Adi - User Center Designer

Future of Design

AI

How to Build Trustworthy AI Applications with User Centered Design

Trust in AI products is decided by interface decisions, not disclaimers. Six dimensions that carry it, the patterns that hold, the counterfeits that don’t — plus an interactive trust audit for your own feature.

From Concept to Launch: How to Manage Design Projects End to End

Adi Design · Practice notes · 11 minute read

Trust is the only feature an AI product cannot ship without, and the only one that never appears on a roadmap. It is not won by a disclaimer at the bottom of the screen or a line in the terms. It accumulates — or drains away — through dozens of small interface decisions: whether an answer shows where it came from, whether a user can undo what the system did, whether the product admits when it is unsure.

The good news is that most of those decisions are design decisions, which means they are ours to get right. Here is how we approach them at Adi Design.

The answer, on its own
A confident output with nothing around it. The user has no way to check it, question it, or recover from it.

The short version

  • The goal is calibrated trust, not maximum trust. Over-reliance is a design failure too.
  • Six dimensions carry it: transparency, control, calibration, recovery, privacy and accountability.
  • Show the working. An answer without provenance cannot be checked, so it cannot be trusted.
  • Make outputs editable, not just acceptable or rejectable.
  • Undo is a trust feature. People take risks when they know they can reverse them.
  • Always leave a route to a human, and make it easy to find rather than a last resort.

Why AI products break trust differently

Conventional software earns trust through consistency: the same input produces the same output, every time, and over months of use people stop checking. AI products break that contract in four specific ways, and each one needs a design response.

They are non-deterministic. Ask the same question twice and the wording differs. Users read variation as instability unless the interface sets the expectation up front.

They fail confidently. A traditional system that cannot answer throws an error. A model that cannot answer produces something plausible instead. The failure mode has no visual signature, which is why the interface has to supply one.

The reasoning is not inspectable. Users cannot tell whether an answer came from a document they uploaded, a web source, or the model’s own training. Without provenance they are asked to trust the whole system or none of it.

Data anxiety is the default assumption. Many users now assume that anything they type is used for training and visible to someone. If the product does not answer that question at the moment it arises, the user answers it for themselves, usually pessimistically.

A model that cannot answer produces something plausible instead. The interface has to supply the warning the output never will.

Trust is calibration, not maximisation

The instinct is to make users trust the AI more. That is the wrong target. The goal is for user trust to match the system’s actual reliability — high where it is reliable, low where it is not.

Two failures sit either side of that line. Under-trust means people ignore accurate output and double-check everything, which removes the value of the feature. Over-trust is the more dangerous one: people accept output without reading it, and the interface has trained them to. Any design that makes an AI feel more authoritative than it is — polished prose, a confident tone, no visible uncertainty — is manufacturing over-trust. That is not a win.

Which means some good trust design feels counterintuitive. You will deliberately slow a user down before an irreversible action. You will show uncertainty you could have hidden. You will make the AI say “I’m not sure” in a product you are trying to sell.

Six dimensions of a trustworthy AI interface

1. Transparency — can the user see where this came from?

Sources shown inline and clickable, a visible distinction between what the model retrieved and what it generated, and clear labelling of which parts of the product are AI at all.

Test: can a user verify one specific claim without leaving the screen?

2. Control — can the user change what it did?

Output that is editable in place rather than offered as take-it-or-leave-it. Adjustable parameters in plain language. The ability to turn the feature off without losing the product.

Test: can a user keep 80% of an output and fix the other 20% without starting again?

3. Calibration — does it admit what it does not know?

Uncertainty expressed in words people understand rather than a percentage nobody can act on. A real “I don’t know” state. Visible limits on what the feature covers.

Test: has anyone ever seen this product decline to answer?

4. Recovery — what happens when it is wrong?

Undo on everything the AI changed, not just the last action. A preview before anything destructive. An obvious way to report a bad output, and a visible consequence when someone does.

Test: how many clicks from a wrong output back to the previous state?

5. Privacy — is the data question answered where it is asked?

What happens to this input, explained at the input, not in a policy page. Retention and training use stated plainly. A real choice where a choice genuinely exists.

Test: can a user learn whether their text trains the model without leaving the screen?

6. Accountability — is there a person behind it?

A visible route to human help, positioned as a normal option rather than a failure. Clear ownership of consequential decisions. Honest framing: the product assists, it does not decide.

Test: how long does it take a stuck user to reach a human?

Audit your own AI feature

Answer for one specific feature rather than the whole product. The chart maps where trust is thin, and the readout names what to fix first.

The AI trust audit

Six dimensions, scored zero to two. Honest answers are more useful than flattering ones.

Trust score

— / 12

Answer the six questions to see where trust is thin.

    0 of 6 answered

    Patterns that hold, and patterns that don’t

    Interface patterns for AI features, and their common counterfeits
    Do thisNot thisWhy
    Inline, clickable sources next to the claimA sources list dumped at the endA list nobody maps to a sentence is decoration, not verification.
    Uncertainty in plain words“87% confidence”A number implies a precision the model does not have, and users cannot act on it.
    Editable outputAccept or regenerateBinary choices throw away work that was 80% right.
    Clearly marked AI contentAI blended invisibly into the interfaceDiscovering it later costs more trust than disclosing it up front ever would.
    Preview before anything destructiveAgent acts, then reportsReversibility is what lets people try things at all.
    A genuine “I don’t know”An answer for every questionOne obvious fabrication retrains the user to distrust everything.
    A visible route to a personHuman support buried behind a bot loopA trapped user does not become a patient user.
    Data handling explained at the inputA link to a privacy policyThe question arises at the text box. That is where it has to be answered.

    One more worth naming on its own: resist personality as a substitute for reliability. A warm, apologetic, humanlike voice makes a system feel more trustworthy than its accuracy justifies, and that gap is exactly the over-trust problem. Be useful and plain instead.

    A single test that catches most trust problems: give someone a deliberately wrong AI output and watch whether they notice. If they accept it without checking, the interface has trained over-reliance, whatever the accuracy numbers say.

    How to test for trust

    Trust rarely shows up in standard usability metrics, so measure it directly.

    • Error detection rate. Seed known errors into outputs during testing. The share users catch is your real trust calibration score.
    • Verification behaviour. Watch whether people open the sources. Nobody opening them means either excellent trust or total resignation — the interview afterwards tells you which.
    • Repair time. From a wrong output to a state the user is happy with. If it is faster to start over, your control and recovery design has failed.
    • Abandonment points. Where people stop using the AI feature and do it manually. That point is usually where trust ran out, not where the feature got hard.
    • Trust over time. Ask at first use and again after a month. Trust that climbs steadily without accuracy improving is over-trust being manufactured.

    Design for the day it gets something wrong, because that is the day the product’s reputation is actually set.

    Where to start

    If you are building an AI feature now and want the highest return for the least work, do these four things, in this order: show sources inline; make every output editable; add undo to anything the system changes; and put a route to a human somewhere a frustrated person will find it. None of them requires a better model. All of them change how the product is experienced when the model is wrong — which is the only moment trust is really decided.

    How we build AI products at Adi Design. Trust dimensions are scoped at the start of the engagement, designed into the interface rather than added as disclaimers, and tested with seeded errors before launch. If you are planning an AI product and want that applied to it, get in touch.