We got together for the quarterly meetup in London. This time, we also had attendees joining us online as well as in-person. The topics: Packaging and DevOps tools & Open Forum
This recap is based on the transcript of the voice recording during the roundtable session "Packaging and DevOps tools & Open Forum" and is mainly AI-generated.
Strategic GTM: Why Build on Salesforce?
For many ISVs, the choice to build natively on Salesforce is as much about compliance as it is about features:
- Technical Compliance: By using Salesforce, ISVs can offload database security and GDPR compliance responsibilities to the platform .
- Commercial Entry: For sectors like healthcare, Salesforce serves as a "care butterfly," helping ISVs enter markets through OEM or reseller deals where customers might be hesitant to sign direct contracts with smaller startups .
Marketing Hacks: Reddit and SEO
An unexpected highlight was the shift away from traditional AppExchange search toward community-driven discovery:
- Reddit as a Lead Gen Tool: For niche products like DevOps, Reddit has become a primary source for early signups and community trust .
- GEO (Generative Engine Optimization): ISVs are now tracking how AI tools like ChatGPT and Claude cite their websites as sources for Salesforce technical questions .
- Source Tracking: Even without an AppExchange listing, high-ranking Reddit posts often provide more SEO value than a standard marketplace page .
Trial Models & Conversion
The group debated whether "Self-Service" actually works for complex enterprise tools:
- The Failure of Self-Enablement: Several partners found that self-service trials often led to "ghosting" because the product was too complex for a user to figure out alone .
- Guided Sandboxes: Conversion rates often increase when the trial is abolished in favor of a guided demo or a pre-setup workspace with a follow-up call .
- Human Touch: In the age of AI, the consensus was that relationships and "human touch" remain essential for enterprise deals, particularly when customers need to rant about their current pain points .
Packaging and Security Review "Whispers"
Practical tips for navigating the often-dreaded Security Review:
- The MVP Gate: Submit an MVP (Minimum Viable Product) for the initial security review as soon as possible . The first review is the most scrutinized; subsequent updates are generally free from the same level of intensity .
- Handling Failures: Since every failure now costs money, some partners have successfully used "false positive" reports to bypass secondary fees when a bug was misinterpreted by the Salesforce team .
- Modular Packages: Be aware that separate managed packages for the same product may require separate security reviews and listings .
DevOps & Release Hygiene
The technical discussion emphasized "hygiene" over tools:
- Source of Truth: The Git repository must be the single source of truth, not the Salesforce Org .
- Release Notes: Modeling release notes after searchable "Notion-style" cards makes functionality more discoverable for admins .
- Version Control: To avoid "support legacy hell," ISVs are encouraged not to support too many versions back and to provide clear 30-day notices for major updates .


