Home / For Salesforce leaders
Know what DAY ONE adds to your org, and what stays yours
Before a managed package goes into your org, someone has to answer three things: what it adds, what it can touch and what the team ends up owning. DAY ONE is built on Salesforce, so the answers start with your permissions, your data and your configuration. This page sets out each one, with the owner named.
Start with the question your install review asks
Pick the one on your list to see what to look for.
Review step: Deployment
Look for: Licences, the users who need access and the systems you plan to connect.
Deployment
Your org or a bundled Salesforce environment.
EditionsBoundary
Where records live and what leaves.
SecurityPermissions
Who can view, change and approve.
SecurityAssistant
The user, Salesforce's MCP connector and your assistant.
AI assistants and MCP
Know what gets installed, and where it runs
Your users' licences and the systems you plan to connect decide which edition fits.
- DAY ONE for Salesforce
- Installs into your existing org as a managed package. Your administrators keep visibility and control of the org.
- DAY ONE Platform
- Comes with a bundled Salesforce environment, for firms with no org of their own.
- Licences
- Every user needs a Salesforce licence in your org; the Platform edition includes it. Salesforce's AI prompt templates need your own Einstein entitlement.
- Packages and install
- Each package is versioned on its own and installs by package version, in dependency order. A sandbox rehearsal check confirms the versions before an upgrade.
- Documents and signing
- PDF and email delivery, e-signature and file automations run on third-party apps (PDF Butler, Sign Butler and Collaboration Butler from CadmusCode).
- Releases
- Salesforce applies its three seasonal releases automatically. DAY ONE ships its own enhancements periodically, with notice in advance.
On Salesforce; works with your Salesforce org, or available as a bundled edition if you don't use Salesforce.
Follow the data before you approve it
Where your records live, who owns each part and what leaves your Salesforce environment.
Your users
Sign in through Salesforce with multi-factor authentication or your single sign-on. Roles and permission sets decide which records each person sees.
Owner: your team
Sign in and work in DAY ONE
Your Salesforce environment
Client, engagement, time and invoice records are stored here, in the region of your Salesforce instance, running DAY ONE as a managed package. DAY ONE's calls to the Salesforce Metadata and Tooling APIs stay inside the org.
Owners: Salesforce operates the platform. DAY ONE provides the package. Your team manages users, permissions and configuration.
Both ways, by webhook and pullAn invoice moving to Sending fires the post
Accounting ledger
Xero, through the DAY ONE Integration Hub, which does the sending. Invoices, credit notes, contacts and ledger codes go out; updates and payment status come back. Failures show in the integration log. QuickBooks and MYOB are not available.
Owner: your team and your ledger provider
Only if you use AI skills
AI vendor you choose
Skills run in your own assistant through Salesforce's MCP connector, as the signed-in user. Data goes from your org to the AI provider you choose, under your agreement. DAY ONE hosts no MCP server.
Owner: you and your AI vendor
Salesforce publishes its own assurance material:
Compliance site · Trust site · Well-Architected overview
Read Security for who is responsible for each control, and Our approach to AI for the AI data boundary.
Test what one real user can do
Pick one person. What they can open, change and approve is decided by the permission sets and sharing you assign, not by a role label.
View an engagement
Which permission sets and sharing settings give them the record.
Change a rate
Which permission set holds that right, and who has it.
Approve an invoice
Which approval control applies before an invoice goes out.
An AI assistant follows the same rule. It signs in as the user through Salesforce's own MCP connector, so Salesforce permissions apply, and DAY ONE hosts no MCP server. Salesforce's Hosted MCP Servers guide describes per-user authentication. See AI assistants and MCP.
Questions Salesforce leaders ask
Can't see your question? Ask us directly.
Is DAY ONE a managed package?
Yes. DAY ONE is delivered as a managed package, installed by package version in dependency order, starting with Prerequisite. It installs into your existing Salesforce org, or comes with a bundled Salesforce environment on the Platform edition. Your admin can update each package, or we can help with it.
Does DAY ONE hold Salesforce certifications?
No. Salesforce's attestations apply to the Salesforce services in their stated scope. DAY ONE and your team have separate control responsibilities.
Which licences do we need?
Every user needs a Salesforce licence in your org; the Platform edition includes it. Salesforce's AI prompt templates need your own Einstein entitlement, and PDF, e-signature and file automations use third-party apps. Do not assume a Salesforce feature is in every edition: we confirm the applicable licence, service and configuration in the security review.
What does it cost?
The Pricing page shows the price list and how your price is built. Quickstart is scoped with your team, so it is not in the licence price.
Does DAY ONE host an MCP server?
No. Skills run in your own AI assistant and connect through Salesforce's own MCP connector, signed in as the user. Your data goes from your org to the AI provider you choose, under your agreement with them.
Can we see the integration data flows?
Yes. The diagram above shows the connections documented today, with direction, data type and owner. In the evaluation we confirm each connection for your proposed setup.
Can we build our own workflows and objects, or add AppExchange apps?
Yes. You can build workflows and automation with Salesforce Flow and Apex, and DAY ONE has its own workflow engine that supports approval processes. The platform licence includes up to 10 custom objects of your own. Because DAY ONE is built on Salesforce, you can also add Salesforce products and AppExchange apps to your org.
Is there a sandbox for testing and training?
Yes. A sandbox lets you test configuration and workflows, try data migration and train your team without touching production data. Access can depend on your licensing, so we confirm availability and set-up with you.
Which Salesforce editions are supported?
We check your Salesforce edition with you in scoping.
Talk through your install review
Tell us the org and the systems you plan to connect, and which part of the review is hardest to answer.