An in-house accessibility audit uses internal staff to evaluate a digital asset against WCAG criteria. An outsourced audit hires an external accessibility company to conduct the evaluation and deliver a report. Most organizations outsource because qualified auditors are rare to staff full-time, and a third-party report carries more weight with procurement teams, legal counsel, and enterprise buyers. In-house audits can work when a company has trained accessibility specialists on payroll and the audit serves internal QA rather than external proof. The decision comes down to expertise, credibility, cost structure, and what the audit needs to accomplish.
| Factor | In-House | Outsourced |
|---|---|---|
| Expertise | Depends on staff training and credentials | Specialized auditors with focused experience |
| Credibility | Internal QA value only | Third-party report for procurement and legal |
| Cost structure | Salary, training, ongoing overhead | Project-based fee per audit |
| Turnaround | Slower if staff juggle other duties | Defined timeline, often two to four weeks |
| Best for | Large organizations with mature accessibility programs | Most companies needing WCAG conformance evidence |
What does an in-house accessibility audit involve?
An in-house audit means your own team evaluates the website, web app, or mobile app against a WCAG standard, typically 2.1 AA or 2.2 AA. The work is fully manual and combines keyboard evaluation, screen reader checks, color contrast review, and code inspection.
To produce reliable results in-house, the person conducting the audit needs working knowledge of WCAG success criteria, assistive technology behavior, and how to document issues so developers can act on them. A scan can support the process but cannot replace the human evaluation. Scans only flag approximately 25% of issues.
Companies with a trained accessibility specialist on staff, ideally someone with credentials like CPACC, WAS, or DHS Trusted Tester, can produce solid internal reports. Without that expertise, in-house audits often miss critical issues and create a false sense of conformance.
What does an outsourced accessibility audit look like?
Outsourcing means hiring an accessibility company or independent consultant to conduct the audit. The engagement starts with scope, where you and the auditor identify which pages, screens, or user flows will be evaluated. The auditor then conducts a manual evaluation and delivers a report that identifies each issue, the WCAG criterion it maps to, severity, and recommended fixes.
The deliverable is a third-party report. That distinction matters. Procurement teams, government agencies, and enterprise buyers treat independently issued reports as stronger evidence of conformance than self-attested ones.
Most outsourced audits also come with optional services like remediation guidance, validation after fixes, and ACR or VPAT preparation. That makes outsourcing the practical choice when the audit is part of a larger compliance project.
Which option costs more?
Cost comparison depends on volume. A single outsourced audit for an informational website can range from a few thousand dollars to mid five figures for complex web apps. The cost is project-based with a defined deliverable.
In-house looks cheaper per audit on the surface, but the full cost includes salary, benefits, training, certification renewal, software, and the time staff spend on accessibility rather than other work. For a company conducting one or two audits a year, outsourcing is almost always less expensive overall.
Organizations with dozens of digital assets and continuous release cycles may find in-house more economical, but only after they have built a real accessibility team, not assigned the work to a developer as a side task.
Credibility and legal weight
A self-issued audit report does not carry the same weight as one produced by an outside accessibility company. When a contract requires an ACR or a buyer requests evidence of WCAG conformance, third-party reports carry more authority.
In ADA website compliance situations, an outsourced audit and the documentation that follows create a stronger record. Internal audits can still support that record, but they rarely stand alone as evidence.
When in-house makes sense
In-house audits work well when the organization has full-time accessibility specialists with verifiable credentials, when audits are part of ongoing QA rather than external proof of conformance, when the team uses internal reports as a baseline before requesting an external audit for the final ACR or VPAT, and when volume justifies the headcount and the program has executive support.
Hybrid models are common in mature programs. Internal teams catch issues during development, and an external auditor conducts the formal evaluation that produces the report shared with buyers or regulators.
When outsourcing is the right call
Most organizations should outsource. Outsourcing fits when you need a third-party report for procurement, legal, or ADA Title II requirements. It also applies when you are preparing a VPAT or ACR for a sales process, when you do not have a trained accessibility specialist on staff, when you want a fixed timeline and a known cost, or when you need user evaluation with people who use assistive technology daily.
An external auditor brings pattern recognition from many evaluations across different industries. That experience surfaces issues an internal reviewer is more likely to miss.
Frequently asked questions
Should we outsource our first accessibility audit?
Yes for almost every organization. The first audit sets the baseline, and a third-party report gives leadership a clear picture of where the asset stands. Internal staff can then own the remediation work with the report as a guide.
Can we mix in-house and outsourced audits?
Yes, and many mature programs do. Internal teams conduct ongoing checks during development, and an external company conducts the formal audit that produces the ACR or compliance documentation.
How often should an outsourced audit be conducted?
For most digital assets, once a year is a reasonable cadence. Significant redesigns, new feature releases, or platform migrations should trigger a follow-up audit regardless of the calendar.
Do automated scans replace either option?
No. Scans catch a small portion of issues and cannot determine WCAG conformance. They are useful for continuous monitoring between audits, not as a replacement for human evaluation.
What credentials should an in-house auditor have?
Look for CPACC, WAS, or DHS Trusted Tester at a minimum. Practical experience with screen readers like NVDA, JAWS, VoiceOver, and TalkBack matters as much as the credential itself.
The right answer depends on what the audit needs to prove and to whom. For internal QA, a trained in-house team works. For evidence that holds up with buyers, regulators, and legal counsel, an outsourced audit is the stronger path.
Find qualified accessibility auditors and consulting firms in the Accessibility Base directory.