AppExchange is the Salesforce marketplace where customers find and install apps that run inside their orgs.
Salesforce Select Partner · Builders of WorkNotes Plus · Architect-led
Building your AppExchange product, from package design to listing and upgrades.
We design and build managed packages in Lightning Web Components and Apex, prepare them for Salesforce security review and help you list them on AppExchange. We also built WorkNotes Plus, our own AppExchange app.
- 20+Enterprise implementations
- 15+Years of team experience
- 30+Salesforce certifications
- 5.0/5Client satisfaction (CSAT)
Proven Success With
30+ Salesforce certifications · 5.0/5 CSAT




















New to AppExchange?
What is AppExchange?
Most AppExchange apps ship as managed packages, with your namespace, protected code and upgrades you control.
Before a managed package can be listed, it has to pass the Salesforce security review.
Where you start
Does your idea need a managed package?
Four questions decide how your product should be packaged.
The idea
What problem it solves inside Salesforce.
Who installs it
Your own orgs or other companies.
What it touches
Objects, data and permissions it needs.
Where it runs
Fully in Salesforce or with your own service.
- Will other Salesforce customers install it?
Managed package on AppExchange
Second-generation managed package, security review and a listing.
Unlocked package
For your own orgs, when nobody else installs it.
API product with a listing
Your service connects to Salesforce and is reviewed as an API solution.
What we do
What does it take to build an AppExchange product?
Each piece of work leaves something your team keeps.
Product and package design
Data model, permissions, namespace and configuration.
You keepArchitecture and package designLWC and Apex build
Components and logic written for multi-org installs.
You keepSource repository you ownSecond-generation packaging
Managed versions built from source.
You keepPackage versions and release notesSecurity review preparation
Scans, fixes and submission documents.
You keepScan reports and false-positive notesListing setup
Listing content prepared in Partner Console.
You keepListing copy and screenshotsLicensing and trials
License Management App connected to your package.
You keepLicense management setup notesUpgrades and support
Versioned releases and push upgrades.
You keepRelease plan and support runbookCustomer documentation
What admins need to install and configure it.
You keepInstall and admin guide
Package architecture
What goes inside a managed package?
Five layers, designed so the app installs cleanly in orgs you have never seen.
- Record pages
- App pages
- Custom labels
- Accessibility
- Service classes
- Trigger handlers
- Async jobs
- Test classes
- Custom objects
- Custom metadata
- Namespaced fields
- Sharing
- Permission sets
- Object and field checks
- Sharing enforced
- Named credentials
- Namespace
- Managed 2GP
- Versions
- Push upgrades
ISV partner steps
What are the steps to list on AppExchange?
From joining the partner program to the first customer install.
- Your company
- SynconAI
- Salesforce Partner Program
- Security review
- Customers
- Your company to Salesforce Partner Program: Joins as an AppExchange partner
- SynconAI to Your company: Builds and versions the managed package
- SynconAI to Your company: Prepares scans and review documents
- Your company to Security review: Submits through Partner Console
- Security review to Your company: Returns findings or approval
- Your company to Salesforce Partner Program: Publishes the listing
- Customers to Your company: Installs from AppExchange
- SynconAI to Customers: Ships upgrades
Security review
How do you prepare for the AppExchange security review?
What reviewers look for, grouped the way we prepare it.
Code
- Salesforce Code Analyzer run and results kept
- Object and field access enforced in Apex
- Sharing declared on every class
- No credentials in code
External services
- Every external endpoint listed
- Scans of web apps and APIs you host
- Authentication and encryption documented
Submission
- Version promoted to managed-released
- Package built from your partner Dev Hub
- Test org access for reviewers
- False positives explained in writing
Tools
The tools we build AppExchange products with
Salesforce tools throughout, so your team can carry on without us.
- Packaging
Second-generation managed packages
Versions built from source control.
- CLI
Salesforce CLI
Package versions, scratch orgs and deployments from scripts.
- Orgs
Dev Hub and scratch orgs
A clean org for every feature and test run.
- Scanning
Salesforce Code Analyzer
The scan security review asks for, run on every build.
- UI
Lightning Web Components
The standard Salesforce component model.
- Partner
AppExchange Partner Console
Security review submission and listing management.
- Licensing
License Management App
Installs, trials and licenses tracked per customer.
How it runs
How does an AppExchange product move from build to launch?
Three stages, each with one goal. Your proposal states the dates.
- Build
A package that installs cleanly.
- Package design agreed
- LWC and Apex built and tested
- Managed versions released
- Review and list
Approved and listed.
- Scans run and findings fixed
- Security review submitted
- Listing prepared
- After launch
Customers stay current.
