UI/UX Design and Information Architecture for Paladir

Paladir is a security posture management platform for SMBs working toward SOC 2 / ISO 27001 readiness. The product helps GRC and security teams centralize policies, SOPs, playbooks and runbooks, then turns them into trackable tasks with audit-ready evidence trails. An AI layer reads uploaded policies and generates the relevant tasks, owners, and cadences automatically.

The client came in with a working concept, a target-market definition, and a set of internal documents describing functionality. What they didn't have was a coherent product structure, a clear user journey, or a design system that could carry the platform through onboarding, daily use, and audit readiness.

What I Did Requirements & IA work. I took raw product documentation (functionality specs, target-market notes, a competitive comparison with another compliance tool) and translated it into a structured information architecture - six core areas (Onboarding, Dashboard, Frameworks, Policies, Tasks, Settings), each with a defined user need, primary CTA, and empty-state strategy.

User flows. Mapped the end-to-end journey from first run through audit readiness: framework selection → policy generation/upload → AI-driven task assignment → evidence collection → continuous feedback loop post-audit. Every screen ties back to a measurable progress metric so the user always knows where they stand against their target framework.

UX system & principles. Defined cross-product rules that kept the interface consistent and reduced cognitive load: every page opens with a one-line context explainer, every page has a single primary CTA, empty states teach instead of just sitting empty, and the AI Assistant surfaces the next best action contextually rather than as a separate feature.

UI design. Designed the full interface in Figma - dashboards with Green/Yellow/Red status indicators for fast triage, drill-down patterns for control gaps, task detail views with inline evidence upload, and an onboarding wizard that handles the messy initial setup (existing policies vs. starter policies, framework selection, team invites).

AI integration in UX. Embedded AI suggestions as native UX moments rather than a separate "AI section" - recommended frameworks during onboarding, "this task brings you 5% closer to compliance" hints, gap analysis on the framework page, policy generation prompts on empty states.