WCAG accessibility audit for e‑commerce and websites
We check whether a user can find the offer, fill in a form, get through the cart and complete the payment with a keyboard, a screen reader or magnification. The results are ordered so the team can move from a barrier we found to a specific fix.
The scope can cover a live store, a test environment, or selected processes being prepared for launch.
- WCAG 2.2
- Level AA
- Manual testing
- Prioritised report
A user has to be able to take in the information and carry out the action
WCAG organises accessibility requirements around four principles. In an online store they apply to the whole road from reading about the offer to confirming the order.
- 01Perceivable
- Content and interface state have to be available without full sight or hearing. The audit covers contrast, alternative text, heading structure, resizing content, and messages carried by colour alone.
- 02Operable
- A user should get through the menu, the search, variant selection, the cart and the forms without a mouse. We check focus order, focus visibility, keyboard operation, and anything that needs a precise movement.
- 03Understandable
- Labels, instructions and error messages have to make clear what the form expects and what needs correcting. This area also covers predictable navigation and repeated components.
- 04Robust
- The code has to convey the structure, role and state of components to browsers and assistive technologies. A fault can be invisible on screen and still stop a screen-reader user completely.
The standard groups thirteen guidelines under those four principles, and W3C recommends referring new evaluations to the latest version — currently WCAG 2.2 (opens in a new tab). The version and conformance level are agreed in the scope of the service, because they decide which criteria are assessed.
WCAG 2.1 or WCAG 2.2 – which standard do we check against?
We run the audit against WCAG 2.2 at level AA, because that is the newest version of the standard recommended by W3C. In the report we separate the requirements arising from the current technical standard and the regulations in force from the additional WCAG 2.2 criteria.
Level AA also covers the level A criteria, so nothing from the lower level is skipped. WCAG 2.2 (opens in a new tab) adds nine success criteria over WCAG 2.1. Some of them — the enhanced requirements around focus visibility and authentication — are level AAA, and in an audit at level AA they stay outside the assessment.
What WCAG 2.2 adds over WCAG 2.1
- Focus not obscured
- The focused element must not be entirely hidden behind a sticky header, a consent banner or a filter panel.
- Dragging movements
- Anything built on dragging — a price slider, reordering, a configurator — needs an alternative that works with a single click.
- Target size (minimum)
- Interactive areas have to be large enough to hit without precise movement, which matters most for the icons in the cart and on a product listing.
- Redundant entry
- A checkout should not ask again for information the user has already given in the same process.
- Accessible authentication
- Signing in and confirming an order must not require a cognitive test with no way around it — remembering a code, say, or solving a picture puzzle.
The version of the standard and the conformance level are written into the scope of the service, because they decide which criteria enter the assessment and how the report should be read.
Automated and manual WCAG testing – how does the verification run?
Tools can point to problems that can be recognised unambiguously in the code. What they will not judge includes whether alternative text makes sense, whether the interface runs in a logical order, and whether a screen-reader user understands that the cart has changed.
W3C points out (opens in a new tab) that not all aspects of accessibility can be evaluated automatically and that human judgement is needed. So we use a scan as one stage of the evaluation, not as a finished audit.
- 01
Setting the goal
We establish whether the evaluation serves a WCAG assessment, preparation for the Polish Accessibility Act, verification before launch, or a check of fixes made after an earlier audit.
What the stage producesAn agreed goal, standard version and conformance level.
- 02
Setting the scope
We select representative views, templates, components and processes. The scope accounts for technologies, mobile versions and the external elements that take part in a purchase.
What the stage producesA list of the views, components and processes covered.
- 03
Automated analysis
Tools help find some of the problems in the code, the document structure, contrast and element names. We order the output and filter out reports with no effect on the user.
What the stage producesAn initial list of places that need checking by hand.
- 04
Manual testing
We check keyboard operation, focus order and visibility, magnification and orientation change, dynamic components and messages. Every barrier is recorded together with the steps that reproduce it.
What the stage producesConfirmed barriers with reproduction steps and supporting material.
- 05
Report and walk-through
Findings are grouped by journey, criterion and effect on the user. In the closing meeting we point out the problems that need a fast response and the changes that can be planned in later stages.
What the stage producesThe report and an agreed order of work.
