We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk

Zaviant (WJS Cyber Consulting, LLC d/b/a Zaviant) review

Advisory firm

A US privacy, security-compliance and AI-governance consultancy in Philadelphia, covering California's CCPA, US HIPAA, SOC 2, ISO 27001 and the NIST AI RMF, and a certified OneTrust partner.

Relevant if you are a US company building a privacy programme on OneTrust or a similar platform

Price Not published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

Zaviant scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 3/5
Qualifications of the people who do the work 3/5
What it publishes about fees 2/5
Knowledge of your sector 4/5
Independence from what it sells 3/5
Who carries the risk if the advice is wrong 2/5

What Zaviant offers, and what it publishes

Zaviant runs privacy and compliance programmes and sets up platforms from OneTrust, Osano, ZenGRC and BigID. Its one published case study is checkable: Genuine Parts Company's Global Director of Governance, Risk & Compliance, Damian Apone, describes a multi-year privacy programme across more than 100 sites and six operating entities. It names nine principals, including a general counsel.

Zaviant does not publish a price. Its services and about pages show no fees or rate card, only a contact-sales form. It discloses no professional indemnity insurance or liability terms. Its leadership bios give job titles only, although its marketing describes an 'IAPP-certified' team.

For AI governance, Zaviant has separate US NIST AI RMF, EU AI Act and AI governance pages, but its only case study covers general privacy work, not AI. Its own privacy notice names the recruiting platform Greenhouse but says nothing about the firm's own use of AI tools. It was founded in 2018 by Managing Partner Will Sweeney.

Strengths

  • Named, checkable case study (Genuine Parts Company) with a named client-side contact and direct quote, not a generic testimonial.
  • Active, matched Pennsylvania LLC registration under its own legal name, corroborated by its own privacy notice and by OpenCorporates trademark records for the ZAVIANT mark.
  • Separate, purpose-built service pages for CCPA/CPRA, HIPAA, SOC 2, ISO 27001/2, NIST AI RMF and the EU AI Act rather than one generic compliance page.
  • Named leadership bench of nine principals, including a Senior Advisor/General Counsel, rather than a single-founder shop.

Things to check

  • No public pricing, rate card or fee-model transparency is published anywhere on Zaviant's site.
  • No disclosed professional indemnity or errors-and-omissions insurance, nor any stated liability terms.
  • The firm's own privacy notice does not disclose use of AI tools in service delivery or name any AI-related subprocessor.
  • Public leadership bios list no individually-named professional credentials despite marketing claims of an IAPP-certified team.

Common questions

Does Zaviant publish its fees?

No. Its services, managed services and about pages set out no fee structure or rate card. The site sends enquiries to a contact-sales form.

Does Zaviant disclose professional indemnity insurance?

No. Its public site discloses no professional indemnity or errors-and-omissions cover, and states no liability terms for its work.

Has Zaviant published any AI-governance client work?

No. It runs separate US NIST AI RMF, EU AI Act and AI governance service pages, but its one published case study, Genuine Parts Company, covers general privacy programme work.

Is Zaviant a registered company?

Yes. Zaviant is the trading name of WJS Cyber Consulting, LLC, shown as an active Pennsylvania company on OpenCorporates, which draws on the state register.

Evidence for each Zaviant score

Show our working

Notes behind each thing to check

  • No public pricing, rate card or fee-model transparency is published anywhere on Zaviant's site. (Reviewed Services, Managed Services and About Us pages; none disclose a fee structure, only a contact-sales funnel.)
  • No disclosed professional indemnity or errors-and-omissions insurance, nor any stated liability terms. (No insurance, indemnity or liability-cap language appears on About Us, the Privacy Notice or Services pages.)
  • The firm's own privacy notice does not disclose use of AI tools in service delivery or name any AI-related subprocessor. (Privacy Notice names Greenhouse and generic service providers but never addresses AI tool use or AI data flows.)
  • Public leadership bios list no individually-named professional credentials despite marketing claims of an IAPP-certified team. (Leadership page names nine principals with job titles only; certification claims appear only in generic marketing copy.)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 3/5 Case study claims fines were avoided for one client, but no independently verified enforcement-defense record was found.
Qualifications of the people who do the work 3/5 Firm markets an 'IAPP-certified' team generally, but leadership bios name no individual staff certifications.
What it publishes about fees 2/5 No pricing page, rate card or fee methodology is published anywhere on the public site.
Knowledge of your sector 4/5 Dedicated CCPA, HIPAA, SOC 2, ISO 27001 and NIST AI RMF pages plus a named multi-entity global case study.
Independence from what it sells 3/5 Certified reseller across four GRC platforms, which spreads but does not remove a referral-commission incentive.
Who carries the risk if the advice is wrong 2/5 No disclosed professional indemnity insurance, liability cap or engagement warranty on the public site.

Sources for Zaviant

  • WJS Cyber Consulting, LLC (d/b/a Zaviant) is registered as a Pennsylvania domestic LLC and shows active status. (Active, entity #6346280) (opencorporates.com, checked 20 September 2026)
  • Zaviant's own privacy notice confirms the operating legal entity name. (WJS Cyber Consulting, LLC d/b/a Zaviant) (zaviant.com, checked 20 September 2026)
  • Zaviant was founded in 2018 by Managing Partner Will Sweeney and is headquartered in Philadelphia. (Founded 2018; HQ 1500 Market Street, Philadelphia, PA 19102) (zaviant.com, checked 20 September 2026)
  • Zaviant is a certified OneTrust partner and also lists partnerships with Osano, ZenGRC and BigID for privacy/GRC platform delivery. (OneTrust, Osano, ZenGRC, BigID partner pages) (zaviant.com, checked 20 September 2026)
  • Zaviant operates a dedicated NIST AI RMF compliance service line alongside separate EU AI Act and AI Governance service pages. (Dedicated NIST AI RMF, EU AI Act and AI Governance pages) (zaviant.com, checked 20 September 2026)
  • Zaviant's published case study names Genuine Parts Company and quotes GPC's Global Director of Governance, Risk & Compliance describing a multi-year global privacy programme across 100+ sites and six operating entities. (Genuine Parts Company case study; named contact Damian Apone) (zaviant.com, checked 20 September 2026)

Exposed to the EU AI ActSeeking ISO 42001 certificationRegulated sectors

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.