Booking Q3 2026 · 2 retainer slots open · Direct or via SI Paris ·Seoul
Sébastien Tang SALESFORCE SOLUTION ARCHITECT
Retail & Consumer Goods

Case study

90-Day Salesforce Recovery for Global Fashion Retailer

Failed deployment rescued and delivered to production in 90 days

EngagementOrg Health & Recovery ArchitectureDuration3 months

Sébastien Tang · Senior Salesforce Solution Architect, independent. Architects Salesforce for the AI era: Agentforce, Data 360, multi-cloud systems that hold up in production.

  • Administrator · Salesforce Certified
  • App Builder · Salesforce Certified
  • AI Associate · Salesforce Certified
  • Marketing Cloud AE · Salesforce Certified

The problem

An €800M fashion retailer had been attempting a Salesforce Sales Cloud deployment for 18 months. The original SI had billed €2.4M against a €900K budget. Only 34 of 87 requirements were truly delivered, the data model carried fundamental defects, the sales team had retreated to Excel, and the engagement had degraded into a legal dispute with the implementing partner.

What I did

Two weeks of strict diagnosis, no changes to the org. The account hierarchy was redesigned, governor-limit defects were corrected, and a 340-test Apex suite lifted coverage from 42% to 84%. The remaining 53 requirements were rebuilt or completed across six sprints, with written acceptance criteria on every item. Production go-live at day 90, Excel retired in week 13.

At a glance

Client
Global Fashion Retailer
Sector
Retail & Consumer Goods
Engagement
3 months
My role
Lead Solution Architect, Recovery & Delivery
Salesforce clouds
Sales Cloud · Service Cloud
Outcome
90 days to production

Before / After

Before
  • 18 months into a Salesforce programme, €2.4M spent against a €900K budget.
  • 34 of 87 requirements delivered, 11 of those known-defective on day one.
  • Account hierarchy modelled incorrectly for B2B wholesale, multi-territory ownership broken.
  • Test coverage at 42%, governor-limit failures on bulk operations.
  • Sales team on Excel, legal dispute open with the original SI.
90 days
After
  • All 87 requirements live in production, including 25 never started before.
  • Account hierarchy redesigned, existing records migrated via Batch Apex with full reconciliation.
  • 340 test methods, 84% coverage, governor-limit-safe automation across the org.
  • Sales team migrated to Salesforce in three weeks, zero critical incidents in 30 days.
  • Legal dispute closed favourably; the technical assessment strengthened the client's position.

Situation

A global fashion retailer with €800M in annual revenue had been attempting a Salesforce Sales Cloud deployment for 18 months. The original go-live date was 14 months prior. The project had consumed €2.4M in SI fees against an original budget of €900K. The current implementation partner had billed 40% more in “scope change” fees than the original contract value, yet delivery remained incomplete.

The business was operating under significant operational impact. The sales team was managing pipeline in Excel because the Salesforce deployment was not trusted: too many data errors, too many performance issues. Management had lost confidence in both the project and the implementing partner. The Salesforce investment was being questioned at board level.

The relationship with the SI had broken down completely. Escalations to the SI’s account management had produced SLAs and apologies but no delivery. The client had served legal notice to the SI. The engagement had transitioned from a technology project to a legal dispute, with the SI protecting their position rather than delivering.

The client needed an independent architect to assess the damage, determine what could be salvaged, and deliver the remaining requirements against a hard 90-day deadline set by the incoming CFO.

Challenge

The first two weeks were entirely diagnostic. No changes were made to the org or the project plan until the full picture was clear.

The technical assessment documented the current org state against the original requirements specification. Of the 87 functional requirements in the original scope, 34 were fully delivered, 28 were partially delivered (functional but incomplete), and 25 were not started. The 34 “fully delivered” requirements included 11 that were delivered with known defects the SI had logged as “backlog items”: effectively delivered on paper but broken in practice.

