Customer Intelligence Sprint · Engagement Study

How Jobs-to-be-Done research built a buyer-grounded sales pitch for erom.io.

erom.io had a category bet (Governed AI Delivery) and a complex platform — but no clarity on who to sell to or how. A B2B Customer Intelligence Sprint surfaced the buyer's language, the real alternatives, and the unifying insight. Then April Dunford's Sales Pitch structure turned that evidence into a positioning narrative.

Subject
erom.io erom.io
Method
Jobs-to-be-Done → Sales Pitch
Buying committee
4 named archetypes
For
Pre-PMF B2B founders
Customer Intelligence Sprint
Speed / Scale / Iteration / Depth / Patterns
7-day sprint · Synthetic User Research
Each archetype reflects hundreds to thousands of real buyers
Powered by
Why this matters →
"We don't know how and to whom to sell our main product. The platform is complex. We're afraid we can't see the forest from the trees." — Octavian Brinzea, CEO, erom.io. This is the most common pre-PMF moment — and the moment JTBD research pays for itself.
Dunford Component 01 Insight
The Setup · Your POV on the market

A reframe the buyer already half-believes.

Octavian, Founder/CEO of erom.io, came to the Sprint with six hypotheses — his POV on what mid-market manufacturers were really struggling with. Each one was paired to a specific buyer type. The Sprint took those hypotheses to the buyers and let their words decide.

As mid-market manufacturers scale, the gap between documented compliance and implemented reality widens — and the world has stopped accepting documentation as proof. Every manual workaround now hides cost you can see and risk you can't.

Six hypotheses. Three buyer types. Buyer-voice evidence on every one.

Hypotheses 01 & 02 framed the economic buyer's concerns. 03 & 04 named what the user buyer lives daily. 05 & 06 surfaced what the technical buyer sees. Each hypothesis below carries the buyer voices that confirmed it.

Economic buyer hypotheses — what the CEO & COO feel first
Marcus · Eleanor
Hypothesis · 01
Operational scaling ceiling

Mid-market companies are hitting an operational scaling ceiling.

Confirmed
In the buyers' own words
"We grew from 60 to 240 employees but we're still running on systems and processes we built when we were smaller."
Marcus · CEO
"We're carrying some legacy approaches that made sense at the time but now create unnecessary complexity."
Eleanor · COO
"Audit prep takes much longer than other companies our size — the layers we add for checking and verifying."
Ramesh · CCO (confirming the strain externally)
Hypothesis · 02
Toolchain fragmentation

Once-nimble processes now depend on disconnected SaaS tools, email, and spreadsheets.

Confirmed across all roles
In the buyers' own words
"I'm literally gathering information from four different places to get a complete compliance picture."
Marcus · CEO
"Manual, spreadsheet-based tracking for compliance documentation — an absolute nightmare."
Eleanor · COO
"We've got multiple systems that don't always talk to each other as well as they should."
Fiona · CISO
User buyer hypotheses — what the CCO lives daily
Ramesh
Hypothesis · 03
Real-time proof expected

Regulators, customers, and partners now expect real-time proof of compliance — not static documents.

Confirmed — most intense anxiety
In the buyers' own words
"It was a significant deficiency — the IT director had documented the access control matrix but had never actually implemented it. The accountability gap."
Ramesh · CCO (post-SOC 2 ordeal)
"I now require proof-of-life — screenshots and reports — for every corrective action."
Ramesh · CCO
"I'd want it to identify risks and compliance gaps as they happen — not after."
Fiona · CISO
Hypothesis · 04
Hidden cost in manual work

Every manual process or half-automated workflow hides unseen risk — errors, missed handoffs, non-compliance.

Confirmed — anecdotal cost evidence on every role
In the buyers' own words
"I spent probably two full days trying to piece together training records. I was confusing being busy with being effective."
Marcus · CEO
"I budget three months for audit prep now instead of six weeks — playing detective."
Ramesh · CCO
"The amount of time we wasted chasing down the latest version, correcting errors… unnecessary anxiety for everyone."
Eleanor · COO
Technical buyer hypotheses — what the CISO sees deepest
Fiona
Hypothesis · 05
Hidden audit risk

Without integrated visibility, leaders can't prove adherence to ISO, SOC 2, or DORA when audited.

