Field note No. 05 · Operations under the surface

The Form Is the Receipt

A bank executive published the reason your redesign won't work, in 1984. Most of a service sits below the line the customer can see, which is exactly where the complaint never points.

Ben Siegel5 min readStrategy & Experience

Everyone blamed the form.

If you've sat in a meeting where everyone agreed the screen was the problem, and something in you suspected the screen was only where the pain surfaced, you were right, and the reason has been in print since 1984. The complaint that names an interface is almost always accurate about the pain and close to useless about the cause. That isn't a failure of the people complaining. It's a structural property of services, and it was described by someone who ran one.

Most of a service is below the line you can see

Lynn Shostack was a bank executive, not an academic, when she published "Designing Services That Deliver" in Harvard Business Review in 1984. She introduced the service blueprint, and with it the idea that has outlived every design trend since: a service is a system whose mass sits mostly below a line of visibility. Above the line is what the customer encounters. Below it are the processes, handoffs, and support functions the customer never sees and is entirely at the mercy of.

Everything above the line is evidence. Everything below the line is cause.

That single distinction predicts the failure mode. Users experience a service through its interface, so when the service fails, the interface is where they feel it, and the interface is what they describe when asked. The organization then dutifully funds a fix to the thing the complaint named, which is the part above the line, which is also the part that photographs well in a board pack.

Forty years on, that's still where most redesign budgets go.

The test that tells you which one you have

There's a fast diagnostic that separates a genuine interface problem from an operations problem wearing an interface mask, and it costs nothing to run.

Ask what would happen if the interface were perfect.

Not better. Perfect. Beautiful, fast, clear labels, ideal hierarchy, nothing you could criticize. Now ask what would still be broken.

If the answer is "quite a lot," you were never looking at an interface problem, and the redesign you're about to approve will produce a more attractive version of the same failure. Run that test before you scope anything.

What was actually under the most hated form in the building

Here's what that looks like when you run it for real.

At a global pharmaceutical company, the master-data request form was the most complained-about object in the entire global finance organization. Every site had a view on it. Too long, too confusing, too slow, badly labeled. If you'd asked anyone in that building to name the problem, they'd have named the form.

The field work found something else. A requester could complete 5 of the 30 required fields without help. The other 25 needed someone from the master data team, every time. Submission error rates ran between 30% and 50%, across every site and every domain. Roughly 30% of North American requests were rejected and returned, then resubmitted, often through an entirely different channel than the one they arrived on, because five or more parallel submission channels coexisted with no shared owner.

Formal form. Email. Attached spreadsheet. Photocopy. Screenshot.

Now apply the test. Imagine that form redesigned flawlessly. A requester still can't complete 25 of the 30 fields, because the information lives in systems and heads they have no access to. The error rate barely moves, because the errors aren't typos. They're the consequence of asking someone to supply data they were never in a position to know.

Now imagine the opposite. The form stays ugly, but the fields auto-populate from the systems that already hold the answers, validation happens at the field rather than at submission, and ambiguity surfaces before it reaches an approver. The ugly form outperforms the beautiful one, and it isn't close.

The form was never the bottleneck. It was the receipt at the end of a process nobody owned, collecting the blame for everything upstream because it was the only part anyone could see.

Two layers, and the smaller one is the design

The future-state model worked on both layers, and the interface was the lesser of them.

The smart form did real work. It pulled values from upstream systems instead of asking a human to retype them. It validated at the field rather than at the end. It surfaced ambiguity early, where resolving it was cheap, rather than late in an approver's queue where resolving it meant a round trip. A form designed properly absorbs a real share of an error rate at the source.

The layer underneath mattered more. Five parallel channels became one governed workflow. Global and local responsibilities were named explicitly, so no step was left without someone's name against it. The approval queue, previously a black box, was opened, so a requester could see where their request sat and what happened to it next. And a workaround one mapper in Manila had built inside her own team, already cutting her team's errors by roughly 70%, was promoted from a local fix to a global pattern, because for the first time a mechanism existed for a good local fix to become anything else.

None of that is interface work. All of it is the reason the interface work paid.

The same logic dismantles most loyalty programs

Customers rarely leave because the perks were insufficient. They leave because something in the service failed them, the failure was structural, and no discount survives contact with a structural failure that keeps happening. A loyalty program bolted onto a broken service is a payment made to customers for tolerating an operating model you've chosen not to fix. Some will take the money. They'll still leave.

Worth being careful about the famous number here, because this piece is about provenance. The much-quoted claim that cutting defections by 5% lifts profit by 25% to 85% comes from Reichheld and Sasser in HBR in 1990, drawn from a handful of company cases rather than a broad study, and later empirical work by Reinartz and Kumar found little support for the general version. The mechanism is the honest part. The figure is not. Cite the mechanism.

If churn is up, don't go looking in the interface, and don't go looking in the rewards tier. Go and find the handoff nobody owns.

Before you approve the redesign

Ask one question in the room, and be willing to sit through the silence after it.

If we shipped a perfect version of this screen tomorrow, what would still be broken?

Whatever people say next is the actual project. The screen is the receipt. Somebody has to go and find the process it was printed at the end of.


Key takeaways

The interface is where the complaint lands and almost never where the failure lives. Fix the process the screen sits at the end of.

Concepts to name

  • The line of visibility (Shostack, 1984). A service is mostly below the waterline: processes, handoffs, and support functions the customer never sees but depends on entirely. Above the line is evidence; below it is cause.
  • The service blueprint (Shostack, 1984). Introduced in HBR by a bank executive, not a designer, which is part of why it's about operations rather than screens.
  • The perfect-interface test. If a flawless version of the screen wouldn't fix it, it was never an interface problem.
  • Churn is an operations problem. No discount survives a structural failure that keeps happening.

The numbers, and a caution about one of them

  • 5 of 30. Fields a requester could complete unaided in a Fortune 50 finance organization's master-data process. The other 25 required a specialist, every time, which is why redesigning the form could not have moved the error rate.
  • The 5% / 25-85% retention claim (Reichheld & Sasser, HBR, 1990) came from a small number of company cases, and Reinartz & Kumar (2002) found little support for the generalized version. A working example of why a famous business number needs its provenance checked before you repeat it.

Techniques

  • Run the perfect-interface test before scoping any redesign.
  • Blueprint the whole service, above and below the line of visibility, not just the screen.
  • If churn is up, skip the interface and the rewards tier. Go and find the handoff nobody owns.

Further reading

  • Shostack, G. L. (1984). "Designing Services That Deliver." Harvard Business Review.
  • Reichheld & Sasser (1990) alongside the counter-evidence in Reinartz & Kumar (2002).

Sources

  • Shostack, G. L. (1984). "Designing Services That Deliver." Harvard Business Review, 62(1), 133 to 139. The origin of service blueprinting; the blueprint's separation of customer-visible activity from the supporting processes beneath it.
  • Reichheld, F. & Sasser, W. E. (1990). "Zero Defections: Quality Comes to Services." Harvard Business Review, 68(5). Origin of the 5%-defection claim, drawn from a small number of company cases.
  • Reinartz, W. & Kumar, V. (2002). Empirical work finding little support for the generalized retention-to-profit claim.
  • Figures from the author's engagement with a global pharmaceutical company's finance organization, Master Data Management Conceptual Design (2020): 5 of 30 fields completable unaided, 30% to 50% submission error rate, ~30% North American rejection rate, five or more parallel channels with no shared owner, and a local workaround cutting one team's errors by roughly 70%. Drawn from contextual inquiry across five international sites and workshops with 200+ finance stakeholders.