AI Code Governance #
The practice of applying automated policies, rules, and enforcement mechanisms to code
and configuration produced by both human developers and AI tools, ensuring that all
output meets security, quality, compliance, and performance standards before it reaches
production. AI code governance addresses the specific challenge that AI-generated code
is often accepted without human review, making automated checks essential at the point
of creation.
LivecheckAI #
Quality Clouds’ real-time code scanning tool. Integrates into developer environments
(VS Code, Salesforce Code Builder, Chrome extension for ServiceNow) and checks code
against a library of nearly 1,000 best-practice rules as it is written. LivecheckAI
differs from a linter in that it understands the full platform context — Apex
relationships, ServiceNow script types, Flows, and configuration elements — not just
language syntax. Supported platforms: ServiceNow, Salesforce.
Quality Gate #
An automated enforcement checkpoint in a deployment pipeline. In Quality Clouds, a
Quality Gate sits between pipeline stages and validates that code or configuration
changes comply with governance policy before promotion. Gates operate in blocking mode
(hard stop on violation) or advisory mode (findings surfaced without blocking).
Configurable by environment, team, platform, and impact area.
Technical Debt #
The accumulated cost of deferred quality decisions in software development. In
ServiceNow and Salesforce platforms, technical debt manifests as code duplication
across scripts and classes, deprecated API usage, overly complex configurations,
unremediated security vulnerabilities, and performance anti-patterns that degrade
platform response time. Quality Clouds measures technical debt continuously and
provides a prioritised remediation view.
Governance Rule / Best Practice Rule #
A defined standard applied during a Quality Clouds scan. Rules check code and
configuration against security requirements, performance best practices,
maintainability standards, and platform-specific constraints. Quality Clouds provides
a library of nearly 1,000 pre-built rules for ServiceNow and Salesforce, which can be
supplemented with organisation-specific rules using the AI Rule Builder.
Health Scan #
A comprehensive point-in-time analysis of a ServiceNow instance or Salesforce org.
A Health Scan covers code quality, configuration, technical debt, security exposure,
and performance across the entire environment. Output is a prioritised report suitable
for platform owners and executive stakeholders, identifying the most impactful areas
for remediation. Health Scans are typically run at onboarding, before major upgrades,
and as part of periodic governance reviews.
AI Rule Builder #
A Quality Clouds capability for defining custom governance rules for specific platforms
and policies. Rules are configured through a no-code interface and added to the
scanning library alongside the standard 1,000 pre-built rules. The AI Rule Builder
can generate rule suggestions based on your existing codebase, platform version, and
industry. All custom rules apply to both human-written and AI-generated code.
Production-Ready AI Code #
Code that has passed all governance checks — security, performance, compliance, and
policy — and is validated for deployment to a production ServiceNow instance or
Salesforce org. This is Quality Clouds’ core positioning term: AI tools generate code
rapidly, but that code is not production-ready by default. Quality Clouds provides the
governance layer that makes it so.
Now Assist for Creator #
ServiceNow’s AI-assisted development tool that generates scripts, Flows, and
configuration elements based on natural language prompts. Now Assist for Creator
accelerates ServiceNow development but does not apply quality governance to its output.
Quality Clouds scans Now Assist for Creator output through LivecheckAI and Quality
Gates, applying the same governance standards as human-written code.
Agentforce Builder #
Salesforce’s AI platform for building and deploying autonomous agents and workflows.
Agentforce Builder generates Apex, Flows, and configuration elements that enter
Salesforce orgs. Quality Clouds governs Agentforce Builder output by scanning it for
security vulnerabilities, governor limit risks, performance anti-patterns, and policy
compliance — regardless of whether the generating agent is technical or non-technical.
AI Control Tower (ServiceNow) #
ServiceNow’s native governance tool for managing AI agents and workflows running in
production. AI Control Tower monitors what agents are doing in a live production
environment. Quality Clouds operates upstream of AI Control Tower — scanning the code
and logic that agents are built from before it reaches production. The two tools are
complementary: Quality Clouds is the pre-production sensor; AI Control Tower is the
production governor.