#Financial Services Cloud9 debatiendo

Just wanted to share this in case someone else is looking for a solution — I recently needed to mass assign Interest Tags to Accounts

in the new Nonprofit Cloud, and here's what worked: 

You can use the Topic and Topic Assignment objects to do this, no Apex or Flow required.

✅ Steps to Mass Assign Interest Tags:

1. Open Data Loader
2. Export all Interest Tags:
   • Select "Show All Salesforce Objects"
   • Choose the Topic object
   • Export to get the full list of Topic IDs (each Interest Tag is a Topic)
3. Prepare your CSV for upload:
   • EntityId = the Account ID you want to tag
   • TopicId = the ID of the Interest Tag (Topic) you want to assign
4. Insert into Topic Assignment:
   • Back in Data Loader, select Insert
   • Again, choose "Show All Salesforce Objects"
   • Select the Topic Assignment object
   • Upload your CSV

That’s it! The tags will now appear on the Account records under the Interest Tags component. 

Hope this helps someone down the line — worked great for us!

@Ben Bolding

, did you ever identify a solution? 

, with Action Plans you don't create the tasks directly through a flow.  You create an Action Plan record, which then creates the tasks/events/etc. 

During the plan creation, these are the options you are given to determine who is assigned to the task that is created during plan execution. 

I have the same requirement as Ben, when a record changes, the owner of that record should be assigned the tasks defined in the action plan.  The person/integration changing the record is NOT the owner of the record.  

@Simran Singh the key is to separate case creation from email threading.

If the requirement is only "let the manager create a Case from an email," then Salesforce Outlook/Gmail integration can work. You can expose a Create Case quick action in the Salesforce side panel, and Salesforce docs confirm users can create Cases directly from the email side panel. Attachments can also be logged to Salesforce as Files, depending on the email integration setup (https://help.salesforce.com/s/articleView?id=sales.outlookcrm_side_panel_create_actions.htm&type=5) 

But if the requirement is "all future client replies must automatically stay on the same Case," then Email-to-Case needs to be part of the flow. Salesforce’s Email-to-Case threading works when outgoing Case emails and incoming customer replies are routed back through Email-to-Case. If replies only go back to the Account Manager’s personal inbox, Salesforce will not automatically attach those replies to the Case (Email-to-Case Threading) 

The scalable design is usually: use one central Email-to-Case routing address, then configure mail-system forwarding or a controlled forwarding process from the AM inboxes into that address. Once the Case is created, assign it to the right Account Manager using Flow, assignment rules, or a mapping based on the original recipient/customer/account. Salesforce documents Email-to-Case forwarding as the standard pattern for routing emails into Cases (Salesforce Help | Article) 

The one point to be careful with is the “send from the individual AM email” requirement. If the email truly goes out from the AM’s personal address and the customer replies only to that address, the reply will land in Outlook/Gmail, not automatically in Salesforce. You can show the AM as the owner/agent, but for automatic Case threading, the Reply-To path should route back to Email-to-Case. Salesforce also notes that the default reply From address can be the user’s address, so this needs to be tested carefully in your org (Default Email-to-Case 'From' address for replies to email) 

My recommendation is to use Outlook/Gmail integration for manual Case creation if needed, but use Email-to-Case as the system of record for the lifecycle. If the business insists on true personal inbox ownership for the full thread, then you are likely looking at a custom Microsoft Graph/Gmail API integration rather than standard Email-to-Case alone.

Bob — yes, you're not alone. We've heard the same from others navigating this with large SaaS vendors. Salesforce routing it through a legal addendum is pretty consistent with how they've handled similar requests. 

To your second question: beyond a formal addendum, other approaches that firms have used include a written questionnaire or attestation from the service provider acknowledging the 72-hour notification obligation, or documenting a risk-based vendor oversight decision if a contractual commitment isn't obtainable. The SEC gave some flexibility here — what matters is that your written policies reflect a reasonable effort to obtain that assurance and that you can demonstrate it during an exam. 

On the preparedness side, it's worth getting clear now on exactly what NPI lives in your Salesforce org — things like account numbers, SSNs, income data, credit info, or transaction history. If a breach occurs, Reg S-P requires you to notify affected individuals within 30 days of becoming aware, and the notice needs to clearly describe what information was compromised, the potential risk of harm, and what steps individuals can take to protect themselves. Knowing your data footprint in advance makes that process significantly less painful. 

For what it's worth, our team at LASER Credit Access works with financial institutions on Salesforce regularly and these compliance questions come up a lot. Happy to compare notes if it's helpful. Good luck on the deadline.