Onboarding project | Sprinto - Sprinto | GrowthX
Onboarding project | Sprinto
đź“„

Onboarding project | Sprinto

Define your ICPs

B2B Table ⤵️

5 ICPs mentioned in the below table.

Criteria

Startup finding PMF(ICP 1)

Early Scaling SaaS experimenting marketing(ICP 2)

Scaling channels effectively(ICP 3)

Mid-market SaaS company(ICP 4)

Enterprise SaaS(ICP 5)

Name

Early-stage SaaS startup

Growing SaaS scale-up

Mature scaling SaaS

Mid-market SaaS

Large enterprise SaaS

Company Size

1–50

50–100

100–500

500–2000

2000+

Nature of their product and architecture

Basic, one product with simple functionality. Tech architecture is basic and not scalable.

Majorly one product with simple functionality in few areas and more complex functionalities in customer critical areas. Parts of the tech architecture are getting more scalable but most of it to quickly unblock customer or deals. Pricing plans are very basic or officially doesn't exist

Generally One or more products. Dedicated product teams to focus on most areas of the product. Product starts to become more customisable to accomodate variety of customers. Major transformation in tech architecture is required or in-progress to handle larger customers.

Multiple products, major product has reached maturity and now is highly customisable. Other products are showing that promise. Tech architecture in major products are now mature to support scale. Company focussing on other product lines.

All of the products are highly scalable and with stable tech architecture. Growth has slowed down. Product is extensively vast and requires proper expertise on customer's end to implement.

As the company now has more surplus money, starts focussing on cutting-edge technology to find out next breakthrough to increase revenue.

Location

Major tech hubs (US, UK, India, Germany)

Major tech hubs (US, UK, India, Germany)

Major tech hubs (US, UK, India, Germany, Other EU countries)

US/EU, global presence

Global (distributed)

Funding Raised

Seed to Series A (up to $10M)

Series B (~$10-50M)

Series C/D (~$50M-200M)

Series D+ (~$200M+)

Public or Large private

Industry Domain

SaaS, fintech, productivity, EdTech, High-tech research firm

SaaS, FinTech, HRTech, HealthTech

SaaS, HealthTech, Finance, AI, Ecommerce

SaaS, Enterprise Software, regulated industries

Enterprise software, tech conglomerates

Stage of the company

Finding Product-Market Fit

Early scaling, aggressive growth

Scaling operations rapidly

Expanding globally, mature

Established, large scale operations

Organization Structure

Flat, founders-led, no dedicated compliance team

Founder, CTO, CFO

Small dedicated security team

Dedicated compliance/security teams

Large dedicated compliance/security divisions

Influencer

Founder, CTO

CTO, VP of Engineering

VP Security, Head of Compliance, CTO

CISO, CIO, Chief Risk Officer

Chief Compliance Officer, CISO, Chief Risk Officer

Decision Maker

Founder, CTO

CTO, Security lead

CISO, VP Security

CISO, Compliance Officer

CIO, Compliance head

Decision Blocker

Other founder, Investor

CFO, Investor

CFO, some senior members in engineering team(engineer team too occupied)

Internal bureaucracy
Main blockers are
Finance teams, risk teams

Multiple stakeholders, extensive approvals

Main blockers could be
Finance team, Risk teams, security teams

Frequency of use case

Getting compliance (e.g., SOC2) for the first time to unblock first set of prospect/deals

Initial compliance to scale fast or unblock few large deals

Continuous compliance operations: Experimenting with how the overall compliance framework could work and what will not work.

Multi-framework ongoing audits, some of the processes like vendor management and access reviews are mature while policy reviews, training, risk management is getting optimised

Continuous multi-framework audits across the globe. All of the process from risk management, vendor management, access reviews, policy reviews etc are spread across multiple teams who manage them.

Products used in workplace

Google Workspace, Slack, AWS, GitHub

AWS/Azure/GCP, Notion, Height, Slack, GitHub, HRIS, vulnerability scanners, Hubspot

AWS/Azure/GCP/Oracle, Okta or similar tools, GitLab/Github, Jira/Asana, HRMS tools, background verification tools, vulnerability scanners, incident management tools

Azure/AWS/GCP, ServiceNow/Jira, Salesforce, Workday

Enterprise stack (Azure, AWS, Oracle), SIEM tools

How technically sophisticated are the decision makers?

High (engineer-led)

High (dedicated DevOps)- CTO and one of the founder are generally from tech background

Medium - Compliance team is just starting to form. Company is not in position to hire people with huge experience. While CTO is technically sound, compliance team is not that much.

Medium-high (established teams) but compliance team are just not that mature. Role of CTO/VP of engineering in decision making starts to reduce.

