Cycling through all six. Tap any point to stop.

Measured on six things

Native Salesforce document generation and e-signature app...

Security

HTTPS enforced, CSP, SPF and DMARC present. But HSTS, frame protection, X-Content-Type-Options, Referrer-Policy and Permissions-Policy are all missing (6/12). No SOC 2, ISO, or pen-test report published despite HIPAA/SOX claims.

Screenshots

1 / 2

Dochly

About this app

Dochly is a 100% native Salesforce application that handles document generation and e-signature entirely within your Salesforce org. Unlike third-party tools that send your data to external servers, Dochly keeps everything inside Salesforce, eliminating data security risks. It allows you to generate branded PDFs and HTML documents from any Salesforce record in one click, automate document workflows with conditional logic, process documents in bulk, and collect legally binding e-signatures—all without leaving Salesforce. With a drag-and-drop template editor, you can create reusable templates with merge fields and conditional content. The e-signature feature supports multiple signers, various authentication methods, and provides a tamper-evident audit trail. Dochly is ideal for industries like financial services, healthcare, manufacturing, and technology, where data security and compliance are paramount. It's quick to set up, requiring no coding, and seamlessly integrates with Salesfo...

Key features

1100% native Salesforce document generation — PDFs and HTML from any record with zero external data transfer.
2Native e-signature with multiple signers, authentication options, and a tamper-evident audit trail inside Salesforce.
3Drag-and-drop template editor with merge fields, conditional logic, and batch processing up to 10,000 documents.

Target customer profile

Drawn from the product itself, not from a survey.

Demographic

Salesforce Administrators

Pain points

Manual document creation, data security risks with third-party tools, slow turnaround times.

Primary needs

Native document generation, e-signature, automation, compliance.

Demographic

Sales Operations Managers

Pain points

Reps spending too much time on quotes and contracts, inconsistent document versions, lack of tracking.

Primary needs

Fast quote generation, bulk processing, real-time signature tracking.

Demographic

Compliance Officers

Pain points

Data leaving Salesforce, lack of audit trails, regulatory non-compliance.

Primary needs

Zero data exposure, tamper-evident audit logs, HIPAA/SOX compliance.

Scout Review

Written by AI from measured evidence, scored out of 100.

Dochly is a Salesforce-native document generation and e-signature tool with a clear, defensible pitch: everything stays inside your org, nothing touches a third-party server. The marketing site is fast (99/100 mobile Lighthouse), the help center is unusually deep for a product this young, and the 'Before & After' mockup does a better job than most competitors of showing the actual pain. The weaknesses are structural rather than cosmetic. Every path to using the product routes through 'Contact Us', which undercuts the advertised free trial and five-minute setup. The security posture is thin for a compliance-focused product — missing HSTS and several standard headers, and no published SOC 2 or pen-test report despite HIPAA and SOX claims. Accessibility is decent but has real contrast and labeling issues. The idea is good and the wedge is real; the execution needs to catch up to the pitch.

Measure by measure

Usability

Help center is substantial — 46 guides across 6 topics. But every path to actually using the product routes through 'Contact Us', so the advertised 'Start Free Trial' and 'Setup in 5 minutes' are not self-serve.

Design

Clean, dark, modern SaaS landing page with a strong 'Before & After' product mockup and consistent Salesforce-native branding. No independent visual audit was captured, so polish is judged from site copy and layout claims only.

Speed

Lighthouse mobile 99/100 (LCP 2.0s, TBT 0ms, CLS 0.019) and desktop 100/100. Genuinely fast, well-optimized marketing site with no measured performance issues.

Security

Accessibility

Lighthouse accessibility 93/100. Failing audits: insufficient color contrast, links distinguishable only by color, and visible text labels not matching accessible names. No WCAG statement or multi-language support found.

Growth

Real, specific wedge: Salesforce-native document generation and e-signature with zero external data exposure, aimed at regulated industries. Differentiated against DocuSign/Conga, but the compliance moat is copyable and the category is crowded.

Improvement areas

No self-serve signup — every plan routes through 'Contact Us', undercutting the advertised free trial and 5-minute setup.
No published SOC 2, ISO 27001, or pen-test report despite HIPAA/SOX compliance claims.
Missing standard HTTP security headers (HSTS, frame protection, X-Content-Type-Options, Referrer-Policy, Permissions-Policy).