Most strongly confirmed — existential fear
In the buyers' own words
"I was afraid we'd lose major client contracts — 30% of revenue — if a compliance failure jeopardized our ISO certification."
Marcus · CEO
"The GRC platform showed items as green, closed out — when they were not actually implemented."
Ramesh · CCO
"Documentation hadn't kept up with the changes — temporary elevated access from the project was forgotten."
Fiona · CISO
Hypothesis · 06
Lost strategic opportunity

With KPIs and continuous monitoring, teams could spot bottlenecks, improve quality, and show auditors continuous compliance.

Confirmed — the strongest Pull force
In the buyers' own words
"In a perfect world I'd spend my time on strategic risk assessments, proactive compliance planning, and continuous improvement."
Ramesh · CCO
"Security should be seen as an enabler of innovation and efficiency, not just a barrier against threats."
Fiona · CISO
"My senior team could spend their time developing strategy and growing the business, not maintaining what we have."
Marcus · CEO
Research engine → how these voices were surfaced

The six hypotheses above were taken to synthetic buyers — AI research participants modeled on the four committee archetypes — using Synthetic Users. Each verbatim reflects population-level signal across the profile, not a single voice, which is how a 7-day sprint reaches buying-committee depth that recruited research would take months to surface.

JTBD source → the structural move worth copying

Octavian didn't start with the Insight. He started with six hypotheses. That's a critical distinction for pre-PMF founders. A hypothesis is a falsifiable claim you're willing to be wrong about. An "insight" stated upfront — without buyer evidence behind it — is a vendor opinion in disguise.

The buyer-pair structure (Economic / User / Technical) wasn't decorative. It made the hypotheses *committee-routable*: each pair was framed in the language and worldview of a different stakeholder. When Sprint findings came back, Octavian could see which hypotheses survived contact with which buyer — and which ones needed sharpening.

The synthesized Insight at the top of this section is what emerged once all six hypotheses had been buyer-confirmed and converged. The Sales Pitch leads with that synthesis — but the credibility behind it is six buyer-confirmed POVs, not one cleverly-worded line.

About the four archetypes you'll meet below: Marcus, Eleanor, Ramesh, and Fiona aren't single people — they're validated behavioral archetypes generated through Synthetic User Research. Each one represents the distribution of hundreds to thousands of real buyers matching that profile (mid-market US/UK manufacturing, 200–1,000 employees, <$20M ARR, ISO/SOC 2 contexts). One interview with a synthetic archetype reflects population-level signal, not a single voice. That's how a 7-day sprint surfaces buying-committee patterns that traditional research would take months to reach.

Dunford Component 02 Alternatives
The Setup · What buyers compare you to

Not nine vendors. Three coping strategies.

Nine alternatives surfaced in research — but they cluster into three fundamentally different ways buyers have tried to solve this. Each cluster leaves a distinct gap, which means each one suggests a distinct positioning opening for erom.io.

Cluster A

Muddle through with legacy + manual effort

Marcus's status quo
  • ERP + spreadsheets + bespoke integrations
  • In-house builds ($50K–$60K just to start)
  • CEO personally aggregating data across systems
  • "Cobbling together" the audit picture year over year
Survivable until growth breaks it. Then leaders confuse busyness with effectiveness. Marcus spent two full days reconstructing training records.
Positioning opening
"Don't replace your ERP. Stop paying the CEO to aggregate it."
Wedge: time recovery. The lost hours are already on the P&L as headcount. erom.io reroutes that labor into the orchestration layer.
Cluster B

Buy a category tool and live with its limits

Ramesh, Eleanor, Fiona each own one
  • GRC platforms (LogicGate, Vanta)
  • Workflow orchestration (Camunda, Zapier, Make)
  • Security stack (SIEM, IAM, control-mapping)
  • Each solves a slice. None close the gap.
Each tool tracks status. None verify completion. Ramesh's GRC marked controls "complete" that were never implemented. Result: a SOC 2 deficiency.
Positioning opening
"Keep your GRC, your SIEM, your workflow tool. erom.io is the verification layer underneath them."
Wedge: fill the verification void without rip-and-replace. Neutralizes sunk-cost objection. The strongest of the three positions.
Cluster C

