Form W-12 · Line 11

Every PTIN renewal, you confirm a written security plan is required by law. Do you actually have one?

TaxFort builds a Written Information Security Plan (WISP) tailored to your tax office, reviewed by a federal information security professional and delivered in 5 business days. No templates to fill in. No client data required.

Your plan covers

✓FTC Safeguards Rule elements
✓IRS Publication 4557 and 5708 guidance
✓Your actual software, devices and staff
✓Breach response steps and who to notify
✓Staff acknowledgment forms, ready to sign

A generic template won't protect you. A plan that matches your office will.

Tax preparers are covered by the FTC Safeguards Rule, and the IRS expects every paid preparer to keep a written plan. Most small firms either have nothing or a downloaded template that doesn't describe how their office really works. That's the plan that fails you after a breach.

Required, not optional

You attest to it on Form W-12 every time you renew your PTIN.

Tax firms are targets

Client SSNs, bank details and prior returns are exactly what identity thieves want.

Right-sized for you

Firms with fewer than 5,000 clients get a leaner plan, as the rule allows.

How it works

01

Answer a 10-minute questionnaire

About your office, software and setup. Never your clients' information.

02

We build and review your plan

Every plan is reviewed by a federal information security professional before it reaches you.

03

Receive it in 5 business days

Plus a clear list of any gaps we found and how to close them.

Simple pricing

Your plan is matched to your firm's size automatically.

WISP Kit

$597 one time

✓ Plan tailored to your office✓ Risk assessment and incident response plan for larger firms✓ Breach reporting steps✓ Staff acknowledgment forms✓ Gap list with remediation steps
Get your plan

Safeguards Concierge

$79 per month

✓ Keeps your plan current as rules change✓ Quarterly policy updates✓ Annual risk reassessment✓ Monthly phishing-awareness emails for your staff✓ Help when something goes wrong
Add Concierge

Who builds your plan

Jason Breining, founder

I write and maintain information security policy for a living, in the federal sector, where the standards are strict. TaxFort brings that same discipline to small tax and accounting offices, in plain English and at a price that makes sense.

MS, Information Security Operations · CompTIA Security+ · ISC2 Certified in Cybersecurity · ITIL 4

Questions

Do you need access to my client data?

No. We only ask how your office is set up: software, devices, backups and who has access. We never see taxpayer information.

Is this legal advice?

No. Your plan is a security compliance document that helps you meet your obligations. It isn't legal advice and doesn't guarantee any regulatory outcome.

I'm a solo preparer. Do I really need this?

Yes. The requirement applies to paid preparers of every size. Smaller firms get a shorter plan, but it still has to be written down.

What if I'm not sure how my office is set up?

"Not sure" is a fine answer. We'll follow up, and anything unclear becomes an item on your gap list instead of a guess in your plan.

Do I need Concierge?

It's optional. Your plan should be reviewed at least yearly and whenever your office changes. Concierge handles that for you, along with staff training emails.

Not sure where you stand?

Ten yes-or-no questions. Your score in two minutes. No obligation.

Take the free Self-Check