IS 17802 Explained: India's ICT Accessibility Standard and How to Test for It
IS 17802 is India's two-part standard for accessible ICT products and services. This explainer covers what Part 1 and Part 2 contain, how the standard maps to EN 301…
VPAT Preparation Services
in India: ACRs for SaaS
Vervali, a software testing company headquartered in Mumbai, prepares VPATs and Accessibility Conformance Reports (ACRs) for Indian SaaS and software companies selling to US and global buyers. Its engineers test your product against the criteria in ITI's VPAT, which covers Section 508, WCAG and EN 301 549, using automated scans, manual review and the NVDA, JAWS, VoiceOver and TalkBack screen readers. They record a conformance level and remarks for every criterion and supply the test results for your team to approve and publish under your name. For a US public-sector HR software provider, Vervali audited and remediated 2,000+ URLs; the client achieved Section 508 certification on the first attempt.
150+ clients
450+ projects
275+ engineers
15+ years
ISO/IEC 17025:2017Accredited testing laboratory
CMMI Maturity Level 3The process is written down and repeats
ISO 9001:2015Quality management
ISO/IEC 27001Information security
What a VPAT and an ACR Are, and Who Asks for One
Vervali prepares ACRs on the VPAT®, the free template published by ITI, the Information Technology Industry Council, which calls the completed report the leading global format for buyers and sellers of accessible technology.
Filled in with test results for one product, the VPAT becomes an Accessibility Conformance Report (ACR). For every criterion it records one of four levels (Supports, Partially Supports, Does Not Support, Not Applicable) with remarks. US federal agencies must buy accessible technology and ask vendors for an ACR. Section508.gov says it is not voluntary to complete an ACR if you wish the government to consider purchasing your product, but a product that does not meet every standard is still considered and compared with similar products.
Which VPAT Edition Your Buyers Need
Vervali prepares the edition your buyer asks for; ITI's current VPAT, version 2.5Rev of April 2025, comes in four editions.
| Edition | Reports against | WCAG version inside | Use it when |
|---|---|---|---|
| VPAT 508 | The Revised Section 508 Standards (US federal) | WCAG 2.0 | You sell to US federal agencies |
| VPAT EU | EN 301 549 (European public procurement) | WCAG 2.1 | You sell to European public buyers |
| VPAT WCAG | WCAG | WCAG 2.0, 2.1 and 2.2 | A buyer asks for WCAG conformance |
| VPAT INT | All three of the above | WCAG 2.2 | You sell in more than one of these markets |
For Indian buyers: IS 17802, India's standard for accessible ICT, is the Indian adoption of EN 301 549 v3.2.1. The EN 301 549 sections of an EU or INT edition report are the ones to show a buyer who asks about IS 17802 (check which EN 301 549 version the edition you use is built on).
How Vervali Prepares a VPAT: Testing, Test Results, Your Approval
Every conformance level in the ACR comes from a test Vervali's engineers ran on your product.
| Criterion | Conformance level | Remarks and explanations |
|---|---|---|
| 1.1.1 Non-text Content | Supports | Images tested on the sample screens carry text alternatives that name their purpose. |
| 1.4.3 Contrast (Minimum) | Partially Supports | Body text passes; the disabled button label on the billing screen falls below 4.5:1. |
| 2.1.1 Keyboard | Partially Supports | All menus work by keyboard; the date picker cannot be closed with Esc. |
| 1.2.2 Captions (Prerecorded) | Not Applicable | The sample product has no prerecorded video. |
Scope
The product, its version and modules, and the platforms in it: web app, iOS and Android apps, help documentation. One ACR can cover software, documentation and a mobile app.
Testing
axe-core, Lighthouse and WAVE scans for breadth, then manual review of each criterion, keyboard-only use, and NVDA, JAWS, VoiceOver and TalkBack on real devices. See accessibility testing services, mobile app testing and SaaS testing.
Test results
A conformance level with remarks for every criterion, written so the buyer's reviewer can check it. We supply the test results, and can support your team in completing the report.
For your developers
A remediation guide for your developers: an issue list with the severity and the fix for each finding, so they can work through the findings in priority order and know exactly what to change.
After fixes
Once your developers have fixed the findings, Vervali retests what changed and updates the report, with a free retest and a free updated report after remediation, so the ACR shows the product as it now stands.
Your approval
Your company reviews, approves and publishes the ACR under its own name. Vervali does not sign it or certify the product.
How Long It Takes, and Keeping the ACR Current
Vervali's accessibility offer promises a VPAT with a full audit report in 5 business days, for a limited scope with fewer screens and less complexity.
More screens or templates, more platforms, documentation, or fixes before the report all add time. A version change, update or bug fix may call for an updated ACR, and a report written to the 2001 Section 508 standards must be redone to the 2017 revised standards. Vervali retests what changed in each release and updates the report. Pricing is per platform, per journey or by screens, and we do not publish a band.
Section 508 Compliance Testing: A Case Study
Vervali audited and remediated 2,000+ URLs for NEOGOV, a US provider of HR software to 6,000+ public-sector and education organisations, which achieved Section 508 certification on the first attempt.
United States · HR software provider to public-sector and education organisations · WCAG 2.0, Level AA, and Section 508
The client needed every platform audited, so Vervali ranked gaps by severity and dependency and remediated them for screen readers, speech-to-text, text-to-speech and specialised keyboards. It also trained the client's production and QA teams on WCAG 2.0 and Section 508 and prepared its VPAT. Every platform went for certification review inside the committed 90 days, and certification came on the first attempt through the client's review process, not from Vervali. A product outside the agreed scope, fully non-compliant, was remediated as well. Read the case study or our WCAG, ADA and Section 508 compliance testing.
2,000+ URLs audited 5,000+ gaps fixed Certification on the first attemptFrequently Asked Questions
A VPAT is the free template published by ITI, the Information Technology Industry Council. An ACR is that template completed for one product, with a conformance level and remarks for every criterion. Government buyers receive the ACR. Vervali tests the product and supplies the test results; your company approves and publishes the ACR. See also the Section508.gov FAQ.
Your company does. ITI says the product owner completes the VPAT, that ITI does not review or approve VPATs, and that there is no VPAT certification. Vervali runs the tests and supplies the results; your company reviews, approves and publishes the report under its own name.
The 508 edition, or the INT edition if you also sell in Europe. Section508.gov tells vendors to use a VPAT that includes the Revised Section 508 Standards (Rev508 or RevINT, version 2.x or later). Under those standards, web content and software must meet WCAG 2.0 Level A and AA. See the Section508.gov FAQ.
Not always. ITI does not require a third-party review of a VPAT. A government or other solicitation may require a third-party audit or review in its terms. An outside tester also brings screen reader testing your team may not have in-house, and evidence your buyer can check.
SEBI-regulated buyers can. SEBI's July 2025 circular puts accessibility requirements into their RFPs and tells SaaS vendors to audit their products to WCAG 2.1 or later, and India's IS 17802 Part 2 gives guidance on preparing a conformance report. NSE requires an audit of brokers' trading platforms by an IAAP-certified professional.
Email Us
Call Us
