Mapflow × Arcus

Why Arcus Should Adopt Mapflow

Three pillars that wish Arcus's problems away — a 30-minute agenda

30 min total•6 sections
  1. 3 min

    1. Welcome & Context

    • Who's in the room & their stake in client migrations
    • Framing: Mapflow delivers three things Arcus's clients keep asking for — and Arcus can't ship today. We call them the three pillars: Golden Conformance, the Salesforce Storage Tax, and the Postgres Data Warehouse + REST API
  2. 8 min

    Pillar I — Golden Conformance

    • The problem: spreadsheets, ad-hoc SQL, untracked edits — "hot fixes" reach production with no approval, no revert, no audit trail. It's the #1 finding in client security reviews and the #1 reason deals stall
    • Zero-trust by default: TOTP MFA, RBAC + row-level security, automatic session timeout, UK-only data residency end-to-end (Base44 + Postgres + AI)
    • Controlled, audited data fixes — no hot fixes ever reach production: propose → second-admin approve → overnight apply inside an audited transaction, immutable ledger with SHA-256 integrity hash, one-click revert, gated on a successful overnight Salesforce→Postgres copy so fixes can't be overwritten
    • Sovereign key custody: Council holds the Master recovery key; per-environment PII keys destroyed after each phase; AES-256-GCM + blind-index encrypted search
    • Weekly automated InfoSec posture monitoring — 12+ controls checked, admins emailed on Critical/High violations, every finding audited
    • The result: the answer to every line of a client security questionnaire, pre-built and running — conformance you can demonstrate, not just claim
  3. 6 min

    Pillar II — The Salesforce Storage Tax

    • The problem: documents uploaded at original size to Salesforce ContentVersion — premium per-GB storage billed forever on bloated case files
    • Local Proxy pre-upload compression — server-side, in-memory, open-source toolchain on the proxy; ~85% size reduction on the common case files (PDFs up to 90%, images 70%+); lossless by default; zero client-side exposure; UK data residency
    • SharePoint hybrid loading — per-document route to SharePoint (~£0.16/GB) with a Public_Share__c record created in Salesforce to link the file to the Case (via LinkedEntityId), or direct to ContentVersion; copy_flag decides per document
    • Net cost to project: Local Proxy compression + SharePoint hybrid savings offset the Mapflow licence — effectively £0 net cost
    • Optional cross-org test mode: compress into a Sandbox first so clients evaluate quality before any Production change
  4. 7 min

    Pillar III — Postgres Data Warehouse & REST API

    • The problem: councils want programmatic read access to their migrated warehouse (Power BI, bespoke analytics) — but live data entry into the warehouse is a security risk
    • Postgres Postgres data warehouse: environment-tiered schema copies (dev/test/live), full CRUD table management, overnight automation, CDC diff reports
    • Warehouse REST API: read-only SQL over the council's Postgres warehouse — versions, limits, sobjects, describe, query, queryAll
    • Security posture by design: disabled by default (admin must explicitly enable); Bearer tokens (SHA-256 hashed, revocable, rate-limited); read vs read_decrypt scopes; every request audited
    • Decryption is hard-stopped, not silently degraded — if a request can't be decrypted it fails rather than returning unreadable ciphertext; decryption needs MFA-gated DecryptionSession + monthly Salesforce re-auth (30-day window + 7-day grace)
    • Surfaced as a Medium violation in the weekly InfoSec posture report whenever the REST API is enabled — open interfaces stay visible
  5. 3 min

    5. Why Arcus Specifically

    • Built around Arcus Salesforce org conventions (DT_ID fields, Public_Share__c, case-file linking)
    • Govern + repeat: the same three-pillar posture on every client — Mapflow is always clearly the underlying technology (never rebranded as Arcus), but the integrator names and presents the combined stack as they see fit, e.g. 'Arcus Data Stack, powered by Mapflow, by VGT Data Consultancy'
    • Conformance wins deals: walk into any council InfoSec review and pass
  6. 3 min

    6. ROI & Adoption Path

    • Win the deals you're losing on security conformance; weeks → days per migration; storage cost avoidance on case files
    • Pilot on one upcoming client migration
    • Connector setup (Salesforce, SharePoint, source DBs) + training environment + admin onboarding
    • Open questions & next steps

Key takeaway

Three pillars: Golden Conformance (zero-trust, audited, no-hot-fix change control), the Salesforce Storage Tax (Local Proxy compression + SharePoint hybrid — £0 net cost), and the Postgres Data Warehouse & REST API (read-only, MFA-gated, off by default). Together they're the answer to every client security and cost questionnaire, pre-built and running — protecting margin on every Arcus engagement.