Pause Salesforce automation. Safely. Temporarily. On the record.
Data loads, integrations, and one-time fixes shouldn't mean flipping validation rules off in Setup and hoping someone remembers to flip them back. ControlLayer gives you governed bypass windows - scoped to a user, profile, or the whole org; time-boxed with automatic expiration; and audited from the moment they open to the moment they close.
Every admin knows the 2 a.m. workaround
When automations collide with a migration or an urgent fix, teams fall back on risky habits and every one of them has burned somebody.
Deactivate and pray
Flip the rule off in Setup, run the load, and hope you remember to turn it back on. Weeks later, someone asks why bad data got through.
Permission hacks
Grant elevated access or special bypass permissions that quietly outlive the task they were created for.
Bypass flags in code
Boolean checks scattered across triggers and flows - undocumented, untested, and invisible to your compliance review.
Override windows: bypasses with a beginning, an end, and a paper trail
A window declares exactly what is bypassed, for whom, for how long, and why. The engine handles activation, expiration, and restoration - automatically.
Scoped
Target a single user, a profile, or the whole org. A narrower scope supersedes broader ones - the data-loader's bypass never touches everyone else.
Time-boxed
Start now or schedule for later; end at a set time or let org guardrails cap the duration. Expired windows restore enforcement with no manual cleanup.
Audited
Every window requires a reason. Every status change is tracked. Governance reports and field history give compliance the full story, on demand.
One governance layer for all three automation types
Each window governs one automation category, so lifecycles stay independent and intentions stay explicit.
Suppress without deactivating
Rules stay deployed and intact. One small formula clause makes any rule bypass-aware - no code, no redeployment during the window.
Skip before they start
Governed record-triggered flows never launch during a bypass - zero elements consumed. Autolaunched and screen flows use a packaged invocable action.
One line in the handler
A single, cache-backed method call at the top of your handler - no SOQL, bulk-safe at any volume.
Set up once. Bypass in minutes. Restore automatically.
Install & instrument
Install the package and add a one-line ControlLayer check to the automations you want governed. You choose what participates - nothing is governed by surprise.
Open a window
The guided wizard captures category, objects, scope, timing, and a required reason. Immediate windows activate on submit; scheduled windows activate themselves.
Enforcement returns on schedule
The engine expires the window, recomputes enforcement, and self-heals any drift. No sticky notes, no forgotten rules, no residue.
Guardrails your CISO will actually like
Org-level defaults
Cap bypass durations, require end dates, and limit objects per window. Policy lives in one place - set by you, enforced by the engine.
Engine health monitoring
A built-in health surface watches the scheduler and surfaces problems on the dashboard before they become surprises.
Self-healing enforcement
Enforcement state is recomputed and reconciled every cycle. Manual tampering with the underlying settings is detected and corrected within minutes.
Fail-safe by design
Windows always resolve to a terminal state and enforcement always comes back. The failure mode is never "your rules stayed off and nobody knew."
Governance reporting
A packaged report pack answers the audit questions - who bypassed what, when, for how long, and why - with standard Salesforce reports.
Native platform security
No external services, no callouts, no data leaving your org. Access is controlled with permission sets like everything else you manage.
Ready to retire the 2 a.m. workaround?
ControlLayer is onboarding early access customers now. Get a guided walkthrough and hands-on trial in your sandbox.
Get started