Data residency for cloud compliance

END-TO-END DESIGN
INFORMATION ARCHITECTURE
SAAS UX
Feb 2022 – Nov 2022
Table of Contents

Overview

Background
Google Cloud Platform (GCP) provides enterprise customers with a suite of cloud computing services, enabling them to host and run their applications on Google's infrastructure.

Cloud Storage is a foundational GCP service, enabling users to store and accessing object data. It is GCP's second most widely-used service, following Compute Engine.

This project is launched and publicly available.
Role
UX Designer

I partnered with frontend & backend engineering, product, research, and horizontal product teams (Security, Design Systems)
Key contributions
Research: Requirements gathering, competitive analysis, user personas & journeys, user research protocol

Design:
End-to-end design, information architecture, design handoff

Motivation

As more customers run business-critical workloads in the cloud, there is a growing need for Google Cloud Platform (GCP) to provide transparency into system compliance with data protection and privacy laws in order to protect sensitive end-user data. These regulations are enforced per location, and in order to operate in the location of interest, businesses are required to abide by these compliance laws such as General Data Protection Regulation (GDPR).

Google Cloud Storage (GCS) is a key segment of a platform-wide effort to support data compliance across multiple locations. In order for GCS to be a compliant service, customers must be able to manage their data while not violating data regulations.

Challenge

Ensure that customers are able to interact with their data in Cloud Storage while maintaining regulatory compliance, and understand the guardrails in place to prevent violation of compliance laws.

Solution

I designed an end-to-end experience that informs customers of platform guardrails which prevents customers from taking actions that would violate compliance.

Research

In order to evaluate the current state of market and identify gaps, I conducted a competitive analysis on the feature functionality from GCP's direct competitors: Amazon Web Services (AWS) and Microsoft Azure Government Cloud.

Our UXR team collected signals on customer workloads through interviews. These signals reflected business requirements, which were mapped to feature requirements from the product team.

I used these research insights to refine user personas based on customer profiles. These personas embody storage administrators and storage users, which mapped to customers' roles at their organization.

Diving deeper into our customers' needs and goals, I created a user journey map that highlights design opportunities based on the personas. In each phase of the journey scenario, I highlighted the customers' needs, pain points, and line of thinking.Doing this allowed me to better understand the problem space, who I am designing this feature for, and find opportunity areas that will differentiate our product.

UX strategy

To maintain consistency across GCP, I worked with adjacent product teams to consolidate our design approaches into a scalable, platform-wide UX strategy. We came up with three general guidelines:

1. Disable versus Hide: Disable a feature/option when a subset is unavailable, to provide transparency into restricted options. Hide a feature/option when it is completely unavailable, and provide explanatory messaging. Providing thorough explanations helps build user trust and allows users to understand the scope of available capabilities.
2. Bring awareness upfront: Notify users when the product will not work as expected at key entry points before they make decisions that might violate compliance. Having visibility of this upfront allows users to plan accordingly.
3. In-context nudging: Provide the user with in-context reminders about disabled or unavailable features to allow them to successfully complete their tasks. By providing information in the context of a specific task, users will pay more attention to it.

Early concepts

I designed a compliant UI experience that guides users to remain compliant and prevents users from features or options that violate compliance. Using existing components and design system patterns, users will be informed of the limitations through various banner messaging mechanisms.

I created a sitemap of GCS to visualize the touchpoints where this feature would surface. Most pages and sections would remain unaffected in the compliant UI experience; only the touchpoints where users arepresented with an interaction that relies on the location of data are affected.

sitemap
Sitemap of the compliant UI experience
low fidelity early concepts
Low-fidelity informative messaging concepts

I reviewed these early concepts with product, engineering, and UX partners These concepts were generally well received with few suggestions:

  • Keeping the messaging simple and consistent across Google Cloud Platform
  • There is an engineering requirement where customers must specify a location before viewing their data, and should reflect in the UI for consistency across tooling.

MVP Design Solution

high fidelity design (3/4)
Landing screen: select bucket in a specific location
high fidelity design (1/4)
Create bucket: select data location
high fidelity design (2/4)
Create bucket: select access control mechanism
high fidelity design (4/4)
Bucket operation: move data to new bucket

Impact

  • Enabled Google Cloud Storage to operate in regulated markets by ensuring compliance with data protection laws (e.g. GDPR, ITAR), unblocking millions in revenue from enterprise customers across various industries.
  • Collaborated with the Design System team by integrating my solution into a standardized constraint messaging component, for broader use across GCP UX teams.

Next Steps: Validating designs with customers, iterate design for the V2 launch, continued support for the Design System component.

Takeaways

  • Enterprise users interact differently with UI versus CLI/API. These users primarily use CLI/API to perform tasks, and UI for learning and exploration. I ensured that the UI content could scale for consistency across interfaces.
  • Alignment on all steps of the design process requires establishing platform-wide guidelines early, especially when working with multiple teams and stakeholders. Early collaboration enabled us to reduce duplicate efforts and develop reusable patterns
  • In some cases, user testing is a nice-to-have rather than a requirement, especially with solutions that don't introduce a net-new component or interaction. Though I wasn't able to validate this solution with users, I had confidence that it would be well received based on my collaboration with other teams who have worked on similar projects.