CRM Audit: A Scored Checklist and 90-Day Fix Plan

Most sales leaders know their CRM has problems long before anyone measures them. Reps keep side spreadsheets and nobody trusts the dashboard. Validity surveyed 602 CRM users for its State of CRM Data Management in 2025. 76% said less than half of their CRM data is accurate and complete.

A CRM audit turns that vague unease into a scored list of fixes. This guide gives you a weighted CRM audit checklist across six areas. It also covers native tools for Salesforce, HubSpot, Dynamics 365 and Odoo, a sample report and a 90-day fix plan.

Key Takeaways

• A CRM audit scores data, adoption, automation, integrations, permissions and reporting against clear targets.
• Salesforce, HubSpot, Dynamics 365 and Odoo each include native tools that supply audit evidence without extra software.
• Findings only pay off when a 90-day plan gives every fix an owner and a date.

What Is a CRM Audit and Why Run One?

A CRM audit is a structured review of how well your CRM supports the way your team sells. It checks the data, the configuration, the people using it and the results it produces.

That is the plain CRM audit meaning. Some teams call the same exercise a CRM health check, a CRM assessment or a CRM evaluation. The labels differ, but the goal is the same: find what is broken, rank it and fix it in order.

CRM auditing differs from choosing new software. Learning how to evaluate a CRM before purchase compares vendors. An audit looks at the system you already own and asks whether it still earns its license fees.

Skipping it has a measurable cost. Gartner research from 2020 says poor data quality costs the average organization at least $12.9 million a year. The same Validity survey found that 37% of CRM users lost revenue as a direct result of bad data.

A regular CRM audit also protects CRM ROI. A system that reps avoid cannot support your CRM strategy, however much it cost to implement. If you still need the business case for the platform, read why having a CRM is important to a business.

When Should You Run a CRM Audit?

Run a full CRM audit once a year and a lighter CRM review every quarter. Annual audits catch slow drift in data and configuration. Quarterly reviews catch new problems before they spread into reports.

Certain events justify an audit outside that schedule:

1. Before a migration, so you move clean data instead of old mistakes.
2. After a merger, when two customer databases and two sales processes collide.
3. Before renewing licenses, when unused seats show up as direct savings.
4. When a new sales or marketing leader joins and asks which numbers are real.
5. Before rolling out AI features that depend on accurate CRM data.

Migration is the trigger with the highest stakes. Teams that skip the audit carry duplicates and dead fields into the new platform. Our CRM migration guide explains why the clean-up has to happen before data moves.

Decide who runs it before setting a date. A CRM admin or RevOps lead usually runs the audit, with one representative from sales, marketing and service. A RevOps audit adds a commercial view to CRM administration. It ties each finding to revenue rather than to tidiness.

What Does a CRM Audit Checklist Cover?

A complete CRM audit checklist covers six areas. Each one is scored from 0 to 4 and weighted by its effect on revenue. The weights below are a starting point based on where audit findings usually cost the most. Adjust them to your business.

Score each area with a simple scale. A 0 means the area is broken or unknown. A 4 means it meets the target with evidence. Multiply each score by its weight, then add the results for a total out of 100.

Two items cut across every area. The first is CRM license cost: compare paid seats with active users and note the gap. The second is CRM reporting: list which reports leadership uses and which ones nobody has opened in 90 days.

Keep the scoring honest. An area with no evidence scores 0, even if everyone believes it works. The purpose of the rubric is to separate what the team assumes from what the system shows.

Collect evidence in one shared folder before any scoring meeting. Save each report export, tool scan and interview note with a date. When a score is challenged, the CRM audit points to the file, not to memory. This also makes next year's audit faster, because the baseline already exists.

How Do You Audit CRM Data Quality?

To audit CRM data quality, measure duplicates, completeness, accuracy and age on your core objects. Then compare each figure with a target. A CRM data audit works best on contacts, companies and open deals first, because those records feed the pipeline.

Follow these steps for a data quality audit:

1. Export a count of records per object and per owner.
2. Run the platform's duplicate rules or matching rules and record the CRM duplicates rate.
3. Check fill rates for 10 required fields, such as email, industry and lead source.
4. Flag records with no activity in 18 months as candidates for archiving.
5. Sample 50 records by hand to test CRM data accuracy against the source.
6. Review field usage and list custom fields filled on fewer than 5% of records.

Field usage deserves its own pass. Salesforce field usage reports, HubSpot property insights and Dynamics 365 column data all show which fields nobody fills. Each empty field adds clutter to page layouts and slows reps down.

Duplicate records hurt more than storage. Two records for one buyer split the activity history. A rep may then call a customer that a colleague closed last week. Fixing them is the core of CRM data management.

