IS 17802 Explained: India's ICT Accessibility Standard and How to Test for It
IS 17802 is India's two-part standard for accessible ICT products and services. This explainer covers what Part 1 and Part 2 contain, how the standard maps to EN 301…
SEBI Digital Accessibility
Compliance and Remediation
Vervali, a software testing company headquartered in Mumbai, prepares brokers, AMCs and other SEBI-regulated entities for their digital accessibility audit and guides the fixes for what the audit finds. Its engineers test websites, trading and investing apps and investor portals against WCAG 2.2 Level AA, which builds on the WCAG 2.1 Level AA used by GIGW 3.0 and IS 17802, with NVDA, JAWS, TalkBack and VoiceOver on real devices, guide the remediation of audit findings and accessibility complaints filed on SCORES, retest every fix and hand over evidence platform by platform. SEBI set 31 October 2026 for the audit and the remediation of its findings; the first annual audit compliance is due by 30 April 2027. Your certified accessibility professional conducts the audit.
150+ clients
450+ projects
275+ engineers
15+ years
ISO/IEC 17025:2017Accredited testing laboratory
CMMI Maturity Level 3The process is written down and repeats
ISO 9001:2015Quality management
ISO/IEC 27001Information security
What SEBI's Digital Accessibility Circulars Require
Vervali tests every platform through WCAG 2.2 Level AA against the three standards SEBI's July 2025 circular sets for all regulated entities: WCAG 2.1 or its latest version, the latest GIGW (now GIGW 3.0) and IS 17802.
It covers brokers, mutual funds and AMCs, RTAs, KRAs, portfolio managers, investment advisers, exchanges and depositories: their websites, apps and portals, and what they publish, such as tagged PDFs, captioned videos and KYC alternatives. A nodal officer answers for it. Certified accessibility professionals run the audit, which includes usability testing by persons with disabilities. Platforms bought from vendors count, because SEBI keeps the responsibility with the entity (see VPAT and ACR preparation). Read also SEBI's December 2025 clarification.
SEBI Accessibility Deadlines After 31 October 2026
Vervali works to SEBI's current dates: its circular of 31 July 2026 set 31 October 2026 for the audit and the remediation of its findings and left every other provision unchanged.
| Date | What is due | Who |
|---|---|---|
| 31 October 2026 | Audit of every digital platform and remediation of its findings; trading members file both on NSE's ENIT portal (NSE circular) | Every SEBI-regulated entity |
| 30 November 2026 and 28 February 2027 | Preliminary report and action taken report of NSE's half-yearly system audit, in which the system auditor checks the IAAP audit certificate for vendor-provided trading software (NSE circular) | NSE trading members |
| 30 April 2027 | Compliance for the annual accessibility audit of all digital platforms, with the final audit report (SEBI circular) | Every SEBI-regulated entity |
SEBI had published no further extension as of 30 October 2026, so check SEBI's circular list before relying on a date.
What Vervali Does Before and After Your SEBI Audit
Vervali tests the platform before the audit, guides the remediation of the findings, and compiles the evidence pack for the next cycle.
Pre-audit testing
We start from your platform list and investor journeys: KYC, login, placing an order, PDF statements, the grievance form. axe and WAVE scans give breadth, then manual review covers every WCAG 2.2 Level AA criterion with NVDA, JAWS, VoiceOver and TalkBack on real devices. See accessibility testing services and mobile app testing.
Remediation of audit findings
We take the certified auditor's report and reproduce each observation. We guide your developers through the fix, covering markup, ARIA, focus order, contrast, labels, error messages and accessible PDFs, and record every change against the observation number.
SCORES complaints
We reproduce the barrier with the assistive technology the investor names, guide your developers to fix it, and write up what changed for the entity's response. The entity closes the complaint; our write-up and retest give it the evidence.
Retesting
No fix counts as closed until it is retested and dated. Each finding carries its WCAG criterion, severity and steps to reproduce, and moves from fixed to retested in the evidence pack with the date and the tester.
Testing one website and one app before an audit usually takes one to three months. Pricing is per platform, per journey or by screens, and we do not publish a band.
The Evidence Pack for Your Next Audit
Vervali hands over its evidence platform by platform, in the order SEBI's readiness format lists them: the platform's URL, whether it meets Level AA, and remarks.
Each record holds the URL or app version, the standards tested, the journeys and devices, and every finding with its status (open, fixed, retested), date, tester and source: the auditor's observation number or the SCORES complaint reference. It is the nodal officer's record of fixes and the starting point for the next certified auditor. Vervali does not certify compliance, and its report does not replace the audit report. The format varies by engagement, and a sample can be shown after an initial meeting.
What Vervali Has Done, and the Certificates It Holds
Vervali tested a leading Indian bank's web and mobile application against WCAG 2.2 and identified 1,100+ accessibility issues, then guided its developers through the fixes.
India · leading bank · web and mobile application · WCAG 2.2 accessibility testing
Vervali combined automated tools with expert manual validation across core banking journeys, covering keyboard navigation, assistive technology, colour contrast and semantic structure. Every issue was documented with business impact, severity and remediation steps, and recorded knowledge-sharing sessions showed the development team how to fix them.
1,100+ issues identified 60% fewer QA clarifications 55% better WCAG coverage of critical workflowsUnited States · public-sector HR software provider · WCAG 2.0 and Section 508, not a SEBI engagement
Vervali audited and remediated 2,000+ URLs, fixing 5,000+ accessibility gaps; the client submitted every platform inside the committed 90 days and achieved Section 508 certification on the first attempt. It shows remediation and retesting at scale; a fully non-compliant product outside the agreed scope was remediated too. Read the case study.
2,000+ URLs audited 5,000+ gaps fixed Certification on the first attemptISO/IEC 17025:2017CMMI Maturity Level 3ISO 9001:2015ISO/IEC 27001
Code, test accounts and documents are handled under ISO/IEC 27001 practices, with an NDA as standard. More on fintech and banking.
Frequently Asked Questions
SEBI's circular of 31 July 2026 set 31 October 2026 for the accessibility audit of every digital platform and the remediation of its findings. All other provisions stayed unchanged, so compliance for the annual accessibility audit is due by 30 April 2027. SEBI had published no further extension as of 30 October 2026.
SEBI requires periodic accessibility audits through certified accessibility professionals; its July 2025 circular named IAAP certification, and NSE asks trading members for an IAAP-certified professional. Vervali tests your platforms before the audit, guides the fixes for what the auditor finds, and retests every fix. Your own certified accessibility professional conducts the audit, and Vervali works with certified accessibility professionals under a written arrangement and can introduce you to one.
SEBI names three: WCAG 2.1 or its latest version, the latest GIGW (now GIGW 3.0) and IS 17802. Its readiness format asks whether each platform meets Level AA under the latest WCAG. For web content, WCAG 2.1 Level AA conformance equals IS 17802's web requirements. The audit also includes usability testing by persons with disabilities.
SCORES has an Accessibility complaint category, and SEBI's December 2025 clarification says the entity shall remediate the issue to close the complaint. Vervali reproduces the barrier with the assistive technology the investor used, guides your developers to fix it, retests it and writes up what changed for your response.
Finish the remediation, retest every finding and keep dated evidence; the annual audit compliance due by 30 April 2027 still applies. Ask your reporting authority how to report the delay: the stock exchange or depository for brokers and depository participants, BSE for investment advisers and research analysts, and SEBI for everyone else.
Email Us
Call Us
