WISP compliance for tax and accounting firms
A WISP is not a one-time document. It is an ongoing compliance obligation.
ProtPTX builds your firm-specific Written Information Security Plan, then helps keep it current as your firm, systems, vendors and regulatory requirements change.
Nine questions. Instant gap analysis. Download the report or have it sent to you.
Compliance activity log · Example firm
Current
Why this matters
The obligation is ongoing, and a static template does not meet it.
A Written Information Security Plan is legally required for tax professionals handling taxpayer data. The obligation is connected to the FTC Safeguards Rule, the Gramm-Leach-Bliley Act, and IRS guidance including Publications 4557 and 5708. When you renew your PTIN, you are asked to attest that you maintain one.
The requirement is not satisfied by having a file. The plan must be current, implemented and reviewed over time. A static template does not address what happens next: staff join and leave, devices are replaced, vendors change, software is added, security controls shift, and requirements are updated.
Where a plan no longer describes the firm, that exposure is real. Noncompliance can expose a firm to PTIN, licensing, civil-penalty, professional-liability and reputational risks. What applies to your firm depends on its size, services and circumstances.
Template versus program
The difference is what happens after you download it.
| A static template | ProtPTX | |
|---|---|---|
| Written plan produced | Yes | Yes |
| Describes your actual devices, staff and software | Generic | Built from your intake |
| Names your Data Security Coordinator | Blank to fill in | Documented |
| Risk assessment for your firm | You write it | Completed with you |
| Updated when staff or vendors change | No | Prompted monthly |
| Regulatory change monitoring | No | Included |
| Annual review scheduled | You remember it | Scheduled and reminded |
| Training records organised | No | Tracked |
| Dated compliance activity log | No | Maintained |
| Device charges | — | Unlimited devices, no per-device charges |
Two parts
A custom build, then ongoing checks.
One-time tailored setup
We build a Written Information Security Plan specific to your firm's actual devices, staff, software and vendors. It starts with a structured intake that takes under ten minutes and covers all ten parts a plan is expected to have, from program scope through to the annual review schedule.
Ongoing monthly checks
We monitor for relevant regulatory and guidance changes, run a monthly compliance check-in, prompt the updates your changes require, schedule the annual review, organise training records, track vendor oversight, and maintain a dated compliance activity log.
The result
Documentation that stays current and a firm that stays audit-ready, without you tracking any of it yourself. That is compliance peace of mind rather than a document download.
Who it is for
Tax preparers, CPAs, EAs and bookkeepers
The obligation is similar across these firms. The gaps are not, because the systems and the staffing are different.
Tax preparers
You attest at PTIN renewal that you maintain a WISP. This is what stands behind it.
Read more →Bookkeepers
No PTIN, and still handling data that brings obligations with it.
Read more →CPA and EA firms
More systems and more turnover means the plan drifts faster than anyone expects.
Read more →MSPs and partners
Run it for your own practice and cut your bill with every client you refer.
Read more →Pricing
Flat-rate coverage without per-device pricing.
Three plans banded by firm size. Choose annual and the setup fee is waived.
Solo
For a single preparer or sole practitioner
Save $255 a year
$412per year
$34.33 a month, billed annually
Setup fee waived $199
$468 a year at list price
$39per month
Billed monthly, cancel any time
Plus $199 one-time setup
Flat rate · Unlimited devices · No per-device charges
Start with the readiness check- Firm-specific WISP built from your intake, not a template
- Covers 1 preparer
- Unlimited devices at no extra charge
- Monthly compliance check-ins and update prompts
- Regulatory and guidance change monitoring
- Annual review scheduling and reminders
- Maintained compliance activity log and audit trail
- Current plan documents and full update history
Firm
For firms with 2 to 10 staff
Save $527 a year
$940per year
$78.33 a month, billed annually
Setup fee waived $399
$1,068 a year at list price
$89per month
Billed monthly, cancel any time
Plus $399 one-time setup
Flat rate · Unlimited devices · No per-device charges
Start with the readiness check- Firm-specific WISP built from your intake, not a template
- Covers 2 to 10 staff
- Unlimited devices at no extra charge
- Monthly compliance check-ins and update prompts
- Regulatory and guidance change monitoring
- Annual review scheduling and reminders
- Maintained compliance activity log and audit trail
- Current plan documents and full update history
Multi-office
For firms with 11 or more staff or multiple locations
Save $1,057 a year
$1,890per year
$157.50 a month, billed annually
Setup fee waived $799
$2,148 a year at list price
$179per month
Billed monthly, cancel any time
Plus $799 one-time setup
Flat rate · Unlimited devices · No per-device charges
Start with the readiness check- Firm-specific WISP built from your intake, not a template
- Covers 11+ staff or multiple locations
- Unlimited devices at no extra charge
- Monthly compliance check-ins and update prompts
- Regulatory and guidance change monitoring
- Annual review scheduling and reminders
- Maintained compliance activity log and audit trail
- Current plan documents and full update history
Full pricing, the billing toggle and what the setup fee covers
Refer a firm, take 20% off your own renewal. Five and yours is free.
No cash changes hands and there is nothing to invoice. Every firm that signs up with your code takes 20% off your own next renewal, stacking to free at 5. On the Firm plan that is $188 off, and $940 a year saved outright.
per confirmed referral
subscription is free
no payout to chase
Not ready yet
We will check in before renewal season.
Leave an email and we will send the readiness check, a reminder before the October to December PTIN renewal window, and one follow-up in January. Nothing else.
No client data. Unsubscribe any time. Handled by send.php on your own server.
Start with the free readiness check
Nine questions drawn from the FTC Safeguards Rule and IRS Publications 4557 and 5708. You get a readiness outcome and a gap list on screen, then download the report or have it sent to you.