The data model had fundamental architectural problems. The Account hierarchy had been modelled incorrectly for the client’s B2B wholesale structure, creating a constraint that prevented multi-territory account ownership. The lead conversion process had been customised in a way that created data integrity issues on every conversion. Record-Triggered Flows had been written without governor limit considerations, causing bulk operation failures. Test coverage was 42%, well below the 75% Salesforce requires and the 80% that production workloads require.

The process and governance picture matched the technical one. There was no proper change control. Requirements changes were agreed verbally with the SI project manager, never formally documented, often interpreted differently by client and SI. The “scope change” fees represented legitimate additional work in some cases and SI mistakes in others, but without formal change orders there was no way to adjudicate. There was no UAT process either. The client had accepted deliverables on the basis of SI-run demos, without a structured user acceptance test against written test cases. Users had not been involved in any testing until after each release, meaning defects were discovered in production rather than in testing.

Of the 28 partially delivered requirements, 19 could be completed with targeted development. The 9 remaining had been built using architecturally wrong approaches and needed to be rebuilt. The 25 unstarted requirements were all achievable within 90 days given the right team and methodology. The data model issues needed architectural fixes first; otherwise the new requirements would have landed on a broken foundation, and the rescue would have failed the same way the original did.

What I told the CFO at the end of the diagnosis phase

We cannot deliver eighty-seven requirements on a broken account hierarchy. Two weeks to repair the architecture, eight weeks to deliver everything. That is the only path that holds.

Action

LAYER 01

Weeks 1-2: Architecture repair

Account hierarchy redesigned for the B2B wholesale structure. Existing Account records migrated to the corrected structure via Batch Apex with full before/after reconciliation. Lead conversion defect root-caused to a trigger-Flow conflict and resolved. Every Record-Triggered Flow audited, refactored for governor-limit safety, retested against bulk data scenarios. A 340-method test suite lifted coverage from 42% to 84%.

LAYER 02

Weeks 3-8: Delivery sprint

Requirements re-prioritised by business impact: revenue-affecting first, operational efficiency second, reporting last. Two-week sprint cycle with formal planning, daily standups, and business stakeholder reviews as the acceptance mechanism. 19 completable partial requirements finished in sprints 1-2, 9 architectural rebuilds in sprints 2-4, 25 unstarted requirements delivered in sprints 3-6.

LAYER 03

Weeks 9-12: Hardening and launch

Performance testing against projected transaction volumes flagged three slow queries and one batch process that would fail at scale. All rewritten and tuned before go-live. Parallel run allowed the sales team to use Salesforce alongside Excel, building confidence before Excel was retired. Training delivered as role-specific workflow sessions, not feature walkthroughs, with job aids that outlasted the sessions.

Every requirement had a written acceptance criteria document, drafted by the business owner and signed off before development started. Every completed item was tested by the business against that criteria before being marked as done. That eliminated the ambiguity that had let the original SI claim delivery on requirements the client did not accept.

Result

All 87 requirements were delivered to production within 90 days, including the 25 that had never been started when the engagement began. The sales team migrated fully from Excel to Salesforce within three weeks of go-live, with no critical incidents in the first 30 days of production operation.

The architectural foundation (rebuilt account hierarchy, clean data model, governor-limit-safe automation, 84% test coverage) gave the business a platform they could build on rather than one they had to work around. The reporting layer ran on the same model the sales team entered. The pipeline metrics the CFO needed for the quarterly review existed for the first time in two years.

The CFO deadline was met. The legal dispute with the original SI was resolved on terms favourable to the client. The technical assessment documentation provided an objective record of what had and had not been delivered, which strengthened the client’s position in settlement negotiations.

More importantly, the organisation recovered its confidence in Salesforce as a platform. The 18-month stall had created genuine scepticism at board level about whether Salesforce could work for the business. A functioning, adopted deployment, with a roadmap for expanding to Service Cloud and eventually Data Cloud, rebuilt that confidence.

