Mobile App Testing Services in 2026: Devices, Store Rules and Cost
This guide explains what mobile app testing services cover, how to size a device matrix from United States traffic data, and what Apple and Google check before a rel…
ADA and Section 508 Compliance Testing (WCAG 2.2 AA)
Vervali runs ADA and Section 508 compliance testing for US websites, web applications and mobile apps: a WCAG 2.2 AA audit of the pages and flows that carry legal risk, remediation guidance your developers can act on, retesting, and VPAT support. A US public-sector HR software provider reached Section 508 certification on the first attempt with us, across 2,000+ URLs, inside 90 days.
150+ clients
450+ projects
275+ engineers
15+ years
This page is the law, the deadlines and the audit. How we test with screen readers, keyboard and assistive technology sits on accessibility testing services.
ISO/IEC 17025:2017Accredited testing laboratory
CMMI Maturity Level 3The process is written down and repeats
ISO 9001:2015Quality management
ISO/IEC 27001Information security
Which US laws apply to your site, and the deadlines
What applies to you, and by when. This is the question a US public-sector or enterprise buyer arrives with. The dates below are from the Department of Justice Interim Final Rule, Federal Register document 2026-07663, published 20 April 2026. The technical standard for Title II was not changed. It remains WCAG 2.1 Level AA.
ADA Title II
State and local government, and anyone delivering services on their behalf. Web content and mobile apps must meet WCAG 2.1 Level AA. Entities with a total population of 50,000 or more: 26 April 2027. Entities under 50,000, and special district governments: 26 April 2028. An extension is not a repeal. The obligation stands.
ADA Title III
Places of public accommodation, including most private websites the public uses. There is no Department of Justice web regulation and no named WCAG version in the statute. The exposure is litigation. Private suits under Title III are common in US retail and hospitality. What reduces that exposure is an audit of the public flows, fixes, a retest, and a record.
Section 508
Federal agencies and their vendors. ICT the federal government develops, procures, maintains or uses has to be accessible. The Access Board standard maps to WCAG 2.0 Level A and AA. If you sell to federal buyers, a VPAT and a retested product are what procurement asks for, not a marketing claim.
State law, briefly
Some states add their own rules on top of the ADA. California's Unruh Act is the one most often cited alongside Title III. We test to the WCAG version your governing rule names, and we audit to WCAG 2.2 AA so a Title II or Title III buyer is not starting from a lower bar. We are not your counsel. The audit is evidence. A lawyer reads the statute.
Need the pages that carry legal risk audited before the deadline? Book a Call, or start with a Free WCAG Spot Audit. Report in 3 business days.
Book a CallWhat a compliance audit covers
Auditing every URL is not what anyone buys. We sample the pages and flows that carry legal risk, then test those in full. The 2,000+ URL public-sector engagement is how we know a large property still reduces to templates and journeys. You pay for that sample, not a crawl of everything.
Which pages and flows
Home, sign-in, the task the public actually completes, search, forms, checkout or application, account, and the templates those pages share. Chosen from analytics, legal exposure and what a first-time user has to finish. The rest of the site is represented by those templates, not ignored and not billed URL by URL.
WCAG 2.2 AA, grouped by what it protects
Perceivable: text alternatives, captions, contrast. Operable: keyboard, focus, enough time, no traps. Understandable: labels, errors, predictable behaviour. Robust: markup a screen reader can parse. We do not dump 50 success criteria as a numbered list. We report what a person cannot do.
Assistive technology, documents and media
Real screen readers, not only a scanner. Documents, PDFs and media in the sample, including captions and audio description. That is the part most audits quietly skip and most complaints cite. If a PDF or a video is in the public flow, it is in the audit.
How we report
What lands on the desk. Developers get something they can work from, not a PDF of screenshots.
Every finding
Severity, the WCAG criterion it fails, where it occurs, what to change, and a code-level example. Reproduction a developer can follow. The same finding on twenty pages of one template is one finding with a list of instances, not twenty tickets.
Dependency and legal exposure
Which fixes unblock others, so you do not start on a low-severity colour when a keyboard trap is still live. A remediation path ordered by legal exposure rather than by page: the public task first, then the rest of the template, then documents and media. Format: a working sheet the team can import, plus a short summary a procurement or legal reader can take into a meeting.
VPAT and ACR support
US federal and public-sector procurement asks for this by name. We test, we draft, you sign.
What a VPAT is
A Voluntary Product Accessibility Template is the ITI form used to report how an ICT product maps to accessibility standards. Buyers ask for it in RFPs. Filling the form without testing is how VPATs get thrown out.
What an ACR is
An Accessibility Conformance Report is the completed VPAT: the product, the standard, the results, and the remarks. That is the document procurement files. We draft it from the current ITI edition used in US federal procurement, against the testing we actually ran.
