Built so nothing ships by accident

DumpIt moves changes between your orgs and repositories. These are the safeguards around that, in plain terms.

Only what you selected is deployed
Every package, Git commit and download is checked against your saved selection before it is used. If anything extra turns up, the run stops and nothing is sent.
Production is guarded
Production targets are marked everywhere. "No tests" cannot be used against production. Execute Apex and Run Query are off for production orgs until a company Admin turns them on, and can be switched off for any org.
Configuration data stays in bounds
DumpIt never deletes records in the target, and writes only the records and fields you selected.
Every action is recorded
Comparisons, validations, deployments, rollbacks, Apex runs and queries are kept with who did them and when.
Access follows your teams
Two roles for people, Admin and Member. Inside a team someone is a Lead, a Deployer or a read-only Viewer. People see their own work plus their teams'. A private connection is shared only with the people and teams you choose, and a private team walls off a client's orgs and history.
Connections use Salesforce sign-in
Orgs are connected through Salesforce sign-in (OAuth) with the DumpIt Connector package. Salesforce credentials are kept in an encrypted secrets vault and are never shown in the app.
A way back
DumpIt saves the target's state before each deployment, so it can be rolled back from the deployment's page.

Teams decide who sees what

Admins see every team. Everyone else sees their own work and their teams’, and a Viewer can look without changing anything.

Start a free trial and connect two orgs in a few minutes, or let us walk you through it on your own metadata.