We need to move data from a legacy Salesforce instance to a new cloud ERP. APIs are not an option for the old system. Can I use RPA to 'read' the UI and input data into the new system? Are there any security risks I should be aware of when using bots for data migration? Any tips on ensuring data integrity during the process?
RPA can perform data migration by interacting with UI elements, but this requires strict security controls including service account least-privilege access, audit logging, and post-migration checksum verification to ensure data integrity.
5 answers
Following a strict migration protocol is necessary to prevent data leakage and ensure integrity during your process.
- Use dedicated service accounts with least-privilege access for the RPA bots.
- Implement an encrypted staging layer to hold the data before it touches the new ERP.
- Perform full audit logging of every keystroke and field update initiated by the automation.
- Conduct checksum validation between the source Salesforce records and the destination ERP entries.
Thanks for sharing this, Ava! I am still learning the ropes with these protocols, but your list makes the process feel much more manageable and secure for a beginner like me.
Yes, you can use RPA for this, but treating it as a primary migration tool for production ERP data is high-risk. You are essentially building a fragile brittle layer on top of a legacy UI that will break the moment a Salesforce element changes.
I worry you’re right, Abigail. I’ve seen UI changes break automations before, and it honestly keeps me up at night wondering if we are setting ourselves up for a major failure here.
Abigail, your point about fragility is so valid. I keep second-guessing my own scripts for this reason, and it feels like there is always a huge risk of something breaking unexpectedly.
I recall back in 2018 when we tried to automate a similar migration for a retail client using UI-based scrapers. We spent more time debugging the bot's interaction with the DOM than we would have spent if we had just parsed the database exports directly into the target system schema.
The screen elements in the legacy system kept shifting due to background page loads, which meant the bot constantly timed out and threw exceptions. We eventually abandoned the bot approach and wrote a custom script to handle the raw data transformation instead.
Using RPA for data migration represents a trade-off between implementation speed and long-term system stability. Direct database integration is typically more robust and secure, as it bypasses the potential for visual errors, but it requires backend access which you have already ruled out. On the other hand, RPA is flexible when APIs are non-existent, but it introduces significant security vulnerabilities since the bot must emulate user credentials to traverse the UI. You should weigh the cost of developing a custom middleware layer against the risk of the RPA process failing due to UI updates.
RPA for data migration is a desperate move that usually causes more headaches than it solves. You are introducing a point of failure at the UI level, and if your Salesforce instance updates its css selectors, your entire migration project will stall immediately. Don't do it unless you have a death wish for your project timeline.


I’m probably overthinking it, but these steps by Ava are super helpful. I'm usually scrambling to find documentation, so having this clear protocol really puts my mind at ease today.