Audit report (VPAT 2.5 + plain English)
01Formatted to satisfy procurement and readable by your engineers. Every finding mapped to a WCAG success criterion, severity scored, and tagged with an effort estimate.
Services · Practice 01
Accessibility audits and remediation, for buyers who can't afford to fail an audit.
WCAG 2.2 AA and AAA. ADA Title II / Title III. Section 508. EN 301 549. We audit, plan, remediate, and submit for third-party verification — with Level Access as a Verified Partner closing the conformance loop.
- Engagement
- Phased, 4–14 weeks
- Standards
- WCAG 2.2 AA · Section 508 · EN 301 549
- Verification
- Level Access (Verified Partner)
- Conformance
- Up to AAA
What you get
Deliverables, no surprises.
Remediation plan
02Sequenced by user impact and effort, not alphabetically. Tells you what to fix this sprint, this quarter, and what to watch.
Component-level remediation
03Fixes delivered as reviewable patches with regression tests where applicable. Submitted as pull requests when our team has access to your repo, as documented patches with reproduction steps when we don't.
Knowledge transfer (optional, scoped per engagement)
04Optional working sessions with the engineers who will own accessibility after we leave. Scope and format set per engagement — recordings, written playbook, walkthrough sessions. Skipped when the client owns their own training pipeline.
Signed statement of conformance
05Verified by Level Access as a third-party Verified Partner — not self-attested. The signed conformance statement, the VPAT 2.5, and the remediation evidence are yours to attach to RFP responses, audit submissions, and procurement disclosures.
How we work
5 phases. Same team start to finish.
- 01
Scope
Week 1Stakeholder interviews, a walkthrough of your three highest-traffic flows, and a read of any prior audit reports. We end the week with a written scope and a fixed price.
- 02
Audit
Weeks 2–3Automated tooling (axe-core, axe DevTools, Pa11y, Lighthouse) for breadth. Manual testing with assistive tech (NVDA, JAWS, VoiceOver, TalkBack, Dragon, keyboard-only) for depth. Every finding screen-recorded with reproduction steps.
- 03
Plan
Week 4We deliver the report, walk your team through it line by line, and co-author the remediation plan. You leave the workshop knowing what to do next quarter.
- 04
Remediate
Weeks 5–NOptional. We work alongside your engineers on the remediation when that's the engagement mode — or hand off the full playbook for your team to execute. Fixed weekly billing structure, no surprises.
- 05
Re-audit
Final weekRe-run the full audit, submit for Level Access verification, sign the statement of conformance, and set up the regression tests that catch the next regression before it ships.
Fit check
Who this is for — and who it isn't.
This works if
- You sell to federal, state, healthcare, or education buyers
- You've received a VPAT request and aren't sure what to do with it
- A previous audit failed and you need an actual plan
- You want accessibility built into the team, not bolted on per-release
This doesn't if
- You want a one-time PDF with no remediation plan attached
- You expect AAA conformance on a six-week timeline
- You want to outsource accountability — we work with your team, not around it
Engagement
Pick the shape that fits.
Audit + plan
Up to 25 templates · ~2 weeks · VPAT 2.5 + audit report + remediation plan readout.
Best fit:You have an in-house team that can execute the fixes.
Most engagements
Audit + remediate
Audit + ~8 weeks of remediation alongside your team + re-audit + signed statement of conformance.
Best fit:You want it done. Most engagements land here.
Continuous compliance
Quarterly audits · PR reviews · training · on-call accessibility support.
Best fit:You ship constantly and need accessibility to keep pace with the release cadence.
Pricing is scoped after a discovery call.
Partner stack
Verification, tooling, and continuous compliance.
Verified Partner
Level Access
Third-party accessibility audit verification. We deliver the remediation; Level Access closes the conformance loop. Our team is actively training in the Level Access Academy Verified Partner learning path — the same curriculum used to credential Level Access’s own auditors.
More on the partnership
Partner
AccessiBe
Automated accessibility tooling and continuous monitoring. Deployed when overlay tooling is the right fit for the buyer’s context, or as a maintenance layer alongside ongoing remediation work.
We’re an AccessiBe partner. Buyers who deploy AccessiBe through our partnership help support Nessim Works.
More on the partnershipTraining and ongoing certification
Active learning, by everyone who delivers the work.
Accessibility is a fast-moving spec landscape — WCAG 2.2, the new ADA Title II rule, the next round of EN 301 549, AI-assisted remediation tooling. Our team invests in continuous learning so the conformance claims we make stay defensible.
- Level Access Academy — Verified Partner learning pathActive training. Same curriculum Level Access uses to credential its own auditors.
- LinkedIn Learning — Accessibility-First DesignCompleted Jan 2026. Accessible UX, design system patterns, accessibility-first interaction design.
- Deque UniversityReference curriculum and supplementary modules drawn on per engagement.
- WebAIM and The A11y ProjectReference material that informs how we audit, document, and remediate.
FAQ
Questions we hear most.
How fast can you start?
Typically 1–2 weeks from a signed engagement letter. Faster if you have an audit deadline in flight — we've staged compressed engagements in under 7 days when the procurement timeline required it.
Do you guarantee AAA conformance?
No, and any vendor who does is overpromising. AAA is achievable for specific user journeys and content types; it's not always defensible site-wide because some AAA criteria conflict with editorial or business requirements. We guarantee that what we audit and remediate meets the conformance level we sign for — typically AA, with AAA scoped flow by flow.
Do you sign NDAs and BAAs?
Yes. NDAs are standard. BAAs (Business Associate Agreements) are signed for healthcare engagements covered by HIPAA, before any access to PHI-adjacent infrastructure.
Can you work with our existing audit firm?
Often, yes. We've delivered remediation against Level Access, Deque, TPGi, and in-house audit findings. If you have an open conformance gap, send us the report — we'll scope the remediation off your existing audit data. When the engagement still benefits from third-party verification of the remediated state, Level Access is our default verifier.
What about VPAT 2.5 / EN 301 549?
VPAT 2.5 is our default — it incorporates WCAG 2.2 and is the current ITI standard for federal procurement. EN 301 549 is supported for European procurement and international government work; mapping from WCAG conformance is included in the deliverable when EN 301 549 applies.
Discovery first
Talk to us about your engagement.
Discovery calls are free. Scope, timelines, and pricing are quoted after we understand what you’re solving.