software tested by a certified DHS Trusted Tester, and CMS asks for an ACR for each new version.
- State governments. For example Texas DIR (accessibility documentation with solicitation responses), Minnesota (INT edition, not more than two years old) and Illinois (the most recent VPAT).
- Universities. Many want a recent report: USC asks for one dated within 12 months, Yale and Arizona within 18 months, and the University of Vermont reviews whether the report says who tested the product and how.
- School districts. Prince George's County Public Schools asks for an INT-edition ACR updated annually.
- Large companies. Enterprise procurement questionnaires often start with "Do you have an ACR?" (for example Disability:IN's accessible procurement questions).
Requests for proposals list it too. A 2026 university RFP says: "Vendor shall provide an Accessibility Conformance Report (ACR/VPAT) identifying the product's current level of conformance" (NEOMED RFP). Another lists a VPAT among materials whose absence "may result in disqualification" (University of Montevallo RFP).
In the EU, public buyers usually ask for conformance with EN 301 549 rather than for a "VPAT" by name; the VPAT EU or INT edition is one common way to document it. The European Accessibility Act sets its own requirements, and an ACR on its own does not show that a product meets the Act.
What makes a report credible
Procurement and accessibility teams read these reports closely. They look for:
- the product name, version and report date;
- what was tested (which screens and flows) and how (tools, browsers, assistive technology);
- a remark on every row, especially every "Partially Supports";
- evidence of manual testing, not only an automated scan.
Section508.gov puts it bluntly: "An ACR that lists 'Supports' for every criterion without explanation is not credible" (section508.gov).
How to get an Accessibility Conformance Report
There are two routes. You can test the product yourself and fill in the template: ITI publishes it free, and our VPAT template guide has the download links, a blank WCAG-edition form and section-by-section instructions. Or you can have it tested and written for you: see what a VPAT audit involves, and an example report. Federal buyers usually want the Section 508 edition; Section 508 testing explains what that adds.
How often it needs updating
Neither ITI nor GSA sets an expiry date, but buyers do: 12 months at some universities and districts, 18 months or two years at others, and a new report for each major release at some agencies. Plan on an update about once a year, or when your interface changes a lot.