# VeraSafe, LLC - **Type:** Advisory firm - **Website:** https://verasafe.com - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A US privacy and data protection advisory firm offering an outsourced DPO, US privacy-law advice such as California's CCPA, and EU AI Act compliance work. ## VeraSafe scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 2/5 No public case study shows VeraSafe defending a client through an actual FTC or state AG enforcement matter; its published FTC analyses cover third-party cases (Drizly, Chegg, Zoom), and its own DPF dispute-resolution annual procedure report on file is dated 2016-2017. ### Qualifications of the people who do the work: 4/5 Managing Director Matt Joseph (CIPP/E, CIPP/US, CIPM, FIP, 15 years leading the team) and Partner Jim Cormier (CIPP/E, CIPM, FIP) lead a firm founded in 2010 that is also an approved Data Privacy Framework dispute-resolution provider. ### What it publishes about fees: 2/5 No public rate card is published for DPO, advisory or representative services; the site discloses only that representative-programme fees are tiered by global revenue with a fixed enrolment fee, with custom quotes otherwise. ### Knowledge of your sector: 4/5 Exclusively a privacy, data protection and digital law practice since 2010, with named US service lines for CCPA/CPRA, COPPA and FTC-adjacent matters plus AI compliance covering the EU AI Act and California's ADMT rules. ### Independence from what it sells: 3/5 Offers a free proprietary workbook and third-party OneTrust implementation rather than a mandatory in-house paid platform, though the OneTrust practice ties revenue to one vendor and a related legal L.L.P. entity is unexplained. ### Who carries the risk if the advice is wrong: 2/5 No public disclosure was found of professional indemnity or errors-and-omissions insurance, contractual liability caps, or any published guarantee backing the firm's advisory or DPO work product. ## Sources for VeraSafe Every line carries the page it was read on and the date it was checked. - VeraSafe, LLC is registered in Delaware as a Domestic Limited Liability Company and has active branch registrations in the District of Columbia and Vermont. - Source: https://opencorporates.com/companies/us_de/7598088 - Checked: 2026-09-20 - VeraSafe was founded in 2010 and describes itself as one of the largest US firms dedicated exclusively to privacy, data protection and digital law. - Source: https://verasafe.com/about-us/ - Checked: 2026-09-20 - VeraSafe, LLC is listed as an active self-certified participant in the EU-U.S., UK-extension and Swiss-U.S. Data Privacy Framework on the official US government participant register. - Source: https://www.privacyshield.gov/ps/participant?id=a2zt0000000KzOnAAK - Checked: 2026-09-20 - VeraSafe publishes a dedicated U.S. Privacy Law Advisory Services line covering CCPA/CPRA, COPPA and other federal and state privacy laws. - Source: https://verasafe.com/advisory-and-audit/us-privacy-compliance-services/ - Checked: 2026-09-20 - VeraSafe offers a dedicated AI Compliance Services line covering the EU AI Act, California's Automated Decision-Making Technology regulations and other AI governance regimes. - Source: https://verasafe.com/advisory-and-audit/ai-advisory-services/ - Checked: 2026-09-20 - VeraSafe's Managing Director, Matt Joseph, holds CIPP/E, CIPP/US and CIPM certifications and the IAPP Fellow of Information Privacy distinction, and has led the firm's privacy team for 15 years. - Source: https://verasafe.com/about-us/ - Checked: 2026-09-20 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Not published - Client results: Not published - How it uses AI: Not published ## Strengths - Dedicated exclusively to privacy, data protection and cybersecurity law since 2010, not a generalist firm or Big 4 offshoot - Team led by IAPP-credentialed practitioners (CIPP/E, CIPP/US, CIPM, FIP) with 15 years of continuous practice leadership - One of a small number of firms approved as an independent recourse mechanism (IRM) for Data Privacy Framework dispute resolution - Named US service lines for CCPA/CPRA, COPPA, other state privacy laws, and AI governance (EU AI Act, California ADMT) - Offers a free proprietary workbook or third-party OneTrust implementation rather than forcing clients onto a single in-house paid software product ## Things to check Each one carries the factual basis it rests on. - No public fee schedule for DPO, advisory or representative services; pricing requires a custom quote. - Basis: VeraSafe's Article 27/28 representative and DPO service pages state fees are tiered by organisational revenue but publish no rate card or dollar figures. - No public case study or track record found of VeraSafe representing a client through an actual FTC or state AG enforcement investigation. - Basis: VeraSafe's published FTC-enforcement content analyses third-party cases such as Drizly, Chegg and Zoom rather than its own client-defence work. - Its only public Data Privacy Framework dispute-resolution annual procedure report on file is dated 2016-2017, with no more recent edition found. - Basis: The sole IRM annual procedure report located on verasafe.com covers the 2016-2017 period, over eight years before this review. - Operates two distinct registered entities, VeraSafe LLC and VeraSafe Legal L.L.P., from the same DC address without public explanation of the split. - Basis: OpenCorporates lists VeraSafe Legal L.L.P. (DC company P00006759478, a domestic LLP) at 100 M Street S.E. Suite 600, the same address as VeraSafe LLC's DC branch registration. ## Where this firm appears - [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment) - [Does the EU AI Act apply to a UK firm?](https://theassurancedesk.com/best/eu-ai-act-exposed) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.