GRAX

08/28/2026

Real talk: if someone asked you right now which Salesforce fields hold customer PII, could you actually answer? Not guess. Answer.

Most teams can't, and that's how customer SSNs, birthdays, and phone numbers end up sitting in sandbox orgs with the loosest security you've got. Field names lie constantly (a field called Account_Contact_Ref_2__c could hold literally anything), and masking is a one-way door: get it wrong and there's no undo.

The scariest part? A masking job can report 100% success and be lying to you. Bulk jobs report on rows attempted, not values actually written, and a bad permission set produces a silent no-op that looks exactly like a clean run.

We just posted how GRAX fixes this with an AI agent that reads the real data in your org instead of guessing from field names. Pilot results: 34,284 records masked, 16 fields, zero failures, zero PII left behind, verified independently. 🔒

Read it here 👇

Learn how to identify Salesforce PII hidden across standard fields, custom fields and free text, protect sensitive data, verify the results and restore it safely.

08/26/2026

A FINRA examiner doesn't want to hear that your Salesforce backup only goes back to last night's snapshot. They're going to want to see what a customer record looked like on a specific date, and proof that nobody quietly edited it since.

Most backup tools can't answer that. They save the current state on a schedule and call it done, which works fine for disaster recovery and falls apart the moment an audit asks for real history.

GRAX captures every version of every Salesforce record as it changes, not just snapshots, and replicates it straight into your own AWS, Azure, or GCP environment. That's the immutable, time-stamped trail SEC 17a-4, FINRA, and SOX are actually asking for, sitting in your cloud instead of a vendor's.

And once you have that much history, it's not just for auditors. Fraud teams use it to catch transaction patterns a single snapshot would never reveal.
https://getgrax.co/4y4Ubot

08/24/2026

Your Salesforce org has an expiration date on the truth, and most teams don't find out until it's too late. Field history tracking only holds about 18 months of change data natively (up to 24 through the API), which means an exact record you'd need might get erased on a schedule nobody agreed to.

Our newest piece treats this for what it is: an infrastructure problem, not an analytics problem. No amount of clever modeling fixes a dataset where the history simply isn't there anymore.

Most companies are trying to build predictive analytics on top of a CRM that's actively deleting the evidence. But you'll need to fix the foundation first.

https://getgrax.co/4qyTEZj

08/21/2026

Quick question: do you already know where you're grabbing a drink and some delicious food the night you land for Dreamforce?

If not, we've got you. GRAX has put together a Happy Hour at Mariposas on Monday, September 14, just a couple of minutes from Moscone.

Think of it as the calm before the conference storm. You'll have good company plus no lanyard required to join a conversation.

Doors are open 5 to 9 PM. Bar's covered, food's covered. Stop by whenever your flight lands or whenever you're done unpacking.

A few things worth showing up for:
➡️ Genuine conversations with other Salesforce folks, not elevator pitches
➡️ Time with our team if you want to talk data strategy, no pressure either way
➡️ A PS5 and other fun prizes up for grabs, because everyone likes a little extra incentive

And we'll have some of our fellow Ascendx (Eposly, Ortoo, Documill) companies stopping by too, and it tends to fill up well before the week starts.

Reserve your spot here, and we'll see you in San Francisco!

https://getgrax.co/4gLjcz2

08/18/2026

For all the admins out there, here's a specific moment most of you have probably gone through: someone runs a bulk update that goes sideways, or a Flow built two admins ago quietly overwrites a field it shouldn't touch, and the instinct is to just restore from backup. Except, surprise, there isn't one. Salesforce never promised there would be, and that's the part almost nobody reads closely enough until they're standing in the middle of it.

Salesforce's Shared Responsibility Model draws the line clearly if you go looking for it: they secure the platform and the infrastructure underneath it, and everything that happens to your records once they're inside your org, including whether you can get one back, is on you.

So we spent some time writing about the whole Salesforce Data Security Model for anyone who wants the full picture: the four layers of security, how Shield and Field Audit Trail actually work, and what a backup plan needs to include if your compliance team is ever going to accept it as evidence.

