Salesforce health checks in Jackson.

Senior consultants from our U.S.-based team perform it. We ask for a read-only or limited administrative login, preferably one created for the review and removed afterward, so we can inspect metadata and settings without changing anything. For sensitive environments we can work from a full-copy sandbox instead. We rarely need to open patient or financial records themselves to assess how they are protected.

The free tool inside Setup compares a set of security settings to a Salesforce-defined standard and produces a score. We start from that score and then look at what it cannot see: how records are shared, how automation and code behave, what outside systems connect, whether the data is trustworthy and whether the design still fits your business. We also interview users and rank findings by business risk, which an automated score cannot do on its own.

No. The report is written so your internal team or any partner can act on it, with each finding described, located and paired with a recommended fix. Many clients handle quick fixes themselves and bring us in for larger items, such as automation consolidation or access redesign. Others roll the findings into a managed services backlog. The choice is yours.