By Andrew Szigety, DHS Trusted Tester (TT‑2606‑09221). Published .

The template is free from ITI in four editions. A US federal or state buyer wants the Section 508 edition, an EU buyer wants the EN 301 549 edition, and the WCAG edition covers the guidelines alone. The INT edition reports all three in one document. Current version: VPAT 2.5Rev, dated April 24, 2025, checked on September 14, 2026.

Key Takeaway

Produce the INT edition unless you are certain only one market will ever ask. The same testing sits behind all four editions. What changes is which tables the document prints, and discovering later that you need another one means paying for a second document.

The Four Editions

A VPAT (Voluntary Product Accessibility Template) is the blank form. Filled in, it becomes an ACR (Accessibility Conformance Report), which is the document procurement actually asks for. ITI publishes the form in four editions, and the edition you pick decides which standard the report answers.

The four editions of the VPAT 2.5Rev template, what each reports against, and which WCAG version its tables are built on, read from ITI's own VPAT page on September 14, 2026.
EditionWhat It Reports AgainstWCAG Version in Its TablesWho Asks For It
VPAT 2.5Rev 508The Revised Section 508 Standards, the US federal accessibility standard.WCAG 2.0Federal agencies, and state and local programs that adopt Section 508 by reference.
VPAT 2.5Rev EUEN 301 549, the European standard for public procurement of ICT.WCAG 2.1European public sector buyers, and customers working to the European Accessibility Act.
VPAT 2.5Rev WCAGWCAG alone, with no procurement standard wrapped around it.WCAG 2.0, 2.1 and 2.2Enterprise buyers whose questionnaire names a WCAG version and level.
VPAT 2.5Rev INTAll three of the above, in one document.WCAG 2.2, printed alongside the Section 508 and EN 301 549 tables.Anyone selling, or plausibly about to sell, into more than one of those markets.

Every edition name, version, date and WCAG version above was read from ITI’s own itic.org VPAT page on September 14, 2026. ITI publishes each edition as a Microsoft Word file, plus a change tracking file carrying the same April 24, 2025 date. Follow the link to check it yourself, and if ITI has moved the version since, its page will say so before we do.

Which WCAG Version Is Inside Each Edition

This is the part that catches people out. The edition does not only decide which procurement standard the report answers. It also decides which version of WCAG the web tables are built on, and ITI says so plainly: WCAG 2.0 is incorporated into the 508 edition, WCAG 2.1 into the EU edition, and WCAG 2.2 into the WCAG and INT editions.

That is not a choice ITI made. It follows the standards themselves. The Revised Section 508 Standards require conformance to “Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0” at both E205.4 and E207.2, and EN 301 549 in the version cited in the EU Official Journal points at WCAG 2.1. The template can only report what the standard names.

WCAG Level A and AA success criteria counts by version, and the VPAT 2.5Rev edition built on each, read from W3C and ITI on September 14, 2026.
WCAG VersionLevel A and AA CriteriaEdition Built On ItWhat That Means For You
WCAG 2.0 (2008)w3.org/TR/WCAG2038508 editionAnswers a federal Section 508 request, and nothing newer than it.
WCAG 2.1 (2018)w3.org/TR/WCAG2150EU editionAdds the 12 criteria an EN 301 549 or ADA Title II reader expects.
WCAG 2.2 (2023)w3.org/WAI new-in-2255WCAG and INT editionsAdds the six newer A and AA criteria enterprise reviewers now ask about.

38 vs 55

WCAG A and AA criteria behind the 508 edition (WCAG 2.0) and behind the INT edition (WCAG 2.2)

The practical consequence is worth being blunt about. A 508 edition ACR on its own is a WCAG 2.0 answer, no matter how recently it was written. That is the correct document for a federal solicitation, and it is the wrong document to hand an enterprise buyer whose questionnaire asks for WCAG 2.2 AA. The INT edition prints the Section 508 tables and the WCAG 2.2 tables in the same file, which is why it is the one worth producing when there is any chance of a second buyer. The version differences themselves are covered in WCAG 2.1 vs 2.2.

Where to Get the Blank Template

It is free. All four editions are published as Microsoft Word files on ITI’s VPAT page, and ITI states that membership in ITI is not required to use them. Nothing has to be bought to start, and no rule requires a third party to fill one in.

