Choosing an ADA Compliance Company: 12 Questions to Ask Before You Sign

Last updated: October 3, 2026

An ADA compliance company is any vendor selling accessibility auditing, remediation, monitoring, or documentation services — one label covering five genuinely different businesses. Picking the wrong type costs more than picking the wrong price; twelve questions expose the difference before you sign.

Key numbers: Federal ADA Title III web filings rose 37% year over year in H1 2025, and pro se filings — brought without an attorney — rose 40% in 2025 (Seyfarth Shaw). Ecommerce and retail are named in 69–77% of digital accessibility lawsuits (Seyfarth Shaw). Automated tools detect roughly 60–70% of WCAG issues; the remaining 30% requires expert manual testing (TestParty detection data). In the history of the company, fewer than 1% of TestParty customers have been named in an accessibility-related lawsuit while on the platform. The ADA names no technical web standard, but DOJ guidance and most settlements point to WCAG 2.2 Level AA, which the Department of Justice treats as the practical benchmark.

TestParty competes in this market. This guide uses public information and cited sources; evaluate every company, including us, against your own requirements.

What types of ADA compliance companies exist, and which one fits your situation?

Five business models sell under the "ADA compliance company" label, each changing something different — a report, a runtime layer, your source code, or a legal record.

+-----------------------------------+----------------------------------------------------+----------------------------------------------------+---------------------------------------------------+
|            Company type           |               What it actually does                |                      Best fit                      |                     Watch for                     |
+-----------------------------------+----------------------------------------------------+----------------------------------------------------+---------------------------------------------------+
|             Audit firm            | Independent testing and a findings report; no code changes | Independent conformance evidence, VPAT/ACR, procurement |   Someone else still has to act on the findings   |
+-----------------------------------+----------------------------------------------------+----------------------------------------------------+---------------------------------------------------+
|        Remediation company        |  Changes markup, styles, scripts in your codebase  | Closing findings; revenue-critical ecommerce flows |        Repository fixes vs. a hosted layer        |
+-----------------------------------+----------------------------------------------------+----------------------------------------------------+---------------------------------------------------+
|   Platform vendor with services   |  Scanner or overlay software plus a services team  |       One bill for tooling and expert hours        |     Whether "services" means staff or a script    |
+-----------------------------------+----------------------------------------------------+----------------------------------------------------+---------------------------------------------------+
|   Law-firm-adjacent consultancy   |       Program design, policy, staff training       |     Post-lawsuit governance; recurring defects     |         Rarely touches live code directly         |
+-----------------------------------+----------------------------------------------------+----------------------------------------------------+---------------------------------------------------+
|    Freelancer / solo consultant   |    An individual auditor, often IAAP-certified     |   Small sites, one-time projects, tight budgets    |           Bandwidth, backup, continuity           |
+-----------------------------------+----------------------------------------------------+----------------------------------------------------+---------------------------------------------------+

These are business models, not the services themselves — see the six ADA compliance service types and what each costs. Here the question is narrower: whichever service you buy, what should you know about the company selling it?

Which questions reveal who actually does the work?

The team behind an ADA compliance company sets its ceiling — a sales page can't test with a screen reader, and a subcontracted auditor may not answer to the brand you signed with.

1. Who actually performs the work — employees or subcontractors? Ask in writing whether testers and remediation staff are direct employees or subcontracted. Subcontracting isn't disqualifying — many firms use it for surge capacity — but an evasive answer, or one that shifts between the sales call and the statement of work, is.

2. What certifications does the testing staff hold? Ask for credentials, not headcount. Recognized ones are IAAP's CPACC and Web Accessibility Specialist (WAS), and DHS Trusted Tester for Web, used across federal agencies. Zero certified staff testing WCAG conformance means testing on instinct, not a documented method.

3. Do people with disabilities test as part of the engagement? Automated scans and sighted review both miss friction only real assistive-technology use surfaces — a field a screen reader announces out of order, a modal a switch-device user can't close. Ask whether disabled testers are standard, or an add-on almost nobody buys.

Which questions reveal a company's track record?

Marketing claims are free; a track record has receipts — ask for them before the reference call, not during it.

4. What share of your customers have been named in a lawsuit while on your platform? This is the single most useful question to ask any ADA compliance company, and most have never measured it. A precise rate with a stated period is the signal; a pivot to "we've never lost a case" — not the same as a filing — is not. In the history of the company, fewer than 1% of TestParty's customers have been named in a suit while on the platform; use that as the benchmark.

5. Can we speak with references at our scale, in our industry? Ask for two on a comparable platform, including one that engaged after a demand letter. Ask each what broke after go-live, and how long a fixed issue stayed fixed.

6. Which named brands can they point to, and can it be verified independently? A case study is marketing until confirmed. Ask for a brand's public accessibility statement or a press mention, not a logo on a slide. Anonymized case studies are standard here and aren't a red flag by themselves; unverifiable named ones are.

Which questions reveal how the company's model actually works?

The model, not the pitch, determines whether accessibility actually improves: some companies detect problems, some fix them, and stating which one should be a one-sentence answer.

7. Does the company change our source code, or only report on it? Ask to see a redacted diff or sample pull request. Detection-only vendors — most scanners, most audit firms by design — will redirect to a dashboard instead. A company offering both should state, criterion by criterion, what's automated, what needs developer work, and what's out of scope; see what a remediation engagement should include in writing.

8. What documentation do we receive, and is it dated? Date-stamped reports are the artifact that matters if a demand letter arrives — an undated PDF or login-only dashboard proves little about what you knew and when. Ask what a report looks like six months in, not the sample shown during the sales process.