High (large tech/security teams). Compliance and security team has huge experience and are technically sound

Organizational Goals, current scenario and how compliance works(without Sprinto)

  1. Get first few set of customers who are impressed by the product
  2. Talk to potential prospects and customers to identify major product gaps to reach PMF
  3. SO2 or compliance audit is just way to quickly get first few set of customers(depending on the industry). Some prospects are vary to use the product without that. They have no clue about how this works.
  4. Not much familiar with security practices, most of the tasks is manually done as soon as possible as per prospects needs.
  1. Having just reach PMF, they know want to scale quickly and get more and more customers.
  2. They want to experiment the marketing channel which will work for them.
  3. Compliance came up as blocker in few larger deals, was not a concern in smaller deals. They have basic idea about compliance but nothing in depth
  4. They have basic security practices in change management or access. Rest of the practices are need driven.
  1. They have average security practices in major areas like change management, access, vendor management, employee training etc.
  2. They have figured out few marketing channels that are working well for them, want to focus on growing those channels more. Feature development is still heavily customer/prospect driven with bit of long-term strategy
  3. They get first touch of reaching global markets. Customer base is still heavily in 1-2 countries but it starts to get global.
  4. Compliance and security is not a deal-blocker at all, it is continuous part of orgs existence. They are audited for 2-3 frameworks, want to scale to more frameworks those to get global. Most of the process are spread across few tools which help the team but still manual.
  1. They have good security practices in most areas and are exploring more advanced practices.
  2. They are close to exhausting the existing ways that worked in major marketing channels identified during fast-scaling. They now need to identify new channels and rigorously experiment new channels. Major feature development is good mix of strategy and customer/prospect demand driven.
  3. The customer base has started to look global now. Yet to tap in all the markets though.
  4. They are certified with most popular major frameworks across the world. But due to complexity of operations and multiple teams, it becomes difficult for them to manage the operations. Each team has their own way of operations which leads to delay.
  1. They have advanced security practices across the board
  2. They have now reached almost all the major markets. They are focussing on completely new product lines or acquisition to drive growth. Bringing in new features doesn't add huge impact to revenue until very large change.
  3. Customer base is global with few major markets, but customers across the globe.
  4. They are certified not only with major global frameworks but regional ones too. The operations depend on team to team and product to product. They are looking for way to centralise and simplify this.

Driven by innovation or reducing risk?

Innovation-driven (need compliance as deal enabler)

Innovation-focused, compliance to facilitate growth

Balanced (innovation + risk management)

Risk management (compliance as reputation builder)

Risk aversion (compliance critical)

Preferred Outreach Channels

Email, Slack communities, founder referrals

LinkedIn, Email, webinars, Slack, founder referrals

LinkedIn, email, security conferences

Industry conferences, analyst reports, direct email

Enterprise sales teams, direct outreach, Gartner

Conversion Time

Short (2-4 weeks)

Moderate (1-2 months)

Moderate (1-3 months)

Long (3-6 months)

Very long (6-12 months)

GMV

<$1M

$1M-$10M

$10M-$50M

$50M-$200M

>$200M

Growth of company

High (50%+ YoY)

Very High (75-100% YoY)

High (40-75% YoY)

Moderate to High (20-50% YoY)

Steady (10-20% YoY)

Motivation

Quickly achieve compliance to close deals

Minimize manual compliance tasks, rapid growth

Automate, scale compliance efficiently

Robust compliance, audit readiness

Risk reduction, corporate governance

Where they spend time?

Slack, Twitter, LinkedIn, Product Hunt

LinkedIn, Twitter, Webinars, Slack Communities

LinkedIn, webinars, industry events

Industry forums, analyst reports, LinkedIn

Gartner, analyst conferences, industry forums

Where they spend money?

Engineering, Product dev tools

Marketing, Product scaling, Dev tools

Security tools, DevOps, compliance automation

Compliance/security tools, integrations

Enterprise software, compliance & risk tools

ICP Prioritization

[Use this framework to prioritize your ICP's]

Criteria

Adoption Rate

​

Appetite to Pay

Frequency of Use Case

​

​

Distribution Potential

TAM (no. of companies* average dealsize)

​

ICP 1

Medium

Low

Low

High

High(number of companies is large, deal size is small)

ICP 2

High

Medium

Medium

High

High(number of companies is large, deal size is medium)

ICP 3

High

High

High

Medium

Medium(number of companies is medium and deal size is also medium

ICP 4

Medium(Complex operations, Sprinto's roadmap in coming few months make them completely ready for this)

High

High

Medium

Medium-High(number of companies is medium and deal size is also medium-high)

ICP 5

Low(Very complex operations, Sprinto not ready to support lot of their use-case)

Very High

High

Low

High(Number of companies are less but deal size is very high)

From the ICP Prioritization Framework, we can see that ICP-2 and ICP-3 are now ideal for Sprinto, ICP-1 used to ideal 1.-1.5 years back. ICP-4 will become most ideal along with ICP-3 in coming 1 year. While ICP-5 is still far away(2-3 years), because that level of complexity is not supported by product, sales or marketing teams.










A table is shared below for your reference to put down your user goals, respective ICPs, JTBDs and validate your goals.


