⚡ Key Points: 1-Minute Summary
- The Three Pillars (TEA): Salesforce's official quality framework relies on three core concepts—Trusted, Easy, and Adaptable.
- Data-Driven Decisions: Never argue from purely personal preference. Base your architectural findings on concrete sources like Salesforce Health Check, Optimizer, limit dashboards, and real incident history.
- Standardized Answers: During design reviews or interviews, follow a consistent format: clarify the goal, state assumptions, provide two options, pick one while naming its trade-offs, and outline the risks.
"This fails Trusted because ERP downtime breaks our ability to save records. It fails Easy because doing synchronous callouts in triggers fights the platform's natural limits. It fails Adaptable because it creates tight coupling."
Three pillars, one solid rejection, and a shared vocabulary did the arguing for you.
๐️ Deep Dive: The Salesforce Well-Architected Pillars
The Salesforce Well-Architected Framework organizes solution health into three primary pillars. It moves conversations away from subjective opinions and into measurable standards.
- Trusted: Protect the business. This means enforcing least-privilege security, ensuring compliance, and building for reliability. Reliability covers proper error handling, monitoring, and respecting platform limits.
- Easy: Deliver value quickly and sustainably. This means being intentional about your design (solving the actual business problem), automating wisely using the right tool for the tier, and ensuring maintainability so future admins can easily understand the setup.
- Adaptable: Build for the future. An adaptable system is resilient (it degrades gracefully if an integration fails) and composable (modular pieces can be recombined as business needs shift).
Rule: Evaluate every major design decision against Trusted, Easy, and Adaptable.
Gain: A shared organizational language. Design debates become objective checklists rather than a clash of developer egos.
Price: The pillars often pull against each other. High security (Trusted) can sometimes slow down agility (Easy). You have to explicitly state what trade-offs you are making.
Limits: The framework is only as good as the data feeding it. Base findings on real tools: Salesforce Optimizer, Health Check, and limit dashboards.
At volume: Scale your governance weight to match the cost of a mistake. A core payment integration gets a heavy, formal TEA review. A simple list-view helper component does not.
๐ฌ Core Q&A: Applying the Framework
A: Let's walk the three pillars. Trusted fails on reliability. A synchronous callout couples every Salesforce save to the ERP's uptime. It also violates the core callout-after-DML constraint. Easy fails on maintainability. Trying to smear complex retry and timeout logic inside a trigger context is a nightmare to debug. Adaptable fails on resilience and composability. There is no graceful degradation if the ERP drops, and the integration is permanently welded into the object's save path. The solution? Use Platform Events or an async queueable framework.
A: You decide based on the "blast radius" or damage size. Governance weight should scale directly with what a mistake costs. A financial transaction flow gets the full Trusted treatment: rigorous reviews, heavy automated testing, and a staged rollout. An internal UI tweak gets a light, fast lane favoring Easy. Document these lanes as a change-risk scale so the ruling becomes standard policy, not a fresh debate every single deployment.
A: Start where decisions already happen. Do not invent a new, scary committee. Simply add a one-page TEA checklist to your existing Pull Request (PR) or Jira templates. Run it on new major designs only—auditing legacy tech debt immediately just breeds pushback. Over time, each review becomes a searchable Architecture Decision Record (ADR). After a few months, teams will start using the TEA vocabulary unprompted.
A: A small Center of Excellence (CoE), written decisions, and automated standards. Guardrails, not gates. The design authority should only review high-risk changes (data model shifts, sharing rules, external integration contracts), not every page layout change. Establish an intake path so demand is visible early. Enforce naming conventions and code standards in your CI/CD pipeline with linters—because a linter argues much less than a person does. Finally, document major choices as ADRs so the org remembers why a decision was made long after the architect leaves.
A: Measure it, don't argue it. Track exactly how long a review takes and what percentage of total changes it actually touches. If almost everything is forced to go through the board, your scope is too wide and needs narrowing. Governance that reviews every single config change is a bottleneck queue; governance that reviews only the risky 5% is a protective guardrail. Publish your standards publicly so teams can self-govern and skip the board entirely.
A: Pull hard evidence before forming any opinions. I start with the Salesforce Health Check and Optimizer for a baseline platform view. Next, I review the limits dashboards to see our headroom and the incident history to see what actually breaks under load. I read the tech debt register (if one exists). Finally, I score the org against the Trusted, Easy, and Adaptable pillars based on those findings to produce a prioritized gap list. A scored, data-backed list survives executive steering meetings; a subjective narrative does not.
A: Salesforce's definition of "Easy" changes rapidly as new native tools emerge (e.g., migrating from Workflow Rules to Flow, or custom integrations to Data Cloud). You keep the framework alive by continuously learning via the release notes, updating your CI/CD linting rules, and revising your ADR templates. When a previously custom-built solution can now be replaced by a standard native feature, the architecture must adapt to favor the new, standard path.