Accessibility Remediation

Accessibility remediation services for websites, documents and Section 508

You are here because something has already been found: an audit came back with a list, a buyer questioned your accessibility documentation, or a demand letter named specific barriers on your site. The finding is not the problem any more, closing it is. We fix the issues in the code, the documents and the interface, retest to confirm each one is resolved, and hand you the evidence that says so.

Accessibility remediation services we provide

Remediation is one engagement across three kinds of material, and most teams need more than one of them. We scope them together so nothing is fixed in isolation and then contradicted by a document or a screen nobody looked at.

Website and web application remediation

Code-level fixes to templates, components and interactive patterns, made in your codebase or delivered as changes your developers can apply without re-diagnosing anything.

Document and PDF remediation

Tags, reading order, alternative text, table headers, form fields and language settings on the files you publish or send to buyers.

Section 508 remediation for federal work

The same fixes run against the standard federal reviewers use, ending in an updated conformance report you can put in front of a contracting officer.

When you need remediation rather than another audit

An audit tells you what is broken. It does not change a single line of your product. Teams come to us at the point where they already know: the report is sitting in a folder, the list has been circulated, and nothing has moved because nobody owns the fixing.

That is the gap we fill. We work from your existing audit if you have one, whether we produced it or another firm did, so you are not paying for the same assessment twice. Where a report is thin, out of date, or written against a different standard than the one you are held to, we say so before we start rather than quietly re-testing on your budget.

If you do not have an audit yet, we start with WCAG audits and testing and move into remediation from there. Buying both from one team removes the argument that usually stalls this work, where the auditor says the developer implemented it wrong and the developer says the finding was unclear.

What accessibility remediation actually fixes

Remediation is specific work on specific defects, not a pass over the site to make it feel better. The issues we close most often are the ones audits produce most often.

  • Images, icons and controls with missing, duplicated or meaningless alternative text
  • Keyboard operation: elements that cannot be reached, cannot be left, or trap focus
  • Focus order that does not follow the visual sequence, and focus indicators invisible against their background
  • Headings and landmarks that misrepresent the structure of the page
  • Forms without programmatic labels, and errors shown visually but never announced
  • Text and interface contrast below the required ratios
  • Custom components such as menus, modals, tabs and comboboxes where ARIA is missing, incorrect, or contradicts the behavior
  • Tables without header associations, and layout tables read as data
  • Media without captions, transcripts or audio description
  • Documents that carry the same failures into PDF

Each fix is tied to the success criterion it closes, so the report you hand a reviewer later says what changed and why it mattered.

How we prioritize remediation work

Most providers will tell you they prioritize. Very few will tell you against what, and the difference decides whether your budget buys risk reduction or a longer list of closed tickets.

We order the work by two questions. First, does the issue stop someone completing a task — buying, applying, submitting, logging in? A barrier on a checkout flow outranks a contrast failure in a footer, however many instances of the footer there are. Second, is it an issue a reviewer will land on? Contracting officers, agency compliance teams and plaintiff firms look at predictable things: keyboard operation, forms, error handling, the main navigation. Failures there cost you a contract or an answer to a letter, not just a line in a report.

Volume comes last. Fixing four hundred instances of one low-impact pattern makes the numbers look excellent and changes nothing for the person who could not complete the form. We will tell you when a large count is not the priority, and we will tell you when it is.

How a remediation engagement runs

Scope and baseline

We agree what is in — which templates, components, user journeys and documents — and against which standard. Where you already have findings, we map them to that scope so the work starts from what you paid for.

Fix

We work through the list in priority order, either directly in your codebase or as changes your team applies, whichever your release process allows. Documents are remediated and returned in whatever form fits how you publish them.

Retest and verify

Closed issues are re-tested, by hand and with assistive technology where the finding calls for it. How much of the set that covers depends on the scope we agree, but the principle does not move: a fix that satisfies a checker while still trapping a screen reader is not closed, and we will not report it as closed.

Documentation

You receive a record of what was fixed, what was verified, what remains open and why, plus an updated conformance report where procurement needs one.

Document and PDF remediation

Documents fail for reasons that have nothing to do with your website, and they are the part teams forget until a buyer opens one. A PDF that looks correct on screen can be untagged underneath, read out of order, or built from scanned images with no text layer at all.

We remediate the files you actually publish and send: tags and structure, reading order, alternative text on images and charts, table header associations, form fields and their labels, bookmarks and navigation on long documents, and the document language and title. Where a file cannot be salvaged, such as a scan with no usable text, we say so up front rather than after the attempt, and we will usually recommend rebuilding it instead.

This matters most for federal contractors, education and healthcare, where the document is often the deliverable rather than an attachment to it.

Section 508 remediation and the conformance report that follows

Federal work adds a requirement beyond the fixing: someone has to be able to verify it. A contracting officer is not going to take your word that the findings are closed, and an internal ticket marked resolved is not evidence.

So a Section 508 remediation engagement ends in a document. We fix the findings, retest against the standard the Revised 508 Standards incorporate — WCAG 2.0 Level A and AA — and update the VPAT or ACR so it reflects what the product does now rather than what it did at the first audit. Where a limitation cannot be removed in this release, it is stated accurately rather than hidden, because an honest qualification survives review and an over-claimed one does not.

If you are earlier than that and still working out what applies to you, Section 508 compliance covers the requirements and who they reach. If the report itself is what you need, VPAT and ACR reporting is where that work lives. This page is about the fixing in between.

What automated fixes can and cannot close

Automation has a real place in remediation. Machine-detectable defects such as missing alt attributes, empty links and some contrast failures can be found at scale and corrected quickly, and refusing to use tooling for that is simply slower.

