Skip to main content
WISPWolf logo
WISPWolf
The Living WISP

The Compliance Readiness Platform for Tax Preparers, Accountants & Small Businesses

Generate your WISP, score your readiness against the FTC Safeguards Rule and IRS Publication 5708, and prove it — continuously.

Get Your Free Compliance Score
Get the Free Starter Kit
FTC Safeguards Rule
IRS Publication 5708
IRS Publication 4557
Microsoft 365 read-only connection
No credit cardEncrypted in transitUS-hosted
IRS Publication 5708 Aligned
FTC Safeguards Rule 16 CFR Part 314
Encrypted in transit
Built by Cybersecurity Professionals
The Problem

A WISP is not a one-time PDF

The FTC Safeguards Rule and IRS Publication 5708 require a living program — not a document signed once.

Outdated the day you save it

A PDF can't track new hires, removed accounts, or a failed backup.

No annual review trail

FTC requires periodic risk assessments — static docs don't prove one.

No evidence under audit

Screenshots aren't a defense when the IRS or your insurer asks.

Templates miss your stack

Generic templates ignore your Microsoft 365 tenant and MFA posture.

Why This Matters

Built directly on federal compliance requirements

Every control maps to a specific statutory obligation — so you show your work, not just check a box.

16 CFR Part 314

FTC Safeguards Rule

Requires covered financial institutions — including most tax & accounting firms — to maintain a written program with administrative, technical, and physical safeguards.

Source: Federal Trade Commission
IRS Pub 5708

Creating a Written Information Security Plan

IRS requires every paid tax preparer to create, maintain, and annually review a WISP with documented incident response and ongoing risk assessment.

Source: Internal Revenue Service
How It Works

Your first WISP draft in about an hour

A guided path from intake to continuous monitoring.

STEP 01

Tell us about your firm

5-minute intake — services, staff, systems, jurisdictions.

01
STEP 02

AI drafts your WISP

Mapped to the FTC Safeguards Rule and IRS Pub 5708.

02
STEP 03

Connect Microsoft 365

Microsoft 365 read-only evidence — Available now (beta). Read-only pull of MFA and tenant posture as evidence.

03
STEP 04

See your live score

Letter grade with a prioritized gap list.

04
STEP 05

Keep it current every year

Dashboard review reminders (email reminders coming soon), change tracking, evidence summary exports.

05
The Dashboard

Compliance you can actually see.

A live view of your WISP — score, gaps, evidence, and what's due next. Updated continuously, not once a year.

app.wispwolf.com/dashboard
Example dashboard — sample data
Acme Tax & Co.
Compliance Score
82B
+6 this month
Risk
Low–Mid
Last review
Complete
Renewal
On track
Evidence from Microsoft 365
Evidence-backed readiness · Review complete
Compliance Health Dashboard · Available now

Controls organized in one place

Microsoft 365 read-only evidence — Available now (beta)
  • MFA enforced on all admins
    Attested · current period
    Pass
  • Conditional access policy documented
    Attested · current period
    Pass
  • Disk encryption
    Firm-reported · current period
    Pass
  • Backups confirmed (30d retention)
    Attested · current period
    Pass
  • Vendor inventory not yet uploaded
    Action required
    Review
  • Security awareness training — last logged 14 mo ago
    Action required
    Review
Open Gaps · 7

What to fix next

  • critical
    No vendor inventory on file
    Maps to FTC §314.4(d)
  • critical
    Annual security training overdue
    Maps to IRS Pub 4557
  • moderate
    Incident response plan not signed
    Maps to IRS Pub 5708
Fix gaps with guided steps
Compliance Timeline

Annual renewal: on track

Plan createdCurrent statusAnnual renewal
  • WISP generated
    Complete
  • M365 evidence connected
    Connected
  • Coordinator signed off
    Complete
  • Annual review attestation
    Scheduled
Evidence Summary exports · Available now

Share what was checked

Evidence summary — a short PDF of your score and what was checked, to share with your broker or IT provider.

See plans WISPWolf assists with compliance readiness and documentation. It does not provide legal advice or guarantee compliance.
Platform

A Compliance Readiness Platform — not a template

Evidence, review, and response in one place.

AI-Assisted WISP Generator

Tailored plans drafted from your firm's intake — not a generic template.

Compliance Health Dashboard

Available now: a live grade that updates as your security posture changes.

Microsoft 365 Read-Only Evidence

Available now (beta): read-only MFA and tenant posture signals as evidence.

Annual Renewal Workflow

Guided review cycles with signed attestations and dashboard reminders (email reminders coming soon).

Evidence Summary Exports

Available now: a short PDF of your score and what was checked, to share with your broker or IT provider.

