1 / 19

Kate Xu

Case Study 01 · Reading deck

Enterprise · BofA private cloud · internal platform hosting 1,000+ apps

Cloud Service
Ordering.

Before — ordering success

11%

After — ordering success

34%

Deck designed by Kate
Lead Product DesignerUsers: internal engineers at BofA2025–2026

Context

Losing users at every step.

Engineers order hosted services through a 12-step wizard — Glassbox session data showed the funnel narrowing at every stage.

Create
100%
Solution template
96%
Placement (AZ)
76%
OS base
71%
Hypervisor
67%
Hostnames
63%
NAS mounts
45%
Storage
28%
Maint. windows
22%
Adv. parameters
17%
Summary
11%
Submit
11%
Quantitative data shows where users leave. It can never show why — that question needed the users themselves.

The process

12 steps to place one order.

Placement, OS, hypervisor, hostnames, NAS mounts, storage, maintenance windows — before an engineer ever reaches submit. Power users walk this every week.

Create Solution template Placement (AZ) OS base Hypervisor Hostnames NAS mounts Storage Maint. windows Adv. parameters Summary Submit

The recording runs in real time — the tedium is the point.

First instinct

Can we shorten
the wizard?

If we lose users at every step, fewer steps should mean fewer losses. So I opened calls with the engineers and put every step on the table.

H1

Drop steps entirely — which ones are truly required?

H2

Ask later — could some questions wait until after submission?

H3

Merge screens — fewer stops, same inputs?

01 Create
02 Solution template
03 Placement (AZ)
04 OS base
05 Hypervisor
06 Hostnames
07 NAS mounts
08 Storage
09 Maintenance windows
10 Advanced parameters
11 Summary
12 Submit
?

First instinct · verdict

Dead end —
nothing could be cut.

I took the three hypotheses into working sessions with engineering and the PM and we walked the wizard together — step by step, all twelve.

Design × Engineering × PM

12/12

steps confirmed required before provisioning

H1 — Drop steps entirely

Engineering, field by field: every input is a required technical parameter — placement, storage, compliance. Provisioning cannot start without them.

H2 — Ask later

Deferring any question just moves the block downstream — the build stalls until the answer arrives. Same wait, worse place.

H3 — Merge screens

The PM and engineers were right: cramming twelve steps of required inputs onto fewer screens made each screen worse, not the flow shorter.

What a lost argument buys: certainty. The process was already as short as it could be — the problem wasn't the number of steps.

The turn

“Which steps can we cut?”

“Who is walking these steps — what’s on their mind?

Quantitative data showed where users left. Only qualitative research could show why — so I went to the users.

Research · setup

Two interns,
one protocol.

I staffed the study with two UX interns and directed the research. Before a single session was approved, we sat down together and aligned on exactly what data we were collecting — so every interview would produce evidence, not anecdotes.

Kate — research lead × 2 UX interns — 5 solid interviews each

Aligned before user research

01

Who counts as a power user — ordering frequency, not job title.

02

What we observe — time per step, re-entered configurations, workarounds, where hands hesitate.

03

What we listen for — hearing them talk is the priority: it’s the one thing session tracking can never capture.

04

What counts as a pattern — a behavior repeated across sessions, tagged per wizard step.

Why align first: two interviewers, one protocol — findings stay comparable, and mentoring happens inside real work.

Research

10 solid interviews, three disciplines.

1 — Watch

Watch what they do

Sit beside real sessions — no survey, no brainstorm. Hands don't perform for researchers.

2 — Observe

Observe the patterns

Across sessions, one behavior repeated: re-entering a configuration they already knew.

3 — Listen · the priority

Listen to what they say

Glassbox already records what hands do — what it can never capture is what users are thinking. The interviews existed for this part.

Why this order: what people do and what they say don't always match — the gap between them is where the insight lives.

Research

7/10

said some version of the same thing, unprompted

“I just want to repeat my last order — or place the same one for my teammates.”

The wizard treated every order as novel. Most orders aren't — they're repeats of a standard setup shared across a team.

The insight everything after this is built on: most ordering volume is repetition, not configuration.

Iteration

Attempt 1 — ordering on behalf.

The idea

Let one power user place a standard order for teammates — matching exactly what users asked for.

Cut at the proposal stage

Engineering review killed it before a single screen was built: every provisioning call authenticates with the requester's identity token — entitlements, quota, and compliance bound to whoever clicks submit. Separating requester from owner meant re-architecting entitlements across a dozen downstream systems. Quoted: two quarters.

What the dead end revealed: it's the approval that needs to transfer between people — not the order itself.

Iteration

Attempt 2 — vouchers. Achievable, but ungovernable.

