WispBinder
ContactFree Windows check

Service terms

Version 1.0, 7 Nov 2026. WispBinder is not a law firm, and these terms are not legal advice. If you need legal certainty, please ask your own attorney to review these terms before you accept them.

These terms apply to paid work after the free pilot. They are between WispBinder, run by Alfrets Bimbangnaung, a registered sole proprietor in Indonesia (contact: alfrets@wispbinder.com) ("we"), and the office named in the order we confirm with you by email ("you"). The order states the office, the package, the number of computers, the price in US dollars and the start date.

1. What we do

  1. We provide the package named in your order, as described on our Packages page on the date of the order. Anything else is out of scope unless we agree in writing; email is enough.
  2. We prepare a Written Information Security Plan (WISP) and reports from your answers and from check result files you choose to send us. Microsoft 365 items are written from your answers and marked as client statements.
  3. You make all changes on your computers. We give written, step-by-step guides. We do not log in to, control or remotely access your computers or accounts. We do not run phishing simulations and do not test your systems for vulnerabilities.
  4. We do not offer live screen-share sessions under these terms.
  5. “Ready for review” calls are by phone. We go through the questions on a form you received and point to your own records. You answer and send the form yourself; we do not fill in, sign or send it, and we do not advise what to answer.

2. What we do not promise

  1. No guarantee of compliance. We do not promise that your office complies with the FTC Safeguards Rule (16 CFR Part 314), IRS requirements or any other law, and we do not promise that a security incident will not happen. Results depend on your office's practices.
  2. Not legal advice, not an audit, not a certification. Our reports describe settings detected at the time of a check. For legal questions, consult your own attorney.
  3. Our WISP template is organized around 16 CFR 314.4 and draws on IRS Publication 5708. WispBinder is not a law firm, and the plan is not legal advice; if you need legal advice, review it with your own attorney.

3. What you do

  1. Give accurate answers to our questionnaire and tell us about changes that matter, such as new computers, staff or vendors.
  2. Run the check script yourself. You can read it first and verify its published SHA-256 hash (see How it works).
  3. Do not send us client tax data, tax returns, Social Security numbers or client documents. If you send them by mistake, we delete them and tell you.
  4. Keep your own copy of your binder file and the reports we deliver. They are yours.

4. Price and payment

  1. The price is in your order, in US dollars. We send an invoice through PayPal. You can pay by card without a PayPal account.
  2. Work starts after payment is received.
  3. PayPal fees are paid by us and are not added to your invoice.
  4. Refunds: if you cancel before work starts, we refund the full amount. After we deliver your draft WISP, payments are not refunded, but we still complete the revisions included in your package.
  5. Our prices do not include any sales or similar tax that may apply in your state.

5. Your information

We handle your information as described in our Privacy policy. In short: result files and binder files you send us are deleted within 30 days after your report is delivered; questionnaire answers, your plan and our reports are kept while you use our service and up to 2 years after our last service to you; you may ask us to delete your information earlier. We do not sell your information or use it for marketing.

6. How we protect it

  1. We keep your information in one folder on an encrypted computer, keep backups on an encrypted drive that is not left connected, and use two-factor authentication on the accounts we use for email, hosting and code.
  2. We do not ask for or need your clients' customer information. If we ever receive it, the safeguards above apply to it, we use it only to provide our service, and we delete it as soon as possible.
  3. If we learn that your information held by us was accessed by someone who should not have it, we tell you within 72 hours of learning it, with what we know at that time.
  4. You may ask us once a year how we protect your information, and we answer in writing.

7. Limit of liability

  1. To the extent the law allows, our total liability under these terms is limited to the fees you paid us in the 12 months before the claim.
  2. We are not liable for indirect or consequential losses, or for losses caused by changes you make, or do not make, to your systems.

8. Term and ending

  1. These terms run for the period in your order. Either side may end them by email with 14 days' notice. Refunds follow section 4.
  2. When they end, sections 2, 5, 6 and 7 continue to apply.

9. Disagreements

  1. We first try to resolve any disagreement in good faith by email.
  2. If we cannot agree, either side may pursue the remedies available under applicable law.

10. Accepting these terms

You accept these terms by replying to our order email with "I agree", your name and the date, or by signing the order.