You can write your own. Procurement reviewers increasingly ask who performed the evaluation and what credentials they hold, and a report produced by the same team that built the product is the kind a reviewer pushes back on. ITI does not review or approve completed reports either, so nothing about the form itself vouches for what is in it. An outside evaluator with a federal certification is a specific answer to a specific question.

Two conditions come with the template. VPAT is an ITI registered service mark, so ITI asks that the name and the report form not be altered without its written permission, and that the registered mark notation be used with the name. Both are on ITI’s page in full.

How to Pick, in One Question

Who is asking, and where do they buy?

  • A federal agency, or a contracting officer citing Section 508. The 508 edition.
  • A European public body, or a customer citing the European Accessibility Act. The EU edition, which reports against EN 301 549.
  • An enterprise buyer whose questionnaire names WCAG 2.2 AA. The WCAG edition, or INT.
  • More than one of the above, now or plausibly later. INT.
  • You do not know yet. INT. It contains the other three, and the extra work of producing it is in the reporting, not in the testing, because one evaluation feeds every edition.

What the Edition Does Not Decide

The edition decides which standard the document reports against. It decides nothing about whether a reviewer believes it.

Every edition carries the same four conformance levels (Supports, Partially Supports, Does Not Support and Not Applicable), the same remarks column, and the same Evaluation Methods Used field. That field is what a careful procurement reviewer reads first, because it is the only place the document says how the product was actually tested. A report marking Supports down every row with an empty methods field reads the same way in all four editions.

Availability matters as much as accuracy. Of 107 SaaS vendors we checked, 30 published a report a buyer could read without asking for it. The finding is published in full in the ACR availability research.

How Harbor Issues It

Every Harbor engagement is issued in the INT edition, with no surcharge for the edition, because the evaluation behind all four is the same work. The product is tested against all 55 WCAG 2.2 Level A and AA success criteria, and the signed report comes back in VPAT 2.5Rev INT, so one document answers a WCAG, a Section 508 or an EN 301 549 request. The evaluator is named in the report: Andrew Szigety, DHS Trusted Tester TT‑2606‑09221. For a federal buyer, the same evaluation is performed under the DHS Trusted Tester methodology.

Harbor does not publish a fee. The fee follows your unique template count, with no page cap, and it is fixed in writing before you commit. Fifteen minutes on a call is enough to establish it, and sending the template list by email works just as well. The full sample ACR is published, so you can read the deliverable before you spend anything.

Common Questions

Which VPAT edition do I need?
It follows the buyer. A US federal agency, or any contracting officer citing Section 508, wants the 508 edition. A European public body, or a customer working to the European Accessibility Act, wants the EU edition, which reports against EN 301 549. An enterprise buyer whose questionnaire names a WCAG version wants the WCAG edition. The INT edition reports all three in one document, and it is the right answer whenever more than one of those buyers might ask.
What is the current version of the VPAT?
VPAT 2.5Rev (April 2025). All four editions and the change tracking file on ITI’s VPAT page carry the date April 24, 2025, checked on September 14, 2026. There is no 2.6, and the version number is the same across all four editions.
What is the difference between the VPAT 508, EU, WCAG and INT editions?
They differ in which standard the tables report against, not in how the product is tested. The 508 edition reports against the Revised Section 508 Standards. The EU edition reports against EN 301 549, the European standard for public procurement of ICT. The WCAG edition reports against the WCAG guidelines alone, with no procurement standard around them. The INT edition prints all three sets of tables in one document.
Which WCAG version does each VPAT edition use?
ITI states it directly: WCAG 2.0 is incorporated into the 508 edition, WCAG 2.1 into the EU edition, and WCAG 2.2 into the WCAG and INT editions. That matters because WCAG 2.0 has 38 Level A and AA success criteria, WCAG 2.1 has 50 and WCAG 2.2 has 55. A 508 edition report on its own is a WCAG 2.0 answer, however recently it was written.
Is the VPAT template free to download?
Yes. ITI publishes all four editions as Microsoft Word files at no cost and states that membership in ITI is not required to use them. No rule requires a third party to fill one in, and ITI does not review or approve completed reports. What procurement reviewers ask instead is who performed the evaluation and how the product was tested, which is what the Evaluation Methods Used field in every edition is for.
Can one VPAT cover both Section 508 and the European Accessibility Act?
Yes, that is what the INT edition is for. It incorporates the Revised Section 508 Standards, EN 301 549 and WCAG 2.2 in a single document, so one report answers a federal contracting officer and a European buyer without a second engagement. Harbor issues the INT edition on every engagement with no surcharge for the edition.