WCAG accessibility audit for e‑commerce and websites

We check whether a user can find the offer, fill in a form, get through the cart and complete the payment with a keyboard, a screen reader or magnification. The results are ordered so the team can move from a barrier we found to a specific fix.

The scope can cover a live store, a test environment, or selected processes being prepared for launch.

Focus order on a listing view010203040506
  • WCAG 2.2
  • Level AA
  • Manual testing
  • Prioritised report

A user has to be able to take in the information and carry out the action

WCAG organises accessibility requirements around four principles. In an online store they apply to the whole road from reading about the offer to confirming the order.

01Perceivable
Content and interface state have to be available without full sight or hearing. The audit covers contrast, alternative text, heading structure, resizing content, and messages carried by colour alone.
02Operable
A user should get through the menu, the search, variant selection, the cart and the forms without a mouse. We check focus order, focus visibility, keyboard operation, and anything that needs a precise movement.
03Understandable
Labels, instructions and error messages have to make clear what the form expects and what needs correcting. This area also covers predictable navigation and repeated components.
04Robust
The code has to convey the structure, role and state of components to browsers and assistive technologies. A fault can be invisible on screen and still stop a screen-reader user completely.

The standard groups thirteen guidelines under those four principles, and W3C recommends referring new evaluations to the latest version — currently WCAG 2.2 (opens in a new tab). The version and conformance level are agreed in the scope of the service, because they decide which criteria are assessed.

WCAG 2.1 or WCAG 2.2 – which standard do we check against?

We run the audit against WCAG 2.2 at level AA, because that is the newest version of the standard recommended by W3C. In the report we separate the requirements arising from the current technical standard and the regulations in force from the additional WCAG 2.2 criteria.

Level AA also covers the level A criteria, so nothing from the lower level is skipped. WCAG 2.2 (opens in a new tab) adds nine success criteria over WCAG 2.1. Some of them — the enhanced requirements around focus visibility and authentication — are level AAA, and in an audit at level AA they stay outside the assessment.

What WCAG 2.2 adds over WCAG 2.1

Focus not obscured
The focused element must not be entirely hidden behind a sticky header, a consent banner or a filter panel.
Dragging movements
Anything built on dragging — a price slider, reordering, a configurator — needs an alternative that works with a single click.
Target size (minimum)
Interactive areas have to be large enough to hit without precise movement, which matters most for the icons in the cart and on a product listing.
Redundant entry
A checkout should not ask again for information the user has already given in the same process.
Accessible authentication
Signing in and confirming an order must not require a cognitive test with no way around it — remembering a code, say, or solving a picture puzzle.

The version of the standard and the conformance level are written into the scope of the service, because they decide which criteria enter the assessment and how the report should be read.

Automated and manual WCAG testing – how does the verification run?

Tools can point to problems that can be recognised unambiguously in the code. What they will not judge includes whether alternative text makes sense, whether the interface runs in a logical order, and whether a screen-reader user understands that the cart has changed.

W3C points out (opens in a new tab) that not all aspects of accessibility can be evaluated automatically and that human judgement is needed. So we use a scan as one stage of the evaluation, not as a finished audit.

  1. 01

    Setting the goal

    We establish whether the evaluation serves a WCAG assessment, preparation for the Polish Accessibility Act, verification before launch, or a check of fixes made after an earlier audit.

    What the stage producesAn agreed goal, standard version and conformance level.

  2. 02

    Setting the scope

    We select representative views, templates, components and processes. The scope accounts for technologies, mobile versions and the external elements that take part in a purchase.

    What the stage producesA list of the views, components and processes covered.

  3. 03

    Automated analysis

    Tools help find some of the problems in the code, the document structure, contrast and element names. We order the output and filter out reports with no effect on the user.

    What the stage producesAn initial list of places that need checking by hand.

  4. 04

    Manual testing

    We check keyboard operation, focus order and visibility, magnification and orientation change, dynamic components and messages. Every barrier is recorded together with the steps that reproduce it.

    What the stage producesConfirmed barriers with reproduction steps and supporting material.

  5. 05

    Report and walk-through

    Findings are grouped by journey, criterion and effect on the user. In the closing meeting we point out the problems that need a fast response and the changes that can be planned in later stages.

    What the stage producesThe report and an agreed order of work.

