How OutcomeLens handles your data

Trust

The people in your data trusted your program with their answers. Here is how OutcomeLens treats that trust, in plain terms.

Where your data lives

Your data stays entirely in your Salesforce org. OutcomeLens is a managed package of Apex and Lightning Web Components, installed into your org from AppExchange. Forms, answers, and scores are records in your org, and reports are built from those records when you open them. There is no outside database holding a copy.

What does leave your org are the invitations and reminders you set up. They go out by email, or by text through the texting service your org already uses.

Security review

OutcomeLens passed AppExchange security review on June 16, 2026. Salesforce reviews a managed package’s security before it can be listed on AppExchange.

Before any link is created for a text invitation, OutcomeLens checks the person’s text opt-out through Mogli. If the person has opted out, or the opt-out can’t be read, no link is created and nothing is sent. The reason is logged, so your staff can see why a text didn’t go out.

Participants don’t need a Salesforce license of their own

When participants fill out forms through Experience Cloud guest access, they don’t need a Salesforce license of their own. Your org needs an Experience Cloud site license for those self-service forms; see pricing. They open a link from your organization and answer on their own device.

Staff can also give the same forms through a Flow, for example during an intake conversation. The scoring and the records are the same either way.

Every number shows its limits

A confident number can be a fragile one. OutcomeLens holds every metric to the same honesty floor:

Sample size. Every rate shows how many people are behind it, never a bare percent.
Provenance. Each number carries where it came from: the instrument, its scale, and the dates it covers.
Reliability flags. A result that rests on thin data is marked “interpret with caution.”
Blend-guard. Measures that were built to stay apart are never averaged together.
Small-cell masking. A group too small to keep private is hidden, to protect the people in it.

Validated instruments and program forms are labeled differently

A validated instrument and a form your program built are not the same kind of evidence. OutcomeLens labels them differently, in the app and in printed reports, so a reader always knows which one they are looking at.