Section 508 Compliance Checklist 2026: Complete Guide for Federal Agencies

Updated April 30, 2026 · 18 min read · By Accessalyze

Who this applies to: Section 508 of the Rehabilitation Act requires all federal agencies — and vendors and contractors doing business with the federal government — to ensure their Information and Communications Technology (ICT) is accessible to people with disabilities. Non-federal organizations that receive federal funding are also subject to Section 504 and related requirements.

Section 508 is often misunderstood as a website compliance law. In reality, it covers your entire ICT portfolio: public websites, internal web applications, desktop software, electronic documents, multimedia, hardware, and every technology product you procure. This checklist covers each domain so federal agencies and their contractors can systematically verify and document compliance.

What's in This Checklist

  1. Understanding the 2018 Refresh and WCAG Integration
  2. Section A — Public-Facing Web Content
  3. Section B — Internal Applications and Software
  4. Section C — Electronic Documents
  5. Section D — Multimedia and Communications
  6. Section E — Hardware, Kiosks, and Physical ICT
  7. Section F — Procurement and Vendor Management
  8. Section G — Testing and Verification
  9. Section H — Exceptions and Documentation
  10. Priority Order for Getting Started

Understanding the 2018 Refresh and WCAG Integration

The Section 508 Standards were substantially revised in January 2017 with changes effective January 2018 — commonly called the "508 Refresh." Key changes from the original 2001 standards include:

See how 321 websites scored →

View the 2026 Report
Best practice: Build to WCAG 2.1 AA, not WCAG 2.0 AA. The additional criteria in 2.1 address real needs — reflow on mobile, non-text contrast, input purpose — and adoption now avoids a remediation effort when the next Section 508 update formalizes the requirement.

Section A — Public-Facing Web Content

All publicly available federal web content must meet WCAG 2.1 AA success criteria. This section is the highest-visibility compliance area and the most commonly audited by disability rights organizations and OCR investigators.

A1 — Perceivable: Text Alternatives and Non-Text Content
A2 — Perceivable: Time-Based Media
A3 — Perceivable: Adaptable and Distinguishable Content
A4 — Operable: Keyboard and Navigation
A5 — Understandable: Language, Consistency, Error Prevention
A6 — Robust: Compatible Markup

Section B — Internal Web Applications and Software

Internal-facing tools used by federal employees are equally required to meet Section 508. Many agencies focus on public-facing compliance while neglecting the productivity tools, case management systems, and HR platforms that employees use daily — this creates barriers for employees with disabilities.

B1 — Internal Web Applications
B2 — Desktop Software (Section 508 E205–E207)

Section C — Electronic Documents

PDFs, Word documents, PowerPoint presentations, and spreadsheets are ICT under Section 508. Document accessibility is one of the most neglected compliance areas and one of the most commonly cited in complaints.

C1 — PDF Accessibility
C2 — Microsoft Word Documents
C3 — PowerPoint Presentations
C4 — Excel Spreadsheets

Section D — Multimedia and Communications

Section E — Hardware, Kiosks, and Physical ICT

Section 508 covers hardware and physical ICT including kiosks, ticket machines, check-in terminals, and ATMs operated by or for federal agencies.

Section F — Procurement and Vendor Management

This is one of the most important — and most overlooked — compliance areas. Federal agencies are prohibited from procuring ICT that does not meet Section 508 standards unless a documented exception applies. Procurement failures downstream create compliance failures in deployed systems.

F1 — Pre-Procurement Requirements
F2 — VPAT Evaluation
F3 — Post-Award and Contract Management
Common procurement failure: Many VPATs claim "Supports" for criteria that are actually non-conformant. Accepting a VPAT without review passes legal risk to your agency. Always request, review, and document VPAT evaluations — especially for high-use internal tools and public-facing platforms.

Section G — Testing and Verification

Documented testing is essential for compliance verification, remediation prioritization, and providing evidence of good-faith compliance efforts. Testing should cover automated detection, manual keyboard navigation, and screen reader evaluation.

G1 — Automated Testing
G2 — Manual Testing
G3 — Document Testing

Section H — Exceptions and Documentation

Section 508 provides for three categories of exceptions where full compliance is not required. These must be formally documented — they cannot be applied informally.

Exception Type When Applies Documentation Required
Undue Burden Compliance would require significant difficulty or expense Written determination, alternative access method provided
Fundamental Alteration Compliance would fundamentally change the nature of the product or service Written determination with explanation of alteration
Best Meets No commercially available product fully conforms; purchase most conformant option Market research showing no fully conformant alternative exists; documented selection rationale

Priority Order for Getting Started

If your agency is assessing compliance for the first time or returning from a gap period, use this prioritized sequence:

HIGH
1. Audit your top 20 most-visited public pages — Highest visibility, highest complaint risk. Start with the homepage, search, forms, and key transactional flows.
HIGH
2. Fix critical user journey barriers — Any form, application, sign-in, or data submission that cannot be completed by a screen reader user or keyboard-only user is your highest priority remediation.
HIGH
3. Review VPATs for your top 10 procured tools — Internal productivity software, case management, HR systems. Identify tools with materially inaccurate or outdated VPATs.
MED
4. Remediate mission-critical documents — Focus on forms, policy documents, and public-facing reports. Build accessible document templates to prevent future issues.
MED
5. Set up ongoing automated monitoring — A one-time audit degrades quickly. Schedule recurring scans and build accessibility checks into your CI/CD or content publication workflow.
LOW
6. Create or update your accessibility statement — Publish a current statement with a contact method for users who need accommodations.
LOW
7. Train developers and content authors — Procedural fixes without skill-building create recurring violations. Training on accessible authoring reduces long-term maintenance burden.

Start With an Automated Scan

Run Accessalyze on your public-facing federal web properties to surface WCAG 2.1 AA violations by severity and criterion. The $19 full report gives you a complete, exportable violation list you can use to populate VPAT tables and build your remediation backlog.

Scan Your Site — $19 Full Report

Section 508 vs. ADA: Key Differences

Aspect Section 508 ADA Title III
Who must comply Federal agencies + contractors Private businesses (places of public accommodation)
Who is protected Federal employees and members of the public accessing federal ICT Customers and members of the public
Enforcement Access Board, agency IGs, DOJ, OCR Private lawsuits, DOJ enforcement
Technical standard WCAG 2.0 AA (Refresh); WCAG 2.1 AA guidance WCAG 2.1 AA (DOJ final rule for Title II; case law for Title III)
Scope All ICT: web, software, documents, hardware, procurement Primarily web and digital services
Private right of action No — administrative complaint only Yes — individuals can sue directly

Federal Accessibility Resources

Related Reading

This checklist is for informational purposes only and does not constitute legal advice. Section 508 requirements are complex and agency-specific. Consult your agency's Section 508 coordinator or qualified legal counsel for compliance guidance specific to your situation.

Try it yourself

Enter your website URL to get a free accessibility score.

Check your website accessibility score free Scan Now →