Lis Luis

Case study · Strategy

North Star

From shipping features to shipping a system.

An intent-based interaction model: people say what they want in their own words, and the experience adapts to who they are and what they're doing. Approved as the design principle for a commercial banking platform.

yourbank.example/admin/sub-users/new
1 The request2 What it means3 Fine-tune4 Review
Mode

Here's what Freya gets

Check it, then continue. Nothing is applied yet.

Who
Freya HaleNew sub-user
Job
Runs payrollDirect deposit and payroll taxes
Accounts
Payroll Operating, Reserve, Tax3 matched
Can
View, send up to $25,000, see incomingApprove left off: one person shouldn't do both

One thing to sort out. Payroll Reserve can't send yet. Fix it on the next screen.

ContinueShow full detail

Same step, three modes. Example data is fictional.

RoleLead designer
OriginSelf-initiated
CompanyB2B2C commercial-banking fintech
Year2026
Platform principleApproved by the Head of Product and Design in July 2026 as the design principle for future designs across the digital banking platform.
Live pilotPositive Pay, a fraud-prevention feature, is the first feature built on North Star. Build started July 2026. I'm the sole designer.
Roadmap influenceAfter my pitch, a Sub-User Admin rebuild on North Star principles is slotted for Q4 2027, with engineering sizing milestone one in Q1.

The problem

After the company was acquired by another fintech, two platforms ran on separate cores, and the gaps between them were everywhere. The roadmap turned into a list of gaps to close. A competitor shipped something, a client asked for something, and the answer was another feature with its own rules for how much to guide people, when to confirm and what to do when something went wrong. Clients met a different product on every screen.

Meanwhile, leadership had set an aggressive five-year goal to grow revenue and EBITDA. Closing gaps could keep clients from leaving, but it was never going to be the kind of innovation that grows a business. So I stepped back and assessed where the product needed to go.

The signs showed up everywhere: people typed into search far more than they used filters, frustration clustered on finding a transaction, and one of the most-visited admin screens was one sales avoided demoing. Each of those could have become its own fix.

Underneath it all, the product spoke the bank's language, not the client's. To block a type of ACH payment, a business had to know the right SEC code, like WEB, TEL or RCK, and find it in a list. People don't think in codes. They think in tasks: "stop payments that come in over the phone."

AI made the problem bigger. Without a shared model, every team would bolt AI on its own way, and the gap-closing would never end.

The question I brought to leadership wasn't "What should we build next?" It was "What product model will get us to the business we're trying to become?"

What the research showed

Commercial users aren't consumers. And they don't think in codes.

Six sources pointed the same way: one experience couldn't serve everyone, and banking jargon was getting in the way.

SME interviews

Two very different users

Interviews with subject-matter experts showed retail and commercial users need different things. A consumer payment-hub initiative hadn't accounted for high-volume, experienced users doing bulk actions, and it didn't scale. Someone sending a quick transfer doesn't need the same steps as a business sending a complex international wire before the cutoff. That's where the adaptive modes came from.

User testing

The menus were the friction

People spent more time hunting for codes in small, hard-to-find filters with long lists than they did typing what they needed into a single entry.

Product analytics

People reach for the search box

The ACH search box was used more than all three ACH filters combined, and it drew more rage clicks too. Transaction search drew rage clicks at roughly 6 to 12 times the rate of other search features.

Sales losses

Customization was the ask

In lost deals, client-driven requests were a repeated source of frustration, and the specific requests were for customization.

Competitive review

The bar was already set

Competitors offered separation of roles and account limits for each payment rail. That shaped the Sub-User Admin design.

Market trend

86% of Gen Z want AI-driven, personalized banking

versus 70% across all ages, in a 2025 survey of 2,000 banking customers. It's a consumer study, but it shows where expectations are heading, and the people running business accounts are consumers too.

Source: Personetics, "Understanding Consumer Demand in the AI-Banking Era," 2025 (a personalization vendor; consumer survey).

Internal research and analytics are summarized and generalized for confidentiality.

The bet

Instead of patching gaps one feature at a time, build one adaptive experience that works across the whole platform: quick for experts, guided for newcomers, in plain language instead of banking codes. Every new feature plugs into the same system, so the company builds something it can sell, not just something to catch up.

The business case I made

I didn't pitch North Star as a nicer screen. I tied it, and Sub-User Admin as its first big application, to the three priorities company leadership had set out, and showed what it would do for each one.

Company priority

Client retention and satisfaction

Banks were asking for more control and configurable access, and each request became a custom change for one client. One configurable model replaces client-by-client changes.

Company priority

Commercial banking growth

Commercial clients need to separate who creates a payment from who approves it. Competitors offered finer controls, and missing per-account payment limits had come up in lost deals.

Company priority

AI as an accelerator, people decide

Rules first, with a person approving every change. Typed AI requests come later, and only once the company has settled how AI may use customer data.