- Versioned upgrades
- Push upgrades where agreed
- Support and fixes
Cost and timing
What it costs and how long it takes
The review is free
A 60-minute architecture review of your AppExchange product setup, with a written plan you keep.
A fixed-scope proposal first
Before any work starts you get a written proposal: a fixed-scope project with milestones, or a monthly plan. You approve it, or you do not.
Timing follows scope
How long it takes depends on what is in scope. The proposal states the milestones, so you see the timeline before you commit.
Client stories
Client work we have delivered
Real engagements, described by industry. Each story covers the starting position, what we built and how we delivered it, end to end.
Commercial & Business ServicesA Subscription Estimator and Technical Library for Fire Protection ProfessionalsA Next.js web application for a fire protection business: a searchable technical library and estimator with role-based access, manufacturer filtering, PDF output and subscriptions, with AI product identification in development.Next.js · Custom web application · Authentication and roles · SubscriptionsRead the story
Communications, Media & TechnologyA Bilingual Knowledge Base That Answers Callers During a Major International EventA bilingual English and Japanese knowledge base for contact centre operators at a major international event: live answer suggestions, cross-language search with translated embeddings, operator content management and missing-question tracking.Custom AI · Vector search · Translated embeddings · Large language modelsRead the story
EducationOne Tutoring Calendar Across Salesforce and TeachWorksSalesforce development for an Australian tutoring provider: a custom session calendar, two-way TeachWorks appointment sync, attendance and completion mapping, and session notes into after-session reports.Salesforce Platform · Lightning Web Components · Apex · TeachWorks APIRead the story Client reviews
What clients say about working with our architects
See how teams describe working with SynconAI, from first scope to production delivery.
Salesforce Select Partner30+ Salesforce certificationsDelivery from Delaware & Sydney, worldwide
Simply Outstanding
“SynconAI Consulting are Simply the Best in the Business When it comes to Salesforce implementation and AI-powered solutions, SynconAI are in a league of their own. Their expertise, dedication, and ability to deliver results that truly move the needle sets them apart from every other consulting partner we've worked with. What they achieved with our Sales Cloud, Service Cloud, and custom Agentforce agent has completely transformed how we operate streamlining our pipelines and our customer service, and automating tasks that used to consume hours of our team's time. They don't just implement technology they transform businesses. If you want the best, you work with their team.”
“I had a very urgent deadline for our project reporting to be delivered and needed to build the module, dashboard and output reports in Salesforce. SynconAI were very responsive - they met with me online, responded to my emails quickly and took calls - whatever was needed to progress the work quickly. We are thrilled with the outcome and will continue to work with SynconAI in the future to continue to build our Salesforce capability and platform.”
“The team at SynconAI were fantastic, and promptly delivered on each project. They were able to guide us through every stage and made sure we were satisfied with the outcomes on multiple scopes of work.”
“They have been great and helping us transform out business by bringing what I conceptualize to life. Great at translating process/workflow needs into a solution. Been a pleasure work with and they're a critical part of our team and will be instrumental into bringing about my vision.”
“Working with SynconAI was a seamless and highly professional experience from start to finish. They took the time to deeply understand our business processes before designing and implementing a Salesforce solution tailored specifically to our operational needs. The team demonstrated strong technical expertise across Salesforce configuration, automation, integrations, reporting, and user experience design.”
Frequently asked questions
Building on AppExchange, answered.
Straight answers about managed packages, security review, listing and upgrades.
Designing, building and releasing an app other Salesforce customers install from AppExchange: managed packages in LWC and Apex, security review preparation, partner and listing setup, and upgrades.
The current Salesforce way to package an app for distribution. Versions are built from source control through a Dev Hub, carry your namespace and can be upgraded in customer orgs.
Managed packages and API solutions distributed on AppExchange must pass the Salesforce security review before they can be listed.
Upgrades to a package that passed review do not go through the full review again. Salesforce can still run periodic reviews, so security stays part of every release.
Salesforce runs the review and sets its timing. Preparing scans and documents thoroughly is the part we control, and it reduces rounds of findings.
Yes. SynconAI built WorkNotes Plus, an enterprise notes app for Salesforce, so we work through packaging and AppExchange steps on our own product too.
You do. The source repository, package and namespace belong to your company, and we hand over the release process with them.
Salesforce, AppExchange, Lightning Web Components, Apex and Salesforce CLI are trademarks of Salesforce, Inc. SynconAI is an independent consulting firm and is not affiliated with or endorsed by Salesforce, Inc. WorkNotes Plus is a SynconAI product.
Free architect conversation
Talk to an architect, not a sales rep.
60 seconds to brief us. A certified architect replies within one business day.










