
The key motivation for this project from the very beginning is to address the ongoing problem of integrating AI into established Enterprise environments where regulatory compliance with cybersecurity compliance standards like SOC 2 and privacy laws like the US's Health Insurance Portability and Accountability Act (HIPAA) remains an unresolved design challenge. As UX orgs were beginning to adopt tools like ChatGPT and Gemini in 2023-2024, I began noticing the downside to feeding information into these cloud models and the potential consequences of allowing cloud providers to learn from this information. The thought in my mind was "what are the consequences of sharing my personal information about my mental and physical health to this model on the cloud?" This immediate concern I had ties back to HIPAA's requirement to protect patients' personal health information from unauthorized access and that organizations must perform regular security assessments. Given the limited resources I have a solo designer, this case study will only focus on onboarding. Other components are out of scope.
Products including LM Studio and Ollama exist (both released in 2023), but are heavily developer-centric. GPT4ALL is still available on GitHub for general chatting and exploration, but the latest version available was released on February 24, 2025, with no updates since.
My time as the UX Designer for ExamSoft gave me the opportunity to lead and deliver high-level workflows for administrators, instructors, and curriculum boards of many medical schools and other graduate programs that use ExamSoft's products. Towards the end of my time at Turnitin, I defined research objectives and goals via Userlytics platform for A/B testing to inform product decisions for ExamSoft’s AI question generation features. This experience validated that concerns about security and effectiveness of AI within regulated environments are key blockers to AI adoption.
I am the sole UX Designer leading this project through the following methods:
I wanted to establish broad characteristics for the audience I'm designing for based on industries with tighter regulations. The target audience are professionals working in regulated industries where data privacy and compliance are operational realities:
The app should be able to run on as many Mid to High range machines to comply with the diverse range of specifications within labs and office environments:
I first wanted to ask users across LinkedIn and Facebook what the biggest concerns are for running local AI models.
Question: what would be your biggest concern with running a local AI model on your PC/Mac? with the following options:

The poll results reveal that 57.6% are concerned with large file sizes and long download times, 42.4% expressed concern with needing the best specs to run local AI models, and no participants expressed any concerns with high electric bills or the operating system blocking its installation. Taking these two takeaway based on the poll data should reduce early dropoff and support requests related to failed downloads or performance bottlenecks:
I created this workflow diagram for GPT4ALL at first launch to identify how onboarding addresses the concerns according to poll data in the discovery phase.
Pros
Cons
The Welcome modal asks users if they would like to opt-in for anonymous usage-analytics and/or sharing of chats to the GPT4ALL datalake. Unlike GPT4ALL, the datalake is under the Apache-2.0 license, and its purpose is to “ingest, organize and efficiently store all data contributions made to gpt4all”
The release notes conflict with the more important information about the usage analytics and the datalake.
Latest News takes up half of the horizontal space of the main dashboard, which the poll results suggest may not be as important for users

Created a diagram illustrating the current information architecture of GPT4ALL, and then created a new IA that addresses user concerns:
Features being retained:


Two workflow diagrams were created in Penpot outlining two possible ways to handle onboarding. Option 1 showcases a guided approach that checks system specs on launch and warnings about low specs, while Option 2 retains the option for the user to discover the application on their own without a system check on launch. Option 1 is the one I decided to go with as it best addresses the concern from poll data regarding the concern around system requirements.
Open Questions

Pros
Cons

Pros
Cons
l wanted to explore multiple ways of designing the dashboard UI after boarding. I began moving away from the existing GPT4ALL terminology (LocalDocs, Collections) and toward terminology users are more familiar with. This decision to move towards user-friendly terminology carries right back to onboarding.

Collapsible Sidebar
Considerations

Tabs
Considerations
The next step of this project is to rapidly prototype the onboarding experience, based on Option 1, using Claude Code with grayscale elements to keep it grounded in the concept itself, rather than the UI design. As part of this testing, feedback will focus on whether users understand what local AI is, how they feel about having a default AI model downloaded, and can finish setup without confusion. The biggest constraint to this will be to make these tests not time consuming for the 5 professionals from select regulated industries I plan to share the link with, as I do not have the resources to conduct formal user testing sessions.
The results from feedback will be used to modify design choices before creating hi-fi mockups.
Selected Works
Copyright © Nathan Nasby