What the verification is made of

Automated tests
a scan of the code, the document structure, contrast and element names
Manual analysis
judging whether content makes sense, how the interface is ordered and how components behave
Keyboard navigation
walking every journey without a mouse, catching focus traps
Focus testing
the visibility of the indicator, its order, and its behaviour once a modal opens
Form verification
labels, instructions, validation and error messages
Representative views
templates and components that cover the whole site, not single URLs
Assistive technology tests
a screen reader and magnification, where the scope of the service covers them

What do we check during a WCAG audit?

The most serious barriers usually sit in the components that handle variant selection, forms, log-in, delivery and payment. That is why the scope is set by process, not by a count of URLs.

Every stage of the journey has a different set of components and a different way of being operated. In a large store we examine representative templates and views, but the process is always walked end to end — from entry to order confirmation and post-purchase service.

Navigation and search

The first stage decides whether a user reaches the offer at all. Multi-level menus, search suggestions and repeated header elements are where keyboard operation most often stops.

What we check

  • opening menus and submenus from the keyboard
  • focus order and focus visibility
  • labels on search fields
  • handling suggestions and the results list
  • the ability to skip repeated blocks

The first stage decides whether a user reaches the offer at all. Multi-level menus, search suggestions and repeated header elements are where keyboard operation most often stops.

What we check

  • opening menus and submenus from the keyboard
  • focus order and focus visibility
  • labels on search fields
  • handling suggestions and the results list
  • the ability to skip repeated blocks

Filters rebuild the list without reloading the page, so the change has to reach someone who is not looking at the screen. We also check whether badges on product cards have an equivalent in the content.

What we check

  • operating filters and sorting
  • announcing the number of results after a change
  • the order of content in the list
  • names and descriptions of product links
  • information carried by colour or an icon

The product page brings the gallery, the configurator and availability messages together. It is the most common place where interface state is visible only to the eye and choosing a variant needs a precise click.

What we check

  • alternative text and gallery operation
  • choosing variant, size and quantity
  • price and availability information
  • error and limit messages
  • configurators and dynamic elements

The cart updates prices and the summary in the background. If the change is not announced, a screen-reader user does not know whether the operation worked — and that is the difference between an inconvenience and a blocked purchase.

What we check

  • changing quantity and removing a product
  • discount codes and validation messages
  • price and summary updates
  • announcing changes without watching the screen
  • moving from the cart to the checkout

The checkout is the longest form in the store and the place where third-party components appear. The report separates what you control from what depends on a payment operator or a carrier.

What we check

  • field labels, instructions and autocomplete
  • error messages tied programmatically to fields
  • the order of steps and going back to correct them
  • authentication and logging in mid-purchase
  • choosing delivery and payment method
  • components coming from third-party suppliers

A purchase does not end at the payment. Recovering access, downloading a document and filing a complaint have to be possible with the same means of operation as the rest of the site.

What we check

  • registration, log-in and access recovery
  • order history and statuses
  • documents available to download
  • contact and complaint forms
  • consents, preferences and account data

Technical areas checked at every stage

Keyboard operation
getting through the whole interface without a mouse, with no focus traps
Focus visibility and order
a visible indicator and an order that follows the layout of the content
Heading structure
one H1, no skipped levels, headings that describe their sections
Forms
structure, grouping of fields, keyboard and screen-reader operation
Field labels
persistent labels tied to their fields, instructions and autofill
Error messages
tied to the field, stating cause and remedy, announced when they appear
Contrast
text, interface elements and the focus indicator against the WCAG thresholds
Alternative text
whether the description makes sense, not whether it exists; galleries, icons, functional images
Links and buttons
correct semantics, names that make sense out of context, and states
Zoom and reflow
200% zoom and a 320 px width with no loss of content or function
Multimedia
captions, transcripts, playback controls and no audio that starts on its own
Interactive elements
modals, accordions, carousels and tooltips — role, state and focus management
Authentication
sign-in, account recovery and confirmations without cognitive tests
Cart
quantity changes, discount codes and announcing that the summary has updated
Checkout
the order of the steps, delivery, payment and third-party components

FAQ – WCAG accessibility audit

These are the questions that come up most often before an enquiry is sent. If any of them is left open, we return to it in the first conversation.

We do not quote a single price, because an audit is priced by its scope: the number of processes and views covered, the number of templates and components, whether third-party components sit in the checkout, the conformance level, and whether the scope includes assistive-technology testing and re-verification after fixes. We confirm the figure in the offer, once the scope is settled.