Data decay causes the second problem. Buyers change jobs and companies rebrand. CRM data enrichment tools can refresh titles and firmographics, but only after the audit shows which fields matter. Enriching junk records only produces better-formatted junk.

A worked example, with assumed figures: a team holds 40,000 contacts and the duplicate rules flag 8% of them. That is 3,200 extra records, each one splitting activity history and pushing up marketing contact tiers. The CRM audit scores data quality 1 and makes duplicates the first clean-up target.

This is the practical answer to how to audit CRM data quality: measure, sample by hand, then decide. The audit records the baseline, and the fix plan later sets the targets.

How Do You Score CRM Adoption and Usage?

Score CRM adoption by comparing licensed users with active users, and by checking whether they log real work. A login alone is not adoption. A rep who logs in daily but keeps deals in a spreadsheet has not adopted the CRM.

Track four CRM metrics for user adoption:

1. Weekly active users as a share of paid seats.
2. Activities logged per rep per week, such as calls, emails and meetings.
3. Share of open deals updated in the last 14 days.
4. Share of closed deals with a recorded loss or win reason.

Pair the numbers with interviews. Ask five reps and two managers where the CRM slows them down. Their answers often explain a low score faster than a report does. They also point to cheap fixes.

Strong CRM audits lead quality sales performance reviews in the same pass. Check whether marketing passes leads with the fields sales needs, and whether sales follows up on time. A sales process audit at this stage compares the stages in the CRM with the steps reps follow in practice.

Turn the numbers into a score with a decision rule. Give a 4 when 90% of seats are active weekly and 80% of open deals moved in 14 days. Give a 2 when either figure sits between 60% and 75%. Anything lower scores 0 or 1.

A sales pipeline audit closes this section. Look for deals with past close dates, deals stuck in one stage for 60 days and stages that nobody uses. Each one weakens the forecast. Low CRM user adoption usually shows up first in these stale deals.

How Do You Audit Automation, Integrations and Permissions?

Audit automation by listing every active workflow, its trigger, its owner and its error history. CRM workflow automation built over years tends to overlap. Two rules can update the same field and quietly overwrite each other.

Review CRM automation in this order:

1. Export every active workflow, flow and sequence with its last run date.
2. Flag automations with errors in the last 30 days.
3. Find pairs that touch the same field or object.
4. Retire anything built on deprecated tools.

Apply a simple rule to each automation. Keep it if it ran successfully in the last 90 days and has an owner. Fix it if it fails but still matters to a team. Retire it if nobody can say what it does.

Salesforce technical debt often sits here. Salesforce has moved automation from Workflow Rules and Process Builder to Salesforce Flow, so older orgs may run all three. The same review applies to CRM customization and CRM configuration. Custom objects and page layouts that no team uses add cost without value.

Next, map every CRM integration. Record what each one syncs, how often, who owns it and when it last failed. Integration errors are a common source of duplicates, because a sync that fails halfway can create a second record.

A marketing automation audit belongs here too. Form fills and email tools write directly into the CRM, so their field mappings decide what sales sees.

Finally, review CRM security and CRM permissions. List admin accounts, permission sets, profiles and security roles. Remove access for people who have left.

This step also answers how to audit CRM for compliance gaps under GDPR and CCPA. Check consent fields, deletion requests and who can export contact lists.

The CRM audit log and CRM audit history show who changed what. Regulated firms also need to know how to audit access logs in CRM platforms.

In Dynamics 365, Dataverse auditing records creates, updates, deletes and security role changes. It does not log reads or exports. Those need activity logging and Microsoft Purview, according to Microsoft's auditing documentation.

Which Native Tools Support a CRM Audit by Platform?

Each major platform includes free or bundled tools that answer part of a CRM audit. Use them before buying third-party software, and treat their output as evidence for the rubric.

Salesforce audit tools

A Salesforce audit usually starts with two tools. The Salesforce Optimizer retired in the Winter '26 release, says the Salesforce Admins blog (2025). Org Check, a free Salesforce Labs app, now inspects the org's metadata.

A Salesforce health check then compares security settings with a baseline.

The Salesforce Trailhead module on Health Check explains that it scores the org from 0 to 100. The score compares your settings with Salesforce's Standard Values. It also warns that the Fix Risks button can break an integration, so test changes in a sandbox first.

For a Salesforce org audit of changes, the Salesforce setup audit trail shows who changed configuration in Setup. Field History Tracking covers edits on records. The Salesforce field audit trail, part of Salesforce Shield, keeps that history for longer. Salesforce license optimization comes from comparing active users with assigned licenses.

HubSpot audit tools

A HubSpot audit, sometimes called a HubSpot portal audit, starts in the data quality tools. HubSpot's knowledge base (2026) lists property insights, duplicates, formatting issues and enrichment in that view. Some features, such as duplicate alerts and formatting automation, need Data Hub Professional or Enterprise.