Check it out, it's the kind of thing worth having answers to before someone asks you the hard version of this question during an audit.

https://getgrax.co/4gdkMs8

08/14/2026

Dreamforce week means badge lines, back-to-back sessions, and maybe four minutes for coffee if you're lucky. The night before, none of that has started yet, and that's exactly when we want to see you.

On Monday, September 14, GRAX is hosting a Happy Hour at Mariposas, just a few blocks from Moscone. Drinks and food are on us from 5 to 9 PM; no badge scanning required to have a good conversation. Come straight from pickup or whenever your evening opens up.

Our team will be around to talk through what's next for your Salesforce data, We're also giving away some fun prizes, including a PS5, plus a few others throughout the night.

Plus, some of our AscendX family will also be there, including Eposly, Ortoo, and Documill.

Spots go fast, so grab yours today:
https://getgrax.co/4xynEH8

08/11/2026

Most Salesforce teams archive old data for one reason: storage got expensive. Fair enough.

With that in mind, GRAX co-founder Joe Gaska has a new piece out that asks a question most teams skip past, which is whether anyone could actually use that data again if they needed to.

GRAX ran a survey of 54 senior IT and data leaders to dig into this. 54% of them already have some form of AI running against their SaaS data. When asked if that data was actually ready for it, 76% said only partially. Governance and compliance gaps were the top reason at 69%, followed by data quality problems at 57% and data stuck in silos at 43%.

Joe also breaks down where the common fixes, like Big Objects, External Objects, off-platform exports, and Data Cloud, tend to run into trouble once AI needs to query that history instead of just holding onto it.

Check out the full piece over at Salesforce Ben now,

Because saving on storage was never the mistake; not knowing what you saved is.

Historical data is useless if you can’t find or use it. Discover how to balance storage costs with data readiness to power AI.

08/10/2026

Ask anyone who's worked at a bank how they feel about the phrase "we need to grow the Salesforce org" and watch them wince a little. More users usually means more risk, more sprawl, and a compliance team asking hard questions.

One of our customers, a financial institution with 700 Salesforce users, decided to prove that growth and control aren't opposites.

They needed to handle customer financial data and transactions in line with Nigeria's Data Protection Regulation (NDPR), so that had to be airtight. They set up automated hourly backups so a fat-fingered edit or a surprise schema change couldn't take down weeks of work. They archived Service Cloud emails, which sounds boring until you realize it's the reason their Salesforce actually feels fast to the people using it every day. And every bit of that data sits in their own AWS S3, under their own name, not locked behind a vendor's walls.

The numbers: 700 users, 200GB of data and files, and 100% ownership of all of it.

That last part is the one we'd frame and put on the wall.

Check out their story:
https://getgrax.co/4xCyTyp

07/28/2026

We're going to Vegas!

GRAX will be at Ai4 2026, August 4-6, at The Venetian, and we cannot wait to see you there.

Come find us at Booth #1672. Whether you're deep into your AI roadmap or just starting to figure out what "AI-ready data" actually means for your org, we want to hear about it.

GRAX Co-Founder Joe Gaska is taking the stage Tuesday at 10:15 AM in Titian Ballroom 2306, for "RAG Use Cases: Unlocking Business Value with Smarter AI." This session's worth clearing your calendar for.

Want guaranteed time with us? Book a meeting in advance and skip the line.

We also put together a full guide with the schedule, the agenda, and a post-event action plan so your week in Vegas turns into real momentum, not just a stack of notes.

The house always wins when your data foundation is solid, so let's talk about yours. Full guide here:

https://getgrax.co/4bfqxUx

07/27/2026

When your Salesforce org hits 90% storage capacity, every new case, contact, and record becomes a liability instead of an asset.

That's exactly where one postal and logistics provider found themselves, managing 5,000 Salesforce users and over 205 million case, contact, and custom object records stored in Big Objects. Add Australia's Privacy Principles into the mix, and the pressure to control, protect, and be able to fully erase customer data on request only grew.

Here's how they solved it:

✅ Backed up and fully own their Salesforce Big Object data, stored entirely in their own AWS environment
✅ Supported Australia Privacy Principles (APPs) using GRAX's Right to be Forgotten functionality
✅ Freed up production org capacity that had been maxed out at 90%

Remember, data ownership shouldn't be a workaround, it should be the standard.

Read the full story:
https://getgrax.co/4pK5wY6