You Got an ADA Accessibility Demand Letter About Your Shopify Store — What to Do

This article is informational and is not legal advice. If a demand letter has landed in your inbox, the single most useful thing you can do is talk to a lawyer who handles ADA Title III matters before you respond. Everything below is a calm walkthrough of how merchants commonly approach the situation, not a recommendation about your specific case.

First, don't panic and don't ignore it

A demand letter feels alarming, especially when it arrives without warning and references statutes you have never read. Take a breath. ADA web-accessibility claims are common, and a measured response matters far more than a fast one.

The volume is real. UsableNet's lawsuit tracker reported more than 5,000 ADA digital-accessibility lawsuits filed in 2025 once state-court filings are included, with 3,117 of those filed in federal court (UsableNet). Roughly 77% of the businesses targeted are e-commerce sites, which is why so many Shopify merchants receive these letters. Demand letters, which usually precede any actual lawsuit, are sent in far larger numbers than the suits themselves, though credible published estimates of the annual total vary widely.

The takeaway is not “this is hopeless.” It is “this is a known, handled situation.” Ignoring the letter is the one response that rarely helps. So is firing off an angry reply. The right next move is deliberate.

Step one: talk to a lawyer

Before you respond to anything, get the specific letter in front of an attorney who handles ADA Title III matters. This article cannot evaluate your exposure, and neither can a generic checklist. A lawyer can read the actual claims, tell you whether the sender is a serial filer or a represented individual, advise on deadlines, and decide whether and how to respond.

If you don't already have counsel, your existing business attorney can usually refer you to someone who handles accessibility claims. Bring the letter, the date you received it, and any prior correspondence. Resist the urge to negotiate or admit anything in writing before that conversation. What you say early can matter later, and only your lawyer can advise you on the matter at hand.

Step two: do not delete or alter your site in a panic

The instinct to immediately “fix everything” or quietly remove a flagged page is understandable, and it can backfire. Uncoordinated, undocumented changes can complicate both your remediation work and your lawyer's response, and they can erase the very record of where your site stood when the letter arrived.

Preserve the current state instead. If your developer is mid-change, pause and document. Your counsel may want a clear before-and-after picture, and good-faith remediation is most credible when it is planned and dated rather than reactive and invisible. Coordinate any changes with your lawyer's guidance, not against it.

Step three: gather documentation

Once you have legal guidance, start assembling what you have. The goal is a clear, dated picture of your accessibility posture. Useful pieces typically include:

• A published accessibility statement on your own domain, describing your commitment and a real feedback channel for customers who hit a barrier.
• A dated WCAG 2.2 AA audit report showing what an automated scan found on a specific date.
• Any prior remediation work, developer tickets, or vendor reports you already have on file.

Why does a timestamp matter? Because accessibility is a moving target, and a dated record shows where your store stood at a known point in time. It documents that you took a concrete, good-faith step on a specific date. It is a record, not a defense in itself, and your lawyer decides how it fits your situation.

What a timestamped WCAG audit provides

A timestamped WCAG 2.2 AA audit gives you three concrete things: a dated record of what an automated axe-core scan found, a prioritized list of issues to remediate, and a completed VPAT 2.5 in the standardized template published by the Information Technology Industry Council (ITI).

Be honest with yourself about what that scan covers. Automated scans detect roughly 30 to 50% of WCAG issues (Deque/axe-core). They are strong at catching machine-detectable problems like missing alt text, low color contrast, and unlabeled form fields, and they cannot judge things that require human review, such as whether alt text is meaningful or whether a keyboard-only checkout actually works end to end. So an audit report is evidence of a specific, dated automated assessment plus a roadmap, not a clean bill of health.

Used this way, the audit is something your counsel can reference: a dated artifact and a prioritized plan. It is not a guarantee of any legal outcome, and no document on its own resolves a claim.

Step four: build a remediation plan

Documentation points you toward action. The prioritized findings from an audit let you triage: fix the highest-impact, most user-facing barriers first, then work down the list. Keep dated records as you go, so your progress is visible and verifiable rather than assumed.

Practically, that looks like ticketing each finding to your developer, fixing the items that block real users from completing a purchase, and re-scanning to confirm. Steady, documented progress is more credible than a single frantic push. Loop your lawyer in on what to prioritize given the specific claims in your letter.

What this is not

To be clear about the limits: a dated audit, an accessibility statement, and a VPAT are documentation. They are not a promise that having paperwork on file prevents a lawsuit, settles a claim, or makes a demand letter go away. They do not make your store “ADA compliant” in any affirmative legal sense, and no automated tool can certify that. Only your lawyer can advise you on the matter, your exposure, and how any documentation fits your defense.

What documentation does do is give you a clear record of where you stood, a concrete plan for improving, and dated evidence of good-faith effort that your counsel can use as they see fit. That is a meaningfully better position than having nothing on file and no plan.

A calm next step

If you want documentation on file quickly while you work with counsel, Paperfort runs an automated axe-core scan of your Shopify storefront against WCAG 2.2 AA and delivers a dated audit report, a hosted accessibility statement, and a VPAT 2.5, typically within about 7 days, as a one-time $249 bundle. It is documentation and a remediation roadmap, not legal representation and not a guarantee of any outcome. See what the audit includes when you and your lawyer are ready.

Paperfort produces automated documentation and a prioritized remediation plan. It is not legal advice, does not constitute legal representation, and does not guarantee compliance or any legal outcome. Automated scans detect roughly 30 to 50% of WCAG issues; a qualified professional should review further. Consult your own counsel about your specific situation.