Approach

This wasn't one project with a fixed scope — it was continuous, embedded design work across five-plus years, growing alongside the product itself. Most work started from a real problem already showing up in the live product or in customer feedback, followed by direct back-and-forth to shape the right solution before any screen got designed. Rather than one upfront research phase, understanding built up continuously, through hundreds of these individual conversations, each tied to something real happening in the product.

How the platform works

Onboarding

A new account isn't a blank page. Cyberday's AI recommends which frameworks to activate based on the company's country and industry, then drafts an initial set of policies and tasks pre-filled around them. I designed how this recommendation and the AI assistant surface during setup — including the reasoning shown for each suggested framework, so a first-time user understands why something is being recommended rather than just seeing a list appear.

Dashboard

The Dashboard is home base — showing compliance score by framework and how it's trending. I reworked this view multiple times as the product grew, moving from simple progress numbers toward a clearer link between what tasks users had completed and how that specifically moved their compliance score, so the Dashboard felt like a direct result of the work being done, not an abstract number.

Two ways to work: Workflows or Themes

Users can follow a guided Workflow toward a specific goal, or browse directly by Theme, the underlying full management system organized by topic. When Workflows shipped, some existing users who were used to navigating by Theme lost track of how to find the same content. I adjusted the Theme-based navigation so it stayed clearly accessible and understandable alongside the newer guided path, rather than treating one as a replacement for the other.

Tasks

Either path leads to the same core unit of work: tasks. Each one can be strengthened through assurance methods — assigning an owner, writing a process description, linking supporting documentation, or connecting a security system. I redesigned how these methods appear on the task card as their number grew, introducing a simple strength indicator (none, weak, medium, strong) so users could see at a glance how solidly a task was actually backed up, instead of digging into each method individually.

Documentation, guidelines & risks

Underneath tasks sits the actual evidence supporting each one. Documentation holds the organization's compliance evidence — data stores, data systems, partner agreements, and more. Guidelines are instructions employees can be assigned directly, covering their specific security responsibilities. Risk entries let users identify, assess, and manage risks across the organization.

Compliance grows, and the report reflects it

As tasks and policies fill in, the framework's compliance score rises — visible on the Dashboard and inside the Compliance Report. I worked on the report's structure and headers as it grew more complex over time, including a system of colored tags at the requirement level, so a reader — whether the internal team or an external auditor — can tell a requirement's status at a glance, without opening it to check.

Building the design system

I built out a full set of Figma variables — color styles, text styles, spacing and radius values, and a linked icon system — with both light and dark modes in mind from the start, so every element across the app could pull from one shared source of truth instead of being styled individually.

That foundation meant that when dark mode came up as one of the most-requested features on Cyberday's community feature board, converting most screens from light to dark was close to mechanical. A few areas, like report cards designed specifically for print-style light backgrounds, genuinely needed their own redesign rather than a simple color swap, and I treated those honestly as separate work.

Light Mode

Dark Mode

Designing AI-assisted agents

As Cyberday introduced AI across its compliance workflows, I designed the interaction patterns for a growing set of specialized agents — a risk identifier agent, an internal audit agent, and a guideline creator agent among them — each scoped to one real compliance task rather than acting as a single general-purpose assistant.

Here's one of 16 agents in action.

Marketing work

Alongside the app, I also designed Cyberday's website, ad banners, and sales decks — supporting the company's growth from the marketing side, not just the product itself.