Your WISP has a gap. It's AI.
You keep a Written Information Security Plan because the rules ask for it. Your team is using AI tools the WISP never mentioned. We build the AI Use Policy that attaches to your WISP, tailored to your firm, in an afternoon. Built to the FTC Safeguards Rule and IRS Publication 4557.
Does your WISP cover how your team uses AI?
A real AI Use Policy. Not a blank template.
Built around your firm's tools, people, and clients, and kept current as the rules and the tools change.
The written AI Use Policy
Your firm-specific policy: who may use which AI tools, what client information may never go into them, who is responsible, and how it gets reviewed. Built to the FTC Safeguards Rule and IRS Publication 4557.
Staff attestation records
The signed acknowledgments the rule expects. Each person on the team has a dated, recorded acknowledgment that they read the policy and will follow it.
Approved and prohibited tools list (Bundle)
Plain language about which AI tools the firm allows, which it prohibits, and what to do when a new one shows up. The list updates as tools change.
Kept current
The FTC Safeguards Rule expects a program kept current. The AI tools your team uses do not stay still. The portal updates your policy when the rules or the tools change, and we tell you.
A watermarked sample policy is available on request. Ask us and we will send it.
Pick your plan.
- The firm-specific policy
- Staff attestation records
- Portal free for year one
- Content updates through year one
- Everything in the policy
- Approved and prohibited tools list
- Client-data-safe prompting guide
- AI incident-response addendum
- Workforce AI training module
- AI vendor screening checklist
- Everything in the bundle
- Spanish translation (+$99)
- Printed binder (+$99)
- Additional locations (+$50 each)
- Portal free for year one
After year one, the portal is $249/yr. It keeps your policy current as the FTC Safeguards Rule and the AI tools your team uses change. The rule expects a program kept current. This is how that gets done.
What each option actually includes.
A free template
- Generic, not your firm
- Frozen the day it was posted
- No staff attestation records
- You track tool and rule changes yourself
- Hours of editing to make it fit
Agate
- Tailored to your firm, your tools
- Attestation records included
- Updates when the rules or tools change
- Built on the FTC Safeguards Rule and IRS 4557
- Done in one afternoon
A consultant who writes one
- Custom to your firm
- Attestation and training may cost extra
- Updates are a separate engagement
- Takes weeks, not an afternoon
- Same outcome, much more time and cost
Your name goes on this. So does ours.
Built on the current FTC Safeguards Rule and IRS Publication 4557, reviewed by a CISSP, with the staff acknowledgments the rule expects. You review it. You sign it. It's yours.
Built on the rule
The policy text is mapped to the FTC Safeguards Rule (16 CFR Part 314) and IRS Publication 4557. Not a summary. Not a feeling. The rule.
Kept current
When the rules change, the policy changes. When the AI tools your team uses change, the policy moves with them. The portal makes that ongoing, not a one-off purchase.
You stay in charge
You read the policy. You decide it fits. You sign it. We provide the software and keep it current. You provide the judgment and the adoption. That is how the responsibility stays where it legally belongs.
Three questions firms always ask.
We're a small firm. Do we really need this?
If you maintain a WISP under the FTC Safeguards Rule and IRS Publication 4557, your team is already using AI tools whether you wrote a policy or not. The rule expects a program kept current. AI is what the rule did not anticipate yet. This is the smallest cost path to closing that gap.
We already have a WISP. Why pay for this too?
This is the AI layer that attaches to your existing WISP. It does not replace it. The WISP covers your information-security program in general. This covers the specific question your WISP probably did not anticipate. How your team is allowed to use AI tools, what data they may not put in those tools, and how that gets reviewed.
Why pay when free templates exist?
A free template is a blank form that froze in time the day it was posted. The AI tools your team uses do not stay still. Ours is built on the current rules, tailored to your firm, and kept current as the rules and the tools change. You review it, you sign it, it's yours.
Check the gap in your WISP.
Ninety seconds, no cost. We will tell you where the AI gap is and let you know the moment the plan builder opens.
Check the gap