Disability Services Nonprofit — NPSP Health Assessment + Ongoing Fractional CTO
A nonprofit operating two divisions (ability center + accessible parks initiative). $1M ops, 5 employees, NPSP, $8M raised for an in-development facility. Years of accumulated technical debt: six departed staff still had super admin access, recurring donation records were stale, trigger handlers had been disabled from a data load two years prior.
Result: 132 checks identified 47 findings. 3 critical (security), 12 high (data quality), 32 medium/low. Remediation roadmap delivered in 48 hours. Security issues resolved in week one. Full cleanup completed in 90 days. Now under ongoing Fractional CTO retainer through groundbreaking.
Technical depth (for procurement review)
Architecture: NPSP with Affiliation + Households + GAU + Recurring Donations. Custom triggers on Contact + Account. Cross-cutting Affiliation logic across both divisions.
Top three security questions answered:
- Do you ever export donor PII off our org? No. All audit checks run via Salesforce REST API queries; findings stored in workspace SQLite on operator hardware. Source data never leaves the org's tenant.
- How do we know findings haven't been altered? Each finding is a chained audit row signed under the workspace Ed25519 key. We can hand you the verifier output.
- What happens if you stop working with us? You keep the workspace archive. Every finding, every remediation log, every chain entry. Walk away with the full record.
Outcomes math: Time-to-first-finding: 4 hours. Time-to-complete-audit: 24 hours. Time-to-remediation-roadmap: 48 hours. Estimated mitigation cost avoided from the three critical security findings: regulatory and reputational, not directly quantified. Reference call willingness: yes (with introduction).
Financial Services Firm — Three-Org Synchronization
A wealth management firm with a hub org, a client-facing portal org, and an operations org. Account and Contact data was manually exported and imported weekly. Conflicts were resolved by whoever imported last.
Result: Deployed sync engine with newest-wins strategy for bidirectional Account sync and source-wins for hub-to-spoke Contact propagation. Manual weekly process replaced with automated hourly sync. Conflict rate dropped from ~200/week to 12/week with automated resolution.
Community Foundation — Bloomerang to Salesforce NPSP
15,000 constituent records, 45,000 transactions, and 8 years of giving history in Bloomerang. Previous migration attempt by another consultant failed at the field mapping stage.
Result: Pathfinder's AI-powered field mapper suggested 89% of mappings correctly on first pass. Batch processing with checkpoint/resume handled the full migration in 3 runs. Final data quality score: 94/100. Donor giving history fully preserved.
Healthcare Organization — HIPAA Compliance Gap Closure
A healthcare services company using Salesforce Health Cloud with PHI stored in custom fields. No encryption. No field-level security review in 3 years. Audit trail was not being monitored.
Result: Compliance audit identified 8 critical gaps including unencrypted PHI fields, overly permissive profiles, and missing audit trail monitoring. All gaps closed within 60 days. Organization passed external HIPAA audit with zero findings.