Where the revenue comes from

I mapped three revenue levers: winning and keeping commercial deals, closing part of the new-client gap with a faster-growing competitor, and cutting the cost of one-off client requests. I labeled each one as an argument, not a measured result, and named what finance, sales and professional services still needed to confirm before anyone should rely on the numbers.

The idea: design for intent, not jargon

People act on the task, and the product does the translating. North Star rests on two ideas:

  • Speak the task, not the code. People describe what they want in plain language, and the system shows how it understood them before anything happens.
  • Fit the person and the moment. Someone who has set up access a hundred times doesn't need the same screen as someone doing it for the first time. Familiar work gets Speed, and new or risky work gets Guided.

The design shift · adaptive workflows

Fast where it's safe. Careful where it isn't.

Speed

Complete familiar work with the fewest possible interactions.

Guided

Progressive guidance for high-risk or unfamiliar tasks.

Investigation

Understand, track or resolve what happened.

Three guardrails

Caution wins.When checks disagree, the more careful mode takes over. Speed only applies when every check agrees.
Show what was understood.People always see how their request was understood, and can adjust it.
Say what wasn't understood.Partial results plus one question beat a confident wrong answer.

How it scales

The same pattern that replaces a code list works for a search bar, a report, a permission change or a fraud decision. Under the hood, every moment runs in one of three modes, and five checks decide which one fits this person and this task. It runs on rules today, and AI can make the same calls later without anyone redesigning what clients see.

The North Star model Five checks (Reversible, Understood, Known, Frequent, Exception) feed rules that pick one of three modes for each moment: Speed, Guided or Investigation. RReversibleCan it be undone safely? AUnderstoodIs the request clear and valid? KKnownHas this person done it before? FFrequentDone recently? EExceptionIs something blocking or wrong? Rules pick the mode for this moment SpeedFamiliar work, fewest steps GuidedStep-by-step for risky or new work InvestigationUnderstand and fix what went wrong
The mode is chosen per moment, not per screen. When checks disagree, the more cautious mode wins, and Speed applies only when every check agrees.
FindSearch in plain language"Payments sent over the phone" instead of TEL. In build now in Positive Pay.
CreateBuild a reportAsk for a report in plain language or pick a data set.
GrantGive someone accessDescribe the job; review what it means before anything changes.
DecideResolve fraud exceptionsDecide whether to pay or return checks that look wrong. Positive Pay, the live pilot.

Same intent-first pattern, same three modes. The stakes rise from left to right, and the pattern holds.

The pattern in practice

It starts small, with one jargon-heavy list in a feature being built today, and scales to some of the hardest screens on the platform.

Before · Speak the bank's language

SEC code
Select a code ▾
  • ARC
  • BOC
  • CCD
  • PPD
  • RCK
  • TEL
  • WEB

You have to know that "TEL" means payments authorized over the phone.

After · Say what you mean

Understood asTEL · Telephone-initiated paymentsBlock these payments

The code is still there. People just don't need to know it.

Where the pattern starts, in Positive Pay (in build): adding an item to an ACH block list. A natural-language search sits on top of the SEC code list, so people search the way they think. Illustration recreated for this page.

Example · finding a payment, today

Find one payment. Open five menus.

Filtering means building the query by hand, one menu at a time.

Search > filtersPeople used the ACH search box more than all three ACH filters combined.
Rage clicksRapid, repeated clicks on that same search box outnumbered the filters' too.
6–12×Transaction search drew rage clicks at roughly 6 to 12 times the rate of other search features.
Source: product analytics over about 90 days, generalized for confidentiality. Illustration uses fictional data.

Same pattern, two very different jobs · proposed designs

Natural language in the search bar

SpeedType a sentence. It just works.Results apply on Enter, with one new line showing how it was understood.
Search bar with the query ACH payments from last month over $5,000, interpreted as chips for payment date and amount.
GuidedUnsure? It asks one question.It applies what it understood and asks only about the unclear part.
Search for payments to Acme last 7 days. Acme is not matched, so it asks which Acme: Acme Supply Co., Acme Payroll, or search all text.
InvestigationNo results? It shows a way out.It explains what it understood and offers looser searches, with result counts.
Search for returned payments over $50,000 last month finds nothing, and offers looser searches: remove the amount limit for 4 results, widen the date range for 2 results, or rephrase.

Flexible reporting in plain language

SpeedAsk for a report in a sentence.The request fills itself in. Pick a format and run.
Ask for a report: ACH payments over $5,000 last month, interpreted as data set, amount and date chips, with format options and Run report.
GuidedOne question, not a form.Matched parts stay filled in; it asks only which company you meant.
Request for wires for acme last quarter. Data set and dates are filled in, and it asks which company: Acme Co. or Acme Payroll.
FormatsOnly offers what works.Formats adapt to the data set, so people never pick one that fails.
Two data sets side by side: account balances offer BAI2, while ACH payments show BAI2 as unavailable.

Example data is fictional.

Applying it: Sub-User Admin

Business admins set up their team's access one person at a time, with no reusable roles, no per-account payment limits and no way to check permissions before saving. Sales avoided demoing it, and the missing per-account limits had come up in competitive deals.

