What is WCAG 2.2 AA?
The W3C Web Content Accessibility Guidelines at AA conformance — the legally-cited accessibility standard for public-sector, healthcare, and most enterprise procurement in 2026.
Also known as
WCAG 2.2 AA — explained.
WCAG (Web Content Accessibility Guidelines) is the W3C accessibility standard for web content, kiosks, mobile apps, and increasingly any digital surface that serves the public. The current cited version in 2026 is WCAG 2.2, with AA conformance as the procurement-default. The standard covers four principles — Perceivable, Operable, Understandable, Robust — through 50+ success criteria including text alternatives, captions, keyboard accessibility, sufficient contrast, focus visibility, target size, consistent navigation, and accessible authentication. WCAG 2.2 AA is referenced in UK public-sector procurement, EU Accessibility Act, US Section 508, Saudi PDPL accessibility provisions, and most healthcare and education procurement gates. Compliance is demonstrated through automated testing (axe-core, Lighthouse), manual evaluation against the success criteria, and a Voluntary Product Accessibility Template (VPAT) document. For interactive wayfinding kiosks, queue management kiosks, self-service kiosks, and clinic patient portals, WCAG 2.2 AA is non-negotiable: wheelchair-aware routing, large-text mode, screen-reader output, audio cues, height-adjustable kiosk hardware, and accessible authentication must all be present.
Why operators care about wcag 2.2 aa.
Public-sector and healthcare procurement in 2026 will not sign a contract without WCAG 2.2 AA. The standard is also the legal floor in many jurisdictions for any digital service interacting with the public. A platform that ships AA-compliant out of the box clears procurement; one that requires accessibility work in Phase 2 fails the bid review.
Buyer's checklist
- WCAG 2.2 AA conformance demonstrated with axe-core or equivalent
- VPAT (Voluntary Product Accessibility Template) document provided
- Wheelchair-aware routing where applicable (wayfinding, kiosk)
- Screen-reader output, large-text mode, audio cues
- Accessible authentication patterns (WCAG 2.2 specifically tightens these)
- Re-audit cadence (typically every 6 months) as part of the Care Plan
Zeour solutions that operate on this layer.
Verticals where wcag 2.2 aa is operationally critical.
Case studies where wcag 2.2 aa is deployed.
Blog posts that go deeper on wcag 2.2 aa.
Adjacent definitions to read next.
GDPR
Compliance & DataThe EU's data-protection regulation — establishes consent, purpose-limitation, residency, breach-notification, and the data-subject rights regime.
PDPL
Compliance & DataPersonal Data Protection Law — the data-protection regime in Saudi Arabia (and equivalents in the UAE and several Gulf states).
ISO 27001
Compliance & DataThe international standard for Information Security Management Systems (ISMS) — a certifiable framework for managing information-security risk.
Sovereign Deployment
Sovereign DeploymentSoftware that runs entirely inside the operator's perimeter — their hardware, their network, their backups, their keys — with no third-party dependency for continued operation.
CCPA / CPRA
Compliance & DataCalifornia's data-protection law — and the CPRA amendment in force since 2023 — establishing data-subject rights for California residents.
Cyber Essentials
Compliance & DataThe UK NCSC's baseline cybersecurity certification — a five-control posture (firewalls, secure config, access control, malware, patches) increasingly required for UK government contracts.
Data Subject Access Request (DSAR)
Compliance & DataThe data-subject's right to request a copy of all personal data an operator holds about them, plus deletion, correction and processing-restriction rights — under GDPR, PDPL and equivalent laws.
Explicit Consent
Compliance & DataConsent that is specific, informed, unambiguous and given by a clear affirmative action — separate tickboxes per purpose, not bundled — required under GDPR, PDPL and equivalent laws.
Talk to a Zeour engineer.
A 30-minute scoping call to walk your operational profile against where wcag 2.2 aa actually sits in your stack, then a fixed-fee Discovery price by the end of the call.