Building and running websites and apps on Vercel

UAE

Website changes approved in WhatsApp screenshots: what a preview link should reach

By Shivanath DevinarayananPublished 5 min read
Written forCOO or operations lead whose work crosses teams, partners and systems“Your team chases every decision across WhatsApp, email and Excel.”

The short answer

How should an operations team use preview deployments to approve website changes, and what should a preview be allowed to reach?

Give every website change its own preview link, have the person who owns the change approve the real page, then promote it. Point the preview's forms at a test CRM, keep it behind sign-in, and remember a rollback does not undo data or variable changes. At Mindcat, we set up the approval before the first change.

A cafe manager's hand holds a phone showing a web page with a gold approve tick beside a paper menu, Check it first

Takeaways

  1. 01A screenshot in WhatsApp hides the mobile layout, the form and the link. A preview link shows the real page.
  2. 02Previews use Preview variables. Point their forms and payments at test systems, never the live CRM.
  3. 03Staged production uses production variables, so a staged build can reach live data.
  4. 04Instant Rollback restores the code. It leaves environment variables, databases and outside systems as they are.

If your website changes are approved from screenshots in a WhatsApp group, this is for you. It is not for a team whose site changes twice a year: there, a careful developer and a phone call are enough.

Why do WhatsApp approvals keep missing mistakes?

Because a screenshot is not the page. It shows one screen size, one moment and none of the links. The approver says "looks good" to an image, and the delivery link, the Arabic version and the form underneath were never checked.

Then the change goes live, and the first real review is a customer's message. Fixing it means finding the developer, who finds the old version, who uploads it again. Nobody can say afterwards who approved what, because the approval is a thumbs-up in a chat.

The fix is a link, not a better screenshot. Every change gets its own live copy of the site. The person who owns the change opens it on their own phone, clicks the real buttons and approves it in one place.

We set up previews and approvals for whole teams on Vercel previews.

What does a preview deployment give the approver?

A real, private copy of the site with only that change in it, ready to open "as soon as it builds", as Vercel's previews page puts it.

Five steps: change on a branch, private preview link, manager checks the real page, approve and promote, roll back
A website change, checked on its own link before it goes live.
  1. 01The developer puts the change on its own branch, never straight on the live site.
  2. 02Vercel builds a preview. Pushing to a non-production branch, opening a pull request on GitHub, GitLab or Bitbucket, or a CLI deploy without --prod all make one.
  3. 03The approver opens the link and comments on the page itself, through the toolbar on the preview.
  4. 04Once approved, the change is merged, or a staged build is promoted. Promotion assigns the production domains without rebuilding.
  5. 05If something slips through, Instant Rollback puts the last good deployment back.

Each preview has two links. The branch link always shows the latest change on that branch, so the approver keeps one link while fixes land. The commit link points at one exact build and never changes, which is the one to keep with the approval.

What can a preview reach, and what should it not?

A preview reaches whatever its environment variables point at. Get this wrong and a test enquiry lands in your sales team's queue as a real lead.

A preview link uses Preview variables and a test CRM; staged production uses production variables and live data
What each kind of check can reach. A rollback does not undo database or variable changes.

Vercel gives previews their own Preview variables, and a branch can override them with its own values. That is where the form's CRM login, the payment key and the WhatsApp token for previews live. Point them at a Salesforce sandbox and test keys. Then the approver can send a real-looking enquiry and see it arrive, without touching the live pipeline.

A staged production build is different. Vercel's environments page says staged production deployments "use production environment variables, so testing can access production services and data." Use staging for the last look before promotion, not for trying a form.

WayPlansWhat it reaches
Preview branch with its own variablesAll plans, including HobbyPreview values, overridden per branch
Custom environment such as stagingPro (1 included) and Enterprise (12)Its own variables and domain
Staged production, promoted by handAll plansProduction variables and live data

Only the people you choose, if you set it. Vercel's Standard Protection is available on every plan and protects every domain except your production ones. Combine it with Vercel Authentication, which lets in only Vercel users with access, at no extra cost.

On Pro, the people who only approve do not need paid seats. Viewer seats are free and read-only, and Vercel's Pro plan page lists commenting on previews among what they can do. A password instead of sign-in is Password Protection, $20 a project a month on Pro and not available on Hobby. Trusted IPs are Enterprise only.

That is how the approval leaves WhatsApp: the approver signs in, comments on the page, and the comment sits next to the change it is about.

What does a menu change look like for four cafes?