The work started as an assigned visual refresh. I added Bulk Apply, which nobody had asked for, then plain-language input, and then rebuilt the whole flow on North Star principles with a staged plan the business could fund one step at a time.

Task 2 · Sub-User Admin: the setup

Who on your team can do what, and where.

That's Sub-User Admin: how a business gives its team access to accounts and payments.

What the product calls it

Sub-User Administration

Basic ServicesACH Credit and EFTPSACH DebitNACHA, Pass-Thru, Wires, Check ReconReal-Time PaymentsFraud PreventionPositive Pay

Organized by banking service.

What the person is trying to do

"Give Freya send access to payroll accounts."

Sends payrollPays suppliersSees balancesApproves paymentsReviews checks

Organized by the job.

Same task. North Star asks in the person's terms, not the product's.

Used by thousands of business users every quarter (product analytics, generalized).

Sub-User Admin · now

Today: one long form, then a list box per account.

Access is set user by user, account by account.

A list box for every account.Service levels are set one account at a time.
A separate screen per service.ACH Credit, ACH Debit, Wires, Real-Time Payments, Fraud Prevention, Positive Pay.
No reusable roles.No testing before saving.

Proposed designs. Example data is fictional.

Prototype, Speed mode. The admin picks a job instead of ticking boxes, sees a plain summary of what the new user gets, fixes the one account that won't work, and reviews everything in plain language. Nothing goes live until a second administrator approves. Example data is fictional.

The hard part: getting three groups to yes

Winning over leadership and product was as big a job as winning over engineering. Each group needed a different reason to say yes, so I built a different case for each one.

  • Leadership needed to see how one model served the company's goals: retention, commercial growth and a safe path to AI.
  • Product needed to see the product model it unlocked, and a staged plan they could fund one step at a time.
  • Engineering needed to see the logic and the risk controls.

Engineering's concern about AI

Engineering pushed back on the AI piece, and the concern was fair. Banking data is sensitive, and a model guessing at intent is a hard thing to put in front of a business that's moving money. I didn't treat that as an obstacle to argue past. I changed the plan so the first version earned trust on its own.

How it's built

Same experience. Different engine.

Rules-based or AI, the person sees the same readback. So the design doesn't change if the engine does.

Rules-based keeps everything inside the company's systems, and every phrase can be tested.

The engine · swappable

Rules-basedA library of phrases we write.
AI-assistedHandles open-ended phrasing.
↓

The readback · identical either way

Showing: ACH payments · Last month
Freya can: view activity, send payments
↓

The modes · same rules either way

SpeedGuidedInvestigation

Decision 1

Rules first, AI later

The first version runs on rules, using data the platform already has. No data leaves the company. AI can be added later behind the same experience.

Decision 2

Build from what exists

Everything is built from the current design system, so there are no new components to maintain and the change is cheap to adopt.

Decision 3

Make the logic testable

I wrote technical specs for the engineers. Each page lists its checks in order and stops at the first match, so behavior is predictable and easy to test.

Decision 4

Prove it on a live feature

Positive Pay became the pilot, so the model would be judged on a real release, not a deck.

Those four decisions answered engineering. For leadership and product, I named the risks up front and made a clear ask.

Risks, named up front

RiskWhat could go wrongHow the plan handles it
ScopeMany parts: ACH, wires, pass-through, imports.Start with the shared pieces (list, add flow, review), then add services.
DataGrant history and entitlement mapping may not exist yet.The first two milestones need neither. Only the final stage depends on them.
CapacityEngineering capacity for 2027 isn't confirmed.Start with milestone one. The full scope may run into 2028.
AIUsing AI with customer data isn't settled.Ship rules-based first.

The ask

  1. Keep North Star as the direction for every new Sub-User Admin design.
  2. Slot Sub-User Admin as a 2027 horizon item, with engineering sizing the milestones first.
  3. Start with the first milestone once sizing says it's doable.
  4. Agree how we'll measure it before building, by testing with business administrators against today's screen.

I closed with an invitation to the other product teams in the room: the three modes are meant to be reused anywhere people and permissions show up.

Proposed phasing · dates follow engineering sizing

CrawlDesign systemBring the screens onto the shared system.
WalkBulk ApplySet access for many people at once, with preview and undo.
RunReusable rolesDefine a role once and assign it to anyone.
North StarThree modesSpeed, Guided and Investigation for every setup.

Status: slotted for Q4 2027 after my pitch, with engineering sizing milestone one in Q1 2027. Roadmap space had been lost after the company was acquired, so getting it back in line took a business case, not just a design.

How success would be measured (a plan, not results): time to complete setup, wrong permission grants, the catch rate when a mistake is planted in a setup, and support contacts.

What I learned

I learned not to wait to be handed a project. I looked for the gaps and brought the idea to the table myself. I also learned that one idea needs more than one pitch: what I showed product leadership was different from what I showed engineering, because each needed a different reason to say yes.