What steps should contractors take to comply with the upcoming government website accessibility deadline? 2026

According to GSA guidelines, contractors must inventory every public-facing and internal web application, publish an up-to-date Voluntary Product Accessibility Template (VPAT), and supply a documented remediation plan with timelines and costs. Per FAR 19.502, small businesses can leverage subcontracting and teaming to meet technical requirements while preserving set-aside eligibility. The SBA reports that 78% of small contractors lack full in-house accessibility expertise, so agencies expect contractors to show procurement and compliance processes. Under OMB M-24-08 and M-25-21, agencies will require evidence of accessibility in solicitations, contracts, and post-award compliance reviews; evidence includes automated scan reports, manual test results, VPATs, user-acceptance test (UAT) records, and remediation change tickets tied to a timeline. DoD's CMMC framework requires secure processes for handling controlled information but accessibility requirements map into existing QA and lifecycle controls, so contractors should integrate accessibility testing into CI/CD pipelines and supplier management. This opening inventory and planning step sets priorities and budget items required in proposals and during contract performance.

Per FAR 19.502, small businesses can bundle accessibility expertise through teaming arrangements, mentor-protégé agreements, or subcontract awards to meet Section 508 compliance while retaining sole-source or set-aside advantages. According to GSA guidelines, contractors must show that proposed partners have capacity to deliver VPAT-compliant products and to remediate defects within agency-defined SLAs. The SBA reports that 78% of bidders must either upskill staff or purchase third-party remediation services; agencies expect timeline commitments (e.g., 30/60/90-day remediation windows) in proposals. Under OMB M-24-08, agencies will incorporate accessibility as an evaluation factor where technical performance and past performance are scored; contractors should price remediation separately and include clear, itemized deliverables. DoD's CMMC framework requires documented processes for procurement and oversight that can be repurposed to show how accessibility governance will be enforced for DoD awards.

The SBA reports that 78% of small contractors lack dedicated accessibility roles, so contractors must explicitly document roles, responsibilities, and training in their compliance packages. According to GSA guidelines, contractors must maintain evidence—VPATs, automated-scan logs, manual test summaries, and remediation tickets—linked to contract line items. Per FAR 52.212-4 and agency-specific clauses, documentation supporting deliverables and acceptance criteria should reference accessibility acceptance tests. Under OMB M-25-21, agencies will track remediation progress centrally and require contractor updates at specified reporting intervals (often monthly or at contract milestones), so include reporting milestones in the SOW. DoD's CMMC framework requires configuration and change control that dovetails with accessibility ticketing and regression testing; for DoD contracts, include change-control artifacts and secure test environments in proposals.

Under OMB M-25-21, agencies will require contractors to demonstrate continuous accessibility governance and to supply accessible deliverables as part of acceptance criteria; bidders should map accessibility tasks to functional deliverables and define acceptance tests. According to GSA guidelines, contractors must provide a VPAT for each software product and a remediation plan that lists defects, remediation owner, estimated hours, and cost. Per FAR 52.212-1 and FAR 52.216-7 where applicable, contractors should include performance milestones and acceptance criteria tied to accessibility. The SBA reports that 78% of small firms will use subcontractor expertise for manual auditing and remediation, and agencies expect documented subcontractor oversight. DoD's CMMC framework requires auditable processes; include process artifacts, role definitions, and change-control logs to satisfy both security and accessibility requirements.

DoD's CMMC framework requires documented and repeatable practices; contractors pursuing DoD work should merge accessibility QA with CMMC change control, test procedures, and evidence bundles. According to GSA guidelines, agencies may request remediation evidence such as Jira tickets, pull requests, test audits, and third-party audit reports; store these artifacts in a retrievable compliance repository. Per FAR 19.502, small businesses can retain prime eligibility by documenting how subcontractor work preserves performance and compliance; include letters of commitment and technical resumes in proposals. Under OMB M-24-08, agencies will perform periodic reviews and may require corrective actions; contractors should prepare monthly status reports and an executive summary of remediation progress for contracting officers.

According to GSA guidelines, contractors must include accessibility pricing, assumptions, and remediation SLAs in proposals so contracting officers can evaluate cost realism and schedule risk. Per FAR 15.305 and FAR 52.215-1, price realism and technical capability are evaluated; provide line-item costs for automated scans, manual remediation labor, accessibility testing, and VPAT generation. The SBA reports that 78% of award decisions weight past performance and technical approach; include prior accessibility work and measurable outcomes. Under OMB M-25-21, agencies will expect a schedule showing VPAT submission within 30 days and remediation milestones (e.g., 30/60/90 days) post-award. DoD's CMMC framework requires continuity and documentation; for defense solicitations, include security-access accommodations for testers (e.g., sanitized test environments) and costs for privileged test accounts in the budget.