ADA compliance · SaaS & Software

Accessibility compliance for SaaS companies.

For software companies, accessibility is a sales problem before it's a legal one. Procurement asks for a VPAT. We help you have a good one.

See plans and pricing

$75

Monitor · per month

$250+

Remediate · per month

The short answer

What does ADA compliance mean for SaaS and software companies?

SaaS companies selling to government, higher education, healthcare, or enterprise buyers are routinely asked for a VPAT, or Accessibility Conformance Report, documenting WCAG and Section 508 conformance. Public entities covered by the DOJ Title II rule must make vendor-provided content conform to WCAG 2.1 AA by April 2027 or 2028, and they're passing that requirement to vendors in contracts now.

The VPAT, published by the Information Technology Industry Council, is the standard format for Accessibility Conformance Reports.
Section 508 requires federal agencies to buy accessible ICT, and the Revised 508 Standards incorporate WCAG 2.0 AA.
Title II entities are responsible for content vendors provide on their behalf, so public-sector buyers are adding WCAG 2.1 AA to contracts.
The European Accessibility Act covers some software-based services sold to EU consumers, such as e-commerce and banking.

The exposure

Where accessibility shows up in your pipeline

Security questionnaires now come with accessibility questionnaires. Deals with public universities, state agencies, and health systems stall when the answer is 'we don't have a VPAT' or 'our VPAT is from 2019'.

A VPAT that claims more than your product delivers is a liability. Buyers test, and some contracts include remediation obligations and warranties.

Your marketing site is covered by ADA Title III like any business site, and it's the first thing a buyer's accessibility reviewer opens.

The rules

Accessibility laws that apply to SaaS and software companies.

Section 508
Who it covers
Federal agencies and the ICT they procure
Standard
Revised 508 Standards (WCAG 2.0 AA incorporated)
Timing
In effect now
ADA Title II (2024 DOJ rule)
Who it covers
Public-sector customers, and through them, their vendors
Standard
WCAG 2.1 AA
Timing
April 26, 2027 (50,000+); April 26, 2028 (smaller)
ADA Title III
Who it covers
Your public-facing website and consumer products
Standard
WCAG 2.1 AA by reference
Timing
In effect now
European Accessibility Act
Who it covers
Covered products and services sold to EU consumers
Standard
EN 301 549
Timing
Applied from June 28, 2025

Accessibility laws that apply to SaaS and software companies
Law or rule	Who it covers	Standard	Timing
Section 508	Federal agencies and the ICT they procure	Revised 508 Standards (WCAG 2.0 AA incorporated)	In effect now
ADA Title II (2024 DOJ rule)	Public-sector customers, and through them, their vendors	WCAG 2.1 AA	April 26, 2027 (50,000+); April 26, 2028 (smaller)
ADA Title III	Your public-facing website and consumer products	WCAG 2.1 AA by reference	In effect now
European Accessibility Act	Covered products and services sold to EU consumers	EN 301 549	Applied from June 28, 2025

Common failures

Where SaaS products fail

What we find most often on sites in this industry, and the WCAG success criterion each one fails.

Custom dropdowns, comboboxes, and date pickers without proper roles
Where it shows up
App UI components
WCAG criterion
4.1.2 Name, Role, Value
Modals and drawers that don't manage focus
Where it shows up
Settings, create/edit flows
WCAG criterion
2.4.3 Focus Order, 2.1.2 No Keyboard Trap
Data tables and dashboards with no accessible structure
Where it shows up
Reporting, admin views
WCAG criterion
1.3.1 Info and Relationships
Charts with no text or table alternative
Where it shows up
Analytics dashboards
WCAG criterion
1.1.1 Non-text Content
Toasts and inline validation not announced
Where it shows up
Save and error feedback
WCAG criterion
4.1.3 Status Messages
Focus indicator hidden behind sticky headers
Where it shows up
Long forms and lists
WCAG criterion
2.4.11 Focus Not Obscured (WCAG 2.2)
Small icon-only buttons
Where it shows up
Toolbars, row actions
WCAG criterion
2.5.8 Target Size (WCAG 2.2), 1.1.1 Non-text Content

Common accessibility barriers on websites for SaaS and software companies
Barrier	Where it shows up	WCAG criterion
Custom dropdowns, comboboxes, and date pickers without proper roles	App UI components	4.1.2 Name, Role, Value
Modals and drawers that don't manage focus	Settings, create/edit flows	2.4.3 Focus Order, 2.1.2 No Keyboard Trap
Data tables and dashboards with no accessible structure	Reporting, admin views	1.3.1 Info and Relationships
Charts with no text or table alternative	Analytics dashboards	1.1.1 Non-text Content
Toasts and inline validation not announced	Save and error feedback	4.1.3 Status Messages
Focus indicator hidden behind sticky headers	Long forms and lists	2.4.11 Focus Not Obscured (WCAG 2.2)
Small icon-only buttons	Toolbars, row actions	2.5.8 Target Size (WCAG 2.2), 1.1.1 Non-text Content

What you get

What's included for SaaS and software companies.

