Compliance · United States
Section 508 compliance: what it requires and how to meet it
Section 508 of the Rehabilitation Act requires US federal agencies to make the information and communication technology (ICT) they develop, buy, maintain or use accessible to people with disabilities — websites, web apps, software, documents and support materials included.
Since the Revised 508 Standards took effect on 18 January 2018, the technical bar is WCAG 2.0 Level A and AA. Agencies check it when they buy: vendors are asked for an Accessibility Conformance Report (ACR), usually written on the VPAT template.
Updated: 30 October 2026
Section 508 at a glance
| Question | Answer |
|---|---|
| Who must comply | Federal agencies. Vendors are not regulated directly, but to sell ICT to an agency they must show it conforms. |
| Technical standard | Revised 508 Standards (36 CFR 1194), which incorporate WCAG 2.0 Level A and AA by reference. |
| What is covered | Web content, web and desktop software, electronic documents (PDF, Word, slides), and support documentation. |
| How conformance is shown | An Accessibility Conformance Report (ACR), usually on the VPAT 2.x Section 508 or INT edition. |
| Section 508 vs ADA | Section 508 covers federal agencies and what they buy. The ADA covers businesses (Title III) and state and local governments (Title II). |
How InclusiveWeb helps you meet Section 508
Test, fix and document — in that order.
Automated audit
Every page of your site checked against WCAG 2.1/2.2 A and AA with 90+ rules — a superset of the WCAG 2.0 AA bar that Section 508 uses. Continuous monitoring catches regressions.
Manual testing
Screen reader flows with NVDA, JAWS and VoiceOver, keyboard and visual checks, following the DHS Trusted Tester process — the part no scanner can do.
VPAT / ACR
An Accessibility Conformance Report in the Section 508 or INT edition, grounded in the test results, ready for procurement.
Accessible documents
Section 508 covers PDFs and office documents too. We remediate documents so they pass the same criteria as your web pages.
You need Section 508 conformance if…
- You sell software, a SaaS product or a digital service to US federal agencies.
- You are a federal contractor building or maintaining websites, apps or documents for an agency.
- A state agency, university or prime contractor asks for "508 compliance" or a VPAT in its procurement.
What we will not promise
- A "508 certification". There is no official certificate: conformance is documented by the vendor in an ACR, which is why the testing behind it matters.
- Conformance from an overlay. An accessibility panel helps visitors, but Section 508 is met by fixing the content and code.
- Conformance from automated checks alone. They catch roughly half of the issues; the rest needs manual testing.
Frequently asked questions
Does Section 508 apply to private companies?
Not directly. Section 508 binds federal agencies. But agencies may only buy ICT that conforms, so any company selling software or digital services to the federal government is expected to meet the standard and document it in an ACR.
Which WCAG version does Section 508 require?
The Revised 508 Standards incorporate WCAG 2.0 Level A and AA. Meeting WCAG 2.1 or 2.2 Level AA also meets the 2.0 criteria, and it is what most buyers and other laws now ask for, so it is the sensible target.
Are PDFs and other documents covered?
Yes. Electronic content — PDFs, Word documents, spreadsheets, presentations — must meet the same WCAG criteria when it is public-facing or used for official agency business.
What is the difference between a VPAT and an ACR?
The VPAT is the blank template published by ITI. Completed for a specific product, it is an Accessibility Conformance Report (ACR). Federal buyers ask for the Section 508 or the INT edition.
Is an automated scan enough for Section 508?
No. A scan is the fastest way to find and track the issues machines can detect, but criteria like keyboard flows, focus order, meaningful labels and screen reader announcements need a person to test them.
Related
Find out where your site stands on Section 508
Run a free audit of your site against WCAG A and AA, then decide what needs manual testing and an ACR.