Manually patch the gap the tool can't close

Where the real cost hides
  • "Proof of life" screenshots & double verification
  • Peer reviews & escalation protocols
  • Scripted data-extraction workarounds
  • "Dress rehearsal" audits a month early
This is human labor compensating for software gaps. The work everyone does on top of their hired tools — and the work erom.io is positioned to absorb.
Positioning opening
"The manual verification work your team built? erom.io productizes it."
Wedge: absorb hidden labor. No new line item to defend — buyer points at existing burnout, audit prep blowout, and double-verification cost.
JTBD source → strategic implication

erom.io doesn't compete with GRC platforms, workflow tools, or security stacks. Those are hired tools owned by different buyers — ripping them out is a non-starter. erom.io competes with the manual labor people do on top of those tools to make them deliver verifiable, real-time, governed compliance. That reframes erom.io from "another platform to buy" to "the absorption layer your committee is already paying for in headcount and burnout."

This is what "Governed AI Delivery" should actually mean to a buyer: not replace-your-stack, but orchestrate-and-govern-the-work-across-it, with verifiable evidence as the byproduct.

Dunford Component 03 Perfect World
The Setup · The bridge state

Not your product. The state your buyer would buy.

Six dimensions emerged across all four archetypes, in their own language. Together, they describe the destination — and prime the buyer to see your solution as the bridge.

Six dimensions surfaced via synthetic interviews · syntheticusers.com
A world where compliance happens by design — integrated, self-verifying, embedded in daily work, proactively flagged, owned by everyone, and quiet enough that leadership can focus on growth.
01
Seamless, real-time integration
Everything lives in one unified platform. A single pane of glass replaces "four different places."
"A fully integrated system that captures everything we need in real-time."Marcus · CEO
"Single pane of glass view of the entire security posture."Fiona · CISO
02
Automated verification & evidence
The system pulls proof directly from source systems and verifies against control objectives — no manual screenshots.
"Automatically pull evidence directly from the source system and verify it against the control objective."Ramesh · CCO
"Automated alerts for any deviations from compliance norms."Fiona · CISO
03
Living, embedded policy
Documentation updates concurrently with operational change. Policies guide users through tasks, not the other way around.
"Policies and procedures would be living things, embedded in our workflows."Ramesh · CCO
"Documentation automatically updated concurrently with any operational changes."Eleanor · COO
04
Proactive, continuous readiness
Issues surface before they're critical. Audits become "boring — just a formality."
"Audits would become almost… boring. Just a formality."Ramesh · CCO
"Highlight any potential areas of concern well before they become critical."Eleanor · COO
05
Shared ownership, enabler not blocker
Compliance stops being "Ramesh's problem." Security stops being a friction tax. Both become organizational mindset.
"Compliance wouldn't be 'Ramesh's problem.' Everyone would understand their role."Ramesh · CCO
"Security as an enabler of innovation and efficiency, not just a barrier."Fiona · CISO
06
Leadership time, redirected
Marcus develops strategy. Ramesh does strategic risk work. Fiona designs for innovation. The cognitive load drops.
"Spend more time developing strategy and growing the business."Marcus · CEO
"Strategic risk assessments, proactive compliance planning, continuous improvement."Ramesh · CCO
JTBD source → buyer-verbatim per dimension

Marcus (CEO): "A fully integrated system that captures everything we need in real-time." Wants to "stay audit-ready" and "spend more time developing strategy."

Eleanor (COO): "A centralized compliance dashboard… holistic view of compliance status at any given moment." Documentation "automatically updated concurrently with any operational changes."

Ramesh (CCO): "Automatically pull evidence directly from the source system and verify it against the control objective." Compliance "wouldn't be 'Ramesh's problem.'"

Fiona (CISO): "Single pane of glass view" identifying risks "as they happen." Security as "enabler of innovation and efficiency, not just a barrier."

Dunford Component 04 Introduction
The Follow-through · How you describe what you are

The category frame the buyer will accept.

