Compliance and accessibility Nonprofit By Shashank Ayyar and Deepti Karn Last updated on October 13, 2026 6 min read

WCAG 2.1 AA standards: what the standard actually requires

WCAG 2.1 AA standards showing four principles, 13 guidelines and the Level A and AA criteria

WCAG 2.1 Level AA is the standard HHS's Section 504 rule names for recipients' web content, from May 11, 2027 for recipients with 15 or more employees and May 10, 2028 for those with fewer than 15. The standard is a W3C document with four principles, 13 guidelines and success criteria at three levels. A search can land you on vendor pages or the WCAG 2.2 page instead. So what do the WCAG 2.1 AA standards require?

TL;DR

WCAG 2.1 Level AA means meeting all 50 Level A and Level AA success criteria (30 at A, 20 at AA) on full pages and complete processes, and Level AAA is not part of it. HHS’s rule names 2.1, not 2.2, and content that conforms to 2.2 also conforms to 2.1, but whether the rule reaches your organization depends on funding and headcount, which counsel confirms. AA is where the rule draws the line, and 2.1 added 12 criteria at A and AA over 2.0, which by our reading mostly cover mobile, zoom and low vision, so an older 2.0 checklist falls short. Start with our WCAG guidelines for HHS-funded nonprofits.

Contents

  1. 01
    Know what the standard is
    The short answerHow WCAG 2.1 is built
  2. 02
    Know what AA asks for
    The 20 Level AA criteriaWhat WCAG 2.1 added over 2.0How 2.1 relates to 2.2 and Section 508
  3. 03
    Use it
    What a WCAG checker can and cannot tell youCommon misreadingsWhat this does not solveConclusion

What do the WCAG 2.1 AA standards require?

Meeting WCAG 2.1 Level AA means meeting every Level A criterion and every Level AA criterion, in full. W3C’s guidance on conformance states the test as “One of the following levels of conformance is met in full.” That applies to full pages and complete processes.

30Level A criteria
20Level AA criteria
50in all, for Level AA

Tallying the WCAG 2.1 spec gives 30 Level A criteria and 20 Level AA criteria, so 50 in all. Level AAA is not part of AA.

45 CFR 84.84(b)

Recipients must “comply with Level A and Level AA success criteria and conformance requirements specified in WCAG 2.1.”

That is HHS’s rule, 45 CFR 84.84(b). WCAG 2.2 is not the HHS standard.

How WCAG 2.1 is built: principles, guidelines and success criteria

Four principles

WCAG 2.1 is built on four principles. W3C’s text defines three of them like this:

Perceivable“Information and user interface components must be presentable to users in ways they can perceive.”
Operable“User interface components and navigation must be operable.”
Understandable“Information and the operation of the user interface must be understandable.”

The fourth principle is Robust.

Thirteen guidelines

The principles divide into 13 guidelines. Guidelines carry no level. Only success criteria do.

Three levels

Each success criterion is a testable statement under a guideline, rated A, AA or AAA. AA includes all of A, and AAA is not required for AA. Examples of AAA criteria are 1.4.6 Contrast (Enhanced), 2.5.5 Target Size and 3.1.3 Unusual Words.

The W3C WCAG 2.1 specification is the primary source for every criterion named here. For the levels in general, see WCAG standards and conformance levels explained.

The 20 Level AA criteria in WCAG 2.1

These are the 20 Level AA success criteria, with the numbers and names W3C gives them:

1.2.4Captions (Live)
1.2.5Audio Description (Prerecorded)
1.3.4Orientation
1.3.5Identify Input Purpose
1.4.3Contrast (Minimum)
1.4.4Resize Text
1.4.5Images of Text
1.4.10Reflow
1.4.11Non-text Contrast
1.4.12Text Spacing
1.4.13Content on Hover or Focus
2.4.5Multiple Ways
2.4.6Headings and Labels
2.4.7Focus Visible
3.1.2Language of Parts
3.2.3Consistent Navigation
3.2.4Consistent Identification
3.3.3Error Suggestion
3.3.4Error Prevention (Legal, Financial, Data)
4.1.3Status Messages

W3C’s Quick Reference shows how specific two of them get. Criterion 1.4.3 sets “a contrast ratio of at least 4.5:1, except for the following:” and exceptions apply, which we do not list here. Criterion 1.4.10 includes the line “Vertical scrolling content at a width equivalent to 320 CSS pixels;” as part of its text.

In our description, 1.4.11 concerns controls and graphics, and 2.4.7 concerns keyboard focus being visible. Level A, which has 30 criteria, covers the basics, such as text alternatives (1.1.1), keyboard access (2.1.1) and name, role, value (4.1.2). We do not list all 30 here.

What WCAG 2.1 added over WCAG 2.0

W3C’s New features in WCAG 2.1 lists 17 new success criteria:

5at Level A
7at Level AA
5at Level AAA

So AA gained 12 criteria over 2.0:

Level A (5)
  • 2.1.4Character Key Shortcuts
  • 2.5.1Pointer Gestures
  • 2.5.2Pointer Cancellation
  • 2.5.3Label in Name
  • 2.5.4Motion Actuation
Level AA (7)
  • 1.3.4Orientation
  • 1.3.5Identify Input Purpose
  • 1.4.10Reflow
  • 1.4.11Non-Text Contrast
  • 1.4.12Text Spacing
  • 1.4.13Content on Hover or Focus
  • 4.1.3Status Messages

By our reading, they cluster around mobile and touch, zoom and low vision, and status messages. W3C does not group them that way. A checklist built for 2.0 does not include them.

