SyncOnAI360

Use case: rollback

How to roll back a Salesforce deployment.

Salesforce has no undo button for metadata. SyncOnAI 360 records the version of every component before each deploy, so going back is one action from the receipt.

Proposal: Case intake fault handling

Acme Production

Checks passed
  • Validated against the org without changing it
  • No component outside the change is modified
  • Apex tests pass, coverage 81%
  • No freeze window in effect
  • Policy: production requires a second admin

Blast radius

  • 2 Flows read Case.Priority
  • 1 report filters on it
  • Case_Intake_Route assigns from it

Risk: medium

In one paragraph

Rolling back a Salesforce deployment with SyncOnAI 360 means opening the deploy's receipt and choosing Roll back, which redeploys the version of each component recorded before the deploy. Production rollbacks need an admin, one rollback runs per deploy at a time, and components the deploy created and data changes are not reversed.

Deploy records the previous version
EveryDeploy records the previous version
Action from the receipt
1Action from the receipt
Required to roll back production
AdminRequired to roll back production
Limits stated up front
2Limits stated up front

01The problem

Why rolling back Salesforce is so hard

Salesforce deploys forward only. Undoing a change means finding the old version, if anyone kept it, and deploying that under pressure.

  1. 01

    No previous version

    Nobody saved what the component looked like before.

  2. 02

    Pressure

    Rollback is improvised during an incident.

  3. 03

    Unclear limits

    Nobody knows what a rollback will and will not undo.

  4. 04

    Two people undoing at once

    Conflicting fixes make things worse.

02how

How does rolling back a Salesforce deploy work?

Before each deploy, the version of every component it changes is recorded. Choose Roll back on the receipt and those versions are redeployed through the Metadata API. The rollback is itself recorded, and components are read back into the repository afterwards.

  • Versions recorded before deploy
  • Redeployed on rollback
  • Rollback recorded too

Proposal: Case intake fault handling

Acme Production

Checks passed
  • Validated against the org without changing it
  • No component outside the change is modified
  • Apex tests pass, coverage 81%
  • No freeze window in effect
  • Policy: production requires a second admin

Blast radius

  • 2 Flows read Case.Priority
  • 1 report filters on it
  • Case_Intake_Route assigns from it

Risk: medium

03who

Who can roll back production?

An admin, the same as approving it. A deploy can only have one rollback in progress, so two people cannot race to undo the same change. Sandbox rollbacks work the same way, so the undo path can be rehearsed.

  • Admins for production
  • One rollback at a time
  • Rehearse in sandboxes

Proposal: Case intake fault handling

Acme Production

Checks passed
  • Validated against the org without changing it
  • No component outside the change is modified
  • Apex tests pass, coverage 81%
  • No freeze window in effect
  • Policy: production requires a second admin

Blast radius

  • 2 Flows read Case.Priority
  • 1 report filters on it
  • Case_Intake_Route assigns from it

Risk: medium

04limits

What does a rollback not reverse?

Components the deploy created are not deleted; remove them separately. Data changes cannot be reversed. Both limits are stated so nobody discovers them during an incident, and data-changing actions from the chat wait for an explicit Allow for that reason.

  • Created components remain
  • Data changes not reversed
  • Data actions need Allow

Proposal: Case intake fault handling

Acme Production

Checks passed
  • Validated against the org without changing it
  • No component outside the change is modified
  • Apex tests pass, coverage 81%
  • No freeze window in effect
  • Policy: production requires a second admin

Blast radius

  • 2 Flows read Case.Priority
  • 1 report filters on it
  • Case_Intake_Route assigns from it

Risk: medium

05plan

How should you plan for rollback?

Treat rollback as part of the release. Deploy, roll back and redeploy in a sandbox to confirm both directions behave, and plan separately for any components the change creates and any data it alters.

  • Rehearse both directions
  • Plan for created components
  • Plan for data

Proposal: Case intake fault handling

Acme Production

Checks passed
  • Validated against the org without changing it
  • No component outside the change is modified
  • Apex tests pass, coverage 81%
  • No freeze window in effect
  • Policy: production requires a second admin

Blast radius

  • 2 Flows read Case.Priority
  • 1 report filters on it
  • Case_Intake_Route assigns from it

Risk: medium

06forward

When should you fix forward instead?

When a deploy fails outright, Salesforce's reason is shown and Fix in chat opens the conversation with the error, so the change can be corrected and proposed again. When a deploy succeeds but misbehaves, rollback returns to the known state while the fix is prepared.

  • Failed deploys: fix forward
  • Misbehaving deploys: roll back
  • Both recorded

SyncOnAI 360

AI architect for Salesforce

Ask SyncOnAI to build flows, rules, Apex, or SOQL...

07evidence

What does the rollback record show?

The rollback is recorded alongside the original deploy, so the history shows what was deployed, when it was rolled back and by whom. Components are read back into the repository afterwards, so search, health and lineage reflect the restored state.

That record answers the question that follows every incident: what exactly was undone, and is the org now back where it was.

  • Deploy and rollback together
  • Repository refreshed
  • A clear incident record

Proposal: Case intake fault handling

Acme Production

Checks passed
  • Validated against the org without changing it
  • No component outside the change is modified
  • Apex tests pass, coverage 81%
  • No freeze window in effect
  • Policy: production requires a second admin

Blast radius

  • 2 Flows read Case.Priority
  • 1 report filters on it
  • Case_Intake_Route assigns from it

Risk: medium

08How it works

How to roll back

From incident to known state.

  1. 01

    Open the receipt

    From Deploys or the org it changed.

  2. 02

    Roll back

    An admin starts the rollback for production.

  3. 03

    Clean up

    Remove any components the deploy created.

  4. 04

    Fix

    Prepare the corrected change as a new proposal.

09Checklist

Rollback readiness checklist

  • Confirm the deploy went through SyncOnAI 360, so a previous version was recorded.
  • Make sure an admin is available for a production rollback.
  • List any components the deploy created; they need removing separately.
  • Identify any data the change altered; rollback will not reverse it.
  • Rehearse the rollback in a sandbox for high-risk changes.
  • Decide in advance whether you will roll back or fix forward.
  • Record what happened alongside the receipt afterwards.

10Before and after

Rollback, improvised versus recorded

Without

With SyncOnAI 360

Hunting for the old version

Recorded before every deploy

Improvised under pressure

One action from the receipt

Unknown limits

Limits stated up front

Two people undoing at once

One rollback at a time

12Questions

Frequently asked questions

Not for metadata in general. SyncOnAI 360 records the previous version before each deploy so it can redeploy it.

Admins.

No. Remove components the deploy created separately.

No. It restores metadata only.

No. One rollback per deploy at a time.

Yes, alongside the original deploy.

No. Only deploys made through SyncOnAI 360 have recorded previous versions.

Yes. Every plan includes every feature.

Yes, the same way, which makes sandboxes a good place to rehearse.

As soon as an admin starts it from the receipt; one rollback per deploy runs at a time.

The receipt itself: it holds the previous version of each component, ready to redeploy, with the limits stated.

Rolling back production needs an admin, the same as approving the original deploy.

Start in 5 minutes. No card required.

Connect your Salesforce org. Run your first health scan. Ask your first question. See what you've been missing.

  • Anthropic
  • OpenAI