How to Produce a VPAT: From Acronym to Finished Document

Published October 1, 2025

Header image for blog post: How to Produce a VPAT: From Acronym to Finished Document

Estimated reading time: 3 minutes

From Acronym to Finished Document

We covered what these documents are in GPATs and VPATs for 508 compliance: the paperwork that demonstrates how a product or website conforms to accessibility standards, demanded by government and university procurement. This post is the practical sequel for the team that just received the request: how a credible VPAT actually gets produced, what the process involves, and the mistakes that get drafts rejected by the people who read these for a living.

Step One: Know Which Edition You Are Filling Out

The VPAT template comes in editions matched to the standards you are claiming against: Section 508 for U.S. federal procurement, WCAG editions for web standards, European EN 301 549, and an international combination. Your buyer's request usually names the standard; when it does not, ask, because filling out the wrong edition is a fast way to restart. The completed document, technically an ACR, an Accessibility Conformance Report, is what you actually deliver.

Step Two: Test Before You Type

A VPAT is a report of findings, so the findings have to exist first. Credible ones come from real evaluation: automated scans for the mechanical criteria, then hands-on testing with keyboard navigation and screen readers for everything automation cannot judge, which is most of it. This is the same testing discipline behind making a website 508 compliant, pointed at documentation instead of remediation. Testing also tells you what to fix before reporting, which is usually the smarter order.

Step Three: Report Like a Credible Vendor

  • Use the vocabulary correctly. Each criterion gets Supports, Partially Supports, Does Not Support, or Not Applicable, with remarks explaining the judgment.
  • Honest partials beat false perfection. Procurement reviewers distrust a wall of "Supports" with empty remarks, because nobody's product is flawless. Specific, candid remarks with remediation plans read as competence.
  • Date it and scope it. Which product, which version, which pages, tested when, by what method. An unscoped VPAT is an unusable one.
  • Plan the refresh. Products change; conformance claims age. Buyers increasingly ask how current the ACR is.

The Shortcut That Backfires

Filling out the template optimistically without testing is common and increasingly caught: reviewers spot-check claims, and a VPAT contradicted by two minutes of keyboard testing costs the deal plus the credibility. The document is a claim your company signs. Treat it accordingly.

When to Bring in a Third Party

An independent evaluation carries weight self-assessment cannot, and it bundles naturally with fixing what the testing finds. That is how we deliver it at Web Experts: evaluation, remediation priorities, and the finished ACR, through our 508 and ADA compliance service. If a VPAT request just landed in your inbox with a deadline attached, send it to us. We have answered that exact email many times.

Web Experts blog return logo

CONTACT

Tell us what you need and we will follow up.

Atlanta, GA | 404-870-0020

Serving Atlanta metro and clients across Georgia and the United States.

Ready to send.