A HubSpot CRM audit should also review workflows, lifecycle stages and user seats. Only super admins or users with data quality permissions can open the overview, so arrange access before the audit starts.

Dynamics 365 and Odoo audit tools

A Dynamics CRM audit depends on auditing being switched on at three levels: environment, table and column. A Dynamics 365 audit should check that setting first, because history before it was enabled does not exist. Odoo CRM can merge similar leads and opportunities, which helps with the duplicate check.

What Does a CRM Audit Findings Report Include?

A CRM audit findings report lists each area's score, the evidence behind it and the top three fixes. The example below uses assumed figures for a 60-user B2B sales team. It shows the format, not real benchmark data.

The total is 50 out of 100. In this example, data quality drags the score down most, because it carries the largest weight and scored lowest. That tells the team where the first month of work should go.

A useful CRM audit template has four parts. They are the scored table, an evidence log, a ranked findings list and a one-page summary. Put the summary on a CRM dashboard so the score can be tracked each quarter.

Each finding should name its evidence. "8% duplicate contacts" with a report link persuades a sales director. "Data could be cleaner" does not.

How Do You Build a 90-Day CRM Fix Plan?

Build the fix plan in three 30-day phases: stop new damage, clean what exists, then lock in the gains. Every fix gets one owner, one due date and one measure that proves it worked.

1. Days 1 to 30: remove former users, fix failing automations and add validation rules on key fields.
2. Days 31 to 60: run CRM data cleansing on duplicates and stale records, then retire unused fields.
3. Days 61 to 90: train reps on the new rules, publish the dashboard and re-score the six areas.

Assign the work by role. The CRM admin owns permissions and automations. Sales operations owns pipeline stages and deal hygiene. Marketing operations owns lead fields and form mappings. A sales director signs off the plan, so the fixes get time on team calendars.

Sequence is the point of the plan. A CRM cleanup without validation rules fills up again within months, so new errors are blocked before phase two begins.

Phase three turns the fixes into CRM data hygiene habits. Set a monthly duplicate report, a quarterly field review and a named data owner for each object. Data hygiene lasts when it runs on a calendar.

Write the rules down as CRM data governance. Decide who creates fields, who approves integrations and how long inactive records stay. Governance is what keeps CRM optimization from slipping back. The same discipline appears in a good CRM implementation plan, which assigns owners to every phase.

Re-score at day 90 with the same rubric. A move from 50 to 70 out of 100 gives leadership a clear result. It also shows which areas need a second round.

Some fixes need outside skills, such as rebuilding automations or merging two databases. Our CRM consulting and implementation services cover that work across Salesforce, HubSpot, Dynamics 365 and Odoo.

Results from real projects support this order. One HubSpot CRM optimization success story shows the effect. A B2B company cut duplicate records by 92% and manual reporting effort by 96%.

Frequently Asked Questions

How long does a CRM audit take?

A CRM audit for a team of 20 to 100 users usually takes two to four weeks. Data exports and tool scans take days. Interviews, evidence gathering and scoring take the rest. Orgs with 20 or more integrations need longer, because each sync has to be mapped and tested.

How much does a CRM audit cost?

An internal CRM audit costs staff time, usually one admin for two to four weeks plus interview hours. An external audit is priced by scope: users, objects, integrations and platforms. Ask for a fixed-fee quote tied to the six areas, so you can compare providers on the same deliverables.

What are CRM best practices after an audit?

Useful CRM best practices after an audit include validation rules, a monthly duplicate report and an owner per object. Add a quarterly re-score with the same rubric. These habits keep the gains from the fix plan and catch new problems early.

Can you audit a CRM without admin access?

You can review reports and interview users without admin access, but you cannot finish a full audit. Permission reviews, automation lists and native tools such as Org Check and Health Check need admin rights. Request temporary admin or read-only setup access before the audit starts, and log every change made.

Should you audit the CRM before a migration?

Yes, audit the CRM before any migration. The audit shows which records, fields and automations deserve to move. Teams that skip it pay to migrate duplicates and dead fields, then clean them in the new platform. Our guide to common CRM migration mistakes covers the risks.

When Should You Bring In a CRM Audit Partner?

Bring in an outside partner when the internal team built the setup it is auditing. The same applies when integrations span three or more systems. An independent CRM consultant has no stake in defending past decisions, so the CRM audit findings carry more weight.

Unboxx runs scored audits and 90-day fix plans on Salesforce, HubSpot, Dynamics 365 and Odoo for B2B teams. If your CRM no longer earns its license fees, schedule a consultation and get a clear starting score.