Questions
Straight answers
What if my app is barely started?
Below roughly 20% built, a finish engagement is usually the wrong purchase — you’re paying us to work around scaffolding instead of building it properly. The audit will tell you that, and a rebuild quote is often cheaper than a rescue. We’d rather say so at the audit than six weeks in.
Do I have to start with the audit?
Yes. We don’t quote fixed-price delivery on code we haven’t read, and a fixed price you can trust is the whole point. The fee is credited against the Sprint or the AppExchange release if you book within 30 days, so for most clients it nets to nothing.
Is Finish Watch a support retainer or an actual managed service?
It’s built as a managed service, not a ticket queue. You get one named engineer who already knows your org, SLA-backed response times, and a monthly report on the health of your app — the same operating model CloudFirst Labs uses to run Salesforce for managed service provider clients. It’s optional, month-to-month after the 90-day minimum, and most teams don’t need it if knowledge transfer from the Sprint landed well.
What does the AppExchange Security Review cost?
The review fee is set by Salesforce, not by us, and it’s charged per submission attempt. We confirm the current figure with our Partner Account Manager and put it in your quote in writing — we don’t guess at it on a web page. Budget for the calendar too: the review queue typically runs four to nine weeks on top of build time, which is why an AppExchange release is quoted at 8–14 weeks.
Will you tell me my code needs to be thrown away?
Sometimes, yes. Roughly speaking, if the data model is sound the code is almost always salvageable, and if the data model is wrong then refactoring on top of it is money burned. The audit gives you a keep / refactor / rebuild verdict per area rather than one verdict for the whole app, so it’s rarely all-or-nothing.
Do you work with our developer, or replace them?
Either. On a co-build we pair with your team and hand back source control, CI/CD and documentation so they can keep going without us. Knowledge transfer is in scope on every Sprint — you should not need Finish Watch, which is why it’s optional and month-to-month.
Can you sign an NDA before I show you anything?
Yes, before any access is granted. We work in your sandbox or a repo you control, and we don’t need production access to run an audit.
What is “Well-Architected” and why does it matter for a listing?
It’s Salesforce’s own framework for how apps on the platform should be built. For an internal app it’s good practice. For a managed package headed to AppExchange it’s close to mandatory — the same principles underpin what the Security Review looks for, so building to them from day one is what keeps a submission from bouncing.