Decionis
Salesforce · Beta

Decionis Action Gate for Salesforce

Check Salesforce Flow, Apex and Agentforce actions before they run (allow, hold or escalate), with signed Decision Dossiers on the record. Install the managed package, approve once in Salesforce, and your workspace and its key are set up for you. It starts in Shadow Mode.

Install

How to get it

Every channel below resolves today — statuses never claim more availability than their channels prove.

Supply-chain verifiable

salesforce-metadata-source

  • Package zip · sha256
  • Checksum + SBOM ship today; a detached Ed25519 signature joins them once the dedicated artifact-signing key is provisioned.
  • Activation: oauth.
What it governs

Actions intercepted before they execute

Governed actions

  • · flow action
  • · apex action
  • · agentforce action

Capabilities

  • · pre execution action gate
  • · shadow mode
  • · agentforce governance
  • · signed decision dossier
Failure posture

When Decionis can't be reached

What this connector does with the action when it cannot get a decision, as the code does it today.

Custom

The action returns an error message and no decision. A Flow that requires continueAction to be true stops; a Flow that does not check it continues.

Change it:
Your Flow's condition on continueAction.
If it continues:
errorMessage is set and continueAction is empty.

Failing to reach Decionis is never an authorization. No execution grant is issued without an evaluation, and an action that continues without one is ungoverned, never approved. Every surface's row

Start in shadow mode

Every connector starts read-only: watch what would have been held on your own traffic before any enforcement decision, with a signed Decision Dossier per evaluation.

Distribution channel & setup