The idea

If the approval is what transfers, make it a thing: configure a standard order once, mint vouchers. A teammate redeems one and orders under their own identity — no wizard, no identity problem. Engineering's first read: achievable.

What the review surfaced

A voucher lives outside the platform — passed around in chat and email, it can be redeemed by someone the approval was never meant for. In a bank, an approval that travels unattached to identity is a governance gap, not a shortcut.

  Steps happen off-platform, outside the audit trail

  Risk of misuse — a voucher can be shared or reused

  Entitlement rules get bypassed instead of enforced

On top of that, every voucher carried its own lifecycle — mint, validate, track, expire, reconcile — firing backend calls on each redemption.

The sharpened question: what's the lightest object that carries an approval from one person to a team — without ever leaving the platform?

Solution

Pre-approval tickets.

A standard order requested once, approved by the tech owner who owns the AIT. The requester gets an approval email and orders without the wizard — identity stays the requester's own, so the backend is untouched.

1 — Request

One checkbox at the end of ordering

2 — Approve

Tech owner reviews under My Approvals

3 — Order

Requester gets the email — and skips the wizard

All the failures led here: the approval transfers, the identity doesn't. Smallest object that survives both dead ends.

Design · entry point

One checkbox in the existing wizard.

Order SummaryReview & Submit
Solution templateStd. compute + NAS
PlacementAZ-East · prod
Storage500GB tiered

Request pre-approval ticket — tracked in My Open Tickets

Submit

Same ordering screen as before — the only addition sits in the Summary panel.

No new flow to learn: the order they just configured becomes the template. Smallest possible surface change, biggest behavioral change.

Design · information architecture

Two new tabs — and who sees them.

All roles

My Open Tickets

Every pre-approval ticket you've submitted, with its status. You can delete one while it's still waiting — nothing else. A requester can't approve their own request.

Tech owner only

My Approvals

Every ticket requested under their AIT — approve, reject with a reason, or decide in bulk across the whole queue.

Role-based visibility is the authentication: the second tab doesn't gray out for a requester — it simply doesn't exist.

Solution · role-based access

The requester sees one tab.

Status and delete only — a requester can never approve their own request.

Cloud platform

My Open Tickets
My Approvals
not visible to this role
Signed in as requester

My Open Tickets

Select all4 items
Delete

ARQ-81236…

Resource

Operation

70698

Schedule (now/date)

My namePending
Processing

ARQ-81237…

Resource

Operation

70698

Schedule (now/date)

My namePending
Delete

ARQ-81238…

Resource

Operation

70698

Schedule (now/date)

My namePending
Delete

ARQ-81239…

Resource

Operation

70698

Schedule (now/date)

My namePending
Delete
Two states of their own: Deleting while the backend withdraws the request, then Deleted — the row settles and its actions disappear.

Solution · role-based access

The tech owner sees both.

Approve, reject with a reason, or decide in bulk across the AIT.

Cloud platform

My Open Tickets
My Approvals
Signed in as tech owner

My Approvals

Select all4 items

ARQ-81236…

Resource

Operation

70698

Schedule (now/date)

Jennifer DoePending

ARQ-81237…

Resource

Operation

70698

Schedule (now/date)

Jennifer DoePending

ARQ-81238…

Resource

Operation

70698

Schedule (now/date)

Jennifer DoePending

ARQ-81239…

Resource

Operation

70698

Schedule (now/date)

Jennifer DoeApproved
Role-based visibility is the authentication: the second tab doesn't gray out for a requester — it isn't rendered at all.

Impact

One path before — a branch now.

Before — one path for every order

Start an order 12-step wizard Submit

Now — a branch for repeats

Start an order
Pre-approval ticketSubmit
12-step wizardSubmit
Nothing was taken away: the wizard still serves genuinely new orders — repeats just stopped paying its cost.

Outcomes

The outcomes.

+23%

ordering success rate after launch — 11% → 34%

−32%

average ordering time

The time drop shows how much ordering volume was this category all along — standard setups placed by teams under the same AIT.

Reflection

Dead ends led to the method.

Three walls, three turns — each one narrowed the question until the answer was the only thing left standing.

01 — THE WALL

Nothing could be cut

Engineering and the PM proved all 12 steps were required. The funnel wasn't long by accident.

→ Stop asking which steps to remove. Ask who is walking them.

02 — THE WALL

Identity couldn't move

Ordering on behalf died in review: every provisioning call is bound to the requester's own token.

→ It's the approval that transfers, not the person.

03 — THE WALL

Vouchers left the platform

Shareable, reusable, unauditable — a governance gap dressed as a shortcut.

→ Keep the approval inside the system, under the requester's identity.

Quantitative data showed what to fix. Qualitative patterns showed the way in — and the walls decided the shape.

Kate Xu · katexu.com