diff --git a/pages/admin/settings/index(default).phtml b/pages/admin/settings/index(default).phtml
index af3e3c2..2119f0d 100644
--- a/pages/admin/settings/index(default).phtml
+++ b/pages/admin/settings/index(default).phtml
@@ -15,6 +15,8 @@
 <div class="app-dashboard">
   <div class="app-tiles">
     <?php
+    // Tile order follows an onboarding flow: app basics → look & feel →
+    // outbound mail → user policies → integrations → observability.
     appTile([
       'href' => 'admin/settings/general',
       'label' => t('General'),
@@ -22,6 +24,20 @@
       'iconTone' => 'blue',
       'tooltip' => t('App title, language, registration and new-user defaults'),
     ]);
+    appTile([
+      'href' => 'admin/settings/branding',
+      'label' => t('Branding'),
+      'icon' => 'bi bi-palette',
+      'iconTone' => 'pink',
+      'tooltip' => t('App logo and favicon'),
+    ]);
+    appTile([
+      'href' => 'admin/settings/email',
+      'label' => t('Email'),
+      'icon' => 'bi bi-envelope',
+      'iconTone' => 'amber',
+      'tooltip' => t('SMTP connection and sender details'),
+    ]);
     appTile([
       'href' => 'admin/settings/account-access',
       'label' => t('Account access'),
@@ -36,6 +52,20 @@
       'iconTone' => 'red',
       'tooltip' => t('Inactivity deactivation and deletion policy'),
     ]);
+    appTile([
+      'href' => 'admin/settings/sso',
+      'label' => t('Microsoft SSO'),
+      'icon' => 'bi bi-microsoft',
+      'iconTone' => 'cyan',
+      'tooltip' => t('Shared Microsoft Entra ID credentials'),
+    ]);
+    appTile([
+      'href' => 'admin/settings/api',
+      'label' => t('API'),
+      'icon' => 'bi bi-key',
+      'iconTone' => 'emerald',
+      'tooltip' => t('API token policy and CORS allowlist'),
+    ]);
     appTile([
       'href' => 'admin/settings/audit',
       'label' => t('Audit log'),
@@ -50,34 +80,6 @@
       'iconTone' => 'green',
       'tooltip' => t('Frontend telemetry collection and event allowlist'),
     ]);
-    appTile([
-      'href' => 'admin/settings/email',
-      'label' => t('Email'),
-      'icon' => 'bi bi-envelope',
-      'iconTone' => 'amber',
-      'tooltip' => t('SMTP connection and sender details'),
-    ]);
-    appTile([
-      'href' => 'admin/settings/api',
-      'label' => t('API'),
-      'icon' => 'bi bi-key',
-      'iconTone' => 'emerald',
-      'tooltip' => t('API token policy and CORS allowlist'),
-    ]);
-    appTile([
-      'href' => 'admin/settings/sso',
-      'label' => t('Microsoft SSO'),
-      'icon' => 'bi bi-microsoft',
-      'iconTone' => 'cyan',
-      'tooltip' => t('Shared Microsoft Entra ID credentials'),
-    ]);
-    appTile([
-      'href' => 'admin/settings/branding',
-      'label' => t('Branding'),
-      'icon' => 'bi bi-palette',
-      'iconTone' => 'pink',
-      'tooltip' => t('App logo and favicon'),
-    ]);
     ?>
   </div>
 </div>