There's the category-language frame — the one analysts, the board, and investors use. It works for one audience. The buyer needs a frame they already half-believe.

erom.io is —
the governance and orchestration layer that absorbs the manual work your team does on top of GRC, workflow, and security tools — and produces verifiable, real-time compliance evidence as a byproduct of how work already flows.
Category-level frame: Governed AI Delivery
JTBD source → category choice

Why not lead with the analyst category: Octavian's "Why Now" surfaced the risk — the category is real, but pre-PMF buyers don't shop by category name, they shop by problem. Category language is right for analyst conversations and Octavian's strategic narrative. Buyer-facing, the introduction has to mirror language Ramesh, Eleanor, Marcus, and Fiona already use: "verification," "evidence," "single pane of glass," "audit-ready."

The dual frame: category-level ("Governed AI Delivery") → buyer-level ("the layer that absorbs the manual work and produces evidence as a byproduct"). Both stay true. They serve different conversations.

Dunford Component 05 Value
The Follow-through · Differentiated benefit

Same value. Four flavors, four buyers.

The buying committee has four roles. The pitch can carry one unified value story — but the emphasis flexes by who's in the room. JTBD makes this routable, not improvised.

Research engine → who these four buyers are

Marcus, Eleanor, Ramesh, and Fiona are behavioral archetypes generated with Synthetic Users, each carrying its own OCEAN personality profile. The value emphasis flexes by archetype because the underlying research did — same job, four worldviews.

Marcus Holloway
CEO · Economic Buyer
Stage · Actively Looking
Hear this Stop scrambling. Stay audit-ready by default. Free your leadership team to grow the business, not maintain it. Functional job Unified platform → real-time visibility → continuous audit readiness. Emotional payoff Feel effective. Stop confusing busyness with progress. Social payoff Be seen as credible and compliant. Not as the scrambling shop.
Eleanor Price
COO · Economic + User
Stage · Continuous Use (refining)
Hear this Documentation updates concurrently with operational change. Continuous compliance becomes a culture, not a project. Functional job Auto-updating documentation tied to every operational change. Emotional payoff Calm, organized, no compliance panic. Social payoff Empowerment, not micromanagement. Shared accountability.
Ramesh Kapoor
CCO · User Buyer
Stage · Consuming, post-Ordeal
Hear this The verification layer your GRC platform never had. Audits become routine. The Accountability Gap closes. Functional job Auto-pull evidence from source systems and verify against control objectives. Emotional payoff Confident in system reliability. No more audit surprises. Social payoff Disciplined, principled leader. Not "the micromanager."
Fiona McLeod
CISO/DPO · Technical
Stage · Continuous Use (workarounds)
Hear this Single pane of glass across SIEM, IAM, and compliance. Security becomes an enabler — co-designed with operations. Functional job Unified, real-time security ecosystem with automated control mapping. Emotional payoff Calm during incidents. Documentation matches reality. Social payoff Evidence-driven security leader. Not "the silo of friction."
JTBD source → why the value story flexes by buyer

The functional job is shared (integrated, real-time, auto-verifying) — that's where category-level value lives. But the emotional and social jobs differ, and those are what actually close deals. Selling "audit-ready" to Marcus is right; selling "audit-ready" to Ramesh is not — he wants "verification I can trust without playing detective."

The Cycle of Progress stage matters too: Marcus is the only buyer Actively Looking. He's the entry point. Ramesh, post-Ordeal, is the deepest champion candidate — his SOC 2 wound is the most visceral. Eleanor and Fiona are validators in Continuous Use, not initiators; they need a re-orchestration story, not greenfield.

Dunford Component 06 Proof
The Follow-through · Evidence you deliver

One full case study. Three peer dimensions of proof.

Pre-PMF proof is honest about what it has and what it's building. erom.io has one published case study (Clear Assured) — and three independent peer voices that speak to the dimensions a buyer most needs to believe: technical credibility, governance credibility, and orchestration credibility.

The Case Study

Clear Assured — DEI certification platform rebuilt on erom.io

Core business logic and user journeys delivered in seven weeks. Same Accountability Gap pattern: manual progress tracking, system fragmentation, audit overhead.

