For 1 person
Solo
$149 / year
A plan for an independent practitioner serving fewer than 5,000 consumers.
- Interview and proposed plan review
- Released PDF and editable DOCX
- Plan version history
For independent tax practices · 1–25 people
Your security plan.
Built around
your practice.
WispDesk helps you create and maintain your written information security plan, with your firm’s answers at the center.
A guided interview. A plan to review. A clear record of what still needs work.
Launch preview · Checkout is not open for live payments.
Written for a tax practice
Review before release
PDF + editable DOCX
From answers to action
A useful plan starts
with how you work.
Your practice brings the facts and the judgment. WispDesk brings a structured way to put them on paper.
01
Describe your practice
Answer questions about your people, systems, devices and policies. Describe how the firm works; keep taxpayer records and client identifiers out of your answers.
02
Review the proposed plan
Read the full draft and its planned work. Correct your answers where needed, then approve the exact version you intend to use.
03
Adopt it. Put it to work.
Download the released PDF and editable DOCX. Complete adoption signatures, assign the work and share review links with staff. Revisit the plan as your practice changes.
More than a blank page
The plan, the records,
and the work ahead.
Your document package organizes reported practices and planned measures. A released file still needs the firm’s adoption, implementation and ongoing review.
Open your plan workspaceWritten information security plan
Purpose, responsibilities, safeguards and an implementation clause with signature spaces.
Working records
Sections for a risk register, vendor register, remediation checklist and evidence log. Complete the records for your practice.
Staff review
Share one-time review links for a released plan and record staff acknowledgments for that version.
A version you approve
Review the proposed text before release. Download a PDF for reference and a DOCX for your firm’s records and adoption.
Annual pricing
Sized to your practice.
One annual price.
Published annual prices in USD, plus applicable tax. Checkout is not open for live payments.
For 2–10 people
Practice
$349 / year
A shared plan for a small practice serving fewer than 5,000 consumers.
- Interview and proposed plan review
- Released PDF and editable DOCX
- Staff review links for your team
For 11–25 people, or 5,000+ consumers
Practice Plus
$649 / year
Includes the annual Qualified Individual report section for firms serving 5,000 or more consumers.
- Interview and proposed plan review
- Released PDF and editable DOCX
- Staff review links for your team
Your firm size and consumer count determine the tier. Annual renewal requires consent. Cancel renewal through billing; refunds are available within 30 days.
A small first look
Start with your public domain.
A bounded snapshot of email-authentication publication and one HTTPS homepage response. Observations include their scope and what remains unknown.
No email address or account is needed for a snapshot. Availability may vary during launch preparation.
A few practical questions
Know what’s included.
Know your next step.
What is a WISP?
A Written Information Security Plan documents how your firm manages information-security risks and responsibilities. The written plan is one part of an ongoing program: your firm still implements safeguards, trains its people and reviews its practices.
What information should I enter?
Describe your firm’s systems, policies, roles and working practices. Keep tax returns, taxpayer records, Social Security numbers and other client identifiers out of WispDesk.
What does the free domain snapshot tell me?
It observes public email-authentication records and one HTTPS homepage response. It does not establish domain ownership or verify account MFA, devices, internal systems or the implementation of your WISP. Snapshot availability may vary during launch preparation.
Does approving the plan complete the work?
Your approval records the version you reviewed. Your firm must still adopt the plan, implement planned measures, maintain records and arrange appropriate training. Staff acknowledgment records a review; adoption signatures and training remain separate.
Can I update a plan when my practice changes?
Revisit your interview answers, finish the updated interview and review the new proposed version. Existing released versions remain in your plan history. Automatic annual review and connected-account checks are planned for later releases.
Read the source guidance
WispDesk is an independent product. Review the original guidance and seek advice suited to your firm’s circumstances.
IRS Publication 5708 FTC Safeguards Rule guideA clearer place to begin
Put your practice’s plan
in writing.
Create an account Describe your practice. Keep taxpayer information out.