WispTrust™VERIFIED SECURITY PLANNING
Operated by MVP Forge LLC
Clause by clause against the FTC Safeguards Rule (16 CFR Part 314), from your answers, personally reviewed in-house by a Client Verification Specialist. No calls. No borrower data. Ever.
About 30 minutes of your time, on this door's own intake form — questions written for a mortgage brokerage, not a tax office.
Your intake is personally reviewed by a Client Verification Specialist — within 1 business day. Anything unclear, we clarify with you by email.
Your WISP is built from your confirmed facts: the plan, risk assessment, vendor register, incident response plan, and QI paperwork.
Your finished plan arrives within 2 business days of submission (Monday–Thursday count; a Friday submission is delivered by Tuesday). You sign the adoption page as your firm's Qualified Individual.
A sample plan from a fictional firm — yours is built from your firm's own answers.
Running without one is like driving without insurance until you have a wreck. Nothing reminds you it's missing — until the day something happens. This program has been required since June 2023, and there is no annual deadline to hide behind: the exposure just sits there, every day. Enforcement usually arrives after a breach — and a breach touching 500 or more consumers has to be reported to the FTC within 30 days. That is when the question gets asked: where is your written program? Waiting for the wreck isn't a plan. Having the plan is.
Everyone with access to borrower information counts. Complete WISP, risk assessment, vendor register, incident response plan, QI paperwork, and evidence binder.
The same complete build for a larger team. Above 10 covered people, or multi-branch, is a custom quote — confirmed in writing before any work starts.
Keeping it current: the Safeguards Year — $49/month or $490/year — delivers a quarterly threat & regulatory brief and keeps your evidence binder current.
You've seen what it costs and how it works — the questionnaire is step one, about 30 minutes.
Start Your IntakeNo — neither, ever. We ask whether your NMLS ID is recorded in your own records; we never collect the number, a loan file, a credit report, or a single borrower's name. Our intake is built to refuse that data.
You are — we recommend the owner hold the designation. The plan is built to support the owner in it. We never serve as a firm's Qualified Individual.
Examiners test whether a real written program exists and matches how you operate. Your plan is built from your verified answers against the rule text itself, with a Basis & Sources page your attorney can check line by line. No honest builder can promise an examination outcome — and we won't.
Banks follow a sister rulebook. The same federal law — the Gramm-Leach-Bliley Act — requires every financial institution to maintain a written information security program. Banks answer to the Interagency Guidelines enforced by their own regulators (the OCC, Federal Reserve, or FDIC; credit unions follow the NCUA's version), so they're exempt from the FTC's rule. Your firm isn't a bank, so the FTC Safeguards Rule is your version of that same requirement — and it's the one WispTrust builds your plan to.
Because running without a written program is like driving without insurance until you have a wreck: nothing reminds you it's missing until the day something happens. The requirement has stood since June 2023, and unlike a tax deadline, there is no date on the calendar that warns you first — an exam can land in any cycle, and after a serious breach the reporting clock runs in days. Waiting for the wreck isn't a plan. Getting the program written, from how your firm actually operates, is.
Your intake is personally reviewed within 1 business day, and your finished plan is delivered within 2 business days of submission — business days are Monday through Thursday, so a Friday submission arrives by Tuesday.
No. WispTrust provides documentation and administrative support, building your plan from your answers and the published rule. We are not a law firm, and we make no compliance determinations for your specific situations.