It depends on the number of views, templates and processes in scope, and on how many of them need manual testing. We write the indicative timing into the offer along with the scope. Evaluating a single journey is far shorter than auditing a whole store with its checkout and customer account.

Since 28 June 2025 the Polish Accessibility Act (opens in a new tab), implementing the European Accessibility Act, has been in force, and it covers e‑commerce services among others. That does not mean the obligation applies automatically to every store: the Act provides exclusions, and establishing whether it covers a particular company and service calls for a legal assessment.

The Act covers the products and services it names, e‑commerce services offered to consumers among them, and places obligations on the economic operators involved in placing them on the market or providing them. Whether a given company and a given service fall under it depends on the kind of activity, the status of the business and the scope of the statutory exclusions. That assessment belongs to a lawyer, not to a technical audit.

The rules provide an exclusion for services offered or provided by microenterprises. Microenterprise status itself depends on headcount and turnover thresholds, and the exclusion applies to services — so it is not a blanket release from every obligation in every situation. Confirming that the exclusion applies calls for a legal assessment.

We run the audit against WCAG 2.2 (opens in a new tab) at level AA, because that is the newest version of the standard recommended by W3C; level AA also covers the level A criteria. WCAG 2.2 adds nine success criteria over WCAG 2.1, among them focus not obscured, dragging movements, minimum target size, redundant entry and accessible authentication. In the report we separate the requirements arising from the current technical standard and the regulations in force from the additional WCAG 2.2 criteria.

No. Automated tools can detect some faults, but they will not assess every criterion or whether a user can actually complete a task. A tool on its own cannot confirm conformance with WCAG — an audit has to include manual testing, keyboard navigation and form verification as well. W3C says the same (opens in a new tab).

Yes, and they are usually the most important part of the scope. The checkout is the longest form in a store and the place where third-party components appear. The evaluation covers field labels, instructions, validation, error messages, the order of the steps, the choice of delivery and payment, and authentication during the purchase. An e‑commerce audit does not stop at the home page and the product pages.

A report in which every non-conformance is described by the same chain: the WCAG criterion, where it occurs, the problem, the impact on the user, the recommended fix and the priority. Along with steps to reproduce, supporting evidence, the owning area, a summary for decision-makers, and a description of the scope, the method and the limits of the evaluation.

Yes, and both are agreed separately from the audit. The scope of the remedial work and its estimate follow once the priorities are approved, and re-verification after the changes is booked as a separate evaluation. The report is written, though, so that your current team or another supplier can make the fixes without us.

The scope is agreed before the work starts. In a large e‑commerce site we usually examine representative templates, components and complete processes, among them search, the product page, the cart and the checkout. The number of views depends on the complexity of the site and on the goal of the evaluation.

A WCAG audit on its own is not legal advice. Assessing readiness for the act also requires establishing whether the company and the service fall under it, and which additional obligations apply.

Yes. The evaluation can run on a test environment, provided it contains all the components and processes in scope. Finding problems before publication usually reduces the number of later changes to a finished interface.

It covers those elements that take part in the user's process and fall within the agreed scope. The report distinguishes components controlled by the site owner from elements that depend on a third-party supplier.

A site address and the goal of the evaluation are enough for a first scope assessment

In the first conversation we will settle the processes covered by the audit, the version of WCAG, the report format you expect, and whether the evaluation is to account for readiness for the Polish Accessibility Act.

If you do not yet know whether you need a WCAG assessment or a broader look at readiness for legal requirements, write what decision is in front of the company. We will fit the scope to that, not the other way round.

Małgorzata Gudalewska, Head of Sales at Aurora Creation

Małgorzata Gudalewska

Head of Sales

+48 664 531 867[email protected]
[email protected]ul. Jana Henryka Dąbrowskiego 28, 15-872 Białystok, Poland

Have these ready if you can

  • the address of the site or the test environment
  • the goal: a WCAG assessment, legal requirements, verification before launch
  • the processes that matter most to sales
  • which third-party components sit in the checkout
No files chosen
Thank you, we'll get back to you within 1 business day.

Once we have the details we will come back with the questions needed to set the scope. Pricing and a schedule require knowing the number of processes, the types of views and the technologies used on the site.