Policy Acknowledgement Tracking

Owner, security lead, and staff each get the right sign-off.

Incident Response Playbooks

Pre-built breach response steps mapped to small-business reality.

Gap Remediation Plan

Prioritized action list with ownership and clear next steps.

The Difference

Static WISP vs. Compliance Readiness Platform

Move beyond a one-time document to an ongoing, defensible program.

Traditional WISP ProcessWISPWolf
Static WISP documentGuided compliance management
Manual updates throughout the yearOngoing policy and control tracking
Annual review done from scratchStructured annual review workflow
No compliance scoringCompliance readiness scoring
Gaps surface only during an auditGap identification with prioritized findings
Scattered screenshots and email attachmentsOrganized evidence collection
No remediation trackingRemediation tracking with assigned owners
No employee acknowledgement trackingPolicy acknowledgement tracking
No centralized dashboardCentralized compliance management dashboard

WISPWolf is a pilot-stage compliance platform. Some workflows are actively being rolled out to early customers.

Why Trust WISPWolf

Built by Cybersecurity Professionals and an Active MSP

Built by cybersecurity pros and an MSP serving accountants, tax preparers, bookkeepers, and insurance agencies under federal data-protection rules.

Compliance Expertise

Built on the FTC Safeguards Rule (16 CFR Part 314), IRS Pub 5708, and IRS Pub 4557 — the same frameworks examiners and cyber insurers reference.

Technical Expertise

Designed by cybersecurity practitioners with hands-on Microsoft 365, MFA, endpoint, incident response, audit, and compliance program experience.

Real-World Practitioner Experience

Built by an MSP serving accountants, tax preparers, bookkeepers, and insurance agencies — not a template vendor.

Continuous Monitoring Approach

Tracks posture changes, renewal cycles, and evidence over time — not a frozen PDF.

Privacy-First, US-Hosted

US-hosted infrastructure, encryption in transit, and least-privilege access — designed around protecting client data, not collecting it.

Built by Cybersecurity Professionals
Developed by an Active MSP
US-Hosted Infrastructure
Encryption In Transit
Privacy-First Design
FTC Safeguards Rule Aligned
IRS Pub 5708 + 4557 Aligned
Secure Microsoft 365 Integrations
No Credit Card Required for Trial

WISPWolf assists with compliance readiness and documentation. It does not provide legal advice or guarantee regulatory outcomes.

Pilot program now open. WISPWolf does not publish customer counts, audit pass rates, or named testimonials we cannot independently verify.

Product Roadmap

What’s next for WISPWolf

Microsoft 365 read-only evidence is available now in beta. Evidence Summary exports and the Compliance Health Dashboard are available now. The capabilities below remain planned.

Planned — not yet available

Partner Dashboard

Planned

Planned — not yet available: a dedicated view for partners managing client programs.

Additional Business-System Integrations

Planned

Planned integrations beyond the available Microsoft 365 read-only evidence beta.

Single Sign-On (SSO)

Planned

Planned — not yet available: streamlined sign-in for firm teams.

Additional Security-Control Checks

Planned

Planned checks beyond the available Microsoft 365 read-only evidence beta.

SOC 2 Attestation

Planned

Planned — not yet available: WISPWolf does not currently hold a SOC 2 attestation.

Ongoing Risk Alerts

Planned

Get notified when something drifts — before it's a finding.

These additional capabilities are planned and not yet available. Early customers help shape which integrations and validations ship next.

Pricing

Simple, transparent pricing

Pick the tier that matches your firm. Cancel anytime.

Starter

$39/month

For solo preparers and small practices building their security plan.

  • Guided WISP assessment
  • AI-assisted WISP draft
  • Your WISP document (download and sign)
  • FTC and IRS control mapping
  • 3 WISP updates per month
  • Annual review reminders on your dashboard (email reminders coming soon)
Start 14-day free trial
Best Value

Professional

$99/month

For growing firms that want an ongoing compliance program.

  • Everything in Starter
  • Microsoft 365 read-only evidence — Available now (beta)
  • WISPScout computer scan
  • Evidence-backed score
  • Unlimited WISP updates
  • Gap remediation workflow
  • Policy acknowledgement tracking
  • Priority support
Start 14-day free trial

Agency

$199/month

For multi-location firms and partners managing several programs.

  • Everything in Professional
  • Multi-client or multi-location support
  • Team workflow
  • Advanced reporting
  • Partner dashboard — Planned — not yet available
  • Dedicated onboarding support
Start 14-day free trial

14-day free trial — try every feature, no credit card. Your final, signable WISP unlocks when you subscribe; trial downloads are marked DRAFT.

FAQ

Questions, answered

Still have questions?

Talk to a compliance specialist—no sales pitch.

Book a 15-min walkthrough