# Message test — https://www.faceup.com/en After reading your page, only 9 of 15 personas could name a reason to pick you over a similar option. - **Page tested:** https://www.faceup.com/en - **Audience tested against:** Lean ethics & compliance teams. - **Personas:** 15 simulated - **Report:** https://grader.wynter.com/r/faceup-ethics-compliance-platform-for-lean-tea-cQyTcoY > These answers are generated by AI, scored on Wynter's B2B Message > Layers framework using behaviorally-diverse simulated personas. The > methodology is real and the critique is directional. What a simulated > persona cannot have is a live budget, a renewal coming up, or a boss > asking about this quarter. --- ## 01 · The scores Every persona answered all four questions. These are four independent proportions of the same panel, not stages of a funnel. | Layer | Question | Cleared the bar | Strength | Of those who passed | | --- | --- | --- | --- | --- | | 1. Clarity | Do they understand what you do? | 15/15 | 93% | 10 without hesitation, 5 with reservations | | 2. Relevance | Can they tell what it solves, and who it's for? | 15/15 | 99% | 14 without hesitation, 1 with reservations | | 3. Value | Do they actually want it? | 13/15 | 72% | all with reservations | | 4. Differentiation | Is there a reason to pick you over the alternatives? | 9/15 | 56% | all with reservations | **Brand alignment** (a side metric, not one of the four layers) — 9/14, 58% strength (all with reservations). Does the page read like the company you actually are? **Fix first: Differentiation.** Earliest failing layer, walking the sequence in order — not simply the lowest score. --- ## 02 · What to change, layer by layer Ordered worst-first. Specific edits, not a restatement of the score. ### Differentiation **Add source and org size under the "3,600+ Organizations" and "70+ Countries" stats** The counts sit alone with a logo strip that shows no company of comparable size, so the scale claim has nothing holding it up. State what counts as an organization, the date, and the employee range these customers cover. *effort medium · impact high · tested against Proof next to the claim* **Replace the "New" and "Coming soon" labels with ship dates or customer counts** "Disclosure Management — New" and "Policy Management — Coming soon" read as unfinished product next to vendors already shipping disclosure workflows. Swap the badges for a release date or how many organizations already run disclosures on FaceUp. *effort low · impact high · tested against Specifics beat superlatives* **Name the HR and case systems behind "Integrate with 8,000+ tools"** "Sync with HR platforms and messaging tools" leaves a buyer unable to check whether Workday, BambooHR or Slack are covered. List the four or five named integrations buyers ask about most. *effort low · impact medium · tested against Concrete over abstract* ### Value **Add an implementation timeline under "Launch in hours" showing what happens on day one** "Launch in hours. No IT project or consultants required." gives no steps, so readers discount it until they see a demo. Break it into the setup tasks and how long each takes. *effort medium · impact high · tested against Specifics beat superlatives* ### Clarity **Add a one-line definition to the "disclosures" and "analytics" items in the hero list** Both terms appear in the opening sentence with no explanation of what they cover. Say what is declared and what is measured so readers can judge scope. *effort low · impact medium · tested against Plain language* ### Brand alignment (side metric) **Rewrite the H1 so "lean teams" does not exclude regulated enterprise buyers** "Ethics & compliance platform for lean teams" plus "No IT project or consultants required" reads as an SMB tool, contradicting the multi-entity and global claims below. Lead on self-service control for compliance teams at any size rather than on thinness of… *effort medium · impact high · tested against Name the audience* **Move data residency and multi-entity permissioning proof into the security section** "Local Data Storage" is a bullet with no detail, so an enterprise GC cannot tell which regions are available or how entity-level permissions work. Name the hosting regions and describe how permissions split across subsidiaries. *effort medium · impact high · tested against Answer the live objection* **Cut "promoting transparency and empowering employees" from the security paragraph** The security copy slides from certifications into