Our arithmetic

Section508.gov puts Section 508’s WCAG 2.0 baseline at “38 applicable WCAG success criteria.” Adding the 12 new criteria gives 50, which matches the Level A and AA tally. That sum is our arithmetic on two sourced numbers.

How WCAG 2.1 relates to WCAG 2.2 and Section 508

The WCAG standards are versioned, and W3C’s WCAG overview gives the publication dates:

WCAG 2.0December 11, 2008
WCAG 2.1June 5, 2018
WCAG 2.2October 5, 2023

“content that conforms to WCAG 2.2 also conforms to WCAG 2.1 and WCAG 2.0.”

W3C

One difference matters: 4.1.1 Parsing is “obsolete and removed from WCAG 2.2.” It is still a 2.1 Level A criterion, so a 2.2 checklist will not test it.

W3C also says, “W3C encourages you to use the latest version of WCAG.” The HHS rule names 2.1, so 2.1 is the version to read for the rule.

Section 508 uses a different baseline

Section508.gov describes WCAG 2.0 Level A and AA for federal agency content. We did not find a source stating that Section 508 binds grant recipients, so for an HHS-funded nonprofit the HHS rule is the source to read. The two are not the same standard.

What a WCAG checker can and cannot tell you

A WCAG checker is an automated evaluation tool. W3C WAI’s guidance on selecting evaluation tools says:

They can help “quickly identify potential accessibility issues.”
They “cannot check all accessibility aspects automatically. Human judgement is required.”
They “can not determine accessibility, they can only assist in doing so.”

WebAIM makes the same point: “Absence of detected errors does not indicate that a page is accessible or conformant.”

A checker still earns its place. It finds obvious failures fast.

Verify

If you run one, treat each flagged item as a lead to check by hand, and treat a clean result as not a conformance result.

A site also changes after any review, and someone has to operate it. NoDrama’s plans include “WordPress, plugins and themes kept current” and visual regression testing, which compares how pages look and is not a WCAG test. NoDrama does no accessibility work. For the maintenance side, see what NoDrama’s WordPress maintenance covers.

See what NoDrama’s plans include.

They cover updates, backups and monitoring, and no accessibility work.

See the Three Plans

Common misreadings of the WCAG 2.1 AA standards

“AA means AA criteria only.”

It includes every Level A criterion too, 50 in all.

“We need 2.2 for HHS.”

The rule names 2.1, and content that conforms to 2.2 also conforms to 2.1. A search for WCAG 2.1 AA compliance can turn up vendor pages and the 2.2 page, so check the version before relying on a checklist.

“A clean checker run means we conform.”

W3C says tools can not determine accessibility, and WebAIM says absence of detected errors does not indicate a page is accessible or conformant.

“Section 508 is our standard.”

Section 508’s baseline is WCAG 2.0, with 38 applicable criteria, and the HHS rule names 2.1.

What this does not solve

This guide is not an audit and not legal advice, and it does not tell any organization whether it conforms. Whether HHS’s rule reaches your organization depends on funding and headcount, and counsel or the funding agency confirms that. How employees are counted for the two headcount tiers is also a question for them. NoDrama’s plans include no accessibility, WCAG, ADA or Section 508 work.

Conclusion: 50 criteria, met in full

The WCAG 2.1 AA standards mean all 30 Level A and all 20 Level AA success criteria, met in full on full pages and complete processes. HHS’s rule names WCAG 2.1, and content that conforms to 2.2 also conforms to 2.1. WCAG 2.1 added 12 criteria at A and AA over 2.0, so a 2.0 checklist falls short. A checker finds leads and does not return a conformance result. Whether the rule reaches an organization is a question for counsel or the funding agency.

FAQs

HHS's Section 504 rule names WCAG 2.1 Level A and Level AA. It does not name 2.2.
It requires 50: 30 at Level A and 20 at Level AA, by our tally of the WCAG 2.1 spec. Level AAA criteria are not part of it.
WCAG 2.1 added 17 success criteria over 2.0, per W3C. Of those, 12 are at Level A or AA.
No. W3C says evaluation tools "can not determine accessibility, they can only assist in doing so."
W3C says "content that conforms to WCAG 2.2 also conforms to WCAG 2.1 and WCAG 2.0." A 2.2 checklist will not test 4.1.1 Parsing, which was removed from 2.2 and is still a 2.1 Level A criterion.
Written byShashank AyyarCo-Founder

Shashank co-founded NoDrama and is co-founder of Pangolin Marketing. He has spent eighteen years as a consultant and head of marketing to startups and growth-stage companies, work that centred on positioning and demand generation. He writes about positioning, buyer trust, and how businesses should evaluate whoever maintains their site.

Written byDeepti KarnHead of Business

Deepti leads business at NoDrama, which she founded in February 2026 after four and a half years at Pangolin Marketing. NoDrama came out of a question she kept running into: who is actually responsible for keeping a WordPress site fast, secure, accessible, and working? She writes about service design, ownership models, and what businesses should expect from whoever maintains their website.

Someone Has to Operate the Site

Get Started
Cancel anytime
Yearly runs to the end of the paid year
Real team behind every plan