Accessibility Statement

Vigilant Risk Manager Ltd ("VigilantGRC") is committed to ensuring that our website and Platform are accessible to everyone, including people with visual, auditory, motor, cognitive, and other disabilities. We believe that accessibility is a fundamental right — not a feature — and we work to make our digital services inclusive and easy to use for all.

This statement has been prepared in accordance with the Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018 and the requirements of the Equality Act 2010. It applies to our public-facing website at vigilantgrc.com and, where relevant, our Platform accessed by registered users.

1. Scope of this statement

This Accessibility Statement covers the following digital services operated by Vigilant Risk Manager Ltd:

• The VigilantGRC marketing website — vigilantgrc.com, including all public-facing pages, resources, and blog content.
• The Vigilant Risk Manager Platform — the cloud application accessible to registered users, including all dashboards, modules, and reporting features.
• The VigilantGRC Help Centre — support documentation and tutorial content available to customers.

This statement does not cover third-party websites, applications, or embedded content beyond our control, such as payment processors, identity providers used for single sign-on, or third-party video hosting services. We encourage users who encounter accessibility barriers on such third-party services to contact those providers directly.

2. Our commitment

We aim to conform to the Web Content Accessibility Guidelines (WCAG) 2.2 Level AA, the internationally recognised standard for web accessibility. We also align our Platform accessibility with the EN 301 549 standard for ICT products and services, relevant to public and enterprise procurement in the UK and EU.

Our accessibility commitments include:

• All functionality is operable using a keyboard alone, without requiring a mouse or touch input.
• All non-text content (images, icons, charts) includes meaningful text alternatives via alt attributes or ARIA labels.
• Colour is never the sole means of conveying information; all colour-coded elements include a secondary indicator (pattern, label, or icon).
• Text meets a minimum contrast ratio of 4.5:1 for normal text and 3:1 for large text, in accordance with WCAG 2.2 Criterion 1.4.3.
• All pages include a descriptive <title>, correct heading hierarchy, and meaningful landmarks to aid navigation.
• Forms include clearly associated labels for all input fields, with descriptive error messages that do not rely solely on colour.
• Focus is visible at all times for keyboard users, with a high-contrast focus indicator in compliance with WCAG 2.2 Criterion 2.4.11.
• No content flashes more than three times per second to prevent risk to users with photosensitive conditions.
• Text can be resized up to 200% without loss of content or functionality (WCAG 1.4.4).
• The site does not rely on motion or animation for conveying information; all animations respect the prefers-reduced-motion media query.
• PDFs, where provided, are tagged and structured for screen reader compatibility.

3. Conformance status

The Vigilant Risk Manager website is partially conformant with WCAG 2.2 Level AA. "Partially conformant" means that the majority of our content meets the standard, but there are specific exceptions, identified and documented below, which we are actively working to resolve.

The Vigilant Risk Manager Platform achieves substantial conformance with WCAG 2.2 Level AA across its core workflows, including risk register management, audit logging, and reporting dashboards. Certain advanced interactive features (detailed below) are subject to ongoing remediation.

4. Known accessibility issues

We have identified the following areas that do not currently fully meet WCAG 2.2 Level AA. We are working to resolve each issue and have included our target remediation dates:

We review this list quarterly. Where a fix is delayed, we provide alternative accessible routes to achieve the same outcome. If you encounter an issue not listed here, please report it to us using the contact details in Section 7.

5. Technical approach

Our website and Platform rely on the following technologies for accessibility conformance. We have verified that our use of these technologies is compatible with the leading assistive technologies (see Section 6):

6. Testing and audit

We use a combination of automated testing, manual review, and assistive technology testing to assess and maintain accessibility:

• Automated testing — we run automated accessibility checks using axe-core and WAVE as part of our continuous integration pipeline. Automated tools detect approximately 30–40% of WCAG issues.
• Manual review — our development team performs manual keyboard navigation and screen reader testing before each major release, using the following combinations:
  • NVDA (latest) with Google Chrome on Windows
  • JAWS (latest) with Google Chrome on Windows
  • VoiceOver with Safari on macOS (latest two versions)
  • VoiceOver with Safari on iOS (latest two versions)
  • TalkBack with Chrome on Android
• Third-party accessibility audit — we commission a comprehensive WCAG 2.2 audit from an independent accessibility specialist at least once per year, or whenever significant redesign occurs. Audit findings are tracked and prioritised in our product roadmap.
• Lighthouse — we maintain a minimum Lighthouse accessibility score of 90 across all public pages as a baseline quality gate.

This statement was last reviewed and updated on 1 September 2026, in line with our annual review cycle.

7. Feedback and contact

We welcome feedback on the accessibility of our website and Platform. If you experience any barrier, cannot access any content, or need information in an alternative format (such as large print, easy-read, or audio), please contact our accessibility team:

8. Enforcement procedure

If you are not satisfied with our response to an accessibility complaint, or if you believe that we are failing to meet our legal obligations under the Equality Act 2010 or the Public Sector Bodies Accessibility Regulations, you may escalate your complaint through the following channels:

• Contact the Equality Advisory and Support Service (EASS) — a free, independent service that provides advice on equality and human rights law.
• In Northern Ireland, contact the Equality Commission for Northern Ireland.
• If you are a public sector organisation using our Platform and believe it does not meet the accessibility requirements of the Public Sector Bodies Accessibility Regulations 2018, you may report the issue to the Government Digital Service (GDS) through the Cabinet Office.

We take all accessibility complaints seriously and treat each one as an opportunity to improve. We will not take any adverse action against a user for raising an accessibility concern in good faith.