Design & Usability

Dochly's landing page is a competent, dark-mode SaaS site with a genuinely useful 'Before & After' mockup that shows the actual problem — a Word doc named 'Quote_Template_v3_FINAL_use_this.docx' — and the fix. The branding is consistent and the Salesforce-native positioning is clear throughout. Usability is where it gets awkward: the help center is unusually deep for a product this young, with 46 guides across six topics covering install, templates, batch processing, and e-signature. But every route to actually using the product goes through 'Contact Us' — the 'Start Free Trial' button and 'Setup in 5 minutes' claim don't lead to a self-serve signup. For a tool aimed at Salesforce admins who are used to installing apps from the AppExchange in minutes, requiring a sales conversation is friction the category doesn't usually impose.

Speed & Security

Speed is the standout: Lighthouse mobile 99/100 with LCP 2.0s, TBT 0ms, and CLS 0.019, plus a perfect 100 on desktop. The marketing site is genuinely fast and there's no evidence of user complaints about lag. Security is more mixed. The basics are there — HTTPS enforced, CSP present, SPF and DMARC configured — but the HTTP probe found HSTS, frame protection, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy all missing, landing at 6/12 checklist points. More importantly, the product's entire pitch is 'zero data exposure' and 'HIPAA-ready', yet no SOC 2, ISO 27001, or pen-test report is published anywhere on the site. For a tool selling compliance to financial services and healthcare, that's a gap between the claim and the receipts.

Accessibility & Growth

Accessibility scores 93/100 on Lighthouse, which is respectable, but the failing audits are the ones that matter for real users: insufficient color contrast, links distinguishable only by color, and visible text labels that don't match their accessible names. There's no WCAG conformance statement and no multi-language support mentioned. Growth is the more interesting question. The wedge is real and specific: document generation and e-signature that never leaves the Salesforce org, aimed at regulated industries where data egress is a genuine compliance problem. That's a differentiated position against DocuSign, Conga, and Nintex, all of which structurally send data off-platform. But the moat is copyable — a well-funded incumbent could ship a native mode — and the category is crowded. The domain is four months old and only LinkedIn is listed as a social channel, so this is very early. The idea has room; execution and distribution are the open questions.

Conclusion

Dochly is worth a look if you're a Salesforce admin in a regulated industry who's tired of explaining to compliance why contract data is sitting on DocuSign's servers. The native positioning is the whole point and it's a legitimate one. But go in with eyes open: you'll be talking to sales before you see the product, and you'll want to ask directly for their SOC 2 report, pen-test results, and data handling documentation before you put patient or client data anywhere near it. The speed and the help center suggest a team that cares about craft. The missing security headers and the contact-us-only signup suggest a team that's still early. Both can be true. Give it six months and a published audit, and this becomes a much easier recommendation.

Suggestions for improvement

Ship a real self-serve trial. 'Start Free Trial' that routes to a contact form is a broken promise and it's costing you signups from admins who install apps in minutes.
Publish a SOC 2 Type II report or at minimum a security page with pen-test summary. 'HIPAA-ready' without an audit is a claim, not a credential.
Fix the missing HTTP headers: HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and frame protection. It's an afternoon of work.
Address the Lighthouse a11y failures — contrast ratios, color-only links, and mismatched accessible names. Cheap fixes, real users affected.

How we score

Alternatives comparison

Named competitors, point by point. Nobody paid to appear here or to be left out.

	Dochly	UTECH HUB
Salesforce-native architecture (no external data transfer)	Yes — 100% native, zero external servers	Consulting/ISV partner — implementation services, not a native document product
Document generation from Salesforce records	Yes — PDF and HTML from any standard or custom object	Not a product feature — delivered via consulting engagements
Native e-signature with audit trail	Yes — multi-signer, tamper-evident audit trail, in-org	Not offered as a native product feature
Batch document processing	Yes — up to 10,000 docs per run on Professional plan	Not a productized feature
Self-serve free trial	Advertised but routes to 'Contact Us' — not self-serve	Consulting engagement model — no trial
Published compliance certifications (SOC 2 / ISO)	None published; 'HIPAA-ready' claimed	Not applicable — services firm