VPAT/ACR Checklist for Procurement & Compliance Teams

VPAT · ACR · WCAG 2.2 · SECTION 508 · EN 301 549

Is a missing VPAT/ACR quietly stalling your next enterprise deal?

A step-by-step guide for procurement and compliance teams what buyers expect to see, how conformance ratings actually work, and the five mistakes that make reviewers doubt an entire report.

2Documents explained – VPAT vs ACR
4+Standards covered, incl. EN 301 549
5Conformance ratings decoded
5Report mistakes to avoid
Why it matters

More enterprise and government buyers now ask for a conformance report before they’ll even open a security review.

A weak or missing ACR doesn’t just look incomplete – it can quietly remove you from the shortlist. This guide breaks down what a defensible report contains and how to get there without overclaiming.

Procurement Leads Product Owners Software Directors
Download the VPAT/ACR Checklist
The Guide, In Order

Everything your team needs before the next procurement ask

01

Know the difference

VPAT is the standardized template a buyer expects to see. ACR is that template filled out with real, product-specific evidence — and it’s the ACR they’re actually asking for.

02

Get the basics right

Product name and version, publication date, VPAT edition, standards evaluated, and evaluation methodology – the five details a compliance team scans for first.

03

Rate it honestly

An honest “Partially Supports” beats a fake “Supports.” Experienced buyers read the remarks column, and overclaiming here is the fastest way to lose trust – or trigger a future audit.

04

Test it properly, then document it

Automated scans alone won’t hold up in review. Manual testing, keyboard navigation, and real screen-reader coverage across your actual product scope is what a defensible ACR is built on.

Download the VPAT/ACR Checklist
Sample: What’s Inside

A preview of what the full guide walks you through

  • VPAT vs. ACR explained in plain terms — and exactly when each gets requested during procurement
  • The five details every report must state up front, and which VPAT edition buyers in each market expect
  • The full conformance rating scale — Supports, Partially Supports, Does Not Support, Not Applicable, Not Evaluated
  • What “real” accessibility testing includes, beyond an automated scan, and how to state your test scope
  • The high-impact workflows evaluators check first — authentication, forms, checkout, keyboard and screen-reader access
  • Five common mistakes in self-prepared VPATs that make buyers doubt the entire report
This page is an outline. The complete, unabridged guide is available as a download.
Download the VPAT/ACR Checklist
How Enabled.in Helps

Real accessibility expertise behind the paperwork – not just a filled-in template

We combine manual testing with assistive technology, automated tooling, and structured VPAT/ACR documentation aligned to WCAG, Section 508, and EN 301 549 – so reports hold up under procurement scrutiny.

AuditsAutomated + manual testing across web, mobile, and documents
RemediationPractical fixes, re-testing, and documentation kept current
ReportsVPAT & ACR documentation aligned to WCAG, 508, and EN 301 549
Download the VPAT/ACR Checklist