What we do
Subsurface is a Trust and Risk Architecture consultancy for founders, product teams and operators building digital products where credibility is the product. We don't run generic audits. We investigate specific flows, such as onboarding, checkout, identity, payments and state handling, and show you exactly where users stop believing, stop paying or stop returning. Every engagement begins with evidence. Every recommendation is traceable to a real failure pattern, not a framework opinion.
What's quietly costing you users, revenue or trust?
Most issues don't break your product. They show up as users dropping off without explanation, confusion in key flows, payment or state inconsistencies, and trust signals that don't hold up. If something feels "off" but you can't pinpoint it, this is where Subsurface works.
What we surface
- Hidden conversion friction. Silent failures in checkout flows, authentication loops and payment processing that users abandon without reporting.
- Misaligned trust signals. Inconsistent messaging, unclear error states and validation gaps that erode user confidence.
- Risk patterns across user journeys. Recurring issues in multi-step flows where trust breaks down at predictable points.
- Gaps between claims and experience. Where product promises don't match actual behaviour, creating credibility loss.
Four failure domains we analyse
- Evidence Integrity. Are system decisions explainable? Are failures visible or hidden from users and operators?
- Identity Credibility. Can users bypass or manipulate flows? Are validations consistently enforced across all entry points?
- Operational Visibility. Are errors logged and surfaced? Can you detect delays, inconsistencies and anomalies in real-time?
- Control Architecture. Are safeguards properly layered? Are edge cases handled and critical flows protected from failures?
QA Radar — our methodology
Automation catches failures. Judgment catches the ones that matter. QA Radar is our internal method for turning raw signals into prioritised, explainable risk. We weight every finding by commercial impact, reversibility and user trust damage, so you get a short list of what to fix, not a dump of what's broken.
Read the full QA Radar methodology (PDF)
Work with us. Four ways to engage.
All async. No calls. Everything documented.
- Discovery Scan (free). Self-serve diagnostic. Trust score and top risk signals in under 10 minutes.
- Structured Review (£295). Expert investigation of one critical flow, such as onboarding, checkout, payments or identity. Delivered as a written QA Radar report within 5 working days. Everything documented. Nothing left to interpretation.
- Pre-Release QA Audit (£750). Full trust and risk audit before you ship. Covers all critical flows, edge cases and failure patterns. Delivered as a prioritised QA Radar report with 14 days of direct follow-up access via Telegram.
- Advisory Retainer (£500 per month, 3 month minimum). Ongoing trust architecture oversight as your product evolves. Delta reports on every major release, monthly written judgment review, direct Telegram access, quarterly deep audit and unlimited Trust Signal Scans. You get a trust partner, not a report.
Signal, Not Siren — the book
A working field guide on why modern products quietly lose user trust, and how to surface it before it costs revenue. Written from inside real engagements by Garry Cameron, founder of Subsurface.
Buy Signal, Not Siren on Amazon UK