16 CFR Part 314
FTC Safeguards Rule
Requires covered financial institutions — including most tax & accounting firms — to maintain a written program with administrative, technical, and physical safeguards.
Source: Federal Trade Commission
The Compliance Readiness Platform for Tax Preparers, Accountants & Small Businesses
Generate your WISP, score your readiness against the FTC Safeguards Rule and IRS Publication 5708, and prove it — continuously.
FTC Safeguards Rule
IRS Publication 5708
IRS Publication 4557
Microsoft 365 read-only connection
No credit cardEncrypted in transitUS-hosted
IRS Publication 5708 Aligned
FTC Safeguards Rule 16 CFR Part 314
Encrypted in transit
Built by Cybersecurity Professionals
IRS Publication 5708 Aligned
FTC Safeguards Rule 16 CFR Part 314
Encrypted in transit
Built by Cybersecurity Professionals
The Problem
A WISP is not a one-time PDF
The FTC Safeguards Rule and IRS Publication 5708 require a living program — not a document signed once.
Outdated the day you save it
A PDF can't track new hires, removed accounts, or a failed backup.
No annual review trail
FTC requires periodic risk assessments — static docs don't prove one.
No evidence under audit
Screenshots aren't a defense when the IRS or your insurer asks.
Templates miss your stack
Generic templates ignore your Microsoft 365 tenant and MFA posture.
How It Works
Your first WISP draft in about an hour
A guided path from intake to continuous monitoring.
STEP 01
Tell us about your firm
5-minute intake — services, staff, systems, jurisdictions.
01
STEP 02
AI drafts your WISP
Mapped to the FTC Safeguards Rule and IRS Pub 5708.
02
STEP 03
Connect Microsoft 365
Read-only pull of MFA and tenant posture as evidence.
03
STEP 04
See your live score
Letter grade with a prioritized gap list.
04
STEP 05
Keep it current every year
Dashboard review reminders (email reminders coming soon), change tracking, evidence summary exports.
05
The Dashboard
Compliance you can actually see.
A live view of your WISP — score, gaps, evidence, and what's due next. Updated continuously, not once a year.
app.wispwolf.com/dashboard
Example dashboard — sample data Acme Tax & Co.
Compliance Score
82B
+6 this month
Risk
Low–Mid
Last review
Jun 2026
Renewal
64 days
Evidence from Microsoft 365
Evidence-backed readiness · Reviewed Jun 2026
Compliance Health
Controls organized in one place
- PassMFA enforced on all adminsAttested · current period
- PassConditional access policy documentedAttested · current period
- PassDisk encryptionFirm-reported · Jun 18
- PassBackups confirmed (30d retention)Attested · Jun 12
- ReviewVendor inventory not yet uploadedAction required
- ReviewSecurity awareness training — last logged 14 mo agoAction required
Open Gaps · 7
What to fix next
- criticalNo vendor inventory on fileMaps to FTC §314.4(d)
- criticalAnnual security training overdueMaps to IRS Pub 4557
- moderateIncident response plan not signedMaps to IRS Pub 5708
Compliance Timeline
Annual renewal in 64 days
Jun 2026TodaySep 2026 · Renewal
- WISP generatedMay 19, 2026
- M365 evidence connectedMay 22, 2026
- Coordinator signed offJun 02, 2026
- Annual review attestationDue Sep 17, 2026
Evidence Summary
Share what was checked
Evidence summary — a short PDF of your score and what was checked, to share with your broker or IT provider.
See a live dashboard WISPWolf assists with compliance readiness and documentation. It does not provide legal advice or guarantee compliance.
Platform
A Compliance Readiness Platform — not a template
Evidence, review, and response in one place.
AI-Assisted WISP Generator
Tailored plans drafted from your firm's intake — not a generic template.
Compliance Readiness Score
Live grade that updates as your security posture changes.
Automated Evidence Validation
PlannedPlanned — not yet available: validate answers against connected business systems.
Annual Renewal Workflow
Guided review cycles with signed attestations and dashboard reminders (email reminders coming soon).
Evidence Summary Exports
A short PDF of your score and what was checked, to share with your broker or IT provider.
Policy Acknowledgement Tracking
Owner, security lead, and staff each get the right sign-off.
Incident Response Playbooks
Pre-built breach response steps mapped to small-business reality.
Gap Remediation Plan
Prioritized action list with ownership and clear next steps.
