Decionis Action Gate for Salesforce
Check Salesforce Flow, Apex and Agentforce actions before they run (allow, hold or escalate), with signed Decision Dossiers on the record. Install the managed package, approve once in Salesforce, and your workspace and its key are set up for you. It starts in Shadow Mode.
How to get it
Every channel below resolves today — statuses never claim more availability than their channels prove.
Salesforce package source (deploy it yourself)
decionis.com/marketplace/salesforce/starter-packagesalesforce-metadata-source
- Package zip · sha256
- Checksum + SBOM ship today; a detached Ed25519 signature joins them once the dedicated artifact-signing key is provisioned.
- Activation: oauth.
Actions intercepted before they execute
Governed actions
- · flow action
- · apex action
- · agentforce action
Capabilities
- · pre execution action gate
- · shadow mode
- · agentforce governance
- · signed decision dossier
When Decionis can't be reached
What this connector does with the action when it cannot get a decision, as the code does it today.
The action returns an error message and no decision. A Flow that requires continueAction to be true stops; a Flow that does not check it continues.
- Change it:
- Your Flow's condition on continueAction.
- If it continues:
- errorMessage is set and continueAction is empty.
Failing to reach Decionis is never an authorization. No execution grant is issued without an evaluation, and an action that continues without one is ungoverned, never approved. Every surface's row
Start in shadow mode
Every connector starts read-only: watch what would have been held on your own traffic before any enforcement decision, with a signed Decision Dossier per evaluation.
Distribution channel & setup