How healthy is your Salesforce org?

Every user signs in with multi-factor authentication, either directly or through single sign-on.

Access is granted mainly through permission sets, and profiles are kept minimal.

Integrations run under dedicated integration users, not a person’s login.

Someone reviews active users, admin rights and connected apps at least twice a year.

Duplicate and matching rules are active on leads, contacts and accounts.

Required fields and validation rules reflect how the business actually works today.

Every important field has a clear system of record when data comes from other systems.

Leaders trust the numbers in Salesforce without exporting to a spreadsheet to fix them.

Active Workflow Rules and Process Builder processes have been migrated to Flow.

Each object has a small, documented set of automations rather than overlapping ones.

Unused fields, reports, page layouts and installed packages are cleaned up regularly.

Changes are built and tested in a sandbox before they reach production.

Reps and agents keep their real pipeline or caseload in Salesforce, not in side spreadsheets.

Page layouts show each role only the fields it needs.

Managers run meetings from Salesforce dashboards.

New hires get role-based Salesforce training within their first weeks.

A named person owns the Salesforce roadmap and decides what gets built next.

Your org is documented well enough that a new admin or partner could take over.

Knowledge articles or other content an AI agent would rely on are current and owned.

You have agreed which AI use cases are allowed and who reviews AI output.