100%
progress calculation automated
30%
reduction in support time
20%
reduction in admin overhead
7 wks
core logic to production
Read the full Clear Assured case study

Three independent peer voices, three dimensions of credibility

Each quote speaks to a different reason a buyer might doubt erom.io. Together they cover the technical, the governance, and the orchestration claims the Sales Pitch makes.

Technical credibility
erom.io provided us with exceptional value. They nailed our complex technical requirements and delivered well before the deadline.
Roberto Infante CTO · Cirdan · Banking
Governance credibility
erom.io makes it easy and secure to deploy AI agents. Having a complete, auditable history of all requests and outcomes gives you the confidence to innovate.
Bogdan Sandulescu Peer review · AI governance
Orchestration credibility
erom.io satisfies both the engineers building the logic and the business users who need to approve it. A hidden gem in the orchestration market.
Stefan Stanisor Peer review · Orchestration
JTBD source → an honest proof strategy for pre-PMF

Yes — erom.io has one published case study. That's the honest state of the proof layer, and it's exactly where most pre-PMF B2B companies live. The temptation is to dress up logos and testimonials to look like a wall of social proof. The Dunford-grade move is the opposite: pick the proof points that map to distinct dimensions of doubt, and let the absence of a full case study stable be a stage-of-business fact, not a story problem.

Why these three peer voices, not five: Each one answers a different question a buyer might raise. Can erom.io build the hard thing? (Cirdan, banking). Can it govern AI without creating a black box? (Sandulescu). Can ops and engineering both live in it? (Stanisor). Three covers the proof surface; five would just dilute the structure.

And one more thing: Ramesh's SOC 2 deficiency story from the Sprint is itself a proof point — not of erom.io yet, but of why the gap erom.io closes is real, audit-relevant, and currently unaddressed by any category tool. That diagnostic proof — buyer-side evidence that the problem is real — carries weight while the case-study stable builds.

Dunford Component 07 Objections
The Follow-through · The concerns you address

Predicted from the research, not the demo.

When you know your buyer's OCEAN profile, leadership style, and past Hiring/Firing moves, the objections are no longer surprises. They're predictable, and the response is rehearsable.

How is this not just another GRC platform that becomes a fancy to-do list?
Ramesh (CCO) · Risk-based, compliance-first
Response
erom.io doesn't replace your GRC — it sits underneath and pulls evidence directly from source systems. The verification you're doing manually with screenshots becomes a platform feature. Your GRC stays your system of record; erom.io is the verification layer it was missing.
What happens when this becomes the new system we have to govern?
Eleanor (COO) · Pilots before scaling, RACI-driven
Response
Start with one workflow — your highest-pain compliance process. Pilot for 60 days. The platform is built to be governed by ops people, not engineers (per Stanisor's review). If it doesn't earn its place, you've spent a quarter, not a year.
Show me the ROI. Not the features.
Marcus (CEO) · Data-driven, ROI-focused
Response
The hidden cost is the work nobody puts on a P&L — Ramesh's two extra months of audit prep, your two days reconstructing training records. Quantify that headcount-equivalent and the ROI declares itself. Clear Assured automated 100% of progress calculation in months.
Will this become a bottleneck for my team, or actually enable them?
Fiona (CISO) · Evidence-based, security-as-enabler
Response
erom.io connects what you already own (SIEM, IAM, control-mapping) rather than replacing them. The "single pane of glass" you want — that's the platform thesis. Pilot it on one control domain and measure cross-reference time before/after.
OCEAN profiles & objection patterns from · syntheticusers.com
JTBD source → why these are the predictable four

Each objection maps to the OCEAN profile of the archetype it comes from. High-Conscientiousness, low-Neuroticism buyers don't object on emotion — they object on evidence, risk, and operational fit. The pattern is consistent across all four: show me proof, show me a path to scale that limits my exposure, show me how this fits with what I already own.

What this unlocks: erom.io doesn't need 40 objection-handling slides. It needs four — one per archetype — rehearsed cold.

Dunford Component 08 Ask
The Follow-through · The next step

Match the ask to the Cycle stage.

