What Flow Audit does
Flow Audit reads Flow and Validation Rule metadata from your org and flags common architecture problems—for example:
- Database updates in the wrong type of flow (Before-Save vs After-Save)
- Flows that run on every record save with no entry criteria
- Dead-end steps and broken decision paths
- Missing error (fault) handling on DML
- Hardcoded Salesforce record IDs
The app does not change anything in Salesforce. It only analyzes metadata and shows a report in your browser.
Quick start
1. Connect your org
- On the home screen, choose Production / Developer or Sandbox.
- Click Connect Salesforce and sign in.
- When you return, the top-right status shows Connected with your username.
2. Run an audit
- Click Start Comprehensive Audit.
- Wait for the progress bar to finish (large orgs take several minutes).
- Results appear automatically when the scan completes.
3. Review findings
- Click the summary cards or left sidebar to filter by All, Critical, Warnings, or Performance Tips.
- Use Group by Flow or Group by Issue type in the toolbar.
- Each item lists a reference like R-01, the flow name, the element, and a plain-language explanation.
Understanding severity
| Level | What it means | Suggested action |
|---|---|---|
| Critical | High risk of errors, extra DML, or broken logic | Address before production release when possible |
| Warning | Performance or design concern | Schedule fixes or document exceptions |
| Performance Tips (Info) | Awareness items, e.g. overlap with validation rules | Review; may be acceptable by design |
Audit rules & suppressions
From the results screen, click Audit rules.
- Uncheck a rule — Stops showing that check in this browser only.
- Disable R-XX on a finding card — Hides all issues for that requirement in this browser.
- Suppress this finding — Hides one specific issue until you remove it from the suppressed list.
Check Show suppressed in the toolbar to see hidden items again.
Your organization may disable certain checks for everyone on the server. Those cannot be turned back on from the UI.
Saved report after refresh
Your last audit is saved in this browser for each Salesforce org you scan.
After you connect, your login stays active for about 7 days in this browser (refreshing the page does not sign you out). Use Switch Org to disconnect early.
- Refreshing the page can bring results back even if you are disconnected.
- Use Clear saved report on the banner to delete the cached copy.
- Reports do not sync to another device or browser.
Switch org
Click Switch Org to disconnect and connect a different Salesforce org (or the same org with a new login). The saved report for the org you leave is cleared from this browser.
What the app does not do
- Does not run or activate flows in your org
- Does not show live CPU or governor limit usage
- Does not replace code review, testing, or change management
- Cannot find every possible logic error—use Flow Debugger and UAT as well
Troubleshooting
| Problem | What to try |
|---|---|
| Cannot connect to Salesforce | Confirm you chose the right environment (Production vs Sandbox). Ask your admin that the Connected App callback URL matches this app’s URL. |
| No results after refresh | Run a new audit, or check you are on the same org as before. |
| Share link shows expired / not found | Create a new link or download HTML. Links are temporary. |
| Session ID share does not work | Use the URL from Flow Audit’s share dialog, not a Salesforce session ID. Ask admin if session sharing is enabled. |
| Audit rules button error | Hard-refresh the page (Ctrl+F5). Ensure you are on the latest app version. |