Your PTIN Is At Risk.
We Fix That.
Federal law classifies every tax preparer as a financial institution. That means the same cybersecurity requirements that govern banks now govern your tax office — and the IRS checks at PTIN renewal. Apex Tech 4 Tax Pros delivers the full compliance solution, built exclusively for tax professionals.
“Do you have a Written Information Security Plan (WISP)?” — This question must be answered YES at every PTIN renewal. Your answer is certified under penalty of perjury. Checking YES without an actual WISP constitutes a federal crime. More than 810,000 tax preparers face this requirement annually.
Compliance Status Check
Are you currently protected?
🔴 No WISP on File
PTIN renewal risk. FTC fines. Personal liability. Cannot prepare returns if PTIN is revoked.
🔴 No MFA on Tax Software
Required by FTC Safeguards Rule. Client data is unprotected from credential theft.
🔴 Using Personal Email for Client Files
Unsecured transmission of PII violates FTC requirements and exposes you to liability.
✅ With Apex Tech 4 Tax Pros
Customized WISP + Virtual PC + Secure Email + MFA + Cyber Training. Fully covered.
The Solution
810,000+
$50,685
$43,792
4,000+
100%
Why a WISP Is Federal Law — Not Optional Guidance
Gramm-Leach-Bliley Act (GLBA)
The Gramm-Leach-Bliley Act designated tax preparation services as financial institutions — placing them under the identical data protection framework that governs banks, credit unions, and mortgage lenders. This is the foundational law. The moment you prepare a return for compensation, you are a covered financial institution under federal law — regardless of whether you work from an office or your kitchen table.
FTC Safeguards Rule (16 CFR Part 314)
The Federal Trade Commission enforces GLBA through its Safeguards Rule, which was significantly strengthened in 2023. It mandates that all covered financial institutions — including every solo tax preparer — must develop, implement, and maintain a comprehensive Written Information Security Plan. The Rule specifies nine required elements including a designated Qualified Individual, documented risk assessments, encryption, multi-factor authentication, access controls, vendor oversight, and an incident response plan. The FTC has actively increased enforcement since 2023, with penalties reaching $500,000 for notification failures and up to $50,685 per violation.
IRS Publication 4557 — Safeguarding Taxpayer Data
IRS Publication 4557 establishes specific technical security requirements for every authorized e-file provider and tax professional who handles client financial data. It explicitly requires a Written Information Security Plan — with documented administrative, technical, and physical safeguards. Companion publication IRS Publication 5708 provides a nine-component WISP framework specifically designed for small to mid-size tax practices. Together, these publications give the IRS its own enforcement authority separate from the FTC — including the ability to suspend or revoke your EFIN.
IRS Form W-12, Line 11 — PTIN Renewal Certification
Starting in 2024, the IRS added Line 11 to Form W-12, the PTIN renewal form. This line asks every paid return preparer to certify — under penalty of perjury — that they maintain a Written Information Security Plan compliant with IRS Publication 4557 and the FTC Safeguards Rule. More than 810,000 preparers face this requirement at every annual renewal. Checking YES without an actual compliant WISP constitutes false certification on a federal form — a criminal offense that can result in PTIN revocation, EFIN suspension, and referral for prosecution.
Why a WISP Is Federal Law — Not Optional Guidance
4,000+
The IRS can revoke your Preparer Tax Identification Number, making it illegal to prepare federal tax returns for compensation. Without a PTIN, your practice ends immediately during the investigation period.
$50,685
The FTC can impose civil penalties of up to $50,685 per violation under the Safeguards Rule (2026 inflation-adjusted figure). Each client record exposed in a breach can be treated as a separate violation.
$43,792
Ongoing violations under an FTC consent order accrue penalties of up to $43,792 per day until resolved. An unaddressed compliance failure compounds daily — fast.
EFIN Suspended
The IRS can suspend or revoke your Electronic Filing Identification Number following a data breach or security failure — effectively shutting down your ability to e-file during peak tax season.
$0
Most cyber liability carriers require a documented WISP before issuing coverage. After a breach, insurers audit your security program before paying claims. No WISP = denied claims, even with a policy in force.
$649
Our seasonal subscription at $649.99 covers your WISP document, virtual desktop, secure email, MFA, VPN, antivirus, and more — complete compliance protection for the price of less than two tax returns
The One Question That Changes Everything
Line 11 of IRS Form W-12 — added in 2024 — turned WISP compliance from a best practice into a sworn federal certification. Here’s exactly what it means for your practice.
Every year, when you renew your PTIN, the IRS asks on Form W-12, Line 11 whether you maintain a Written Information Security Plan that complies with IRS Publication 4557 requirements and the FTC Safeguards Rule.
Your answer is not a formality. It is a certification made under penalty of perjury. If you check YES without having a real, compliant WISP in place, you have made a false statement on a federal form — which is a criminal offense under 18 U.S.C. § 1001, separate from the civil penalties the FTC can impose.
The IRS did not add this line as a suggestion. The Security Summit — a joint initiative of the IRS, state tax agencies, and the tax industry — has been working to combat tax-related identity theft, which costs billions annually. Tax office data breaches are a primary vector. Your WISP is the documented evidence that you are doing your part.
IRS Form W-12 — PTIN Renewal
Paid Preparer Tax Identification Number Application
Line 9 — Line 10 …
Line 11
Data Security Responsibilities
Do you have a Written Information Security Plan (WISP) in place that complies with IRS Publication 4557, “Safeguarding Taxpayer Data,” and the FTC Safeguards Rule?