Here is a sample plan, not a client. A Dubai cafe group with four branches changes its menu prices on the website and fixes the delivery link for one branch. The operations manager owns the change.

Sample plan for four cafes: prices on a branch, preview built, ops manager checks, link fixed, approved and promoted
A sample plan for a menu price change, not a client.
WhenWhoWhat happens
Mon 10:00DeveloperPuts the new prices on a branch
Mon 10:04VercelBuilds the preview link, behind sign-in
Mon 12:00Operations managerChecks all four branch pages on her phone, in Arabic and English, and comments on the wrong delivery link
Mon 12:30DeveloperFixes the link; the same branch link shows the new build
Mon 12:40Operations managerSends a test catering enquiry; it lands in the Salesforce sandbox, not the live queue
Mon 13:00DeveloperMerges; the production build is staged and waits, off the live site
Tue 07:00DeveloperPromotes the staged build before the branches open, with no rebuild

The price is right on the first morning, and the approval is written on the change, not lost in a chat. For the shape of the work in this industry, see Mindcat for restaurants and cafes.

What does a rollback undo, and what does it leave?

It undoes the code on your domain. Everything outside the code stays as the bad release left it.

Vercel's Instant Rollback page says three things a manager should know. On Pro and Enterprise you can roll back to any deployment that was ever live on your production domain; Hobby only to the one before. Environment variables do not change on a rollback. And the page reminds you that external APIs, databases and CMSes may have changed in between.

So a bad release that wrote wrong prices into a booking system, or sent leads with a broken field to Salesforce, is not fixed by the rollback. Put that cleanup in the release checklist, with a named owner, before you need it.

What happens on the first call?

We call the method Preview every change: nothing reaches your customers until the person who owns the change has opened it on its own link and approved it. On the call you tell us who changes the site, who approves, and what the forms send where. The written assessment is free and names the approvers, the test systems each preview points at, and the rollback owner.

The first build week is a fixed AED/SAR 14,900, and Run plans keep the approvals running after go-live. See everything we build at Vercel, then tell us how changes are approved today.

Filed under

Building and running websites and apps on Vercelvercel preview environment variablesvercel deployment protectionvercel instant rollbackwebsite change approval process
Useful to someone on your team?

FAQ

Questions teams ask next

What is a Vercel preview deployment?
A live copy of the site built from one change. Vercel creates one when you push to a branch that is not the production branch, open a pull request on GitHub, GitLab or Bitbucket, or deploy from the CLI without the production flag. Each preview has a branch link that follows the latest change and a commit link that never changes.
Can people outside our developers comment on a preview?
Yes. On the Pro plan, viewer seats are free and give read-only access to the dashboard, including commenting on previews. The toolbar on a preview takes comments on the page itself. Previews can sit behind Vercel Authentication on every plan, or a password, which is $20 a project a month on Pro and not available on Hobby.
Does a rollback undo a bad form or price change in our CRM?
No. Vercel's Instant Rollback page says environment variables stay as they are, and it warns about external APIs, databases and CMSes that the current or previous deployment used. A rollback puts the old code back on your domain. Anything the bad release wrote to Salesforce or a database stays written, so someone has to clean it up.
Do we need a staging server as well as previews?
Often not. Vercel describes three ways to stage: a preview branch with its own variables on every plan, a custom environment on Pro and Enterprise, and a staged production build that waits for promotion. Pricing lists one custom environment on Pro. Pick the one that matches who approves and what the test should reach.

Sources

  1. 01Vercel docs: Environments (preview, production and custom)Accessed 16 Oct 2026
  2. 02Vercel docs: Instant RollbackAccessed 16 Oct 2026
  3. 03Vercel docs: Deployment ProtectionAccessed 16 Oct 2026
  4. 04Vercel: Previews product pageAccessed 16 Oct 2026
  5. 05Vercel docs: Pro plan (viewer seats)Accessed 16 Oct 2026
  6. 06Vercel pricingAccessed 16 Oct 2026
Shivanath Devinarayanan, founder of Mindcat

Written by

Shivanath Devinarayanan

Founder, Mindcat Consulting · Salesforce MVP Hall of Fame

Runs 200+ agents in production. Reads every brief that comes in and signs the work that goes out.

About Shivanath

Build It, Preview It, Run It · the written assessment

We work in real estate and right now, leads go cold before anyone replies.

Industry
Problem

Brief: Real estate. Leads from portals and WhatsApp. Follow-up has no owner. An agent on a named process. A reviewer on the exceptions. From: /blog/vercel-preview-deployments-approvals.