Your firm’s Written Information Security Plan — written in 20 minutes.

Every paid tax preparer must keep a WISP. Answer plain-English questions about your office and WritAssure writes a complete, firm-specific plan — plus your incident response plan, staff training and a ranked list of anything to fix. Then it reminds you every year.

Get my WISPSee a sample

Built on the FTC Safeguards Rule (16 CFR Part 314) and IRS Publications 5708 and 4557.

Why every firm needs one

It’s required

The FTC Safeguards Rule requires a written information security program for every paid tax preparer — including one-person offices.

The IRS asks

When you renew your PTIN, you confirm you have a security plan. Many preparers check the box without one.

It’s your proof

After a breach, the first questions from the IRS, your insurer and regulators are: “Show us your plan. Did you follow it?”

How it works

Answer about 45 questions

Your staff, where client data lives, the safeguards you use, and who to call in an emergency. Save and finish later.

Get your finished plan

Your WISP, Attachments A–F, incident response plan, staff training and action plan — download in Word or PDF.

Review it yearly

Load last year’s answers, update what changed, regenerate and sign. We remind you before it’s due.

What you get

Your complete WISP

Responsible officials, risk assessment, safeguards, training, testing, service providers and annual review — every FTC element, in the IRS Publication 5708 structure.

Attachments A–F

Record retention, rules of behavior, breach procedures with your own contacts, staff acknowledgements, device inventory and access list.

Your action plan

Every gap found from your answers, ranked High, Medium and Low, with plain step-by-step fixes and the rule behind each one.

Staff training

A 15-minute training handout with a quick check and sign-off sheet — covers the yearly training requirement.

Small-firm rules handled

Firms with fewer than 5,000 consumers are exempt from some requirements. WritAssure applies the right ones for you.

Word and PDF

Edit in Word or save as PDF. It’s your document to keep.

Your answers never leave your computer. The builder runs in your browser. We don’t receive or store your office details — so there is nothing of yours on our side to breach.

Pricing

Solo

$99 $149

per year · 1 preparer

  • Complete WISP + Attachments A–F
  • Incident response plan
  • Action plan
  • Training for 1
  • Annual review reminder
Choose Solo

Small office

$169 $249

per year · 2–5 staff, seasonal staff included

  • Everything in Solo
  • Training and sign-offs for your team
  • Device and access lists for your office
Choose Small office

Done with you

$299

one time · add to any plan

  • 45-minute video call
  • We complete the plan with you
  • Walk-through of your action items
Add a setup call

Founding-firm pricing for the first 50 firms, locked for your second year. Plans renew yearly; cancel any time. 30-day money-back guarantee — see our refund policy.

Questions

The IRS has a free template. Why pay?

IRS Publication 5708 is a 28-page fill-in-the-blanks document that most preparers never finish. WritAssure asks only what applies to you, writes the plan in full sentences, flags what to fix, adds the FTC elements the template is thin on, and reminds you every year.

Does this make me compliant?

It gives you a complete written plan based on your answers. Compliance also means doing what the plan says — that’s what the action plan is for. WritAssure is a document tool, not legal advice, and it does not certify compliance.

I’m a one-person office. Do I really need this?

Yes. The Safeguards Rule applies regardless of size. Small firms are exempt from a few parts, and WritAssure handles that for you.

What happens to my information?

The builder runs entirely in your browser; your answers stay on your computer unless you save a copy. Payments are processed by our reseller, Paddle. See our privacy policy.

How long does it take?

About 20 minutes for most small offices. You can save your answers and finish later.