Filing season is coming. So are the phishing campaigns aimed at preparers.
The Network Controls Your Written Security Plan Is Supposed to Describe
Tax and accounting firms are required to keep a written information security plan under the FTC Safeguards Rule, and the IRS publishes the guidance on what belongs in it. Connect delivers the network protection that plan is supposed to describe, and guards the client financial data sitting behind it.
One Sentry per office. Guided setup in under an hour. No IT hire required.
What we typically find
- Client tax files reachable from an unsecured shared connection
- A workstation reaching a known data-theft domain during tax season
- Client data separated and access logged for your WISP
You hold the keys to your clients' entire financial life.
Tax returns, Social Security numbers, bank statements, payroll: your firm stores the exact data criminals want most, and tax season is when they come hunting. The IRS and the FTC now expect firms like yours to keep a written information security plan, and a wide-open office network is the first thing that plan is supposed to address.
Client Social Security numbers, tax returns, and bank records stored across office machines
Tax-season phishing and data-theft attacks aimed straight at preparers
A missing or incomplete written information security plan, which the FTC Safeguards Rule requires you to maintain
Seasonal staff and personal laptops connecting to the same network as client files
No activity log to show what protections are actually in place if you are ever asked
The security your data plan is supposed to describe
Protect client financial data.
We block malicious sites and unknown devices and keep client files separated from the rest of your office traffic.
Controls for your written plan.
Access controls, network separation, and an activity log that line up with what the IRS Safeguards guidance asks for.
Ready for tax season.
Extra scrutiny when the attacks spike, with fast alerts so a busy preparer never has to play detective.
What AstraLink watches for at an accounting firm
Phishing and data theft.
Known scam and credential-theft sites are blocked before a preparer clicks.
Client-data separation.
Client files stay walled off from staff devices and guest Wi-Fi.
Every device on the network.
Seasonal laptops and unknown devices are held back until you approve them.
Evidence for your plan.
Network access is logged, giving you records that support your written security plan.
Secured before the next return goes out
No disruption to your tax or accounting software, and no new hire. If your team can use a phone, they can run this.
Scan and plug in.
Scan the code, plug the Sentry in at the office, and follow the guided steps.
We separate client data.
Client files, staff devices, and guest Wi-Fi get walled off from each other automatically.
Monitor and document.
See every device, get alerts, and keep an access log that backs up your written security plan, all from one app.
A written plan is required. This is the part that protects the network.
The FTC Safeguards Rule requires tax and accounting firms to keep a written information security plan, often called a WISP, and the IRS publishes the guidance on what belongs in it. AstraLink does not write that plan for you and it is not the whole plan. What it does is deliver the network piece the plan is supposed to describe: access controls, separation of client data, threat monitoring, and an activity log. You bring the policies and the paperwork, we handle the network, and together it adds up to real protection you can point to.
Not sure where your firm stands? Book a free network assessment and we will show you.
The leak nobody at your firm is talking about.
Somebody on your staff has pasted a client's numbers into a chatbot to clean up the wording. The Social Security number went with it. Your firewall never saw it, because nothing was hacked. It was just Tuesday.
Your written plan is supposed to describe where client data goes. It goes into chatbots. AI Protect catches it on the machine, before the paste lands, under rules you set.
Questions firm owners ask us
Does the IRS really require this?
The requirement comes from the FTC Safeguards Rule, and the IRS publishes the guidance on what belongs in the plan. It covers protections like access controls, network monitoring, and separation of client data. Connect delivers the network side of that plan and documents it for your file.
Will it work with our tax and accounting software?
Yes. It runs underneath your network, not inside your software, so your preparation and bookkeeping tools keep working exactly as they do now.
Will it slow us down during tax season?
No. It is built to run local-first, so your everyday work never has to detour through the cloud, even on your busiest filing days.
We bring on seasonal staff. Can we manage their access?
Yes. Every device is approved individually and removing access takes one tap, so seasonal laptops never linger on your network after the season ends.
Do I need to hire someone to run it?
No. It is built for a firm owner or office manager, not an IT department. Setup is guided, and most questions are handled right from the app.
How much does it cost?
A monthly plan per Sentry, one per location, with no limit on devices and no annual contract. We will give you the figure on the call. The assessment is free. Firms tell us the audit-readiness and client trust are worth it on their own.
See if your firm's network backs up your plan
Book a free, no-pressure assessment. We will review your office network and hand you a plain-language report of what is exposed and what your security plan still needs.
AstraLink Connect · Serving accounting & finance firms across Houston and Texas · Houston, TX