⚠️ Your answer is made under penalty of perjury. False certification constitutes a federal crime under 18 U.S.C. § 1001 and can result in PTIN revocation and referral for criminal prosecution.
1
PTIN renewal opens in October. The renewal fee is $19.75. Failure to renew by December 31 triggers e-filing suspension and a $530 penalty per return prepared without valid credentials.
2
If you do not have a compliant WISP, you cannot truthfully check YES. And checking YES without one is federal perjury. The only safe answer is to get your WISP in place before renewal.
$649
The IRS and FTC both require annual review and update of your WISP. A WISP is not a one-time document — it must reflect your current systems, staff, and technology every year.
Everything You Need. One Trusted Partner.
📋
A fully written, IRS-compliant Written Information Security Plan tailored to your specific firm — your processes, your staff, your technology. Not a generic template. A real document built for your practice. Available in English and Spanish.
🔍
A comprehensive risk assessment of your current security posture, a customized WISP document, an incident response plan, employee cybersecurity training, and a follow-up maintenance review — all in one engagement.
🖥️
A secure, cloud-hosted computer for running your tax software. Client data never lives on your personal device. Works from any browser. Automatically backed up. Protected even if your physical computer is lost or stolen.
✉️
Professional encrypted email for your tax office. Replaces personal Gmail or Yahoo accounts — which violate FTC requirements when used for client PII. Send and receive sensitive documents safely.
🔐
Multi-factor authentication (required by FTC Safeguards Rule), spam filters, antivirus, anti-phishing, anti-spyware, firewall, VPN, encryption, and secure file transfer — a complete technical safeguard layer for your office.
🎓
Online staff training with completion certificate and LinkedIn badge. Satisfies the employee training requirement in your WISP. Includes phishing simulator, up to 90-minute courses, and compliance with HIPAA, PCI, SOX, GDPR, and CCPA.
💾
Encrypted cloud drive for client files, tax returns, and office documents. Password manager to eliminate password reuse across tax software platforms and portals — one of the leading causes of credential theft in tax offices.
🌐
Professional web hosting, domain registration, SSL certificates, analytics, and secure virtual network services for your tax office’s digital presence — all security-configured from the start.
Who Is Required to Have a WISP?
The Gramm-Leach-Bliley Act and IRS Publication 4557 draw no distinction between large firms and small ones, seasonal preparers and full-year professionals, or office-based and home-based practitioners.
📝
File 11+ returns for compensation? The law applies to you directly. No minimum client threshold.
🏢
Responsible for every return filed under your EFIN — and liable for every preparer under your roof.
🤝
Managing data for a network of preparers multiplies your exposure — and your compliance obligation.
🏛️
Licensed professionals face both IRS Publication 4557 requirements and Circular 230 obligations.
📚
Handling nonpublic personal financial information classifies you as a covered financial institution under GLBA.
💼
Multi-staff firms require WISPs that address each location, each role, and each service provider used.
🏠
Working from home does not exempt you. The law applies to the data, not the location of the preparer.
🌅
Even a January-through-April season creates full-year legal obligations. Data doesn’t expire in May.
👤
A single practitioner preparing one return for compensation is a covered financial institution under federal law.
🌐
Professional web hosting, domain registration, SSL certificates, analytics, and secure virtual network services for your tax office’s digital presence — all security-configured from the start.
Built at the Intersection of Tax & IT Security
Apex Tech 4 Tax Pros was founded by a seasoned professional with over 20 years of combined experience in healthcare IT and tax preparation — two industries defined by the highest standards of data protection and regulatory compliance.
That dual background revealed a critical gap: tax professionals were handling some of the most sensitive personal and financial data in existence, but operating without the security infrastructure that other regulated industries had long required. The WISP mandate closed that gap legally — but left most preparers without a practical, affordable path to compliance.
We built Apex Tech 4 Tax Pros to bridge exactly that divide. Every product and service we offer was designed specifically for the operational realities of a tax office — not adapted from a corporate IT solution. We understand the seasonal pressures, the client expectations, and the compliance obligations that define your practice.
As a sister company to APEX Tax Solutions — a Latino-owned tax software company serving preparers across the U.S. since 2015 — we are part of an ecosystem built around the success of independent tax professionals.
20+
2
3
100%
APEX Tax Solutions
🛡️
Custom plans aligned with IRS Pub 4557, IRS Pub 5708, GLBA, and FTC Safeguards Rule. Not templates — real documents for your real firm.
☁️
Virtual desktops, encrypted email, secure drives, and password management purpose-built for tax office workflows.
🎓
Certified cybersecurity awareness programs that satisfy the training component of your WISP — with documentation you keep for compliance records.
🌐
Full English and Spanish support for all services. WISP documents available in Spanish for Latino-owned tax offices and preparers.
🌐 WISP disponible completamente en español
Plan de Seguridad de la Información por Escrito personalizado para su empresa — cumple con la Ley Gramm-Leach-Bliley, las directrices del IRS y la norma de salvaguardias de la FTC.
🇺🇸 🤝 🇲🇽
WISP & Compliance FAQs
The questions every tax professional asks — answered directly and completely.
Don't Risk Your PTIN.
Get Compliant Now.
Whether you need a customized WISP document, a full IT assessment, or a subscription that covers everything — Apex Tech 4 Tax Pros has the solution designed specifically for your tax practice. Bilingual support. Dallas, TX. Built by tax and IT professionals who understand your world.
Also need tax software? Visit our sister company → APEX Tax Solutions — apextaxsolution.com