A VPAT is the blank template. An ACR is the completed document that results from filling that template in. The Voluntary Product Accessibility Template (VPAT) is published by ITI and provides the framework. Once a vendor evaluates their product against WCAG, Section 508, or EN 301 549 and fills in the template with conformance details, the finished document is an Accessibility Conformance Report (ACR). Most people use VPAT to mean both, but the terms are not interchangeable.
| Term | What it actually is |
|---|---|
| VPAT | The empty template published by ITI. A framework for documenting product accessibility against a chosen standard. |
| ACR | The completed report. A VPAT that has been filled in with specific conformance details for a product. |
| Common usage | Most buyers and vendors say VPAT when they mean ACR. Procurement teams often request a VPAT but expect a completed ACR. |
| Editions | WCAG, Section 508, EN 301 549, and INT. The edition you choose depends on the buyer and the market. |
Why the Distinction Matters
The VPAT is paperwork waiting to happen. The ACR is the actual deliverable a buyer reads. When a procurement team asks for your VPAT, they want the completed report, not a link to the blank template on ITI’s website.
Vendors who confuse the two waste time. They download the template, look at the empty fields, and either guess at conformance or skip the work entirely. The result is an ACR that doesn’t reflect the product accurately, which creates risk for both sides of the deal.
What Goes Into an ACR
A complete ACR includes product details, the standards evaluated, the evaluation methods used, and a row-by-row table of each criterion with a conformance level: Supports, Partially Supports, Does Not Support, or Not Applicable. Each row also includes remarks and explanations.
The evaluation behind the ACR is what gives it weight. An ACR backed by a thorough accessibility audit carries far more credibility than one filled in based on assumptions. This is the part most vendors get wrong. They write the document without the underlying evaluation, and the report falls apart under scrutiny.
Which VPAT Edition Should You Use?
The VPAT comes in four editions. WCAG is the most common and works for most SaaS companies selling commercially. Section 508 is for U.S. federal procurement. EN 301 549 covers European public sector requirements. INT combines all three and is used when a vendor sells across markets.
For most companies, the WCAG edition at the 2.1 AA or 2.2 AA conformance level covers the request. If a federal agency is the buyer, Section 508 applies. If an EU public body is the buyer, EN 301 549 applies.
How the Two Terms Get Mixed Up
Procurement language is the main source of confusion. RFPs ask for a VPAT when they want the completed ACR. Vendors then label their finished document as a VPAT to match the request. Over time, the industry collapsed the two terms into one.
This is mostly harmless in casual conversation. It becomes a problem when a buyer expects a real evaluation and the vendor delivers a template filled in with guesses. The document name is correct. The substance is not.
FAQ
Do I need an audit before creating an ACR?
Yes. An ACR without a supporting evaluation is a document filled with assumptions. The audit identifies what your product actually does against each criterion, which is the only way to fill in the conformance levels accurately. Without that work, your ACR can be picked apart by any buyer who looks closely.
Can I write my own ACR or do I need a third party?
You can write it yourself if you have the expertise. Many vendors choose to work with an outside auditor because independently issued ACRs carry more weight in procurement. Buyers tend to trust a report signed by a third-party auditor more than one written by the vendor selling the product.
How often should the ACR be updated?
ACRs do not have a formal expiration. The standard practice is to update the report after significant product changes, redesigns, or new releases that affect accessibility. Most buyers expect a report that reflects the current state of the product, not a version from two years ago.
Is a VPAT or ACR the same as certification?
No. Neither document is a certification of accessibility. The ACR is a transparent report of where the product stands against a standard. It documents conformance, including areas that partially support or do not support criteria. Calling it a certification misrepresents what the document is.
The short version: VPAT is the form, ACR is the filled-in report, and the audit behind both is what makes the document credible.
Contact Kris for help with your VPAT and ACR.