About | Zymbos Advisory

Compliance you can evidence, not just aspire to

Zymbos Advisory brings independent, certified assessment together with a purpose-built governance platform and more than 28 years of enterprise SAP and ERP delivery, so governance is grounded in how systems are really built and run.

Founded by John McGann, the practice exists to make compliance a clear, fixed project rather than an open-ended worry, with deliverables your board, customers and regulators can rely on, across every region you operate in.

Book a free scoping call

Credentials

Certified AI Auditor (CAIA)
Certified AI Ethicist (CAIE)
Certified AI Professional (CAIP)
University of Oxford, Saïd Business School
oxethica certified (CAIA, CAIE, CAIP)
Member, International Association of Privacy Professionals (IAPP)
SAP Certified Project Manager
28+ years enterprise SAP & ERP delivery

Connect on LinkedIn →

Our approach

Five principles behind every assessment

Good governance is practical, not theatrical. These principles shape how we assess and what we recommend.

Accountability

Every AI system needs a clearly identified human accountable for its outputs, structures that work in practice, not just on paper.

Transparency

Automated decisions that affect people must be explainable. We document how systems work and the role they play in decisions.

Fairness & non-discrimination

AI can encode and amplify bias. We test for discriminatory patterns and recommend monitoring and remediation.

Data quality & governance

A system is only as good as its data. We review whether training data is appropriate, representative and lawful.

Human oversight

No high-risk system should run unchecked. We design oversight proportionate to the level of risk.

Independence

An external, certified sign-off carries more weight with boards, customers and regulators than self-attestation.

Client experience

“John McGann provided a thoughtful and highly practical preliminary review of Runexa from an AI governance, risk, transparency, and trust perspective. His observations helped us identify several areas for improvement across our policies, disclosures, and user-facing communications. The feedback was constructive, balanced, and immediately actionable, and we implemented many of the recommendations shortly after receiving the review. I would highly recommend John to organizations seeking an independent perspective on AI governance, risk, and trust considerations.”

Dr. Rachid EjjamiCEO & Founder, Runexa.ai

Independent assessment, grounded in delivery