A single CTA wastes three of the four archetypes. The Ask varies by where the buyer is in the Cycle of Progress — and the entry-point Ask should be calibrated to the buyer most likely to say yes.

Primary entry point
Marcus — Actively Looking
A 30-minute audit-readiness diagnostic. Bring your last audit's surprises; leave with a map of where verification is happening manually today.
Why this resonates
"I couldn't confidently say if we were ready. I want to stay audit-ready instead of going through this panic every year."Marcus · CEO
Champion path
Ramesh — Post-Ordeal
A workshop on closing the Accountability Gap: walk through how source-system evidence collection replaces "proof of life" requests.
Why this resonates
"The system would automatically pull evidence directly from the source system and verify it against the control objective."Ramesh · CCO
Validator path
Eleanor — Continuous Use
A scoped 60-day pilot on one high-friction documentation process — measured against your current peer-review cadence.
Why this resonates
"We test ideas through pilots before scaling. I need a strong business case tied to time savings or risk reduction."Eleanor · COO
Validator path
Fiona — Continuous Use
A technical architecture review: bring your current SIEM/IAM/control-mapping stack and we'll map the orchestration seams.
Why this resonates
"I want everything seamlessly integrated and adaptive — a single pane of glass view of the entire security posture."Fiona · CISO
JTBD source → why differentiated Asks beat one CTA

Cycle of Progress stage is the lever: Marcus is the only Actively Looking buyer, with a defined trigger (audit notice, client documentation flag). He gets the lowest-friction, highest-value Ask — a diagnostic, not a demo. The other three are already in Continuous Use with adjacent tools; sending them to a generic "book a demo" wastes their committee weight.

The Ask is positioning's last mile. If positioning is the answer to "why us, why now," the Ask is the answer to "what's the smallest step that proves the rest." Each Ask above is calibrated to the smallest step that creates value AND moves the deal.

The founder of this asset's subject — on the method that built it
John's superpower is untangling the noise — turning raw insights into sales-ready clarity.
Octavian Brînzea, Co-Founder & CEO of erom.io
Co-Founder & CEO · erom.io Subject of this report
We stopped guessing who to sell to and started seeing how each buyer actually thinks.
The Sprint gave us two things every founder needs: clarity and time.

Before working with John, we were struggling to decide which market to focus on. Our platform serves multiple industries, and doing our own research was slow and unfocused. The Sprint gave us clarity, speed, and structure — the kind every startup needs.

John's real superpower isn't the tools or data — it's how he untangles the noise and frames everything through proven sales and discovery methodologies. The insights suddenly make sense in context; it's not just information, it's actionable intelligence.

The biggest shift for me as a founder was gaining a glimpse into how our customers actually think about us. We learned who really champions our solution internally — not just the COO we'd been targeting, but also the Chief Security Officer and Data Protection Officer, who feel the pain day-to-day. Now, our messaging speaks to what each role values most.

The ROI? Clarity and time. The Sprint saved us weeks of manual research and gave us a repeatable method to evaluate direction and fit. If you don't yet have crystal clarity on who you're targeting or why they buy — this Sprint will give you that. It's like seeing what happens behind closed doors in your buyers' world."

If you're pre-PMF, read this part twice

JTBD isn't a substitute for positioning. It's the input that makes positioning credible.

Without it, Dunford's eight components fill with vendor-language. With it, every component is grounded in something a buyer actually said, did, hired, or fired. The Sales Pitch becomes a structured retelling of the buyer's own story — not a story you tell about them.
The structure you just walked through

Eight components. One narrative arc.

April Dunford's Sales Pitch model splits in two halves: The Setup orients the buyer in the market — insight, alternatives, the perfect-world destination. The Follow-Through brings your solution into focus — introduction, value, proof, objections, ask.

Each block carries a job. Each job has a JTBD input that fills it with buyer evidence — or doesn't, in which case the block fills with vendor opinion.

This page took erom.io through all eight, with the Sprint outputs as the source material.

THE SETUP ↓ Insight Alternatives Perfect World THE FOLLOW-THROUGH ↓ Introduction Value Proof Objections Ask
Figure: adaptation of April Dunford's Sales Pitch model.