What automation cannot do is judge. It cannot tell you whether focus order matches the visual sequence, whether an error message is announced when it appears, whether alternative text describes the right thing, or whether a custom component can be operated at all. Those are the findings that block users and the findings a reviewer opens first, and they need a person looking at them.

The practical consequence is that a backlog cleared by tooling alone comes back. The count drops, the report looks better, and the barriers that mattered are still there. We use automation where it earns its place and do the rest by hand.

On the related question of whether an overlay widget resolves legal exposure, ADA website compliance sets out that argument in full.

Keeping accessibility fixed between releases

Remediation has a shelf life. A site that was clean in March is not clean in September if six sprints shipped in between and nobody checked. Most of the regressions we see are not new mistakes; they are the same pattern reintroduced by a component that was never fixed at the source.

That is why we close the loop rather than the list. Where a defect repeats across a site, fixing the shared component is usually the better call than patching every instance, because that is what stops the pattern regenerating. For teams shipping on a cycle, release checks that catch a regression before it ships are worth setting up, and we can put those in place where it fits how you work. And we tell you which findings are structural and will keep coming back until the underlying pattern changes.

The alternative is remediating the same site every year and calling it maintenance.

What you receive from a remediation engagement

The output has to work twice over: your engineers need to know what changed and where, and a reviewer needs to see that the claims rest on verification rather than on a ticket marked done.

  • Fixes applied in your codebase or delivered as changes your developers can apply, and remediated documents returned ready to publish
  • Each closed issue tied to the success criterion it resolves, with a record of what changed
  • A retest report stating what was verified, what is closed, and what remains open with the reason
  • A clear statement of coverage: the templates, components, journeys and documents that were in scope
  • An updated VPAT or ACR where procurement requires one
  • Direction on the defects that are structural, so the same findings do not return next release

Trusted by teams at

Common questions about accessibility remediation

We already have an audit report. Can you work from it, or does everything need testing again?
We work from it. Bring the report and we will map the findings to scope and start fixing. Typically we re-test where the report is silent, where it was written against a different standard than the one you are held to, or where the product has changed since. Anything we put our name on at the end does get verified, but that is the retest at the close, not a second audit at the start.
Do you fix things yourselves, or hand our developers a list?
Either, and it depends on your release process rather than our preference. We work directly in the codebase where you can give us access, and where you cannot, we deliver changes specific enough to apply without interpretation: the element, the change, and the criterion it closes. Documents we remediate ourselves and return.
How much does accessibility remediation cost?
It depends on what has to be fixed, and we scope it before quoting rather than after. The things that move the number are the count of templates and shared components rather than pages, how many findings are structural versus one-off, the volume of documents, whether a usable audit already exists, and whether a VPAT or ACR is part of the deliverable. A short call is usually enough to bracket it.
How do you decide what gets fixed first?
By user impact and by review risk, in that order. Anything blocking task completion goes first, then the areas a reviewer or a plaintiff firm reliably examines, then everything else. Instance count is the last input, not the first, because four hundred copies of a minor pattern can look urgent and change nothing.
Can automated tools or an overlay do this instead?
They can close part of it. Machine-detectable defects are worth automating and we do. What tooling cannot do is decide whether focus order makes sense, whether an error is announced, or whether a custom widget is operable, and those are the findings that stop people and the ones reviewers open first. A backlog cleared by tooling alone tends to come back.
Do you remediate documents and PDFs as well as the website?
Yes, and for some clients the documents are the larger half. Tags, reading order, alternative text, tables, form fields, bookmarks and language. Where a file is a scan with no text layer, or fights every requirement, we will say so up front and usually recommend rebuilding it instead of remediating it.
We sell to federal agencies. Does remediation update our VPAT?
That is how a federal engagement should end. We fix, retest against WCAG 2.0 Level A and AA, the version the Revised 508 Standards incorporate, and update the VPAT or ACR so it describes the product as it ships now. Where something could not be resolved in this release, it is stated plainly, because a reviewer trusts an accurate qualification more than a clean claim that collapses under a follow-up.
How do you prove the issues are actually closed?
By retesting them by hand and reporting the result per finding. You get a record of what was verified, how, and what is still open with the reason. A fix that satisfies an automated checker but still fails with a screen reader is not closed, and we do not report it as closed.
What happens when the next release breaks something again?
Some of it will, which is why we favor fixing shared components over instances wherever the defect repeats, and why release checks are worth adding for teams shipping on a cycle. We also tell you which findings are structural and will return until the underlying pattern changes, so you can decide whether to fix the pattern now or keep paying for it later.
Can you work inside our codebase, or only deliver patches?
Both work. Both work, and we settle it when we scope. Where your policy allows access, we work in your repository under whatever review process you already run. Where it does not, we deliver changes at the level of the specific element and the specific criterion, which is detailed enough that your developers are implementing rather than re-diagnosing.

Who does this work

David LoPresti

Founder and CEO, ADA Compliance Professionals

David LoPresti works with product, engineering and compliance teams to turn accessibility findings into changes that hold up under review. On a remediation engagement that means fixes made against the specific success criterion each finding fails, a retest by hand with assistive technology where the finding calls for it, and, where a buyer is waiting on documentation, an updated conformance report that describes the product as it ships rather than as it was first audited.

Close the findings and get the evidence to prove it

Tell us what came back — an audit report, a buyer questionnaire, or a letter — and we will scope the fixing and the verification with you on a call.

Free Consultation (opens in new tab)