← Back to app

How to use Flow Audit

This guide explains how to connect Salesforce, run a Flow health scan, understand results, and share reports with your team. No technical background required.

What Flow Audit does

Flow Audit reads Active Flow metadata from your org (flows with a blank namespace: your org-owned flows) and related Validation Rule metadata, then flags common architecture problems, for example:

  • Database updates in the wrong type of flow (Before-Save vs After-Save)
  • Flows that run on every record save with no entry criteria
  • Dead-end steps and broken decision paths
  • Missing error (fault) handling on DML
  • Hardcoded Salesforce record IDs
  • Get Records / DML inside loops, null-handling gaps, and Screen Flow input issues

Packaged (namespaced) Active flows are listed as excluded and are not downloaded or audited, same idea as filtering Setup → Flows by Namespace = blank.

The app does not change anything in Salesforce. It only analyzes metadata and shows a report in your browser.

Quick start

1. Connect your org

  1. On the home screen, choose Production / Developer or Sandbox.
  2. Click Connect Salesforce and sign in.
  3. When you return, the top-right status shows Connected with your username.

2. Run an audit

  1. Click Start Comprehensive Audit.
  2. Watch the progress bar. Large orgs (hundreds of flows or many validation rules) can take several minutes. A time estimate appears after the app counts your metadata.
  3. Keep this browser tab open until the scan finishes. Do not refresh or close the tab mid-audit.
  4. Results appear automatically when the scan completes. The summary shows Active (blank namespace) listed · downloaded · audited · skipped.

3. Review findings

  • Click the summary cards or left sidebar to filter by All, Critical, Warnings, or Performance Tips.
  • Use Group by Flow or Group by Issue type in the toolbar.
  • Each item lists a reference like R-01, the flow name, the element, and a plain-language explanation.

4. User guide

Click User guide in the header to open this help in a panel on the same page (so an audit in progress is not interrupted).

Understanding severity

LevelWhat it meansSuggested action
CriticalHigh risk of errors, extra DML, or broken logicAddress before production release when possible
WarningPerformance or design concernSchedule fixes or document exceptions
Performance Tips (Info)Awareness items, e.g. overlap with validation rulesReview; may be acceptable by design

Audit rules & suppressions

From the results screen, click Audit rules.

  • Uncheck a rule: Stops showing that check in this browser only.
  • Disable on a finding card: Hides that specific check (for example Redundant DML Before-Save only), not every check under the same R-XX. Use Audit rules to turn whole R-XX groups on or off.
  • Suppress this finding: Hides one specific issue until you remove it from the suppressed list.

Check Show suppressed in the toolbar to see hidden items again.

Your organization may disable certain checks for everyone on the server. Those cannot be turned back on from the UI.

Saved report after refresh

Your last audit is saved in this browser for each Salesforce org you scan.

After you connect, your login stays active for about 7 days in this browser (refreshing the page does not sign you out). Use Switch Org to disconnect early.

  • Refreshing the page can bring results back even if you are disconnected.
  • Use Clear saved report on the banner to delete the cached copy.
  • Reports do not sync to another device or browser.

Switch org

Click Switch Org to disconnect and connect a different Salesforce org (or the same org with a new login). The saved report for the org you leave is cleared from this browser.

Share report

After a scan, click Share report. Exports reflect your filters and suppressions unless Show suppressed is on.

OptionUse when
Create share linkYou want a read-only web link for ~72 hours (no Salesforce login for viewers).
Download HTMLYou need a file that works offline or in email.
Download JSONYou will import data into another tool (full structure).
Download CSVYou want a spreadsheet (Excel, Google Sheets): one row per finding.
Copy for emailFormatted paste for Gmail/Outlook (no visible # or ** markers).
Copy for SlackPlain Slack-friendly text (large reports are truncated to message limits).
Copy markdown (Confluence)Markdown for Confluence or docs that understand Markdown.
Share / copyMobile share or quick clipboard copy.

Share by session ID (if shown)

Important: This is not your Salesforce session ID from Developer Console. It is a Flow Audit ID for viewing a report snapshot only. Copy the View URL from the share dialog and send it to colleagues. If they see “No report for this session ID,” the link may have expired, the server restarted, or the report was not published yet. Open Share report again and click Update session report.

Temporary links are stored on the server and may stop working after a redeploy. For long-term sharing, use Download HTML or JSON.

Feedback / Contact us

Use the Feedback button at the bottom-right of the app to send a message to the Flow Audit team.

  • Include your email and a short description of what worked, what broke, or what you’d like next.
  • You can optionally attach a screenshot or log file (up to 5 MB).
  • Clicking outside the feedback panel does not close it. Use Close or Cancel.

What the app does not do

  • Does not run or activate flows in your org
  • Does not audit managed-package (namespaced) flows
  • Does not show live CPU or governor limit usage
  • Does not replace code review, testing, or change management
  • Cannot find every possible logic error. Use Flow Debugger and UAT as well

Troubleshooting

ProblemWhat to try
Cannot connect to SalesforceConfirm you chose the right environment (Production vs Sandbox). Ask your admin that the Connected App callback URL matches this app’s URL (for example https://audit.felixiotech.com/auth/callback).
Audit seems stuck / takes a long timeKeep the tab open. Large orgs can take several minutes. Watch the progress message and time estimate. Do not refresh mid-scan.
Flow count lower than Setup “Active”The app audits blank-namespace Active flows only. Packaged flows are excluded on purpose.
No results after refreshRun a new audit, or check you are on the same org as before.
Share link shows expired / not foundCreate a new link or download HTML. Links are temporary.
Session ID share does not workUse the URL from Flow Audit’s share dialog, not a Salesforce session ID. Ask admin if session sharing is enabled.
Audit rules button errorHard-refresh the page (Ctrl+F5 / Cmd+Shift+R). Ensure you are on the latest app version.
Feedback / attachment issueTry again without an attachment, or email the team directly if the form fails.