Skip to content

Product case · 12 / 13

Changing the engine without stopping the car

Product note. Organizations, dates, private data and implementation details are omitted.

Abstract illustration: two records side by side and an arc returning underneath them

The problem and the decisions

Every time someone opens an account, another company checks in the background that they are who they say they are. We changed which company. It sounds small and it is terrifying: everyone signing up goes through it, and a bad hour means real people locked out of their own account.

We shipped it as a switch we could flip, not as a new version of the app. On for one state, watch how many people get approved, flip it back in seconds if the number moves the wrong way.

In the first state, 10.8% more people got approved, and 15.4% of the people who had been wrongly turned away got in. Nothing else broke. We never had to flip it back, which is exactly why it had to be there.

What it was built with

  • Identity vendors
  • Config-only
  • Instant rollback
  • Funnel analytics

What I did

  • Switching providers
  • Identity verification
  • Risk management
  • Measurement

What I learned

The value of an undo button is not how often you press it. It is what you are willing to try because it is there.

More context · password required →