Launching your own firm is exciting and overwhelming. Pick your firm type and work the list; your progress is tracked as you go.
The IRS requires every tax preparer to maintain a WISP. Use our free generator to create one for your new practice.
Business-grade internet with a secondary connection (LTE/5G failover) so you are never offline during a filing deadline.
A properly configured firewall with intrusion detection, not a consumer-grade router from the office supply store.
Standardized hardware makes support easier. Plan for dual monitors; document review demands screen real estate.
A reliable multifunction device with secure print release for client documents.
Cloud-based phone system with professional auto-attendant, voicemail-to-email, and mobile app.
Clio, PracticePanther, MyCase, or similar. The hub for calendaring, contacts, billing, and matter management.
NetDocuments, iManage, or a well-organized SharePoint structure. Never lose a version again.
Email, calendar, word processing, and cloud storage. Microsoft 365 is the legal industry standard.
Westlaw, LexisNexis, Fastcase, or Casetext depending on your practice area and budget.
Built into most practice management tools; ensure LEDES billing support if clients require it.
DocuSign, Adobe Sign, or similar for engagement letters, settlements, and client agreements.
Required on every account: email, practice management, banking, everything. Your single most important security step.
Business-grade endpoint detection and response on every device. Consumer antivirus is not sufficient.
Encrypted client communications and advanced anti-phishing to prevent business email compromise.
Automated, encrypted backups with a tested recovery process. Know your RTO and RPO before you need them.
Acceptable use, data handling, and incident response. Many state bars now require documented security measures.
Separate from malpractice. Covers breach notification, forensics, and liability; carriers require documented controls.
Practice area information, attorney bios, and a way for potential clients to reach you.
A secure way to share documents, review invoices, and communicate, instead of emailing sensitive files.
LawPay, Headnote, or similar trust-account-compliant platform. Make it easy for clients to pay you.
Zoom, Teams, or similar for client meetings, depositions, and court appearances.
Business-grade internet with failover. During tax season, an outage can mean missed deadlines and lost clients.
IRS Pub. 4557 requires a security system for your computers; a business firewall is the minimum starting point.
Dual monitors are a must for tax preparation and reconciliation work. Standardize for easier management.
High-volume scanning is essential. Many clients still bring paper documents.
Cloud phone with auto-attendant and call routing, essential when busy-season volume spikes.
Lacerte, UltraTax CS, Drake, or ProSeries depending on practice size and complexity. Choose early; migration is painful.
QuickBooks, Xero, or Sage for your own books, plus familiarity with what your clients use.
Canopy, Karbon, or Jetpack Workflow for engagements, deadlines, and staff assignments.
Email, calendar, and document collaboration. Excel proficiency is assumed.
Organized cloud storage with proper structure and version control, for audits and IRS correspondence.
For engagement letters, 8879 forms, and other authorization documents.
Required by the FTC Safeguards Rule and IRS Pub. 4557. Not optional; it is the law for anyone handling tax returns.
Required by IRS Pub. 4557 on all systems containing taxpayer data. No exceptions.
Business-grade detection on every device that touches client data. Consumer tools do not meet IRS requirements.
Tax professionals are prime phishing targets. Encrypt and filter aggressively.
Encrypted, automated backups with tested recovery. Losing client tax data is a practice-ending event.
Full-disk encryption on all laptops and workstations, required to protect data at rest.
Covers breach costs, forensics, and client notification. A breach triggers state and federal reporting obligations.
Services offered, team credentials, and a secure way for prospects to contact you.
Stop emailing W-2s and tax returns. A portal protects client data and looks professional.
Easy online invoice payment, integrated with most practice management tools.
For client meetings and staff collaboration, especially when busy-season time is precious.
Consultants work everywhere. Reliable primary internet plus a hotspot for client sites and travel.
A powerful, portable laptop with a travel monitor or docking station. You will present frequently.
Protect your work from client offices, hotels, and coffee shops.
A professional business number with mobile app, keeping personal and business separate.
Email, calendar, storage, and the full suite. Most clients expect Microsoft compatibility.
Asana, Monday, or Notion for deliverables, timelines, and client communications.
HubSpot, Pipedrive, or similar for prospects, clients, and your pipeline.
Harvest, FreshBooks, or similar for billable hours and professional invoices.
Polished decks and proposals are your calling card.
Engagement letters, NDAs, SOWs, and contracts, signed without friction.
On every account. Many enterprise clients require it before granting system access.
Protect your devices, and by extension every client network you touch.
Automated backups of all deliverables and business data. Losing a client report is unrecoverable.
Full-disk encryption on all devices. Lost laptop, protected data.
E&O plus cyber. Many clients require proof of insurance before signing.
Often a prospect’s first impression. Make them count.
Professional background, good camera, quality microphone.
SharePoint, Dropbox Business, or similar for deliverables.
Calendly or similar, so booking time with you takes zero back-and-forth.