Prioritised ICP from Last module:

ICP-2: Early Scaling SaaS experimenting marketing

ICP-3: Scaling channels effectively(ICP 3)


ICP -2 Possible JTBD and Goals details

Goal Type

JTBD

Functional Goals

- Achieve compliance certification (e.g. SOC2, ISO 27001) to unblock large deals

- Automate manual compliance tasks

- Integrate compliance tasks into existing workflows and tools

Personal Goals

- Reduce stress of manually managing compliance

- Feel more confident in compliance readiness before large deals

Social Goals

- Demonstrate to customers, partners, and investors that they take security and compliance seriously

- Build a reputation as a secure, trustworthy SaaS product

Financial Goals

- Accelerate deal closures by demonstrating compliance

- Avoid losing customers or revenue due to compliance gaps

Major Concerns

- Compliance blocking key deals

- Manual tasks taking too much time

- Fear of failing audits

- Difficulty integrating compliance into existing workflows

Primary and Secondary JTBD for ICP-2

Goal Priority

Goal Type

ICP

JTBD

Validation Approach

Validation Text

Explanation

Primary

Financial

ICP-2

Achieve compliance certification quickly to unblock key sales deals

User Interviews

“We can’t close key deals without SOC2, it’s become a sales blocker for us.”

Compliance is a critical enabler for growth-stage SaaS companies, unlocking revenue by removing sales blockers and increasing deal closure rate.

Secondary

Functional

ICP-2

Automate compliance tasks to reduce manual work

User Interviews

“We’re spending too much time on manual compliance work, it’s slowing us down.”

Automation is key to scaling operations and freeing up resources for growth, making this a crucial but secondary JTBD.


ICP-3 Possible Goals and JTBD details

Goal Type

JTBD

Functional Goals

- Automate ongoing compliance processes

- Manage multiple frameworks simultaneously (e.g. SOC2, ISO, GDPR)

- Streamline audits and vendor management

Personal Goals

- Reduce the day-to-day burden on compliance/security team

- Gain confidence that they are audit-ready anytime

Social Goals

- Keep up with industry peers by demonstrating best-in-class compliance posture

- Show customers that their compliance is mature and trustworthy

Financial Goals

- Reduce cost of compliance by automating manual processes

- Accelerate onboarding of new customers by demonstrating audit readiness

Major Concerns

- Complexity of managing multiple frameworks

- Lack of standardization across compliance processes

- Time and resource drain from repeated audits and manual tasks

Primary and Secondary JTBD for ICP-3

Goal Priority

Goal Type

ICP

JTBD

Validation Approach

Validation Text

Explanation

Primary

Functional

ICP-3

Automate and scale compliance operations across multiple frameworks

User Interviews

“We need a system to manage SOC2, ISO, and GDPR all at once without too much overhead.”

ICP-3 is focused on scaling; automating compliance is essential for efficiency and managing complexity.

Secondary

Social

ICP-3

Maintain competitive credibility by demonstrating mature compliance

User Interviews

“Our competitors have automated their compliance processes, and it’s becoming an industry standard.”

Social proof matters—showing customers and partners that they are secure, modern, and credible is key for trust and winning deals.


Prioritised JTBD across ICPs

Goal Priority

Goal Type

ICP

JTBD

Validation Approach

Validation Text

Explanation

Primary

Financial

ICP-2

Achieve compliance certification quickly to unblock key sales deals

User Interviews

"We can’t close key deals without SOC2, it’s become a sales blocker for us."

This is the highest priority for ICP-2 as compliance is a critical enabler for revenue growth and sales.

Primary

Functional

ICP-3

Automate and scale compliance operations across multiple frameworks

User Interviews

"We need a system to manage SOC2, ISO, and GDPR all at once without too much overhead."

For ICP-3, scaling automation is crucial due to multiple frameworks, making this the highest priority to improve efficiency and reduce operational burden.






How to do an onboarding teardown?

Take screenshots of each page of the interface, note each interaction and user touchpoint, and assess based on user empathy:

  1. What is working well on the screen and why?
  2. What is not working and why?
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
  4. Where does the “aha” moment occur?
  5. Evaluate your onboarding on the cognitive biases.


