Infosandwich: Evaluating a Vendor's VPAT