Book a call Some customers will not take a first call without a SOC 2 report. We build the security, privacy and compliance pages, and link each claim to its document.
Companies that trusted us with their website
A fintech website is read by a customer and by the customer’s risk team. The customer needs to see what the product does with money and data. The risk team needs compliance pages where every claim links to a document, an AI policy that says what the model sees, and certifications with dates. In our audit of 114 YC AI company homepages (13 Oct 2026), 6 of the 15 fintech companies linked to a security or trust page. Pentaclay’s founder spent five years designing open banking software. Pentaclay is a B2B website design agency for AI companies, registered in New Mexico, USA.
Have you built sites like ours?
Yes: Freehold Wealth and VPA Connect.
How long does a full website take?
6 weeks, from the first call to launch.
When do I see the price?
Scope, price and launch date in writing within 3 business days.
Which platforms do you build in?
Framer, Webflow, Next.js or another platform.
And how we’d fix each one on your website.
A bank’s vendor team asked for our SOC 2 report before they would book a first call.
We show each certification with its date, or the expected month if the audit isn’t done, on a page linked from the footer.
Our site says we’re secure, but it doesn’t say how or link to anything.
We build compliance pages where each claim links to its document. Every claim comes from your team, and your team approves the copy.
We use AI on financial data. Customers ask what the model sees, and the answer is in a sales deck.
We put it on an AI policy page: what data the model sees, whether you train on it, and which AI providers are involved.
We serve two sides, and one homepage tries to talk to both.
Each audience gets its own first step on the first screen, so both sides find their way.
The risk team reads your site before the customer signs.
Each claim linked to its document. Not a badge wall.
SOC 2 if you hold US customer data. ISO 27001 if you sell to large European customers. PCI DSS only if you handle card numbers yourself.
What data the model sees, whether you train on it, and which AI providers are involved.
Where data is stored, and how it is deleted.
The vendors that touch customer data.
One first step per customer, on the first screen.
Customers a risk team can check.
SSO, user roles and audit logs: who did what, and when.
Before Pentaclay, our founder spent five years designing open banking software: product screens for banks, a developer portal, the brand and the website.
Investors and borrowers each get their own first step
One lender, two audiences with opposite goals. Investors put money in. Borrowers take it out. So the first screen gives each one a button of their own, and every deal gets a page the team edits itself.
The real product on the first screen, not a drawing
A real estate payments platform with three kinds of user. We built a site that opens on the actual campaign dashboard and shows real app screens further down.
Tick what’s true for your site today.
0 of 6
Start with the basics
Customers may leave before they find what they came for. The Free Website Audit shows what to fix first.
Get a free website audit2 to 3 weeks, start to launch
One page that explains what you sell and books the call.
6 weeks, start to launch
Every page written, designed and built for your team to edit.
We give you the price and the date before we design anything.
What you get
We write the copy first, then design every page.
What you get
Built so your team can edit it without a developer.
What you get
Live on the date in your contract.
What you get
Everything is handed over to you.
What you get
After the call, you get the scope, price and launch date in writing within 3 business days.
“Working with Kazi was great, and we’re very pleased with the outcome.”
Nima NejadChief Creative Officer, NOCAP Sports
“Was always willing to assist to go above and beyond.”
“The experience was truly outstanding. … Every task was completed on time…”
Verified client on ContraRead the reviews From our own research on YC companies.
6 of 15
YC AI fintech companies whose homepage links to a security, trust or compliance page.
Source: Pentaclay audit of 114 YC AI company homepages, 13 Oct 2026
3 of 15
Of the same fintech homepages, the ones that mention SOC 2.
Source: Pentaclay audit of 114 YC AI company homepages, 13 Oct 2026
33 of 102
YC fintech companies (2021 to 2026) with 16 or more people whose homepage runs on Webflow. 24 run Next.js, 9 run Framer.
Source: Pentaclay study of 3,791 YC startup homepages (2,945 answered), 10 Oct 2026
If you store or process customer data and sell to mid-size or large US companies, customers will ask for it, so show it with a date. If your audit is not done, say so and give the expected month. If you never touch customer data, a clear privacy policy is often enough for now.
Usually not. PCI DSS applies when you store, process or send card numbers yourself. With Stripe or a similar provider, most of that work sits with the provider.
Whether you train your models on customer data, which AI model providers you use, and whether there is a zero-retention option. Only what is true for your company today.
Yes. Every claim comes from your team in writing, and your team approves the final copy.
Prices for each service are on our pricing page. You get the scope, price and launch date in writing within 3 business days of the call.
What teams in this industry book us for.
If customers need a demo just to understand what you sell, your website isn’t doing its job.
Kazi Mohammed ErfanFounder
Loading the calendar…
Don’t want to fill in the form? Book a call directly Prefer to write? Send a message instead
Pentaclay is a B2B website design agency for AI companies that sell to enterprises. We write, design and build marketing websites in Framer, Webflow and Next.js, and stay to help after launch. Pentaclay LLC is registered in New Mexico, USA; our team works from Dhaka, Bangladesh, with calls until 12:30pm US Eastern. Founded in 2023 by Kazi Mohammed Erfan, who brings 12 years of design experience.