Two factor via text is not approriate everywhere in UK due to iffy mobile coverage and 2FA is too much on every occassion. An ID/Password plus memorable word would be a better experience.

The Client portal has a QR code twice the size of Broker logo and is not the priority - the priority is the client being able to complete factfind. If the client scans the QR to download the app they then have to log in again. If they then click complete factfind in the app it takes them to a webpage which they then have to log in AGAIN! The QR code needs moving to the right hand side or much lower on landing screen. You need to remember if the client cannot get to and complete the factfind easily they will give up and no one will have any income. Please concentrate on the clients perspective more.