# Zaviant (WJS Cyber Consulting, LLC d/b/a Zaviant) - **Type:** Advisory firm - **Website:** https://zaviant.com/ - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A US privacy, security-compliance and AI-governance consultancy in Philadelphia, covering California's CCPA, US HIPAA, SOC 2, ISO 27001 and the NIST AI RMF, and a certified OneTrust partner. ## Zaviant scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 3/5 Case study claims fines were avoided for one client, but no independently verified enforcement-defense record was found. ### Qualifications of the people who do the work: 3/5 Firm markets an 'IAPP-certified' team generally, but leadership bios name no individual staff certifications. ### What it publishes about fees: 2/5 No pricing page, rate card or fee methodology is published anywhere on the public site. ### Knowledge of your sector: 4/5 Dedicated CCPA, HIPAA, SOC 2, ISO 27001 and NIST AI RMF pages plus a named multi-entity global case study. ### Independence from what it sells: 3/5 Certified reseller across four GRC platforms, which spreads but does not remove a referral-commission incentive. ### Who carries the risk if the advice is wrong: 2/5 No disclosed professional indemnity insurance, liability cap or engagement warranty on the public site. ## Sources for Zaviant Every line carries the page it was read on and the date it was checked. - WJS Cyber Consulting, LLC (d/b/a Zaviant) is registered as a Pennsylvania domestic LLC and shows active status. - Source: https://opencorporates.com/companies/us_pa/6346280 - Checked: 2026-09-20 - Zaviant's own privacy notice confirms the operating legal entity name. - Source: https://zaviant.com/privacy-notice/ - Checked: 2026-09-20 - Zaviant was founded in 2018 by Managing Partner Will Sweeney and is headquartered in Philadelphia. - Source: https://zaviant.com/about-us/ - Checked: 2026-09-20 - Zaviant is a certified OneTrust partner and also lists partnerships with Osano, ZenGRC and BigID for privacy/GRC platform delivery. - Source: https://zaviant.com/services/platform-expertise/ - Checked: 2026-09-20 - Zaviant operates a dedicated NIST AI RMF compliance service line alongside separate EU AI Act and AI Governance service pages. - Source: https://zaviant.com/services/compliance/nist-ai-rmf/ - Checked: 2026-09-20 - Zaviant's published case study names Genuine Parts Company and quotes GPC's Global Director of Governance, Risk & Compliance describing a multi-year global privacy programme across 100+ sites and six operating entities. - Source: https://zaviant.com/case-studies/genuine-parts-company/ - Checked: 2026-09-20 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Not published - Independent accreditation: Not published - Client results: Published - How it uses AI: Not published ## Strengths - Named, checkable case study (Genuine Parts Company) with a named client-side contact and direct quote, not a generic testimonial. - Active, matched Pennsylvania LLC registration under its own legal name, corroborated by its own privacy notice and by OpenCorporates trademark records for the ZAVIANT mark. - Separate, purpose-built service pages for CCPA/CPRA, HIPAA, SOC 2, ISO 27001/2, NIST AI RMF and the EU AI Act rather than one generic compliance page. - Named leadership bench of nine principals, including a Senior Advisor/General Counsel, rather than a single-founder shop. ## Things to check Each one carries the factual basis it rests on. - No public pricing, rate card or fee-model transparency is published anywhere on Zaviant's site. - Basis: Reviewed Services, Managed Services and About Us pages; none disclose a fee structure, only a contact-sales funnel. - No disclosed professional indemnity or errors-and-omissions insurance, nor any stated liability terms. - Basis: No insurance, indemnity or liability-cap language appears on About Us, the Privacy Notice or Services pages. - The firm's own privacy notice does not disclose use of AI tools in service delivery or name any AI-related subprocessor. - Basis: Privacy Notice names Greenhouse and generic service providers but never addresses AI tool use or AI data flows. - Public leadership bios list no individually-named professional credentials despite marketing claims of an IAPP-certified team. - Basis: Leadership page names nine principals with job titles only; certification claims appear only in generic marketing copy. ## Where this firm appears - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Does the EU AI Act apply to a UK firm?](https://theassurancedesk.com/best/eu-ai-act-exposed) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.