State-specific WISP · Massachusetts + New York
Security structure for the small business that holds sensitive data.
In plain English.
Shieldwise creates a streamlined, state-specific Written Information Security Program for small businesses in Massachusetts and New York. A guided intake takes approximately 20 minutes, then you receive a PDF and editable copy with an attorney-reviewable structure built around what your business already does — not a generic fill-in-the-blank document.
A practical starting point when an insurer, customer, or counsel asks for a WISP.
Illustration only — sample layout. No completed attorney review is represented.
Approximately 20 minutes
guided intake
Massachusetts + New York
state-specific scope
PDF + editable copy
delivered together
Attorney-reviewable
structured for counsel
5–50 employees
intended customer profile
Why this exists
Structure without a cybersecurity department.
Small businesses hold payroll records, payment details, health information, and other sensitive data every day. Knowing that is not the same as having a usable written program.
Shieldwise turns the owner's practical knowledge — how people work, where data lives, and what safeguards are already in place — into a structured starting point for the business and its counsel.
You bring the context.
Shieldwise brings the prompts, structure, and two useful file formats.
Why Shieldwise
A focused path from business knowledge to a working WISP.
Every part of the experience is built around making the document easier to understand, review, and keep useful.
- 01
State-specific structure
Start with the Massachusetts 201 CMR 17.00 or New York SHIELD Act § 899-bb structure selected in the intake; counsel can assess how it fits your facts.
- 02
Guided intake
Plain-English questions about your business and current practices turn an approximately 20-minute intake into useful source material for the program.
- 03
5–50 employee focus
The intended customer profile is approximately 5–50 employees: owners, office managers, and lean teams that hold sensitive information. That is a product focus, not a legal threshold.
- 04
Attorney review
The sections, safeguards, and assumptions are organized so your customer team and counsel can review and customize the working document against your facts.
- 05
Plain English
Your team should be able to understand the program they are expected to follow, not just file it away.
- 06
Annual refreshability
The $299/year annual refresh re-issues and updates the working document for another review cycle; it is not continuous legal monitoring.
Approved public pricing
Start with the WISP. Keep it current when you need to.
Choose the $149 one-time WISP package, or the $299/year annual refresh when you want the working document re-issued and updated for another review cycle.
Build
One-time WISP package
One state-specific Written Information Security Program assembled from a short guided intake. PDF + editable copy for customer and counsel review, customization, and implementation.
- Plain-English intake (~20 min)
- State-specific WISP — MA or NY
- PDF + editable copy
- Attorney-reviewable structure
- One-time checkout
Renewal
Annual refresh
A $299/year subscription that re-issues and updates your working WISP for another customer and counsel review cycle.
- Everything in the one-time package
- Working document re-issued each year
- Updates for the next review cycle
- Structured for another counsel review
Still comparing?
See the sources and scope behind Shieldwise’s state-specific working WISP.
After checkout, you'll land on the guided intake. Finish it to receive your state-specific working WISP by email. Shieldwise provides a structured document for customer and counsel review and customization; it is not legal advice. Your team and counsel remain responsible for finalizing and implementing the program.
How it works
Three steps. One working document.
Built for owners, office managers, and bookkeepers who need a practical starting point without a month-long project.
- 01
Share your business + current practices
A guided intake covers your business, team, the personal information you hold, and the safeguards already in place. Most businesses finish in approximately 20 minutes; timing varies with the detail of your answers.
- 02
Shieldwise prepares a state-specific WISP
Shieldwise turns those business facts and current practices into a working document structured around Massachusetts 201 CMR 17.00 or New York General Business Law § 899-bb (SHIELD Act), intended for customer and attorney review and customization.
- 03
Review, finalize, and implement
You receive a PDF plus an editable .docx. Review the working program with counsel, finalize it for your business, assign ownership, train your team, and implement the safeguards.
Only two state structures
A state-specific working document, structured for review.
Shieldwise’s current public scope includes Massachusetts 201 CMR 17.00, New York General Business Law § 899-bb (SHIELD Act), or one combined program. Select a scope during the intake; the output is a working document, and counsel determines applicability and any additional obligations.
Massachusetts
Standards for the Protection of Personal Information of Residents of the Commonwealth
Working document sections
- Designation of a Security Coordinator
- Risk assessment & remediation log
- Administrative safeguards
- Technical safeguards (access, encryption, monitoring)
- Physical safeguards (paper, devices, facilities)
- Incident response plan & notification procedures
- Vendor & third-party data-sharing controls
- Annual review and training schedule
Deliverables
Two useful file formats. One working program.
The output is organized for your team and counsel to review, customize, finalize, and implement. It is a working starting point, not a substitute for legal advice.
A clear working program
A printable WISP with organized administrative, technical, and physical safeguard sections for your team and counsel.
An editable working copy
Edit, annotate, and route the document to counsel without rebuilding the structure from a blank page.
An annual working-document update
Choose the $299/year annual refresh when you want the working document re-issued and updated for another customer and counsel review cycle.
Who it's for
The intended customer profile: 5–50 employees.
Shieldwise is focused on owners and lean teams that hold W-2s, payment cards, claim records, patient information, or other personal information. The 5–50 range is a product focus, not a legal threshold; your facts, industry, locations, and other obligations may matter.
A useful distinction
More structure than a blank download.
A generic free template can be a helpful reference. Shieldwise is designed for the owner who wants the questions, state-specific structure, and working files organized into one review starting point.
| At a glance | Shieldwise | Generic free template |
|---|---|---|
| State-specific scope | Massachusetts or New York structure selected in the intake | You determine what applies and how to adapt it |
| Guided questions | Plain-English prompts about your business and safeguards | You interpret the prompts and fill the document yourself |
| Document structure | Organized sections for a focused attorney review | You assemble, format, and check the working document |
| Delivery | PDF plus an editable copy | Usually one file to adapt into your own versions |
| Upkeep | Optional $299/year annual refresh | You track changes and maintain it over time |
FAQ
Straight answers, in plain English.
A note on legal advice
Shieldwise provides document-preparation and workflow tools, not legal advice or attorney representation. No attorney-client relationship is formed. Every document we deliver is a working document for customer and counsel review and customization, not a substitute for counsel. Confirming your program against your specific facts, contracts, and legal obligations should be done by a licensed attorney in your state.
Your next step
Turn what you know about your business into a working WISP.
Choose your path, complete the guided intake in approximately 20 minutes, and receive the PDF plus editable copy for customer and counsel review, customization, finalization, and implementation.
$149 one-time package or $299/year annual refresh.
Shieldwise — Plain-English security programs for Massachusetts and New York small businesses.