For tax and accounting practices
Your security plan was written before your staff started using AI. We bring it current, or write it from scratch, sized to your practice and priced by firm size.
Why now
- In June 2026 the IRS Office of Professional Responsibility (OPR Alert 2026-19) said firms using AI should adopt written policies, keep client data in enterprise-approved tools, and document that they follow them.
- A Written Information Security Plan is already required of paid preparers (IRS Pub. 4557; FTC Safeguards Rule). Most plans predate AI and say nothing about it.
| Offer | Best for | What you receive | Price |
|---|---|---|---|
| AI Procedures + WISP Refresh | You have a plan and want it current | Review of your plan · written AI-use procedures and approved-tool list · recordkeeping template · updates to the plan sections AI touches · 30-minute staff walkthrough | $995 |
| Complete Plan — solo | One preparer; no plan or an unread template | Full WISP written to your environment · AI procedures · control check (MFA, encryption, backups, email security) with fixes ordered by risk · attestation form · annual-review checklist | $1,500 |
| Complete Plan — 2 to 5 staff | Small office, shared systems | Everything above, plus vendor oversight list, incident-response and breach-notification procedure, offboarding checklist, one-hour recorded staff training with desk guide | $3,500 |
| Complete Plan — 6 to 15 staff | Multi-preparer or multi-office | Everything above, scoped per office and role; live staff training; tool memo (keep / restrict / replace); 30-minute pre-season follow-up | $7,500 |
| Annual review + AI update | Any firm | Each autumn: control re-check, AI-tool and vendor refresh, policy updates, re-attestation | $750 / year |
Fixed prices. 50% on signature, 50% on delivery, by invoice. Refresh delivered in about one week; complete plans in three weeks. Remediation you choose to outsource is quoted separately at $225 per hour. Firms that start by November 20 are complete before tax season. Download the one-page summary (PDF).
How it runs
Week 1: 60-minute discovery interview with the owner and whoever runs IT. Week 2: control check, draft plan and AI procedures, two 20-minute check-ins. Week 3: training, your edits, final documents.
Who does the work
Every hour is delivered by Brent Pearson, principal of Napa Logic, which has built software for financial-technology clients since 2014. Brent is separately the founder and chief compliance officer of Keychain Asset Management, an Oregon-registered investment adviser, so he keeps the same kind of written security and AI procedures for his own firm.
Book a 20-minute call or email brent@napalogic.com
Napa Logic, Inc. is an information-technology consulting and software development company established in 2014. It is not an investment adviser and does not provide investment, legal, tax or compliance advice. Brent Pearson is separately the principal of Keychain Asset Management, an Oregon-registered investment adviser; Napa Logic’s services are provided under a written statement of work and are not advisory services of Keychain Asset Management.