On Monitor ($75/mo)

Monthly scans of your marketing site and docs
Manual testing of core product flows in a test account: signup, onboarding, and the top jobs your buyers evaluate
Component-level findings mapped to your design system
Issues tagged by WCAG criterion so they line up with your VPAT

Added on Monitor + Remediate (from $250/mo)

Fixes to design system components so they're correct everywhere they're used
Marketing site and docs remediation
Regression checks against each release
VPAT / Accessibility Conformance Report drafted from our testing (scoped separately)

Pricing

ADA compliance pricing for SaaS and software companies.

No annual audit invoice, no widget license. Monthly pricing and work you can see in the report.

Monitor

$75/mo

Continuous WCAG 2.2 AA monitoring and a prioritized fix list your team can ship.

Baseline audit against WCAG 2.1 and 2.2 Level AA
Automated scans of your site every month, plus alerts when new issues ship
Manual checks of key templates: keyboard, screen reader, zoom, and forms
Prioritized recommendations with the exact WCAG success criterion and fix guidance
Monthly report showing open issues, resolved issues, and trend
Accessibility statement drafted for your site

Best for: Teams with a developer or agency who can implement fixes.

Start monitoring

Monitor + Remediate

$250/mo and up

Everything in Monitor, and we fix the issues in your code and content.

Everything in Monitor
We implement fixes in your theme, templates, CMS, and content
Alt text, captions, form labels, color contrast, focus order, and ARIA repairs
Accessible PDF and document remediation, quoted by volume
Regression checks after every fix and every major release
Documented remediation log you can hand to counsel or procurement

Best for: Businesses that want the issues fixed, not just reported.

Get a remediation quote

Monitor + Remediate starts at $250/mo. Final price depends on site size, number of unique templates, platform, and how much content (PDFs, video) needs remediation. You get a fixed monthly quote before anything starts.

How it works

Baseline, prioritize, fix, and keep it fixed.

01
Baseline
Automated crawl plus manual testing of your highest-traffic and highest-risk templates. You get a scored list of every WCAG failure we find.
02
Prioritize
Issues ranked by user impact and legal exposure: checkout, booking, forms, and navigation first. Cosmetic issues last.
03
Fix or hand off
On Monitor, your developers get fix-ready tickets. On Remediate, we ship the fixes and verify them.
04
Hold the line
Monthly scans and manual spot checks catch regressions from new pages, plugins, and releases before a plaintiff's scanner does.

Questions

SaaS & Software ADA compliance FAQ.

What is a VPAT and do we need one?

A VPAT (Voluntary Product Accessibility Template) is the ITI template used to produce an Accessibility Conformance Report. It documents, criterion by criterion, how your product conforms to WCAG, Section 508, and EN 301 549. If you sell to government, higher ed, or large enterprises, you'll be asked for one. It should be based on real testing and updated when the product changes.

Can we write our own VPAT?

You can, and many companies do. The risk is overstating conformance, which buyers can discover during testing. We base ours on documented testing and mark 'Partially Supports' honestly, with a remediation plan. That's usually more persuasive to a procurement team than a clean-looking report that doesn't hold up.

Does the $75/mo plan cover our product or just our website?

Monitor covers your marketing site, docs, and a manual test of your core product flows. Deep product testing across a large application, and VPAT production, are scoped by the number of screens and flows. Most SaaS teams start with Monitor + Remediate on the site and design system, then add product testing before a major deal.

Keep reading

More on ADA website compliance

Related industries

Other industries we cover.

Sources

Where these facts come from

Quorum is not a law firm, and this page is not legal advice. Deadlines and rules change. For advice on your situation, talk to an attorney.

Get a baseline for your site.

See every WCAG failure on your site, ranked by risk, before you commit to fixes.

Start with Monitor, $75/mo