The Difference
Static WISP vs. Compliance Readiness Platform
Move beyond a one-time document to an ongoing, defensible program.
| Traditional WISP Process | WISPWolf |
|---|---|
| Static WISP document | Guided compliance management |
| Manual updates throughout the year | Ongoing policy and control tracking |
| Annual review done from scratch | Structured annual review workflow |
| No compliance scoring | Compliance readiness scoring |
| Gaps surface only during an audit | Gap identification with prioritized findings |
| Scattered screenshots and email attachments | Organized evidence collection |
| No remediation tracking | Remediation tracking with assigned owners |
| No employee acknowledgement tracking | Policy acknowledgement tracking |
| No centralized dashboard | Centralized compliance management dashboard |
WISPWolf is a pilot-stage compliance platform. Some workflows are actively being rolled out to early customers.
Who builds WISPWolf
Built by Cybersecurity Professionals and an Active MSP
A pilot-stage platform from practitioners who run compliance programs and respond to incidents — not a template vendor.
Tax professionalsAccounting firmsInsurance agenciesFinancial service providersSmall businesses handling sensitive client data
Built by cybersecurity professionals
Designed by practitioners with hands-on incident response, audit, and compliance program experience — mapped to FTC and IRS guidance.
Developed by an active MSP
Built and maintained by an MSP actively serving accountants, tax preparers, bookkeepers, and insurance agencies under federal data-protection rules.
Privacy-first, US-hosted
US-hosted infrastructure, encryption in transit, and least-privilege access — designed around protecting client data, not collecting it.
Pilot program now open. WISPWolf does not publish customer counts, audit pass rates, or named testimonials we cannot independently verify.
Why Trust WISPWolf
Compliance you can defend — built by the people who do this work
Built by cybersecurity pros and an MSP serving accountants, tax preparers, bookkeepers, and insurance agencies under federal data-protection rules.
Compliance Expertise
Built on the FTC Safeguards Rule (16 CFR Part 314), IRS Pub 5708, and IRS Pub 4557 — the same frameworks examiners and cyber insurers reference.
Technical Expertise
Designed by cybersecurity pros with hands-on Microsoft 365, MFA, endpoint, and incident response experience.
Real-World Practitioner Experience
Built by an MSP serving accountants, tax preparers, bookkeepers, and insurance agencies — not a template vendor.
Continuous Monitoring Approach
Tracks posture changes, renewal cycles, and evidence over time — not a frozen PDF.
Built by Cybersecurity Professionals
Developed by an Active MSP
US-Hosted Infrastructure
Encryption In Transit
Privacy-First Design
FTC Safeguards Rule Aligned
IRS Pub 5708 + 4557 Aligned
Secure Microsoft 365 Integrations
No Credit Card Required for Trial
WISPWolf assists with compliance readiness and documentation. It does not provide legal advice or guarantee regulatory outcomes.
Product Roadmap
Planned: Evidence-Based Compliance
Validate compliance answers using connected systems — not memory or screenshots.
Planned — not yet available
Automated Evidence Validation
PlannedVerify safeguards are actually in place — not just claimed.
Connected Business Systems
PlannedPull readiness signals from platforms your firm already uses.
Compliance Health Dashboard
PlannedOne live view of where your program stands.
Security Control Verification
PlannedConfirm access, logging, and backups against real config.
Evidence Summary Exports
PlannedPackets showing what you claim and the records behind it.
Ongoing Risk Alerts
PlannedGet notified when something drifts — before it's a finding.
These capabilities are planned and not yet available. Early customers help shape which integrations and validations ship first.
Pricing
Simple, transparent pricing
Pick the tier that matches your firm. Cancel anytime.
Starter
$39/month
For solo preparers and small practices building their security plan.
- Guided WISP assessment
- AI-assisted WISP draft
- Your WISP document (download and sign)
- FTC and IRS control mapping
- 3 WISP updates per month
- Annual review reminders on your dashboard (email reminders coming soon)
Best Value
Professional
$99/month
For growing firms that want an ongoing compliance program.
- Everything in Starter
- Microsoft 365 read-only evidence
- WISPScout computer scan
- Evidence-backed score
- Unlimited WISP updates
- Gap remediation workflow
- Policy acknowledgement tracking
- Priority support
Agency
$199/month
For multi-location firms and partners managing several programs.
- Everything in Professional
- Multi-client or multi-location support
- Team workflow
- Advanced reporting
- Partner-ready dashboard
- Dedicated onboarding support
14-day free trial — try every feature, no credit card. Your final, signable WISP unlocks when you subscribe; trial downloads are marked DRAFT.
FAQ