Legal

Is My Shopify Store ADA Compliant? An Honest Answer

Legal · 2026-06-15 · 8 min read

No tool can certify your store as “ADA compliant” — compliance is a legal call. Here is what the law actually points to, what WCAG 2.2 AA measures, and how an automated audit shows where you stand.

Is My Shopify Store ADA Compliant? An Honest Answer

The short, honest answer

No software can tell you that your Shopify store is “ADA compliant.” That includes Paperfort. Compliance under the Americans with Disabilities Act is a legal determination — something a court or a regulator decides about a specific website, in a specific dispute, on a specific set of facts. It is not an output any scanner, widget, or audit tool can certify, no matter how confidently a vendor markets it.

That distinction matters because the accessibility market is full of products that blur it. In April 2025 the Federal Trade Commission approved a final order requiring the overlay vendor accessiBe to pay $1,000,000 that may be used to provide refunds to consumers, after the FTC alleged its AI product was marketed as able to make websites WCAG-compliant when it did not (FTC File No. 222-3156). The lesson for merchants is simple: be skeptical of any tool that says it makes you “compliant.” What an audit can honestly give you is evidence of where you stand. It cannot give you a verdict.

What the ADA actually requires of a website

The ADA is a U.S. civil rights law. Title III prohibits discrimination by “places of public accommodation,” and courts have widely applied that to commercial websites, including e-commerce stores. What the ADA does not have is a single, codified federal technical standard that spells out exactly what an accessible website must do, line by line. There is no government checklist you can run your store against and receive a stamp.

Into that gap, courts and the U.S. Department of Justice have repeatedly pointed to the same practical yardstick: the Web Content Accessibility Guidelines, or WCAG. Settlements, consent decrees, and DOJ guidance commonly reference WCAG conformance as the benchmark for an accessible site. So while meeting WCAG is not written into the statute as a guarantee, it is the standard the legal system in practice measures against. That is why a WCAG-based audit is a useful thing to have, and why no audit can substitute for advice about your own legal exposure.

The pressure is real, not hypothetical. UsableNet's litigation tracker reported that the number of ADA digital-accessibility lawsuits topped 5,000 in 2025 when state-court filings are included, and roughly three-quarters of the targets were retail and e-commerce sites — exactly the category most Shopify stores fall into.

What WCAG 2.2 AA is

WCAG is published by the World Wide Web Consortium (W3C). The current version is WCAG 2.2, organized as a set of testable “success criteria” grouped into three conformance levels: A, AA, and AAA. Level A is the floor. Level AAA is an aspirational ceiling that is not realistic for every page. Level AA sits in between, and it is the level most evaluations, settlements, and procurement requests reference. When people say a site should “meet WCAG,” they almost always mean WCAG 2.2 Level AA.

The AA success criteria cover concrete things a shopper actually experiences: sufficient color contrast, text alternatives for images, labels on form fields, content that works with a keyboard alone, focus that is visible and ordered sensibly, and pages that do not trap or confuse assistive technology. For a Shopify store that means your product images, add-to-cart buttons, checkout fields, navigation menus, and pop-ups all need to be perceivable and operable for someone using a screen reader or keyboard.

What an automated audit can and cannot tell you

An automated audit is genuinely useful, but only if you are honest about its limits. Paperfort runs an automated WCAG 2.2 AA scan using axe-core, the open-source engine maintained by Deque. Automated scanning detects roughly 30 to 50 percent of WCAG issues. That is the industry baseline, and it is the same ceiling for every automated tool, Paperfort included.

So an automated scan shows you exactly where you stand on the machine-detectable criteria — missing alt text, low-contrast text, unlabeled form inputs, certain ARIA mistakes — and it does that quickly and consistently across your storefront. What it cannot do is judge the things that require human perception and reasoning: whether the alt text on a product photo is actually meaningful, whether the keyboard focus order makes sense as you tab through checkout, whether a screen reader announces a dynamic price update, whether your overall flow is usable end to end. Those need manual review by a qualified professional. A scan that reports “no issues” is telling you it found nothing in its 30-to-50-percent window, not that your store is accessible — and certainly not that it is compliant.

How the documentation helps, even though it is not a certificate

If a tool cannot certify compliance, why pay for an audit at all? Because documentation is leverage in the three situations merchants actually face: a demand letter, a procurement request, or a developer who needs to know what to fix first. Paperfort produces three artifacts from the scan:

  • A timestamped WCAG 2.2 AA audit report that records what the automated scan found, and when. If a demand letter arrives, a dated report showing you were actively assessing and remediating is something concrete to hand to your counsel.
  • A hosted accessibility statement published on your own domain, with a real feedback channel — the kind of plain-language page that signals good faith to users and buyers.
  • A VPAT 2.5 conformance report (the ITI-published Voluntary Product Accessibility Template), the document enterprise and government procurement teams request when they vet vendors.

None of these is a compliance certificate, and Paperfort is not a law firm. What they are is evidence and a prioritized fix list: a developer can ticket the findings, knock out the machine-detectable issues, and book a manual review for the rest. That is the honest value of an audit — it tells you where you stand and what to do next, not whether you have “won.”

What to do next

Run an automated scan to get your machine-detectable baseline. Ticket the findings to your developer so the clear, fixable issues get resolved. Plan a manual review with a qualified professional for the criteria a scanner cannot judge. And talk to a lawyer about your specific legal exposure, because that is the one question no tool — Paperfort included — can answer for you.

When you are ready to see your baseline, you can run the Paperfort audit and get the report, statement, and VPAT in one bundle.

Answers

Common questions.

Paperfort produces documentation and a prioritized remediation plan — not legal advice, and not a promise of compliance.

Can Paperfort tell me if my Shopify store is ADA compliant?
No. ADA compliance is a legal determination made by a court or regulator, not a software output. Paperfort runs an automated WCAG 2.2 AA scan with axe-core and documents what it finds; it does not certify compliance and is not a law firm. For your specific legal exposure, consult your own counsel.
Is WCAG 2.2 AA the same as ADA compliance?
No. The ADA is a U.S. law with no single federal technical standard for websites. WCAG 2.2 AA is a W3C technical standard that courts and the DOJ commonly reference as the practical yardstick. Meeting WCAG is widely treated as best practice, but it is not a statutory guarantee against litigation.
How much of my store can an automated scan check?
Automated scans detect roughly 30 to 50 percent of WCAG issues (Deque/axe-core baseline). The rest — keyboard flows, focus order, meaningful alt text, and the screen-reader experience — needs manual review by a qualified professional.

Paperfort produces defensible documentation and a prioritized remediation plan. It is not a law firm and does not provide legal advice; it does not guarantee lawsuit prevention or automatic ADA/WCAG compliance. Automated scans detect roughly 30–50% of WCAG issues; Paperfort documents what an automated axe-core scan finds and flags where a qualified professional should review further.