Registering for Demo

image.png

  1. What is working well on the screen and why?
    1. Rated #1 compliance platform build good confidence in the customer
    2. Move fast without breaking things, ambitious tech companies etc- These statements are psychological, if you are ambitious you should use Sprinto.
    3. Highlighting screenshot of how product would work basically information from People, Assets, Infra gets you SOC2 via Sprinto.
    4. Highlighting customer of multiple industries and sizes build lot of confidence
  2. What is not working and why?
    1. Integration-first, automation-enabled, audit-aligned are too technical and vague for people to understand
    2. Security Questionnaire product doesn't require demo, it can be directly used but it is not that visible at the top. Since it is direct trial product, people could easily derive value out of it and experience part of Sprinto and get the Aha moment reducing time requires to sell the product.
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    1. Give more focus to security questionnaire , at the top near schedule a dem, add button called try security questionnaire for free. This will help people explore power of one of many modules of Sprinto for free, on first demo call they already come little more convinced
    2. Simplify the features mentioned-Ex instead of audit-aligned it should be simplified and easy audits.
  4. Where does the “aha” moment occur?
    1. Seeing the infographic of how Sprinto collects information for audit from multiple sources, processes it and make you ready for SOC-2
  5. Evaluate your onboarding on the cognitive biases.
    1. Move fast without breaking things, ambitious tech companies etc- These statements are psychological, if you are ambitious you should use Sprinto.

image.png

  1. What is working well on the screen and why?
    1. G2 leadership clearly shows Sprinto is loved by customer, providing huge value to customer
    2. Highlighting core value prop of Sprinto
  2. What is not working and why?
    1. In automation integrating with your major systems like cloud etc to automate evidence that should have been written. That provides much more context
    2. Asking prospect job title and company size would helped a lot. Instead of internal team searching all those info or internet or trying to figure out, it would have simplified the process. So if company was small someone who is expert in SMB sales would attend the call, while if larger customer, someone who understands mid-market or larger startups would attend the demo.
    3. Two times looking to partner with Sprinto mentioned, which can confuse the user.
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    1. In automation integrating with your major systems like cloud etc to automate evidence that should have been written. That provides much more context
    2. Asking prospect job title and company size would helped a lot. Instead of internal team searching all those info or internet or trying to figure out, it would have simplified the process. So if company was small someone who is expert in SMB sales would attend the call, while if larger customer, someone who understands mid-market or larger startups would attend the demo.
    3. Attaching one or two screenshots of the products highlighting value prop would have given more confidence
  4. Where does the “aha” moment occur?
    1. Seeing core value prop and so many G2 reviews




Signup Link Generated

image.png

  1. What is working well on the screen and why?
    1. Clean, minimalistic sign-up form layout that’s easy to understand and fill out.
    2. Pre-populated company name field (coming from signup form filled by sales team), which reduces friction and ensures accuracy.
    3. G2 badges on the right side reinforce social proof and credibility, giving users confidence to proceed.
    4. Segmented layout—form on the left and trust badges on the right—balances user focus.
  2. What is not working and why?
    1. No mention of why the user should complete the sign-up (e.g., what they’ll get inside) — lacks a motivational CTA.
    2. No progress indicators or hints about the next steps—users may wonder what happens after sign-up.
    3. Trust badges are repeated multiple times, leading to potential clutter and distraction.
    4. The Terms of Service checkbox is small and easy to miss—some users might not check it, causing friction at submit.
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    1. Add a short subtext (e.g., "Start your free trial and experience how Sprinto automates compliance") near the form header to motivate users.
    2. Include a small “What happens next?” below the Sign-up button to set expectations and reduce anxiety.
    3. Consolidate G2 badges—use a single, horizontally scrollable section to avoid repetition and visual clutter.
    4. Increase the size of the Terms of Service checkbox or make it more prominent to ensure it’s not missed.
  4. Where does the “aha” moment occur?
    1. When users see their company name pre-filled, reinforcing that Sprinto already knows them—this makes the process feel personalized and seamless.
  5. Evaluate your onboarding on the cognitive biases.
    1. Authority bias—G2 badges provide social proof, reinforcing that Sprinto is a trusted compliance solution.
    2. Familiarity bias—seeing their company name pre-filled builds trust and reduces friction.



image.png

  1. What is working well on the screen and why?
    • Multiple sign-in options (Google, Microsoft, Zoho, OTP, Password) give users flexibility and cater to various preferences and IT setups.
    • The pre-filled email address provides context and reduces friction—users know exactly which account they’re signing in with.
    • The design is clean and minimal, with plenty of white space, reducing cognitive load.
    • The "Change" option next to the email allows users to correct any errors without needing to backtrack.
  2. What is not working and why?
    • The sign-in options list might feel overwhelming—no hierarchy or recommended option to guide the user.
    • The repeated presence of the G2 badges might become banner fatigue or visually cluttered after multiple screens.
    • The "New to Sprinto? Schedule a demo" link here feels out of place—this is a sign-in screen, not a discovery or marketing touchpoint.
    • There’s no clear progress indicator or heading clarifying why the user is here or what comes next in the onboarding journey—feels transactional.
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    • Highlighting new features which were not mentioned before would build more anticipation. Or one-two screenshots of how the information they added would appear will build anticipation
    • Add a recommended sign-in option (like Google SSO) to reduce decision fatigue and guide users to the preferred, fastest experience.
    • Consider grouping sign-in options visually or adding small icons to reduce text clutter.
    • Remove or reposition the "New to Sprinto? Schedule a demo" link—perhaps move it to a secondary CTA or footer.
    • Add a progress indicator or heading like "Step 2 of 3: Sign In" to reassure users they’re progressing toward activation.
    • Consolidate the G2 badges into a single, clean line or popover rather than repeating them on every screen.
  4. Where does the “aha” moment occur?
    • The multiple SSO options can create an “aha” moment—users realize they can sign in securely and conveniently without managing new passwords.
  5. Evaluate your onboarding on the cognitive biases.
    • The pre-filled email uses the consistency bias—users feel committed to the email they entered and are more likely to complete sign-in.
    • Social proof bias is leveraged via the repeated G2 badges.
    • However, the choice overload bias might slow decision-making given the unranked list of sign-in options.



