Watch Cloud is the managed security and compliance layer for tax practices — a 24/7 security operations center staffed by human analysts, a written information security plan, endpoint protection, encrypted backup, and dark-web monitoring, delivered to the preparer rather than sold to them as one more thing to configure. Refund-transfer providers, service bureaus, and training organizations already route their firms to us.
As of August 1, 2026, 879,698 practitioners held a current PTIN. On the way through renewal, each one acknowledges that they maintain a written plan protecting client data — the obligation set by the FTC Safeguards Rule (16 CFR Part 314) and IRS Publication 4557. A large share of them cannot honestly make that acknowledgement.
When that dawns on a preparer in January, they do not call the FTC. They call whoever sold them their software. Security is a question your support desk already answers and does not want to own. That is the gap this partnership fills.
These are refund-transfer providers, service bureaus, and training organizations your EROs already work through. They refer, we fulfill and support, and they earn a share of what those firms pay for as long as the firm stays. Not one of them had to build anything.
Three of the names above appear on the published bank-partner lists of the major professional tax packages. The model is already proven inside your own channel — which is why this is a twenty-minute conversation rather than a pitch.
Non-exclusive in both directions. No minimum, no spend, no obligation to run sales activity on our behalf.
You point EROs to a co-branded registration page. We handle the sale, fulfillment, and support, and pay a share of collected fees for the life of the account. Nothing to build on your side, and reporting comes to you quarterly.
Security and WISP delivery included in, or upsold from, your package tiers. You keep the customer relationship and set the price. We carry the analysts, the tooling, and the operational responsibility for running it.
A WISP and gap check surfaced inside your product at the moment the customer is already thinking about compliance — renewal, EFIN setup, or e-file onboarding. Highest attach rate, longest build.
Per device, per month. No contracts, no setup fees, cancel anytime. Annual billing is eleven times the monthly rate — one month free.
A solo CPA received two email attachments — one a phishing page impersonating a Microsoft admin centre, the other a lure referencing an ACH routing change. Both were quarantined automatically before either could be opened. Our analyst notified him with two scoping questions; he replied in three minutes; the alerts closed four minutes later. The same messages reached his personal tablet, which was unmanaged. Nothing there detected anything.
Across five small practices monitored over 27 days, dark-web monitoring found 14 employee email accounts sitting in third-party breach data, 11 of them with a working password. Four of the seven alerts fired during onboarding, meaning the exposure predated us. Not one traced to a breach of the firm's own network — they came from consumer platform breaches, some more than a decade old, converted into current firm risk by password reuse.
A preparer's Windows installation failed. An outside repair shop wiped the drive and told her the data was gone. Four filing years of returns came back from our backup — and the re-enrolment that recovered them surfaced what the rebuild had missed: a persistence tool that survived a full Windows reinstall, two credential stealers, and an account set to sign in automatically with no password. Written incident report in her hands 16 hours 16 minutes later.
Most of what preparers already have in this category is adjacent to the obligation rather than an answer to it.
Insurance pays after the incident, and increasingly underwrites on whether controls exist at all. It is a complement to this, not a substitute for it.
Every competitor gives away a template. A template is a document that sits in a drawer and satisfies nobody who reads it closely.
We run the controls and answer the alert. The preparer never has to become the person who understands any of it.
Tell us which of the three models fits your next twelve months and we will come to the call with the terms already drafted. If the answer is "not this year," we would still like to understand your season calendar.
A short note about your organization and which model you are considering is enough to start. We reply within one business day.
We use cookies to improve your experience and ensure compliance with privacy standards. By continuing, you agree to our Privacy Policy.
