Secure AI Agent · UX Research and Design

AI applied to research and the design system

A specialist configured to keep research plans and consent in order, report usability tests with severity instead of invented percentages, and govern components and tokens with lifecycle status.

See plans

Companies that trust UPX

  • Bradesco
  • Nubank
  • BTG Pactual
  • Totvs
  • Ascenty
  • Live!
  • G4 Educação
  • EVEO

Capabilities

What the UX Agent can do

Main areas of work for the UX Research and Design AI Agent in your operation.

Research plan

Builds the objective, questions, screener, and recruitment criteria for each study.

Consent tracking

Tracks signed consent per participant and blocks anyone without authorization.

Usability report

Reports findings by severity and how many participants hit each one.

Findings base

Organizes what has been learned per flow, with the source excerpt for each conclusion.

Component governance

Keeps the design system inventory with lifecycle status for each item.

UX writing review

Checks term consistency and accessibility criteria in interface copy.

Skills

Capabilities that compose the specialist

Skills add specific capabilities to the Secure AI Agent according to the processes it needs to execute.

Session synthesis
Turns the authorized recording into findings with severity and the excerpt cited.
Component inventory
Cross-references what exists in the design system with what is in use in the product.
Copy review
Checks term, tone, and accessibility criteria in each interface text.
How it works

From consent to finding, with the design call left to the team

Connect your design and research tools, define what the agent can do, and let the evidence work happen within your operation's limits.

01

Connect the design tools
The agent works where the research already lives.Connect Figma, Notion, the participant spreadsheet, and the team channel so the Secure AI Agent has access only to what it needs to keep the plan and the inventory.

02

Ask for the work
Talk to the agent in natural language.Request the synthesis of a study's sessions, what has been learned about a flow, or the copy review for a screen. The agent understands the context, applies the configured skills, and follows the operation's rules.

03

The agent organizes. You decide the design.
The solution stays yours.The agent records findings, governs the inventory, and reviews copy within the defined permissions. Approving the design solution, publishing a component, and changing a token still require the responsible designer's decision.

Integrations

Connected to the tools where your design already lives

The UX Agent can query studies and run tasks in the systems your team already uses.

Flow

What goes in, what the agent does, and what comes out

From authorized sessions to a report ready for review, following your operation's rules and permissions.

Inputs

  • Sessions with consentDOC
  • System componentsAPI
  • Screener responsesCSV

Processing

Secure AI Agent

Processing the task

  • Verify consent
  • Read sessions
  • Classify severityrunning
  • Draft
Skill appliedRules verified

Output

Completed

Report prepared

  • Findings by severity
  • Source excerpt cited
  • Components with status

Control

You define how far the Agent can act

Different actions can operate with different autonomy levels, always within your operation's rules.

  1. 1

    Query

    Reads studies and components and answers with the reference.

  2. 2

    Prepare

    Builds the report, the inventory, and the copy review.

  3. 3

    Request review

    Waits for validation from whoever owns the design.

  4. 4

    Execute

    Performs the action within the defined limits.

Levels are configured per type of action, according to each operation's policy. Publishing a component, changing a token, and processing a session without recorded consent always stay blocked or under human approval.

Get started

Put a Secure AI Agent to work.

Start on the platform or choose the plan that fits the pace of your operation.

See plans
Security and compliance

Security that can be verified.

Certifications and attestations

  • SOC 2 Type II
  • ISO 27001

UPX maintains SOC 2 Type II and ISO 27001, with independent audit over its information security controls.

Privacy and regulation

LGPD
Operations follow Brazil's Law 13.709/2018. In AI Agent contracts, UPX acts as data processor; the legal basis remains with your company.
Zero Data Retention
A product policy, not a certification: all market AI models used by the Agents have ZDR under contract, and processed content is not retained after execution.
Retention and deletion
The retention policy is defined by contract. Once the contract ends, data is deleted within the agreed period.

Frequently asked questions

Common questions about the UX Agent

What teams usually ask before putting an agent to support research and design.

  • Does the agent decide the design solution?

    No. It organizes findings, maintains the design system inventory, and reviews copy. Approving the solution, publishing a component, and changing a token stay with the responsible designer.
  • How does it handle participant consent?

    As a prerequisite. The agent tracks signed consent per participant and does not process a session without recorded authorization. User research collects personal data, and this gate is not configurable downward.
  • Does it report success percentages in tests?

    Not with a small sample. In usability testing with few participants, the agent reports how many hit each problem and the severity of the finding — stating a percentage over five people would invent precision the study does not have.
  • What does 'component with lifecycle' mean?

    That each design system item carries its own status — in use, under review, deprecated — and the agent flags where the product still uses something already marked deprecated.
  • How does it check accessibility in copy?

    It checks the objective criteria: label clarity, alternative text present, term consistency, and error messages that say what to do. It flags what fails; the final wording is the team's call.
  • Is research data used to train models?

    No. Content processed by Secure AI Agents is not used to train UPX models or third-party models.
  • How long does it take to go live?

    It depends on the tools involved. The starting point is connecting the research repository and the design file, then expanding the scope as the findings base grows.

Custom agents

We build and manage the agent for your design team

From the research plan to design system governance: we build the agent that keeps evidence organized and citable.