Post Successful Sign-in

image.png

  1. What is working well on the screen and why?
    • The step-based progress bar (Company > Team > Security controls) at the top effectively sets user expectations and reduces anxiety by showing the path ahead.
    • Clearly highlighting what this page is about like related to adding company info
    • Clean, minimalist design with plenty of white space reduces clutter and helps users focus on the task at hand.
    • Clear labels (“Display name” and “Legal name”) along with helpful descriptions ensure users understand where each field is used.
    • The large, prominent “Next” button at the bottom stands out and invites action, promoting flow through the onboarding.
  2. What is not working and why?
    • The logo upload step feels like an unnecessary hurdle this early—could be optional or deferred to later, especially if users are eager to get into the product quickly.
    • The description for Legal name is too brief (“Used for audit purposes & letter of engagement.”) — some users might not know what a letter of engagement is.
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    • Highlighting new features which were not mentioned before would build more anticipation. Or one-two screenshots of how the information they added would appear will build anticipation
    • Add a tooltip or info icon next to “Legal name” explaining what a “letter of engagement” is and why it matters.
    • Include visual confirmations (like a checkmark or subtle animation) when the user completes a field to provide a sense of progress.
    • Provide an example of a typical “Legal name” format (e.g., “Acme Inc.”) to help users understand what’s expected.
    • Consider adding a “Save for later” option or autosave, so users feel more confident that their data is retained even if they leave the page.
  4. Where does the “aha” moment occur? No aha moment on this page
  5. Evaluate your onboarding on the cognitive biases? Ans: Progress indicator bias: The step tracker at the top makes users feel they’re already putting in effort and investing time, which increases their sense of commitment and makes them more likely to continue and complete the onboarding.



image.png

  1. What is working well on the screen and why?
    • The step progress indicator at the top (Company → Team → Security Controls) visually guides users through the onboarding flow and keeps them oriented.
    • Clear, concise instructions about inviting team members support collaboration and make the product more effective as multiple admins can configure the tool.
    • The “Invite & proceed” button is visually prominent, guiding the user towards the next step.
    • Details about who should be invited
    • Addition of skip button(thought it's UI is not good)
  2. What is not working and why?
    • The “Skip” text is not clearly a button—it blends in with the instructional text, so users may overlook this option if they’re not ready to invite teammates.
    • There's no immediate indication of what happens after inviting someone. Users might feel uncertain about next steps or whether the invited users get notified right away.
    • The UI feels sparse and could feel empty
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    • Make the “Skip” text more visually distinct as a button (e.g. border, background, different color) to clearly indicate that it’s an actionable step.
    • Add a short subtext or tooltip explaining why inviting teammates is recommended (e.g. “Inviting colleagues now helps you get started faster with Sprinto.”).
    • Should allow adding multiple email id in one-go instead of clicking add everytime
  4. Where does the “aha” moment occur? Ans: There is no significant “aha” moment on this screen
  5. Evaluate your onboarding on the cognitive biases.
    • Commitment bias: By adding teammates, users signal a higher intent to engage with the product, increasing the chance they’ll proceed to the next steps.
    • Social proof: Inviting teammates indicates collaboration and can make users feel like they’re aligning with organizational norms.

image.png

  1. What is working well on the screen and why?
    • The clear, step-by-step progress indicator at the top helps users understand where they are in the onboarding process and what comes next.
    • Displaying framework names with criteria counts and controls met status gives users an overview of their compliance progress and fosters trust.
    • The “View” link on each framework allows users to explore details further, promoting transparency.
    • A helpful note clarifies that frameworks can be enabled/disabled anytime later in Settings, which reduces fear of making a wrong choice.
  2. What is not working and why?
    • The terms “Criteria” and “Controls” may be confusing for users unfamiliar with compliance terminology—especially without definitions or tooltips to explain them.
    • Users might not fully understand the significance of these frameworks or why they’re selecting them at this step.
    • The selection boxes feel low priority—there’s no guidance or recommended selections based on the customer’s use case or demo input.
    • The “Add controls” button is disabled by default (greyed out), but it’s not obvious why or how to enable it (e.g. select frameworks first).
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    • Add short tooltips or info icons explaining “Criteria” (framework-specific requirements) and “Controls” (Sprinto’s mapped features/steps that help meet those criteria).
    • Provide a recommended frameworks prompt (e.g. “Based on your earlier selections, we recommend starting with SOC 2 Security.”).
    • Show a clear explanation above the list that highlights that these frameworks are optional and can be adjusted anytime (reduce fear of commitment).
  4. Where does the “aha” moment occur?
    • Select frameworks that align with their compliance needs.
    • Toggle frameworks on/off anytime later, giving them control over their compliance journey.
    • See criteria and control mapping in one place, understanding how Sprinto automates their audit readiness.
  5. Evaluate your onboarding on the cognitive biases? Ans : Allowing users to choose frameworks and see progress builds confidence and a sense of control.

