QuantumNest
Architecture · Migration runbook

Hyperforce, without the drama

It is a genuine platform change, not a marketing rebrand. Most things keep working. A small, predictable set of things break. The whole job is finding which is which, in advance.

QuantumNest Engineering28 Oct 20259 min read
// the four-pillar pre-migration audit, at a glance
PILLAR 01

Outbound IP

Every allow-list that trusts specific Salesforce IPs needs the Hyperforce ranges added.

PILLAR 02

Domains

My Domain enhanced, communities on enhanced domains, custom CNAMEs reviewed.

PILLAR 03

Email

SPF, DKIM, and DMARC verified against the new sending infrastructure.

PILLAR 04

Encryption

Customer-managed keys reviewed, data classification evidence refreshed.

Hyperforce is a real platform change. The org moves off Salesforce-owned data centres and onto a public-cloud architecture built on infrastructure such as AWS. For the great majority of customers the experience after migration is almost indistinguishable from before. For a small set of integration patterns and security configurations, the experience after migration is broken until specific changes are made. A readiness exercise exists to find those specific changes before the cutover weekend, not during it.

What actually changes

The IP addresses your org uses for outbound callouts change. The endpoints for inbound API calls keep the same domain but route differently underneath. Data residency moves to a region you select, which matters for compliance. The underlying infrastructure becomes elastic, which mostly improves performance and occasionally produces different behaviour under heavy load. What does not change is the part people fear losing: your metadata, your data, your declarative configuration, your Apex, your Lightning components, your packages, your users, and your permissions all carry across untouched.

Engineers reviewing infrastructure plans at a workstation
// the risk in a Hyperforce migration lives entirely at the integration boundary, not in the org itself.

The cutover, phase by phase

Salesforce schedules the production cutover for a defined window, and the actual downtime is typically under thirty minutes. Sandboxes are cut over first to validate the process end to end. The timeline below is what a mid-sized org should plan for.

1 Audit 2-3 wk 2 Remediate 3-6 wk 3 Sandbox cutover 1 weekend 4 Validate 3-5 days 5 Prod cutover 1 weekend LIVE TOTAL ELAPSED six to eleven weeks · downtime under thirty minutes
// the migration succeeds or fails in the audit and remediate phases. the cutover weekend is mostly waiting.

The runbook for the cutover weekend has three sections. On the Friday before, you freeze deployments, verify backups, notify integration partners, and confirm the readiness checklist is closed. During the window, an on-call rota across architecture, integrations, and support watches the status updates and acts only if something fails. Afterward, a scripted set of integration tests runs against the new endpoints, and a representative user from each business unit performs three or four standard workflows and signs off.

The migration succeeds or fails on the Friday afternoon, not on the Sunday night. Everything that matters is whether the audit was honest about what was at risk.

The small set of things that genuinely break

Across the migrations we have observed, the same handful of issues recur. They are entirely predictable, which is what makes the audit worth running.

!

Orphaned IP allow-lists

A legacy integration trusting a hard-coded Salesforce IP whose owner nobody can find. Trace it from incoming network logs and resolve before cutover.

!

Hard-coded domains in Apex

A class that builds URLs from the old domain pattern. Search the codebase for literal domain strings and replace with URL.getOrgDomainUrl().

!

Email-to-case MX records

Routing that used a custom domain alias needs its MX records pointed at the new mail servers.

!

TLS-pinned outbound messages

An on-premise integration with strict certificate pinning needs the receiving trust store updated.

Audit shortcut

Search your entire metadata export for the literal strings ".salesforce.com" and ".force.com". Anywhere they appear, decide whether the value should be dynamic. This single search catches roughly eighty percent of the code-level issues.

Habits for the month after

For the first month, monitor a small set of numbers weekly: Apex CPU averages, inbound API error rates, outbound integration failure logs, and login failure rates. Any sustained shift warrants investigation. Most clients see no measurable difference in performance, some see a small improvement, and the migration is in practice almost invisible to end users. The entire risk profile sits at the integration boundary, and a thorough audit collapses that risk into a handful of discrete, ownable tickets. Run the audit honestly, and the cutover weekend becomes the quiet non-event it is supposed to be.

Planning your Hyperforce cutover?

We run pre-migration audits that surface the integrations and rules likely to fail on day one. Send us your org snapshot and we will produce a readiness report inside ten business days.

Book a readiness audit