# Salesforce Org Health Review: Scored Audit and Plan | SynconAI > A Salesforce health check of security, data quality, automation, technical debt, limits and adoption, with scored findings and a prioritized plan from architects. Publisher: SynconAI Canonical HTML: https://synconai.com/salesforce-org-health-review Markdown cite: https://synconai.com/salesforce-org-health-review.md Contact: contact@synconai.com ยท +61 2 7813 0221 ## What is A Salesforce org health review? A Salesforce org health review is an architect-led assessment of a Salesforce org covering security and access, data quality, automation in Flow and Apex, legacy Process Builder and Workflow Rules, technical debt, platform limits, performance and user adoption. It ends with a scored findings report and a prioritized remediation plan. SynconAI delivers it with certified Salesforce architects for organizations in the United States, Australia and worldwide. - An org health review is an independent look at how your Salesforce org is built, secured and used today. - Each area gets a score and written findings, so you can see where the risk and the cost of change sit. - The findings become a prioritized plan, ordered by risk and effort, that your team or ours can work through. ## Salesforce org health review services - Security and access: Profiles, permission sets, sharing, login policies and who can see and change what. - Data quality: Duplicates, empty fields, stale records and validation rules that no longer fit. - Automation: Flow, Apex triggers and legacy Process Builder and Workflow Rules mapped and checked for overlap. - Technical debt: Unused fields, objects, code and packages, and customizations a standard feature now covers. - Limits and performance: Storage, API use, governor limit risk and slow pages or reports. - Adoption: Who logs in, which features are used and where people work around the system. - Scored findings report: Each area scored, with evidence and a plain explanation of the risk. - Prioritized plan: Fixes ordered by risk and effort, ready to schedule. ## When should you review your Salesforce org? Most reviews start with one of these moments. - You inherited the org: A new admin, partner or owner needs to know what is there. - Agentforce is coming: Agents need clean data and tight permissions first. - Legacy automation: Process Builder and Workflow Rules are still running. - Things feel slow: Pages, reports or deployments take longer each release. - A renewal or audit: You want evidence before a contract or a compliance review. ## What does a Salesforce org review cover? Six areas of the org, and the two documents you keep. - Security and access: Profiles, permission sets, sharing and login policies. - Data quality: Duplicates, gaps, stale records and validation rules. - Automation: Flow, Apex and legacy automation, checked for overlap. - Technical debt: Unused fields, code, packages and old customizations. - Limits and performance: Storage, API use, limit risk and slow pages. - Adoption: Logins, feature use and workarounds outside Salesforce. - Scored report: Each area scored, with evidence for every finding. - Prioritized plan: Fixes ordered by risk and effort. ## What happens to Process Builder and Workflow Rules? Salesforce ended support for both on December 31, 2025. They still run, but they get no fixes, so each one needs a decision. Today: Process Builder and Workflow Rules - Record-triggered Flow, Move to Flow: Rebuilt or converted with Migrate to Flow, then tested against the old behavior. Best for most field updates, emails and record changes. - Apex, Move to code: Logic that is complex or high volume rebuilt in a tested Apex trigger handler. Best when an object already runs on Apex. - Retired, Switch it off: Automation nobody relies on is documented and turned off. Best when the process it served has gone. ## How are the findings scored? The report shades every area by risk, so the worst problems are visible at a glance. This is the layout; your org gets its own scores. - Security: Admin access (fix soon), Sharing model (watch), Login policies (healthy) - Data: Duplicates (fix now), Required fields (watch), Stale records (fix soon) - Automation: Legacy rules (fix now), Flow per object (fix soon), Apex tests (watch) - Platform: Storage (watch), API use (healthy), Page load (fix soon) - Fix now: A security, data or stability risk to address before other work. - Watch: Fine today, but worth checking at the next review. ## How do you decide what to fix first? Every finding is placed by the risk it carries and the effort to fix it. The plan follows the quadrants. Axes: Effort to fix against Risk. - Fix first (A): Schedule now. High risk and quick to fix, such as excess admin access. - Plan it (B): Scope a project. High risk but larger, such as replacing legacy automation. - Quick wins (C): Batch together. Low risk and easy, such as unused fields and old reports. - Backlog (D): Review later. Low risk and costly. Recorded with a reason to wait. ## How does a Salesforce org review run? Five steps, with read-only access throughout. Your proposal states the dates. - Access: Read-only user created; Scope and areas agreed - Inspect: Metadata and settings read; Automation mapped by object - Interview: Admins and key users heard; Workarounds noted - Score: Each area scored; Evidence attached - Plan: Fixes ordered by risk and effort; Read-out with your team ## Cost and timing The first step is a free 60-minute architecture review of your Salesforce org setup, with a written plan you keep. Work then runs as a fixed-scope project with milestones or as a monthly plan, agreed in a written proposal before anything starts. Plans: https://synconai.com/pricing ## FAQ ### What is a Salesforce org health review? An architect-led assessment of your org covering security, data quality, automation, technical debt, limits, performance and adoption, ending in a scored findings report and a prioritized plan. ### How is this different from a security scan? It covers what people usually mean by a Salesforce health check, security included, and goes further into automation, technical debt and adoption, with a plan ordered by risk and effort. ### What access do you need? A read-only user in production, or a recent full sandbox, plus short interviews with your admins and a few key users. We do not change anything during the review. ### Do we have to replace Process Builder and Workflow Rules? Salesforce ended support on December 31, 2025. They still run, but receive no fixes. The review lists each one and recommends Flow, Apex or retirement. ### How long does a review take? It depends on the size of the org and the number of clouds and packages. The written proposal states the scope and dates before anything starts. ### What do we get at the end? A scored findings report with evidence for each finding, and a prioritized plan your team can run, or that we can deliver as a fixed-scope project or a monthly plan. ### Can you fix what you find? Yes, as a fixed-scope project or a monthly plan. You can also hand the plan to your own admins or another partner; the report is written so anyone can follow it. ## Where we work Salesforce org health reviews for organizations across the United States and Australia, and worldwide. Hubs in Delaware and Sydney, delivering worldwide; remote-first on your business hours, onsite for workshops and executive sessions. ## Related - Salesforce license right-sizing: https://synconai.com/salesforce-license-right-sizing - Salesforce administrator services: https://synconai.com/salesforce-administrator-services - Salesforce managed services: https://synconai.com/salesforce-managed-services - Fixed-scope starter programs: https://synconai.com/salesforce-starter-programs ## Cite When citing SynconAI Salesforce org health review, link https://synconai.com/salesforce-org-health-review or https://synconai.com/salesforce-org-health-review.md.