AppExchange

AppExchange is Salesforce's online marketplace for software that runs on or connects to Salesforce. Customers browse it to find apps, ready-made components and consulting partners. Many listings are built by independent software vendors (ISVs), outside companies that build products on the Salesforce Platform.

A note on the name: by September 2026, Salesforce was calling the combined marketplace AgentExchange. It brings together the original AppExchange listings, AI agents and tools for Agentforce, Salesforce's agent platform, and the Slack Marketplace. The old appexchange.salesforce.com address still works, and many people still say "AppExchange."

Apps on the marketplace come in a few forms. Many are managed packages that install directly into a customer's Salesforce org, the company's private instance of Salesforce. Others connect to Salesforce from outside through APIs (application programming interfaces). Each listing describes how the product works, which Salesforce editions it supports and what it costs.

Why it matters for lenders

For a lender that runs on Salesforce, the marketplace is where it finds specialist tools: lending platforms, document generation, e-signature, identity checks and sanctions screening. Buying a proven app is usually faster and cheaper than building the same features in-house.

The marketplace also offers a basic layer of trust. Salesforce requires managed packages and certain connected solutions to pass a security review before they can be listed and distributed. Salesforce's product security team tests for common weaknesses in how the app handles data, enforces access and stores credentials. That review does not replace the lender's own vendor due diligence, but it is a useful starting point.

Ratings and reviews help too. They show how other customers rate the product and the vendor's support.

How it works in practice

A credit union's business lending team wants to add an identity verification check to its Salesforce workflow. Its administrator searches the marketplace, shortlists three apps and reads the listings to confirm each works with the credit union's Salesforce edition and doesn't require an outside service it doesn't have.

She takes a test drive of two apps, then installs the favorite in a sandbox, a test copy of the org with sample data. The team runs ten past applications through it and checks the results. Meanwhile, the compliance officer reviews the vendor's security documents as part of third-party risk management.

Only after the sandbox test and the vendor review does the administrator install the app in production. Because it is a Salesforce-native managed package, the results file straight onto the borrower's record.