Frequently Asked Questions
Everything you'd want to know before you email us.
Organized by topic — methodology, legal exposure, pricing, data handling, and who we are as a business. Can't find something? Ask us directly.
Methodology
Legal & Risk
Pricing & Process
Data & Privacy
About Our Business
We combine automated scanning with hands-on manual testing. Automated tools are fast at flagging likely issues — missing alt text, low contrast, empty links — but they typically catch a minority of real WCAG failures. Our auditors then navigate your site using only a keyboard, test with screen readers like NVDA and VoiceOver, and check things automation can't judge, like whether a heading structure actually makes sense or whether error messages are understandable.
WCAG (Web Content Accessibility Guidelines) is the international technical standard, currently at version 2.2, with conformance levels A, AA, and AAA. Section 508 is a U.S. federal law requiring agencies — and organizations receiving federal funding or contracts — to meet accessibility standards; its current technical requirements are aligned with WCAG 2.0 Level AA, with movement toward 2.2. In practice, most private litigation and DOJ guidance now treats WCAG 2.1 or 2.2 AA as the working benchmark regardless of which law technically applies to you.
Overlay widgets adjust how a page displays inside the visitor's browser — resizing text, tweaking contrast — without changing your underlying HTML, CSS, or JavaScript. They generally can't fix structural problems like missing form labels, broken keyboard traps, or improper heading order, and they can sometimes interfere with the assistive technology a visitor is already using. Overlays have also been named directly in a number of accessibility lawsuits, since their presence can signal to a plaintiff's counsel that the underlying code was never actually remediated.
No. Our goal is to preserve your existing visual design and brand identity while fixing the underlying markup, semantics, and interaction patterns that create barriers. In the rare case a visual change is genuinely required — for example, a contrast ratio that can't pass at a given color pairing — we'll flag it and work with you on an option that keeps your brand intact.
It depends on who you are. State and local government entities are now subject to a Department of Justice rule under ADA Title II requiring WCAG 2.1 Level AA conformance, with compliance deadlines in 2026 and 2027 depending on population size. Private businesses aren't bound by a single codified web standard, but courts across multiple circuits have repeatedly held that the ADA's Title III applies to websites with a connection to a place of public accommodation — and have consistently pointed to WCAG as the practical benchmark. See our Case Law Library for the specific rulings.
No audit can guarantee immunity from litigation — we aren't a law firm and this isn't legal advice. What an audit and remediation program does is materially reduce your actual exposure by fixing real barriers, and it gives you a documented, good-faith record of ongoing effort, which courts and regulators have treated favorably in past cases. We recommend pairing our technical work with your own counsel's guidance on your specific risk profile.
Talk to an attorney before you respond to the letter itself — that's outside our scope. On the technical side, we can turn around an expedited audit so you and your counsel have a clear, accurate picture of what's actually broken, rather than negotiating in the dark.
A standard diagnostic audit typically takes one to two weeks depending on site size and how many templates and user flows need testing. Full remediation timelines depend on the volume of findings and your team's availability to review proposed fixes.
Yes. WCAG applies at the level of rendered HTML, ARIA, and interaction behavior, so our findings and fixes are written to work within whatever platform or framework you're already using, rather than requiring a migration or rebuild.
We recommend it. New pages, redesigns, and third-party plugins can quietly reintroduce accessibility gaps even after a clean audit. Our ongoing monitoring track exists specifically so you catch that drift on a schedule, instead of finding out from a complaint.
We collect only what's needed to complete the engagement — typically the site's public-facing pages, any staging credentials you choose to share, and your contact details. We don't sell, rent, or share your information with third parties, and we don't use your proprietary code to train any third-party AI model. Full detail is in our Privacy Statement.
Yes. You can request deletion of your records at any time by contacting us directly; see the Privacy Statement for the details and any limited retention we keep for legal or accounting purposes.
Yes. Veilant Access LLC is independently founded, owned, and operated as a woman-owned and minority-owned small business. We're happy to provide relevant certification documentation as part of a procurement or vendor diversity process.
Yes — supporting state and local government entities working toward the DOJ's ADA Title II web accessibility deadlines is a core part of our practice, alongside private-sector and small business clients.
It means no audit leaves our hands as a raw, unreviewed scan output. Every engagement is reviewed by a human auditor to the best of our ability before delivery — checking findings for accuracy, removing false positives, and confirming the guidance we're giving actually reflects how a real assistive-technology user would experience the page.
Still have a question?
We'll give you a straight answer, even if it's "that's outside our scope."
Contact Veilant Access