marketing abstraction, weakening the enterprise tone the rest of the section builds. Keep the sentence to what is certified, by whom, and how often it is audited. *effort low · impact medium · tested against Plain language* --- ## 03 · What is working ### The page names its category and core bundle clearly enough to repeat back Respondents identified the product category from the header and named the bundle of anonymous reporting, case management and investigations in one tool without inference. Four points cite this as the clearest element. > It's a whistleblowing/ethics compliance platform — anonymous reporting, case management, and investigations bundled together so a lean compliance team can run intake and case tracking without IT or consultants building it for them. > > — Compliance Manager, Manufacturing, 1001-5000 > Consolidates reporting/case tools into one system. > > — Compliance Officer, Technology, 5000+ ### The audience is stated upfront, so readers did not have to infer who the page is for Respondents said the target buyer and problem are named explicitly, specifically compliance teams, reducing the inference required. Four points cite this. > "Built for the people who own ethics & compliance" section later reinforces this by naming legal/compliance, executives/finance, and HR as the buyers, so the reader is spelled out, not inferred > > — Chief Compliance Officer, Healthcare, 501-1000 > headline says "ethics & compliance platform," subhead names compliance teams. Obvious. > > — Compliance Officer, Technology, 5000+ > the header line, "Ethics & compliance platform for lean teams," plus the subhead about anonymous reporting, investigations, case management and disclosures, told me the problem within a few seconds > > — Compliance Manager, Manufacturing, 5000+ --- ## 04 · What the personas said ### Feature names are listed without definition, leaving scope unclear Respondents hit friction on undefined terms including 'disclosures' and 'analytics', which appear as list items with no supporting explanation. One could not tell how the platform overlaps with an existing encryption and data security stack, and one called… > what's not clear is how it actually differs from the case management system I already run — I'd need a concrete feature gap, not just "113 languages on every plan." > > — Head of Compliance, Financial Services, 201-500 > the only mild friction was 'analytics' being listed as a feature with zero detail anywhere else on the page, so I couldn't tell if that's a dashboard or a throwaway word > > — Chief Compliance Officer, Healthcare, 501-1000 > the friction was in words like "disclosures" and "analytics" thrown in without definition — disclosure management could mean anything from gifts registers to full COI workflows, and "analytics" is just a word until I see a dashboard. > > — Compliance Officer, Technology, 201-500 > What's less clear is how it overlaps with our existing encryption/data security stack, since "metadata-free reporting" and "end-to-end encryption" sound like security claims layered onto a workflow tool rather than a security product itself. > > — Head of Compliance, Financial Services, 1001-5000 ### Healthcare, EU and APAC buyers found nothing addressed to them Respondents noted the absence of healthcare or EU logos, HIPAA messaging, an APAC financial services case study, multi-entity permissioning detail, and verifiable security certifications or data residency. > A named healthcare or life-sciences customer reference, ideally EU-based, talking about patient-adjacent data handling or clinical staff volumes — right now the closest proxy is Zendesk and Mercedes, which tells me nothing about my regulatory context > > — Chief Compliance Officer, Healthcare, 501-1000 > I want their SOC 2 report and ISO 27001 scope in hand before I believe "enterprise-grade security" applies to a healthcare org's data residency needs > > — Chief Compliance Officer, Healthcare, 501-1000 > I'd need language aimed at a firm my size and sector — a case study or logo from a regulated APAC financial services company, explicit mention of multi-entity/multi-subsidiary permissioning, and something addressing regulatory frameworks like MAS or local whistleblowing rules rather than just the EU Directive > > — Head of Compliance, Financial Services, 501-1000 > there's no HIPAA mention, no healthcare case study called out, so I'd assume they sell horizontally across industries and healthcare is just one vertical among many > > — Chief