PTINs expire December 31. To renew, you confirm on Form W-12 that you know you must have a written data security plan. No WISP yet?

–days–hrs–min–sec
Get your WISP now →
Find your builder

For small tax, accounting and investment firms in the US

Your compliance file in one place

Organized, dated, signed and ready to hand over.

Answer simple questions about your firm. Get the plans, logs and sign-offs the FTC, the IRS and the SEC expect you to have on file, with your own systems, gaps and dates.

Find your builder I'm a consultant
  • No subscription, no account: you buy each year's edition
WISP Reg S-P 1099 Written Information Security Plan Your firm · effective January 4, 2027 · next review January 2028 Multi-factor authentication on every systemIn place Full-disk encryption on laptops and phonesIn place Backups with a tested restoreOpen · due Feb 3 Provider contracts require safeguardsOpen · due Feb 3 Everyone trained this yearIn place Signature and date

Pick the builder for your firm

Each one is a single file you download and open. Next year, open your saved answers, change what changed and print again.

WISP Builder

For tax preparers, EAs and small CPA firms

Your written security plan, organized, dated and signed

The Written Information Security Plan the FTC Safeguards Rule requires, following IRS Publication 5708, with risk assessment, incident response plan, provider register, training log and annual report.

$199 2027 edition See the WISP Builder
Reg S-P Builder

For SEC-registered advisers and broker-dealers

Your Regulation S-P program, organized, dated and signed

Written policies, incident response program, 30-day customer notice template, service provider register and 72-hour notice letters, under the SEC's amended Regulation S-P.

$399 2027 edition See the Reg S-P Builder

Free 1099 calculator. Do you need to send a 1099-NEC or 1099-MISC? Answer four questions and get a clear yes or no, with the IRS deadline countdown. Updated for the $2,000 threshold on 2026 payments.

Try the calculator
A desk with a laptop, reading glasses, papers and a cup of coffee in morning light

Your clients' data stays on your desk

A security plan should not start by sending your clients' information to someone else. Each builder is a single file that runs in your browser with no internet connection.

  • No account, no cloud, no upload
  • Your answers are saved on your computer, in a file you control
  • We never see your firm, your clients or your vendors

How we build them

  • Rule by ruleEach document names the section it answers, so an examiner, auditor or insurer can follow it.
  • Gaps become actionsEvery "No" or "Partly" turns into a dated task with an owner. Your file shows progress, not just intentions.
  • Evidence in one placeThe Compliance Binder keeps the signed documents, screenshots and training certificates with your plan, dated and ready to export for an examiner.

Who makes Kitlegalia

Kitlegalia is built by Ivy Oliver, a software test engineer (SDET) who has led QA and development teams. Each builder is written rule by rule from the primary sources (16 CFR Part 314, IRS Publications 4557 and 5708, SEC Regulation S-P) and tested like production software before every edition.

Kitlegalia is a brand of Black Odix Technologies LLC, a New Jersey company. Questions before you buy? Write to contact@kitlegalia.com. We reply to every e-mail within one business day.

Consultant, outsourced CCO or IT provider?

License the builders under your own brand and give them to your clients. Priced by how many clients you serve, with no hosting and no per-client fees.

See white-label licenses