image.png

  1. What is working well on the screen and why? Ans: The green box with a checkmark reinforces progress and highlights that 105 controls were automatically added.
  2. What is not working and why?
    • This screen interrupts the onboarding flow. After selecting frameworks, users should feel momentum; instead, this screen feels like a detour and is not immediately actionable.
    • The text is dense and explains complex information about 12 compliance areas, which might feel overwhelming to a new user.
    • Users haven’t seen the dashboard yet, so they have no anchor point for what these controls mean, how they relate to tasks, or where they live in the product.
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    • Instead of a standalone screen, this information could appear as a contextual popup on the dashboard after selecting frameworks. This would keep the user in the flow, let them see their controls right away, and offer a sense of accomplishment.
    • Use visuals or icons to explain the concept of areas like Risks and Vulnerabilities, and how they connect to modules in Sprinto.
    • Consider a short tour or guided walkthrough that demonstrates how to monitor controls and areas directly from the dashboard, making the onboarding flow seamless.
  4. Where does the “aha” moment occur? Ans: The “aha” moment would ideally occur on the dashboard, where users can see how their controls and criteria populate actionable tasks. Seeing real progress toward SOC 2 or other frameworks would show how Sprinto’s automation helps them get closer to audit readiness.
  5. Evaluate your onboarding on the cognitive biases? Ans: Nothing major. Still Framework mentions like SOC 2 lend credibility and help build trust—but should be tied directly to product functionality that users can interact with.



Landing Page

image.png

  1. What is working well on the screen and why?
    • The dashboard clearly shows the number of pending tasks, helping users understand that there is work to be done.
    • Tasks are categorized under different headings like Policies, Trainings, and Risks, providing structure and breaking down complexity.
    • Each task includes helpful details like who is responsible, time estimates, and task counts, making it easier to plan and prioritize.
  2. What is not working and why?
    • The greeting “Hello Laddha Industries!” is helpful, but the dashboard could benefit from a stronger, more welcoming tone to make new users feel comfortable.
    • Displaying 69 pending tasks upfront can feel overwhelming, especially for a new user. This could discourage engagement or make users feel like they’re already behind before they even start.
    • All tasks are revealed at once, without prioritization or guided onboarding. New users might not know which tasks to tackle first, leading to decision paralysis.
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    • Add a warm welcome message like “Welcome to Sprinto! Let’s get started on your compliance journey” to build user confidence and excitement.
    • Use progressive disclosure or task batching—reveal one task at a time or guide users through an initial, smaller list of high-impact tasks first, then expand to show the rest once they’re comfortable.
    • Highlight one or two key tasks with “Start here” or “Your first steps” to help users focus and build momentum.
  4. Where does the “aha” moment occur?

The aha moment is when users realize that Sprinto has simplified SOC2 compliance by listing clear, actionable tasks instead of forcing them to interpret complex SOC2 criteria themselves. This removes confusion, accelerates progress, and builds confidence in their compliance journey.

  1. Evaluate your onboarding on the cognitive biases? Ans: Simplification Bias: Sprinto has effectively reduced the complexity of SOC2 by translating it into simple, actionable tasks, which is a positive example of this bias at work.