What the verification is made of
- Automated tests
- a scan of the code, the document structure, contrast and element names
- Manual analysis
- judging whether content makes sense, how the interface is ordered and how components behave
- Keyboard navigation
- walking every journey without a mouse, catching focus traps
- Focus testing
- the visibility of the indicator, its order, and its behaviour once a modal opens
- Form verification
- labels, instructions, validation and error messages
- Representative views
- templates and components that cover the whole site, not single URLs
- Assistive technology tests
- a screen reader and magnification, where the scope of the service covers them
What do we check during a WCAG audit?
The most serious barriers usually sit in the components that handle variant selection, forms, log-in, delivery and payment. That is why the scope is set by process, not by a count of URLs.
Every stage of the journey has a different set of components and a different way of being operated. In a large store we examine representative templates and views, but the process is always walked end to end — from entry to order confirmation and post-purchase service.
Product listing, filters and sorting
Filters rebuild the list without reloading the page, so the change has to reach someone who is not looking at the screen. We also check whether badges on product cards have an equivalent in the content.
What we check
- operating filters and sorting
- announcing the number of results after a change
- the order of content in the list
- names and descriptions of product links
- information carried by colour or an icon
Product page and variant selection
The product page brings the gallery, the configurator and availability messages together. It is the most common place where interface state is visible only to the eye and choosing a variant needs a precise click.
What we check
- alternative text and gallery operation
- choosing variant, size and quantity
- price and availability information
- error and limit messages
- configurators and dynamic elements
Cart and changes to the order
The cart updates prices and the summary in the background. If the change is not announced, a screen-reader user does not know whether the operation worked — and that is the difference between an inconvenience and a blocked purchase.
What we check
- changing quantity and removing a product
- discount codes and validation messages
- price and summary updates
- announcing changes without watching the screen
- moving from the cart to the checkout
Checkout, delivery and payment
The checkout is the longest form in the store and the place where third-party components appear. The report separates what you control from what depends on a payment operator or a carrier.
What we check
- field labels, instructions and autocomplete
- error messages tied programmatically to fields
- the order of steps and going back to correct them
- authentication and logging in mid-purchase
- choosing delivery and payment method
- components coming from third-party suppliers
Account and service after the purchase
A purchase does not end at the payment. Recovering access, downloading a document and filing a complaint have to be possible with the same means of operation as the rest of the site.
What we check
- registration, log-in and access recovery
- order history and statuses
- documents available to download
- contact and complaint forms
- consents, preferences and account data
Filters rebuild the list without reloading the page, so the change has to reach someone who is not looking at the screen. We also check whether badges on product cards have an equivalent in the content.
What we check
- operating filters and sorting
- announcing the number of results after a change
- the order of content in the list
- names and descriptions of product links
- information carried by colour or an icon
The product page brings the gallery, the configurator and availability messages together. It is the most common place where interface state is visible only to the eye and choosing a variant needs a precise click.
What we check
- alternative text and gallery operation
- choosing variant, size and quantity
- price and availability information
- error and limit messages
- configurators and dynamic elements
The cart updates prices and the summary in the background. If the change is not announced, a screen-reader user does not know whether the operation worked — and that is the difference between an inconvenience and a blocked purchase.
What we check
- changing quantity and removing a product
- discount codes and validation messages
- price and summary updates
- announcing changes without watching the screen
- moving from the cart to the checkout
The checkout is the longest form in the store and the place where third-party components appear. The report separates what you control from what depends on a payment operator or a carrier.
What we check
- field labels, instructions and autocomplete
- error messages tied programmatically to fields
- the order of steps and going back to correct them
- authentication and logging in mid-purchase
- choosing delivery and payment method
- components coming from third-party suppliers
A purchase does not end at the payment. Recovering access, downloading a document and filing a complaint have to be possible with the same means of operation as the rest of the site.
What we check
- registration, log-in and access recovery
- order history and statuses
- documents available to download
- contact and complaint forms
- consents, preferences and account data
Technical areas checked at every stage
- Keyboard operation
- getting through the whole interface without a mouse, with no focus traps
- Focus visibility and order
- a visible indicator and an order that follows the layout of the content
- Heading structure
- one H1, no skipped levels, headings that describe their sections
- Forms
- structure, grouping of fields, keyboard and screen-reader operation
- Field labels
- persistent labels tied to their fields, instructions and autofill
- Error messages
- tied to the field, stating cause and remedy, announced when they appear
- Contrast
- text, interface elements and the focus indicator against the WCAG thresholds
- Alternative text
- whether the description makes sense, not whether it exists; galleries, icons, functional images
- Links and buttons
- correct semantics, names that make sense out of context, and states
- Zoom and reflow
- 200% zoom and a 320 px width with no loss of content or function
- Multimedia
- captions, transcripts, playback controls and no audio that starts on its own
- Interactive elements
- modals, accordions, carousels and tooltips — role, state and focus management
- Authentication
- sign-in, account recovery and confirmations without cognitive tests
- Cart
- quantity changes, discount codes and announcing that the summary has updated
- Checkout
- the order of the steps, delivery, payment and third-party components
FAQ – WCAG accessibility audit
These are the questions that come up most often before an enquiry is sent. If any of them is left open, we return to it in the first conversation.