Reflection

This pattern works when the failure mode is architectural and procedural, when leadership accepts that diagnosis must precede change, and when the business owners are willing to sign written acceptance criteria. It is the right call whenever a stalled programme is approaching a hard deadline and the original SI relationship has broken down: a rescue with a clean foundation is cheaper and faster than starting over.

It works less well when the prior implementation has crossed a structural threshold, for example when the data model has been so heavily customised that migration cost exceeds rebuild cost, or when the org’s customisations have been undocumented for so long that diagnosis is itself a multi-month project. At that point, a controlled restart is the honest answer.

Worth doing earlier: the written acceptance criteria. The single change that most consistently prevents the failure mode this engagement repaired is forcing every requirement to have a business-owner-signed definition of done before development starts. That change is free, sits inside the client’s authority, and would have prevented at least half the scope dispute that consumed the original 18 months.

87/87 Requirements delivered
84% Apex test coverage achieved
3 weeks From go-live to Excel retired

Glossary

Recovery architecture
The discipline of assessing a failed or stalled Salesforce deployment honestly, separating what can be salvaged from what must be rebuilt, and delivering the remaining scope against a hard deadline. Diagnosis precedes any change to the org.
Account hierarchy model
The structural representation of how customer or partner accounts relate to each other (parent, child, territory, brand, region). In B2B contexts, getting this wrong constrains every downstream object (opportunity, contract, case) and is the single most expensive architectural defect to discover late.
Record-Triggered Flow
Salesforce's declarative automation framework. Powerful, but subject to governor limits. Flows written without considering bulk-operation behaviour will pass single-record testing and fail at production scale. Auditing flows for governor-safety is a non-negotiable step in any recovery.
Acceptance criteria
A written, business-owner-signed description of what 'done' means for a requirement, agreed before development starts. Eliminates the ambiguity that lets a vendor claim delivery on something the client does not consider delivered. The single most effective change-control mechanism in a recovery.

Frequently asked

  • Because the failure mode that lost the first 18 months was making changes without understanding what was broken. The technical assessment separates the requirements that are genuinely delivered, partially delivered, broken on delivery, or never started, and identifies which architectural defects must be repaired before any new work goes on top. Skipping the diagnosis means rebuilding on the same broken foundation, which is exactly how the original SI ended up at €2.4M with nothing to show.
  • Most of it could be salvaged, which is precisely the point of an honest diagnosis. Of the 28 partially delivered requirements, 19 could be completed with targeted development. The other 9 had been built on architecturally wrong approaches and had to be rebuilt. Bulk-discarding the prior work would have been cheaper to justify but more expensive to execute. The discipline is to keep what works, fix what is close, and rebuild only what is structurally wrong.
  • Written acceptance criteria on every requirement, signed by the business owner before development started, and tested by the business against those criteria before sign-off. No more verbal scope agreements with a project manager. The sprint cadence (two-week sprints, business stakeholders as the acceptance mechanism) made it impossible to claim delivery without business validation. The change-control discipline was the recovery, as much as the technical work.
  • 42% is below the 75% Salesforce requires for deployment and well below the 80% that production workloads require. The original codebase passed deployment thresholds only because some test methods asserted nothing meaningful. The recovery rebuilt the test suite from scratch: 340 test methods covering all custom Apex, with assertions that reflected real behaviour. Coverage is a proxy. Assertion quality is what matters.
  • The recovery engagement did not aim to settle the dispute, but the technical assessment documentation became evidence in the settlement negotiation. An objective written record of which requirements had and had not been delivered, what defects had been knowingly logged as backlog, and which architectural decisions had created the multi-territory ownership constraint gave the client a defensible position. The settlement closed in the client's favour. Honest documentation tends to do that.

Book the call

We'll know in 30 minutes
whether I can help.

No slides. No pitch deck. Bring the architecture diagram or describe the problem in your own words. I'll tell you whether I'm the right fit and what the next step costs — before you've finished your coffee.

  1. Replies within 24 hours, always
  2. If I'm not the right fit, I'll point you at someone who is
  3. No follow-up emails unless you ask
Book a Discovery Call