Setting up Modules

image.png



Next step in configuration and first milestone

image.png

image.png

image.png

  1. What is working well on the screen and why?
    • Clean UI and straightforward flow: The design is minimal and easy to navigate, which is good for guiding users step by step.
    • Clear labeling of steps: The use of labels like "Due" and the logical flow from choosing a provider → connecting → selecting training programs is intuitive and sequential.
    • Drawer consistency: The consistent drawer component on the right side keeps the user in context while adding more steps instead of redirecting them elsewhere.
    • Use of real logos (KnowBe4, Curricula, etc.): Builds trust and helps users quickly recognize known training providers.
    • Grouping by categories: Training programs are grouped logically with toggles to include/exclude tests, giving users flexibility.
    • Small wins from integrations: Sprinto highlighting integrations like KnowBe4 reduces friction for users who already use other systems.
    • Reminder that staff must complete training every 12 months: A subtle nudge about ongoing compliance encourages users to plan ahead.
  2. What is not working and why?
    • Too many nested drawers: The flow is drawer after drawer—this can be overwhelming, making it feel like users are stuck in a never-ending loop of pop-ups.
    • First screen just shows logo of KnowBe4 and Sprinto: Curricula and other integrations are not highlighted. User might think only Sprinto training and KnowBe4 are supported.
    • Lack of contextual explanation: For training categories like PCI DSS, GDPR, HIPAA, etc., there's little explanation about why or when to use them. Users without deep compliance knowledge might get stuck here.
    • First screen is too basic: The initial "Choose your training provider" screen lacks a compelling explanation of why you should choose a provider or how this step fits into the overall compliance journey.
    • No progress indicator or breadcrumbs: Without a progress bar or steps indicator within the drawers, users don’t know how many steps are left.
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    • Reduce the number of nested drawers: Instead of multiple drawers stacked on each other, consider consolidating them into a single screen with collapsible sections for different training providers and categories.
    • Add tooltips or brief explanations: For each training program (e.g., PCI DSS), add a short explanation: "Required for PCI DSS compliance certification audits" etc. This helps users make informed decisions.
    • Add a step tracker or progress bar: Let users know how far they are in the setup process. Example: “Step 2 of 4: Select Training Programs.”
    • Highlight the value proposition earlier: The first screen should clearly state the benefits of connecting training providers, e.g., “Automated monitoring, test tracking, compliance health scores.”
    • Show potential impact: Visualize the percentage of training completion or potential time savings after setup—this would give users a stronger reason to complete onboarding.
  4. Where does the “aha” moment occur?
    1. Once users see Sprinto’s own training programs and the integrations with providers like KnowBe4 and Curricula. The realization that Sprinto can centralize and automate training compliance (vs. manually managing training records) can be a key “aha” moment.
  5. Evaluate your onboarding on the cognitive biases.
  • Commitment Bias: Users are likely to continue completing setup steps once they start (drawers keep them inside the flow).
  • Authority Bias: The inclusion of established training providers like KnowBe4 reinforces Sprinto’s credibility.





Going back to dashboard- New Health dashboard unlocked

image.png


image.png


  1. What is working well on the screen and why?
    • Health Dashboard:
      • Provides a clear sense of progress through the Readiness Percentage and Control Summary. This aligns with the user’s mental model of seeing progress towards compliance.
      • Visual breakdown by area (e.g., People, Policies, Trainings, Risks) helps users prioritize what to focus on next.
      • The 82% automated checks badge is a great trust-builder—it highlights Sprinto’s efficiency and value proposition.
    • Tasks Dashboard:
      • Organizes tasks by categories (e.g., Policies, Risks, Vendors) which aligns with how compliance teams often structure their work.
      • Clearly shows pending tasks, making it easy for users to see what needs attention.
      • Good use of labels like Needs Setup to guide the user toward what actions to take next.
  2. What is not working and why?
    • Health Dashboard:
      • No celebratory feedback when users complete tasks or set up modules (no confetti, no "Great job!" message) — this misses an opportunity for an Aha moment.
      • “Control readiness timeline” is too vague—users might not understand what "7 days" means without context.
      • Users might be confused about why some categories show low readiness percentages even after completing many tasks—this can undermine confidence.
    • Tasks Dashboard:
      • Information overload—presenting too many tasks at once can overwhelm users. Could benefit from progressive disclosure (showing a few tasks and unlocking more as they progress).
      • The hierarchy between “Tasks” and “Health Dashboard” is unclear; users might not know when to use each.
      • The system doesn’t highlight why some tasks are no longer visible (like Trainings after completion). A simple tooltip or message like “This area is completed. New tasks will appear when you import more data” would help.
  3. What changes/improvements do you suggest can be made? Why do you think that would be better?
    • Health Dashboard:
      • Celebrate small wins! When a module (like Trainings) is completed, show a quick celebration (like a checkmark, confetti, or animation). This makes users feel accomplished and motivated to continue.
      • Add tooltips explaining why some areas have low readiness scores despite high task completion (e.g., “Pending approval from the auditor”).
      • Show a clear CTA linking users back to the Tasks Dashboard when they complete an area—this keeps them engaged in the next steps.
    • Tasks Dashboard:
      • Use progressive disclosure to show a few tasks at a time and gradually reveal more as tasks are completed—this reduces overwhelm.
      • Indicate why certain modules (like Trainings) have no tasks (e.g., “Completed! More tasks will appear once you import more data.”).
      • Visually distinguish between immediate tasks (needed to unblock compliance) and nice-to-have tasks—this helps users prioritize.
  4. Where does the “aha” moment occur?
    • When users see their readiness percentage increasing on the Health Dashboard, they realize they are genuinely making progress towards compliance. This is reinforced by the green progress bars and readiness indicators.
    • Seeing automated checks completed (e.g., “82% automated by Sprinto”) builds trust that Sprinto is actually saving them effort.
  5. Evaluate your onboarding on the cognitive biases.
    • Progress indicator bias: The readiness bar and control readiness timeline exploit this bias effectively, motivating users to move toward completion.
    • Endowed progress effect: Users feel invested once they see progress bars—even if they’ve only completed a few tasks.
    • Zeigarnik effect: Having incomplete tasks on the dashboard keeps users engaged to “finish what they started.”
    • Social proof bias (could be improved): Show testimonials or “most customers complete their onboarding in 7 days” to motivate users further.


