Compliance Officer, Healthcare, 1001-5000 ### The "launch in hours, no IT project" claim is not believed without a demo Respondents said speed and configuration claims carry no mechanism, evidence or implementation timeline, and several stated they would need a live demo of form and workflow customization before accepting the value proposition. > "no IT project or consultants required" and "customize it in minutes" are the two things I'd actually push on — I want to see the conditional-logic form builder and the disclosure workflow live > > — Chief Compliance Officer, Healthcare, 501-1000 > Seeing a live demo where a non-technical admin builds a working intake form and case workflow in under an hour, in front of me — if that's real, it justifies pulling budget from our current setup this quarter; if it's a canned screen recording, I'm done with the meeting. > > — Compliance Manager, Manufacturing, 1001-5000 > I'd want them to actually show me the admin console live building a form and adding a language, not describe it, and I'd want a real number on average setup time from a reference customer, not "minutes" as a headline claim. > > — Senior Compliance Manager, Professional Services, 201-500 > I'd still want the "launch in hours" and "no consultants" claims backed with a real implementation timeline before I believed it over my current case management setup. > > — Compliance Officer, Technology, 201-500 > I didn't see proof behind "launch in hours," just a claim > > — Chief Compliance Officer, Healthcare, 1001-5000 ### "New" and "Coming Soon" feature labels read as immaturity, not roadmap Respondents flagged Disclosure Management marked New and Policy Management marked Coming Soon as maturity risks, noting NAVEX and Convercent/OneTrust already ship mature disclosure workflows. One said the unpublished module undercuts the word platform. > disclosure management is flagged "New" so I'd want to know how mature it is before counting it as a real gap-filler > > — Head of Compliance, Financial Services, 201-500 > if a competitor already has mature disclosure workflows live today, that's a real gap I'd flag, since I don't buy roadmap, I buy what's shipped > > — Head of Compliance, Financial Services, 201-500 > The disclosure management module being tagged "New" also matters since it's directly what I said I'm short on right now, but it's too fresh to trust without a reference customer actually running conflicts-of-interest workflows through it > > — Chief Compliance Officer, Healthcare, 501-1000 > What would rule it out is the "Coming soon" tag on Policy Management — if a rival already has that live, I'd pick them since acknowledgement tracking is part of what I need now, not later. > > — Compliance Manager, Manufacturing, 1001-5000 > It's the word "platform" doing too much work — it's stretched over reporting, case management, investigations, disclosures and a policy module that doesn't even exist yet. > > — Compliance Manager, Manufacturing, 5000+ ### Scale and adoption claims have no sourcing or comparable logos behind them Respondents said customer count and global adoption claims are unsourced, and the logo set contains no companies at comparable size. Integration claims name no specific HR or case-management systems. > "8,000+ tools" integration claim sitting right next to zero named HR or case-management systems I actually use — if I can't confirm it talks to our HRIS and ticketing stack without a custom build, that "no IT project" pitch collapses on day one > > — Chief Compliance Officer, Healthcare, 501-1000 > "Run by compliance teams worldwide" and "3,600+ organizations" are asserted with no source, and that undercuts the otherwise clean framing. > > — Compliance Manager, Manufacturing, 5000+ > no named enterprise logos my size shown clearly - just Zendesk/Mercedes mentioned oddly > > — Compliance Officer, Technology, 5000+ ### The page reads as built for a lean team, which excludes regulated enterprise buyers Six points describe the positioning as mid-market or SMB-oriented — "no IT project" messaging aimed at a lean compliance hire rather than a regulated enterprise GC. Two respondents called the vendor undecided between scrappy tool and enterprise compliance… > I picture a mid-sized European SaaS vendor, maybe 8-15 years old, that started narrow — probably in school anti-bullying reporting given that Deloitte quote referencing "combating school bullying" from its "early days" — and has since pivoted upmarket > > — Chief Compliance