Skip to main content

Articles on accessibility law and AI rules.

Plain guides to the ADA Title II web rule, Section 508, VPATs and ACRs, WCAG, and the state and federal rules for AI, written by the two principals.

  1. AI, 8 min read

    Colorado's New AI Law: What Small Businesses Owe in 2027

    From January 1, 2027, Colorado firms that use software to score or screen people for jobs, homes or loans owe notices, explanations and human review.

    By Ahmed Elgazar

  2. Accessibility, 7 min read

    Council Meeting Video Under Title II: Captions Rules

    Title II requires WCAG 2.1 AA: captions for recorded and live meeting video. DOJ set no accuracy number, but auto captions alone are risky.

    By Ahmed Elgazar

  3. AI, 7 min read

    Connecticut's AI Law and Your Hiring Tools: What Employers Owe Now

    Since October 1, 2026, Connecticut says using a hiring tool is no defense to a bias claim. Notices start in 2027. What a small employer should do now.

    By Maximilian Simkins

  4. Accessibility, 5 min read

    Which VPAT Edition: WCAG, 508, EN 301 549 or INT?

    Use the edition that matches your buyer's standard: 508 for federal, WCAG 2.1 for Title II, EN 301 549 for the EU, INT for all three.

    By Maximilian Simkins

  5. AI, 8 min read

    GSA's New AI Clause: What It Asks of Federal Contractors

    GSA clause 552.239-7001 applies when you sell an LLM tool that handles government data. It bans training on that data and sets 72-hour incident reports.

    By Ahmed Elgazar

  6. Accessibility, 7 min read

    How to Evaluate a Vendor's ACR Before You Sign

    An ACR is the vendor's own claim. Check it for completeness, spot-check a few criteria, and require an Issue Detail Supplement and contract terms.

    By Ahmed Elgazar

  7. AI, 9 min read

    How to Find and Control Shadow AI in Your Company

    Ask your team, then check app consents, browser extensions and network logs. Control shadow AI with an approved list and an easy way to request tools.

    By Maximilian Simkins

  8. Accessibility, 6 min read

    Public Universities and Title II: Course Content Rules

    Title II has no course content exception. A public university's LMS and its content must meet WCAG 2.1 AA, even behind a login.

    By Maximilian Simkins

  9. AI, 6 min read

    How to Write an AI Acceptable Use Policy for a Small Team

    Start with an inventory of the AI tools in use, sort your data, then write short rules for tools, data, review and contractors. Train people on it.

    By Ahmed Elgazar

  10. Accessibility, 6 min read

    Is a Vendor's Portal Covered by the Title II Web Rule?

    Yes. A vendor-run portal is covered when you provide it through a contract or license. What the exception covers and what to do if the vendor won't fix it.

    By Ahmed Elgazar

  11. Accessibility, 7 min read

    Title II PDFs: What to Fix, Archive, or Delete

    New PDFs must meet WCAG 2.1 AA under Title II. Old ones are exempt unless used to get a service. How to sort, archive or remove them.

    By Maximilian Simkins

  12. AI, 4 min read

    What Is a NIST AI RMF Assessment and What Does It Cover?

    A NIST AI RMF assessment checks your AI use against the framework's 72 subcategories across Govern, Map, Measure and Manage, and records evidence for each.

    By Maximilian Simkins

  13. Accessibility, 5 min read

    ADA Title II Web Rule Deadlines: April 2027 and April 2028

    Public entities with 50,000+ people must meet WCAG 2.1 AA by April 26, 2027. Smaller entities and special districts have until April 26, 2028.

    By Ahmed Elgazar

  14. Accessibility, 5 min read

    What Happens After an Accessibility Audit? Re-Testing and Validation Explained

    An accessibility audit finds issues, but the process continues after the report. Learn how re-testing works and how to reach full compliance.

    By Ahmed Elgazar

  15. Accessibility, 4 min read

    WCAG 2.2 vs. WCAG 2.1: What Changed and What It Means for Section 508

    WCAG 2.2 added 9 new success criteria. Learn what changed, how it affects Section 508 compliance, and whether you need to update your accessibility testing.

    By Maximilian Simkins

  16. Accessibility, 5 min read

    Common VPAT Mistakes That Can Lose You a Government Contract

    A poorly prepared VPAT or ACR can eliminate your proposal before technical evaluation begins. Avoid the common mistakes that hurt credibility with buyers.

    By Ahmed Elgazar

  17. Accessibility, 4 min read

    How to Prepare for a Section 508 Accessibility Audit: A Checklist

    Preparing for an accessibility audit reduces cost and turnaround time. Follow this checklist to address common issues before your evaluator arrives.

    By Maximilian Simkins

  18. Accessibility, 4 min read

    The Cost of Section 508 Non-Compliance: Risks for Government Contractors

    Non-compliance with Section 508 can mean rejected deliverables, lost contracts, and legal liability. Understand the financial and operational risks early.

    By Ahmed Elgazar

  19. Accessibility, 4 min read

    Manual vs. Automated Accessibility Testing: Why You Need Both

    Automated tools catch some accessibility issues, but full Section 508 compliance requires manual testing by a certified Trusted Tester. See what each covers.

    By Maximilian Simkins

  20. Accessibility, 7 min read

    How to Read an Accessibility Conformance Report (ACR)

    An ACR documents a product's accessibility conformance level. Learn to interpret conformance levels, evaluate test results, and use an ACR in procurement.

    By Ahmed Elgazar

  21. Accessibility, 6 min read

    Section 508 vs. ADA vs. WCAG: Understanding the Differences

    Section 508, ADA, and WCAG are related but distinct. Learn which applies to your organization, how they overlap, and what each requires.

    By Maximilian Simkins

  22. Accessibility, 9 min read

    What Is a VPAT? A Complete Guide to VPATs and ACRs

    Learn what a VPAT is, how it becomes an ACR, and why federal contractors need one. Covers VPAT 2.5 format, conformance levels, and common mistakes to avoid.

    By Ahmed Elgazar

  23. AI, 2 min read

    Why NIST AI RMF Is Now a Federal Procurement Filter

    Most contractors treat the NIST AI Risk Management Framework as a suggestion. That was true in 2023. It is not true now.

    By Ahmed Elgazar

  24. AI, 3 min read

    The Case Against Long Prompts in Regulated AI Deployments

    A Stanford study found short prompts outperform long ones. In compliance-regulated industries, that's not just a performance insight. It's a governance requirement.

    By Maximilian Simkins

  25. AI, 5 min read

    Anthropic's Project Glasswing Changes What 'Responsible AI' Means for Security

    Anthropic just used an unreleased AI model to find a 27-year-old vulnerability in OpenBSD. The implications for enterprise security run in both directions.

    By Ahmed Elgazar

  26. Accessibility, 3 min read

    What Is Section 508 Compliance? A Guide for Federal Contractors

    Section 508 requires federal agencies and their contractors to make digital content accessible. Learn what it means, who it applies to, and how to prepare.

    By Maximilian Simkins