Parameters to track your activation metrics:

  • D1, D7, and D30 retention
  • DAU / MAU
  • Subscription rate vs retention
  • Average TAT
  • User Cohorts
  • Acquisition source
  • Product reviews
  • Add more based on specific context

Reminder: This is not the only format to follow, feel free to edit it as you wish!

General stages of a deal to understand where we should track activation

Step 1:

  • Prospect learns about Sprinto through sales outreach, referrals, or word-of-mouth.

Step 2:

  • Prospect schedules a demo with the Sales team.

Step 3:

  • Sales team conducts a product demo, showcasing key features and answering initial questions.

Step 4:

  • Prospect discusses internally. Additional demos or follow-up calls might be scheduled.

Step 5:

  • Prospect requests a trial account for a Proof of Concept (POC).

Step 6:

  • Sales team creates the trial account and provides login access to the prospect.

Step 7:

  • Prospect logs in (via SSO or standard methods), completes initial setup (adds company details, logo, invites team members).

Step 8:

  • Prospect lands on the onboarding dashboard and starts exploring tasks such as setting up policies, integrations (change management, infrastructure, trainings).

Step 9:

  • Prospect connects integrations and resolves initial compliance checks (employee training, infrastructure classification, etc.).

Step 10:

  • Prospect reviews the Compliance Health Dashboard, sees visible progress toward audit readiness.

Step 11:

  • Prospect clarifies remaining doubts or questions with Sales and Customer Success teams.

Step 12:

  • Prospect is satisfied, negotiations happen, and the contract is created and signed.

Step 13:

  • Trial account is converted to a full-time customer account. If integrations were dummy during the trial, a new account may be provisioned.

Step-14

  • Customer now starts setting up their account and discussions with CSMs starts for onboarding

Step 15:

  • Customer completes remaining module setups, achieving full compliance automation.




Possible Activation Metrics with explanation

Metric

X Action

Y Time

Explanation

1

Request trial access after demo

Within 5 days of demo

Indicates serious interest and readiness to explore the product independently. A key transition from sales-led demo to hands-on exploration.

2

Connect first key integration (AWS/GitHub/HRMS)

Within 7 days of starting the trial

Fundamental to unlocking Sprinto’s core automation features, enabling users to experience real product value.

3

Invite at least one team member to the trial account

Within 5 days of trial activation

Demonstrates collaborative usage intent and indicates product is seen as valuable to the broader team, not just a single user.

4

Resolve first compliance check or task

Within 10 days of trial activation or purchase onboarding

Shows the user is engaging with real compliance workflows, proving Sprinto’s value in simplifying compliance.

5

Progress compliance health dashboard to 30%

Within 14 days of purchase onboarding

Demonstrates tangible progress toward audit readiness—an important milestone for users to feel they’re on track.

6

Schedule a follow-up call/demo with CSM

Within 5 days of trial activation or purchase onboarding

Indicates high engagement and commitment to onboarding while enabling CSMs to address any blockers proactively.


Prioritised Activation Metrics

Priority

Activation Metric

Why This Matters

Primary

Connect first key integration successfully without issues within 7 days of starting the trial

This is the most critical step in unlocking Sprinto’s core automation value proposition. Without integrations, the product’s core features cannot be experienced, making it the best predictor of eventual conversion and retention. Customer liked the demo, than requested trial and now in trial did integration and faced no issues showing key value of Sprinto.

Secondary

Resolve first compliance check or task within 10 days of trial activation or purchase onboarding

Shows the user is actively engaging with compliance workflows, directly realizing the product’s value proposition and moving closer to audit readiness. Early success here strongly correlates with conversion and ongoing usage.





[object Object],[object Object],[object Object],[object Object]

Brand focused courses

Great brands aren't built on clicks. They're built on trust. Craft narratives that resonate, campaigns that stand out, and brands that last.

View all courses

All courses

Master every lever of growth — from acquisition to retention, data to events. Pick a course, go deep, and apply it to your business right away.

View all courses

Courses

Built by Leaders From Amazon, CRED, Zepto, Hindustan Unilever, Flipkart, paytm & more

View All Courses
Advanced Growth Strategy
Brand Led Growth
Creative Strategy
Storytelling
Data Led Growth
Event Led Growth
Partnership Led Growth
Tech for Growth
Go to Market
Growth Model Design

Crack a new job or a promotion with ELEVATE

Designed for mid-senior & leadership roles across growth, product, marketing, strategy & business

View All Resources

Learning Resources

Browse 500+ case studies, articles & resources the learning resources that you won't find on the internet.

Patience—you’re about to be impressed.