Who signs
The vendor signs the ACR, not the tester. Vervali supplies the testing, the evidence and a draft. We do not sign as if we were the product owner. That line is what keeps a VPAT honest when a contracting officer reads it.
Remediation testing and certification readiness
What happens after the audit. A finding that is not retested is still an open finding, whatever the slide says.
Retest and the pass or fail record
Each finding is retested after your developers fix it. The record is pass or fail against the same criterion and location, with a date. That is the file you hand to procurement or to a certification body. We do not close a finding on a screenshot of a patch.
Ready to certify, or to answer a buyer
The product is ready when the in-scope findings are retested and the remaining gaps are written down, not hidden. On the public-sector HR engagement, Section 508 certification landed on the first attempt, inside the committed 90 days, and a product that had been out of scope was remediated as well. That is the outcome this section is for.
Case study
One engagement, in full. Named once. The work was WCAG 2.0 and Section 508. It is not described as 2.1 AA.
USA · public-sector HR software · NEOGOV
Before: the client needed Section 508 certification to sell to federal buyers, across a large public-sector HR suite, on a committed 90-day clock. Vervali audited 2,000+ URLs, found and fixed 5,000+ gaps, and retested. After: Section 508 certification on the first attempt, inside the 90 days, and a product that had been outside the agreed scope was remediated as well. What the client could then do that they could not before: sell to federal buyers.
2,000+ URLs audited 5,000+ gaps fixed Section 508, first attempt, 90 days WCAG 2.0 · Section 508What an audit costs and how long it takes
Priced by pages and flows, not by hours. A site of a thousand URLs is usually a few dozen templates. That is what the quote is built on.
The price moves with four things: how many unique templates the public flows reduce to, whether mobile apps and documents are in scope, whether remediation testing is included, and whether a VPAT is required. Clutch lists Vervali at $25 to $49 per hour for ongoing work. A compliance audit is quoted as a fixed price against that sample, not as an open hourly run. A free 10-page WCAG 2.2 AA spot audit, with a report in three business days, is the first look. A named start is usually inside a week of NDA and access. A full audit typically takes two to four weeks once that access is in place, longer when documents, media and a second product are in the same scope.
Quoted by templates and flows
Spot audit · 3 business days
Full audit · typically 2 to 4 weeks
$25 to $49 / hour (Clutch, ongoing)
Frequently Asked Questions
It is testing of websites, apps and documents that a US federal agency develops, procures, maintains or uses, against the Access Board standard, which maps to WCAG 2.0 Level A and AA. The work is an audit of the in-scope product, a report a developer can act on, retesting, and usually a VPAT. Certification is issued by the process the buyer named, not by Vervali. We test and evidence. We do not stamp the product ourselves.
There is no single price. The quote moves with the number of unique templates, whether mobile apps and documents are in scope, whether remediation testing is included, and whether a VPAT is required. We quote a fixed price against that sample, not an open hourly run. A free 10-page WCAG 2.2 AA spot audit is the cheapest first look. Clutch lists ongoing Vervali work at $25 to $49 per hour.
Yes. Private suits under ADA Title III are common in US retail and hospitality. There is no Department of Justice web regulation for Title III, so the exposure is litigation rather than a named deadline. What reduces that exposure is an audit of the public flows, fixes on the high-severity findings, a retest, and a record you can show. That is not legal advice. It is what the work on this page produces.
Yes, when the site is how a covered entity delivers its services. Title II now names web content and mobile apps, with WCAG 2.1 AA and the 2027 and 2028 dates. Title III covers most private public-facing sites through litigation, not through a numbered web rule. If the public uses the site to do the thing you offer, treat it as in scope.
Automated scanning, which is fast and wide and still misses what a scanner cannot judge. Manual expert review, which judges whether alternative text is useful, whether headings make sense, and whether a custom widget behaves. Assistive-technology testing with real screen readers and a keyboard. A compliance audit on this page uses all three. The method for the last two sits on the accessibility testing services page.
A free 10-page WCAG 2.2 AA spot audit is reported in three business days. A full audit typically takes two to four weeks after NDA and access, driven by unique templates, not by raw URL count. Documents, media, a second product or a VPAT add time. A named tester is usually assigned within a week of access.
We test the product, then draft an Accessibility Conformance Report on the current ITI VPAT edition used in US federal procurement. The vendor signs that report, not Vervali. A VPAT without testing is a form. A VPAT with a retested product is what a contracting officer can file. Say in the scope if you need one, because it is a line item, not an automatic extra.
The rule names the version, not a preference. ADA Title II names WCAG 2.1 Level AA. Section 508 maps to WCAG 2.0 Level A and AA. Title III names no version. Vervali audits to WCAG 2.2 AA, which includes 2.1, so a Title II buyer is not starting from a lower bar. If a contract names 2.1 only, the report maps to that. 2.2 is headroom for new builds, not a substitute for the version the law names.
Email Us
Call Us
