Security & compliance

FFrictionFriction: removes doubt, risk, ambiguity

Give the buyer the artifacts to defend this purchase to IT, legal and procurement.

It’s working when

  • +Certifications named precisely (SOC 2 Type II, ISO 27001, GDPR) with current status
  • +Data residency, SSO/SCIM and retention policy answered without a sales call
  • +Links to trust center and DPA for forwarding to procurement

How this usually goes wrong

A padlock icon and 'bank-grade security'. Enterprise reviewers need forwardable specifics; vague reassurance forces a sales-call round-trip and stalls the deal.

Wireframe

Where it appears

The same section, different positions. Each archetype asks something different of it.