We do not quote a single price, because an audit is priced by its scope: the number of processes and views covered, the number of templates and components, whether third-party components sit in the checkout, the conformance level, and whether the scope includes assistive-technology testing and re-verification after fixes. We confirm the figure in the offer, once the scope is settled.
It depends on the number of views, templates and processes in scope, and on how many of them need manual testing. We write the indicative timing into the offer along with the scope. Evaluating a single journey is far shorter than auditing a whole store with its checkout and customer account.
Since 28 June 2025 the Polish Accessibility Act (opens in a new tab), implementing the European Accessibility Act, has been in force, and it covers e‑commerce services among others. That does not mean the obligation applies automatically to every store: the Act provides exclusions, and establishing whether it covers a particular company and service calls for a legal assessment.
The Act covers the products and services it names, e‑commerce services offered to consumers among them, and places obligations on the economic operators involved in placing them on the market or providing them. Whether a given company and a given service fall under it depends on the kind of activity, the status of the business and the scope of the statutory exclusions. That assessment belongs to a lawyer, not to a technical audit.
The rules provide an exclusion for services offered or provided by microenterprises. Microenterprise status itself depends on headcount and turnover thresholds, and the exclusion applies to services — so it is not a blanket release from every obligation in every situation. Confirming that the exclusion applies calls for a legal assessment.
We run the audit against WCAG 2.2 (opens in a new tab) at level AA, because that is the newest version of the standard recommended by W3C; level AA also covers the level A criteria. WCAG 2.2 adds nine success criteria over WCAG 2.1, among them focus not obscured, dragging movements, minimum target size, redundant entry and accessible authentication. In the report we separate the requirements arising from the current technical standard and the regulations in force from the additional WCAG 2.2 criteria.
No. Automated tools can detect some faults, but they will not assess every criterion or whether a user can actually complete a task. A tool on its own cannot confirm conformance with WCAG — an audit has to include manual testing, keyboard navigation and form verification as well. W3C says the same (opens in a new tab).
Yes, and they are usually the most important part of the scope. The checkout is the longest form in a store and the place where third-party components appear. The evaluation covers field labels, instructions, validation, error messages, the order of the steps, the choice of delivery and payment, and authentication during the purchase. An e‑commerce audit does not stop at the home page and the product pages.
A report in which every non-conformance is described by the same chain: the WCAG criterion, where it occurs, the problem, the impact on the user, the recommended fix and the priority. Along with steps to reproduce, supporting evidence, the owning area, a summary for decision-makers, and a description of the scope, the method and the limits of the evaluation.
Yes, and both are agreed separately from the audit. The scope of the remedial work and its estimate follow once the priorities are approved, and re-verification after the changes is booked as a separate evaluation. The report is written, though, so that your current team or another supplier can make the fixes without us.
The scope is agreed before the work starts. In a large e‑commerce site we usually examine representative templates, components and complete processes, among them search, the product page, the cart and the checkout. The number of views depends on the complexity of the site and on the goal of the evaluation.
A WCAG audit on its own is not legal advice. Assessing readiness for the act also requires establishing whether the company and the service fall under it, and which additional obligations apply.
Yes. The evaluation can run on a test environment, provided it contains all the components and processes in scope. Finding problems before publication usually reduces the number of later changes to a finished interface.
It covers those elements that take part in the user's process and fall within the agreed scope. The report distinguishes components controlled by the site owner from elements that depend on a third-party supplier.
A site address and the goal of the evaluation are enough for a first scope assessment
In the first conversation we will settle the processes covered by the audit, the version of WCAG, the report format you expect, and whether the evaluation is to account for readiness for the Polish Accessibility Act.
If you do not yet know whether you need a WCAG assessment or a broader look at readiness for legal requirements, write what decision is in front of the company. We will fit the scope to that, not the other way round.

Have these ready if you can
- the address of the site or the test environment
- the goal: a WCAG assessment, legal requirements, verification before launch
- the processes that matter most to sales
- which third-party components sit in the checkout