9. Is this a one-time engagement, or ongoing monitoring? A site fixed once and never rechecked accumulates violations with every theme update and app install. In TestParty's audits of Shopify storefronts, unmonitored sites routinely show new violations by the next check. Ask for the re-scan cadence; see how a professional audit is actually scoped and staffed.

Which questions reveal the real commercial terms?

Commercial terms decide what year two costs and what happens if the relationship ends — get all three in writing before signing.

10. What does itemized pricing look like by engagement type? Ask for a line-item quote, not one number. Published market rates as of August 2026 vary sharply by category:

+-------------------------------------+---------------------------------------+
|           Engagement type           |   Published market range (Aug 2026)   |
+-------------------------------------+---------------------------------------+
|          Audit, small site          |             ~$1,000–$5,000            |
+-------------------------------------+---------------------------------------+
|      Audit, mid-size ecommerce      |            ~$3,000–$15,000+           |
+-------------------------------------+---------------------------------------+
|         Project remediation         |           ~$10,000–$50,000+           |
+-------------------------------------+---------------------------------------+
|   Ongoing monitoring, single site   |            ~$20–$100/month            |
+-------------------------------------+---------------------------------------+
|     Enterprise governance bundle    |         five figures per year         |
+-------------------------------------+---------------------------------------+

A company that can't itemize a quote this way hasn't actually scoped your engagement.

11. What is the contract term, and how does renewal work? Ask for term length, the auto-renewal notice window, any price-increase cap, and termination rights tied to missed service levels. A company confident in its results accepts a performance-based exit.

12. If we leave, what happens to the fixes? Buyers skip this one most, and it separates the company types most sharply. A hosted layer or injected script disappears with the vendor; fixes committed to your own repository persist — why code in your own repository outlasts the vendor relationship. Get the answer written into the contract.

What red flags disqualify an ADA compliance company outright?

Three answers should end a conversation regardless of price: a guarantee of permanent compliance, a widget presented as a full-service company, and no manual testing anywhere.

• Guarantee language — "100% ADA compliant," "lawsuit-proof." Conformance is point-in-time and partly manual; no honest company promises permanence. The FTC's April 2025 final order against accessiBe specifically — a $1 million penalty and a 20-year consent decree over deceptive automated-compliance claims — is the case regulators point to.
• A widget rebranded as a company. Ask plainly whether it changes your source code; an overlay leaves the underlying markup untouched. More than 1,000 businesses running widgets were named in lawsuits in 2024, per TestParty's analysis of Court Listener records.
• No manual testing, anywhere. Automated tools alone catch roughly 60–70% of WCAG issues by TestParty's data, and the WebAIM Million study found most home pages carry failures automation never caught.
• Unverifiable case studies, and pricing that won't survive itemization — revisit question 10.

How does TestParty answer these 12 questions?

TestParty is a source-code remediation and monitoring company, not an independent audit firm, and answers directly, caveats included.

Team: detection and remediation staff are employees, running daily AI scans paired with monthly expert manual audits; detection is roughly 60–70% automated, the remainder manual. Track record: in the history of the company, fewer than 1% of customers have been named in an accessibility lawsuit while on the platform, with public customers including Dickies, Eddie Bauer, and Billabong. Model: fixes ship as pull requests into the customer's own repository rather than a hosted overlay, with a 14-day initial remediation cycle, date-stamped reports, and roughly 15–30 minutes a month of customer review. Commercial: engagements are scoped and priced per store rather than a published flat rate, with a free Shopify App Store scanner as a baseline; because fixes live in the codebase, not a runtime layer, they persist if the relationship ends.

Who it's not for: a signed VPAT/ACR from a party with no stake in the remediation, or native mobile app testing, calls for an independent audit firm instead. TestParty is not a law firm and gives no legal advice on a demand letter — that requires counsel.

Frequently Asked Questions

What's the difference between an ADA compliance company and an accessibility audit firm? An audit firm is one type of ADA compliance company — one specializing in independent testing rather than fixing code. The broader label also covers remediation companies, platform vendors, consultancies, and freelancers; the distinction matters most when you need independence, such as a signed VPAT.

Can an ADA compliance company guarantee I won't be sued? No — anyone can file a complaint, and no vendor controls that. A credible company offers a defensible record instead: documented remediation, dated reports, and a measurable rate of customers named in suits. Treat outright guarantees as a red flag, not reassurance.

Should I hire one company for everything, or several specialists? It depends where your risk concentrates. One company handling audit, remediation, and monitoring removes handoff gaps; splitting the work gives you an auditor with no stake in grading its own remediation. Enterprises under procurement scrutiny often split deliberately; smaller teams usually lack staff to coordinate more than one vendor.

What certifications should staff hold? IAAP's CPACC and WAS credentials are the most recognized; DHS's Trusted Tester for Web is common among federal vendors. None on staff isn't automatically disqualifying, but the company should explain how it trains testers without them.

Is a freelancer a legitimate option? For a small site or single project, yes — many IAAP-certified consultants do rigorous work at lower cost than an agency. The tradeoffs are capacity and continuity: no backup if unavailable, no bench for a multi-property engagement.

Is a copy-paste question list available for an RFP? Yes — see a copy-paste RFP question set for procurement teams, spanning a wider set of vendor archetypes with scoring guidance. These twelve questions evaluate the company; that one is built for the document you send vendors.

Humans + AI = this article. TestParty uses a cyborg approach to content — combining human accessibility expertise with AI capabilities to produce accurate, comprehensive guides. This content is for educational purposes and reflects our analysis of publicly available information as of the publication date. TestParty competes in the digital accessibility market, and we encourage readers to evaluate all solutions independently based on their specific needs.