Officer, Healthcare, 501-1000 > "Lean teams" line tells me I'm not their core buyer. > > — Compliance Officer, Technology, 5000+ > The tone is written for a lean compliance or HR generalist, not a specialist GC at a regulated financial institution: phrases like "Build it yourself," "No IT project or consultants required," and "Launch in hours" are pitched at someone without a dedicated implementation budget, which isn't quite me > > — Head of Compliance, Financial Services, 501-1000 > the "Build it yourself... Launch in hours. No IT project or consultants required" framing feels aimed more at a smaller, leaner company without a real procurement/IT process, which isn't quite us > > — Senior Compliance Manager, Professional Services, 501-1000 --- ## 05 · The hardest read An adversarial pass over the findings. Every claim below was checked against the panel's own answers; unsupported ones were dropped. - **The page's only wins are surface comprehension; everything a buyer needs to act on failed** *(high)* Positives cover just category naming and stated audience (3 respondents each), while negatives span value, differentiation, relevance and brand alignment at 3-5 respondents each. Readers can repeat the pitch back and still have no reason to buy. - **The central value proposition is dead on arrival — the headline claim converts readers into demo requests, not buyers** *(high)* Five respondents rejected 'launch in hours, no IT project' absent mechanism, evidence or timeline, and required a live demo first. The page's loudest promise is the one carrying zero proof. - **The speed claim actively damages the brand by signalling a small-company tool** *(high)* The same 'no IT project' framing that five respondents disbelieved is read by five others as mid-market/SMB positioning aimed at a lean hire rather than a regulated enterprise GC. The page's differentiator is also its disqualifier. - **Publishing 'New' and 'Coming Soon' labels hands the category incumbents the maturity argument** *(high)* Four respondents read those labels as maturity risk and named NAVEX and Convercent/OneTrust as already shipping mature disclosure workflows; one said the unpublished module undercuts the word platform. The roadmap signals a gap, not ambition. - **The page has no proof layer at all — every claim of scale, integration and compliance is asserted** *(high)* Three respondents found customer counts and global adoption unsourced with no comparably sized logos and no named HR or case-management systems; three more found no verifiable security certifications or data residency. Nothing is checkable. - **Regulated and non-US buyers are silently told this is not for them** *(medium)* Three respondents found no healthcare or EU logos, no HIPAA messaging, no APAC case study and no multi-entity permissioning detail — compounded by positioning five respondents read as SMB. Whole revenue segments self-disqualify. --- ## 06 · Who answered | # | Role | Industry | Company size | | --- | --- | --- | --- | | 1 | Head of Compliance | Financial Services | 201-500 | | 2 | Chief Compliance Officer | Healthcare | 501-1000 | | 3 | Compliance Manager | Manufacturing | 1001-5000 | | 4 | Compliance Officer | Technology | 5000+ | | 5 | Senior Compliance Manager | Professional Services | 201-500 | | 6 | Head of Compliance | Financial Services | 501-1000 | | 7 | Chief Compliance Officer | Healthcare | 1001-5000 | | 8 | Compliance Manager | Manufacturing | 5000+ | | 9 | Compliance Officer | Technology | 201-500 | | 10 | Senior Compliance Manager | Professional Services | 501-1000 | | 11 | Head of Compliance | Financial Services | 1001-5000 | | 12 | Chief Compliance Officer | Healthcare | 5000+ | | 13 | Compliance Manager | Manufacturing | 201-500 | | 14 | Compliance Officer | Technology | 501-1000 | | 15 | Senior Compliance Manager | Professional Services | 1001-5000 | --- ## 07 · Before you act on this The methodology is real, and the critique is directional. What a simulated persona cannot have is a live budget, a renewal coming up, or a boss asking about this quarter. **Validate anything you're betting on with real ICPs who are actually in-market.** Being wrong is more expensive than you think. Finding out is cheaper than you'd guess. Wynter runs message testing with verified B2B professionals — trusted by HubSpot, RingCentral, Shopify, Cognism, Paddle, Veeam, Rippling and Miro. This report is kept for 60 days from 2026-09-30, then deleted along with the personas and their answers.