Would your security plan pass an FTC review today?
Grade your WISP in two minutes. Then PrepShield writes it for your firm, keeps all 9 required elements running with evidence, and lines up vetted IT help for the technical fixes.
12 questions, no sign-up.Follows 16 CFR 314.4 and IRS Pub 5708. 7-day free trial. No sales calls. Data encrypted, never sold.
maximum FTC penalty per Safeguards Rule violation
to notify the FTC of a breach affecting 500 or more people
PTIN holders who attest to having a WISP when they renew
Sources: 16 CFR 314, IRS Publication 5708, IRS preparer directory.
A security program that runs itself
- 01
Grade your firm
Answer 12 questions and see your score, your gaps and what to fix first.
- 02
Get your WISP
We write it for your firm from your answers, with every required element and no placeholders.
- 03
Keep it current
Training, vendor reviews and yearly tasks run on schedule, with evidence filed for you.
12 questions. Your score, your gaps, and what to fix first.
Every Safeguards requirement, handled
Built for tax and accounting firms of 1 to 25 people without a full-time IT department.
All 9 required elements, running
Every Safeguards control has an owner, a completion date and its evidence attached, so the plan works on paper and in practice.
A WISP written for your firm
Answer a few questions about your software, storage and staff, and get a complete WISP with no template placeholders left in it.
Breach plan ready before you need it
Roles, client notices and the 30-day FTC notice are written down, so a bad day doesn't turn into a penalty.
Staff training, built in
A 15-minute yearly course with a quiz. Each person's dated certificate lands in your records.
Vendor reviews, sent and filed for you
We send each vendor a security questionnaire, flag answers that need follow-up, and file the replies as evidence.
A badge clients can trust
Put a live badge on your website. It links to a page showing your program is current, the reassurance clients want before handing over their Social Security numbers.
IT fixes without the hunt
Need multi-factor login or encryption? Request quotes from vetted IT providers who already work with tax firms. Free for firms.
More than a template. Less than a consultant.
| PrepShield | Free WISP template | IT or security consultant | |
|---|---|---|---|
| WISP written for your firm, no placeholders | ✓ | — | ✓ |
| All 9 elements tracked with evidence | ✓ | — | Varies |
| Staff training with dated certificates | ✓ | — | Extra fee |
| Vendor questionnaires sent and filed | ✓ | — | Varies |
| Reminders before anything lapses | ✓ | — | Varies |
| Live trust badge for your website | ✓ | — | — |
| What it costs | From $199/month | Free, then your time | Hourly rates |
Less than one hour of a consultant's time
7-day free trial on every plan. Pay yearly and get 2 months free. Cancel anytime.
Solo
1 preparer
- Your WISP, written for your firm and kept current
- All 12 Safeguards controls tracked with evidence
- Breach response plan with the 30-day FTC notice
- Built-in yearly staff training with certificates
- Vendor security questionnaires, sent and tracked
- Annual report to the owner, generated
Team
Most popular2–10 people
- Your WISP, written for your firm and kept current
- All 12 Safeguards controls tracked with evidence
- Breach response plan with the 30-day FTC notice
- Built-in yearly staff training with certificates
- Vendor security questionnaires, sent and tracked
- Annual report to the owner, generated
Firm
11–25 people
- Your WISP, written for your firm and kept current
- All 12 Safeguards controls tracked with evidence
- Breach response plan with the 30-day FTC notice
- Built-in yearly staff training with certificates
- Vendor security questionnaires, sent and tracked
- Annual report to the owner, generated
What firm owners ask us
Is my data safe?
Yes. Everything is encrypted in transit and at rest, access is limited to your account, and we never sell or share your data. Our security page has the details.
Does a WISP really apply to a small practice?
Yes. The FTC Safeguards Rule covers tax preparers of every size, and the IRS asks you to confirm you have a WISP when you renew your PTIN.
Do I need to talk to anyone?
No. Grade yourself, create an account, and your program is running in an afternoon. Cancel any time from your billing page.
Will this replace my IT person?
No, it gives them a clear list. PrepShield runs the written program and evidence. For technical fixes, use your own IT provider or request quotes from ours.
Is this legal advice?
No. It's software that follows 16 CFR 314.4 and IRS Publication 5708. It's not a certification.
Find your gaps before the FTC does
Your free grade takes two minutes. No sign-up.