Why ecommerce is the highest-risk vertical
Two regulators, one docket dominated by online retail.
In the United States, ADA Title III web-accessibility complaints have run at roughly 4,300 federal filings per year through 2024, and ecommerce dominates the docket alongside restaurant booking and hospitality. Online-only retailers no longer reliably win the "no physical nexus" defence — most circuits have either rejected it or sidestepped it, and state-court filings under California's Unruh Act and New York's State Human Rights Law have grown in parallel.
In the European Union, the European Accessibility Act names "e-commerce services" explicitly in its scope list — Article 2(2)(d) — and the microenterprise carve-out (under 10 staff or under €2M turnover) catches few real retailers. Any store with a warehouse, a multi-person team, or meaningful product catalogue is in-scope and must meet EN 301 549, which references WCAG 2.2 success criteria.
The cost of inaction is concrete. US ADA settlements typically land in the $20,000–$50,000 range for first-time defendants, with repeat-target retailers running materially higher; plaintiff-side firms now operate at scale, and a single accessibility-statement scrape feeds dozens of demand letters. In the EU, EAA enforcement is moving from the warning-letter phase that dominated 2025 to the fine-issuing phase that many member states adopted in 2026 — Germany, France, Italy, Spain, and the Netherlands have all stood up enforcement teams.
The good news: ecommerce accessibility is a known shape. The same dozen failure modes recur across nearly every audit, and most are fixable in design tokens, theme components, or a focused engineering sprint. The checklist below is what we hand ecommerce teams when they ask "where do we start?"
The 30-point ecommerce checklist
Six surfaces × five checks. Print it, tick it, then audit it.
-
01 Navigation & search
-
02 Product listing pages (PLPs)
-
03 Product detail pages (PDPs)
-
04 Cart & checkout
-
05 Account & post-purchase
-
06 Cross-cutting
Platform-by-platform implementation notes
Where the checklist actually lands in code, by platform.
Shopify
Theme quality varies wildly. Online Store 2.0 themes (Dawn, Sense, Craft, Refresh) ship with a much better accessibility baseline than the legacy Vintage stack — semantic headings, focus management on quick-view, skip links by default. The gotchas that survive are the ones tied to commerce-specific UI: variant selectors and image swatches that lose state on selection, the shipping-rate calculator iframe that traps focus, and any third-party app (reviews, upsell, chat) that renders into the DOM without honouring keyboard handoff. Audit your theme, then audit each installed app separately.
WooCommerce / WordPress
Theme-plus-plugin chaos is the dominant risk. WooCommerce's own templates are workable, but they get composed against a parent theme you didn't write and a payment plugin you didn't audit. The recurring failure mode is the AJAX-driven variation form on the product page: variation selection swaps DOM nodes without announcing the change, and the price element re-renders with no aria-live anchor. Cart updates have the same shape — the mini-cart re-renders silently on add. Both can be fixed by wrapping the dynamic regions with aria-live.
BigCommerce / Salesforce Commerce Cloud
Enterprise platforms have stronger defaults but tighter customisation paths. Stencil (BigCommerce) and SFRA (Salesforce Commerce Cloud) storefront templates are often locked behind agency-shipped customisation; the platform's own a11y posture matters less than your agency's. Ask for a current VPAT or EN 301 549 conformance report from your implementation partner, not from the platform vendor. The platform clears a bar; the agency build is what gets sued.
Headless / custom React, Vue, or Svelte storefronts
Full ownership means full responsibility. The repeat failure mode is hydration mismatches that leave aria attributes in inconsistent states between SSR and client; the second is route-change announcements that never fire because the client-side router replaces the page without re-rendering a heading or moving focus. Pair a framework-specific live-region utility (see aria-live regions in modern frameworks) with a focus-on-route-change handler. Most headless audits we've seen fix 70% of issues with those two changes alone.
The monitoring + audit cycle
A one-time fix doesn't survive a single sprint.
Ecommerce code changes daily. Marketing ships a hero variant on Tuesday, the merchandising team flips a section on Thursday, an app updates over the weekend. A one-time accessibility fix lasts about as long as your next deploy — which is why the model that actually holds is three layers, not one.
First, run a free WCAG 2.2 scanner against your live store today to establish a baseline. Second, plug in continuous automated monitoring against every preview build and every production deploy — this is the layer that catches regressions before the customer does. Third, commission a manual audit by testers with disabilities at least annually, and after any major redesign or replatform — automated tooling will never catch screen-reader legibility, focus-order intent, or whether a flow is actually usable end-to-end.
For the monitoring + manual-audit handoff specifically, our monitoring buyer's guide covers the platforms that handle the scan-to-audit workflow end-to-end — Qualibooth, axe Monitor, Siteimprove, and Level Access. Pick on integration fit with your CI and on whether the platform's manual-audit network actually includes testers with the disabilities your customers have — not all of them do.
FAQ
The questions ecommerce teams ask before they buy in.
Does the ADA require my online store to be accessible?
In practice, yes. Federal courts have applied ADA Title III to commercial websites for over a decade, and ecommerce is the single largest category of web-accessibility complaints. The DOJ has formally stated that public-accommodation websites must be accessible, and most rulings hold that a "nexus" to a physical store is not required for online-only retailers. A store that does not meet WCAG 2.1 AA (and increasingly 2.2 AA) is at real litigation risk.
Does the EAA apply to my ecommerce site?
Almost certainly, if you sell into the EU. The European Accessibility Act lists "e-commerce services" as in-scope in Article 2(2)(d). The microenterprise carve-out — fewer than 10 staff AND under €2 million turnover — exempts only the smallest operators. Any retailer with a warehouse, multiple employees, or a non-trivial product range is in-scope and must meet EN 301 549, which references WCAG 2.1 AA.
What is the most common accessibility issue in ecommerce?
Three recur in nearly every audit: low-contrast prices and sale tags (often the brand-colour red on white falls below 4.5:1), unlabelled or context-free "Add to cart" buttons, and cart updates that do not announce to assistive tech. None of these requires a redesign — they need a design-token audit, an aria-label pass on tile buttons, and an aria-live region on the cart widget.
Can a Shopify store be ADA compliant?
A Shopify store can be made compliant, but the platform alone does not guarantee it. Online Store 2.0 themes are markedly better than legacy themes, but every theme — and every app you install — adds its own DOM. The combination of theme + apps + custom code is what an audit evaluates. Run a baseline scan, fix issues in your theme code or section settings, and treat third-party apps (reviews, chat, upsell) as separate audit surfaces.
How often should an ecommerce site be audited?
Automated scanning should run on every deploy (pre-merge or post-deploy). Manual audits by testers with disabilities should be commissioned at least annually for steady-state stores — and after any major redesign, replatform, or new-checkout rollout. Most ecommerce teams pair quarterly automated reports with annual manual audits.
Three next steps
Pick the one that matches where your team is today.
-
Run the free scanner now
A live free WCAG 2.2 scanner against any public URL. Powered by Qualibooth, opens in a new tab. Best place to start if you have no current baseline.
-
Download the 30-point checklist
A printable PDF version of the checklist above, with space for owner and due date per item. Coming in a future iteration — meanwhile, print this page.
-
Commission a manual audit
Read our guide to commissioning a manual audit by testers with disabilities — what to ask for, what to budget, and which platforms include a real tester network versus contracting it out.