TL;DR / Key Takeaways

The Challenge: Manual Processes, Security Gaps, and Untapped Platform Potential

Founded in 1974 and headquartered in San Diego, California, a globally recognized value-oriented asset management firm had built its reputation over more than four decades of disciplined, value-based investing grounded in the foundational teachings of Benjamin Graham. Specializing in rigorous fundamental analysis and the integration of environmental, social, and governance (ESG) factors into global equity and fixed-income strategies, the firm managed a portfolio exceeding $22.6 billion in assets across a demanding mix of institutional investors, private clients, and financial intermediaries worldwide.

Despite this formidable market presence, the firm's underlying operational infrastructure was held together by highly manual, disjointed, and increasingly unsustainable processes. Client portfolio reports — essential for investor relations, performance reporting, and regulatory compliance — were generated through legacy systems and distributed via standard, unencrypted email. This workflow introduced significant security vulnerabilities, ran counter to the stringent requirements of modern financial regulations, and left the firm completely blind to client engagement: there was no mechanism to track whether clients were receiving, opening, or utilizing the complex financial reports being distributed.

Internally, the inefficiencies were equally severe. Fact sheets automated through legacy SQL Server Reporting Services required dedicated developer time just to make minor structural changes. Updating a simple existing chart to include two additional data columns could take weeks. Meanwhile, a Quarterly Business Review revealed that approximately 6,000 leads sat completely untouched in the CRM, and while 97% of users had system access, most were only using Salesforce as a basic contact rolodex. Leadership recognized an urgent need to extract maximum value from the firm's Salesforce Unlimited Edition investment — dismantling internal silos, establishing an immutable single source of truth, and pivoting the entire sales organization from a defensive posture to one of aggressive, technology-enabled revenue generation.

The Solution: A Phased, Enterprise-Scale Salesforce Transformation

Vantage Point partnered with the firm on a comprehensive, multi-year engagement that began with a foundational digital client portal and expanded into advanced AI deployments, complex enterprise integrations, and a sweeping organizational health remediation. The transformation touched every layer of the Salesforce ecosystem — from front-end client experience to back-end security architecture.

Phase 1: The Experience Cloud Client Portal — A Dual-Branded Digital Vault

The structural cornerstone of the entire initiative was a custom Experience Cloud portal designed to serve as a centralized, password-protected repository for all account-specific financial documents — completely replacing the legacy email distribution model.

A critical architectural requirement was the need to support two distinct corporate entities within a single portal ecosystem: the primary U.S.-based investment advisory firm and its Canadian distribution partner. Rather than deploying two separate Experience Cloud communities (with the associated overhead, maintenance, and duplicated licensing), Vantage Point engineered a unified, dynamic architecture using advanced Experience Cloud Audiences. When a Contact record is converted into an active Portal User, a custom Apex formula evaluates the Contact's Record Type and automatically populates a custom branding picklist on the User record. This attribute instantly dictates the complete visual experience — logos, color palettes, typography, and header graphics — presented upon login, all while maintaining a single underlying codebase.

The portal's data architecture was equally sophisticated. A custom relational data model was built around three interlocking custom objects that govern the lifecycle of all client deliverables:

• Package Object (Package__c): The top-level parent representing standardized report groupings (e.g., "Equity Multiple Countries," "Fixed Income Pool," or bespoke ad-hoc reports), mapped directly to classifications maintained in the firm's external Seismic reporting platform for taxonomic parity across systems.
• Package Variant Object (Package_Variant__c): The child junction connecting generic reporting packages to specific, confidential Financial Account records, dictating distribution periodicity and exact publication dates.
• Portal File Object (Portal_File__c): The grandchild storing file-specific metadata with a strict Status field acting as the absolute gatekeeper for portal visibility. Only files that have passed Portfolio Manager review are exposed to authenticated users.

By requiring users to navigate through the Portal File metadata record to access download links, the system seamlessly captures Portal Activity records — solving the firm's historical engagement visibility gap and providing marketing, compliance, and advisory teams with granular analytics on file access timestamps, download frequencies, and overall client interaction patterns.

Security was enforced through Salesforce Customer Community Plus licenses with robust sharing rules, complex permission sets, and deep role hierarchies. A mandatory human-in-the-loop review protocol ensures that when existing clients invite new users via the portal's self-service form, every access request hard-stops at "Requested" status until manually approved by authorized internal staff — preventing unauthorized access to proprietary financial data.

Phase 2: Enterprise Integrations — Seismic, SharePoint, and Dakota Marketplace

Seismic Enablement Cloud API Integration: The firm relied on Seismic as its primary engine for generating data-intensive client portfolio reports, but there was no automated path from report generation to client delivery. Because Seismic's out-of-the-box integration only supported synchronization from SharePoint to Seismic (not the reverse), Vantage Point engineered a completely custom, bi-directional API integration using the Seismic Developer API. This workflow automates the extraction of finished PDF reports from Seismic, maps associated metadata to corresponding Package Variant records in Salesforce, and stages documents for final internal review.

Microsoft SharePoint Staging via sFiles: Portfolio reports frequently require qualitative augmentation — personalized market commentary or performance explanations — before client distribution. SharePoint was integrated as the designated staging and collaboration environment using the sFiles AppExchange application. When a Portal File record is created in Salesforce, a corresponding SharePoint folder is instantly provisioned. Internal staff collaborate natively in the Microsoft 365 ecosystem, and upon Portfolio Manager approval, the final document is automatically pushed to Salesforce Files and made available on the Experience Cloud portal. This multi-platform orchestration eliminated rampant version control issues and established an immutable audit trail for compliance.

Dakota Marketplace Integration and Deterministic Encryption Conflict Resolution: To support the shift to an offensive sales strategy, the firm integrated the Dakota Marketplace — a source of curated intelligence on institutional buyers, consultants, and RIAs — directly into Salesforce. However, the initial installation of the Dakota managed package encountered a catastrophic failure. The firm's compliance-driven use of Salesforce Shield Platform Encryption with Deterministic Encryption on the Contact Name field caused Dakota's backend Apex queries to fail — the managed package lacked the cryptographic permissions to evaluate the encrypted index.

Vantage Point resolved this without compromising the firm's security posture by provisioning a dedicated API Integration User exclusively for the Dakota application, with a custom permission set containing the View Encrypted Data system permission. This precisely scoped grant allowed the managed package to operate successfully in both sandbox and production environments. A subsequent mass data synchronization matched external Dakota identifiers against the existing Salesforce database using complex waterfall logic (CRD numbers, Account Name + Billing City, Account Name + Website), successfully linking thousands of institutional records and infusing the CRM with real-time market intelligence:

Phase 3: Einstein AI and Revenue Operations Optimization

Following the portal launch, the engagement transitioned into a comprehensive Managed Services agreement focused on optimizing internal revenue operations. The QBR analysis identified a 97% CRM activation rate but revealed that usage was limited to basic contact management, with 6,000 leads completely untouched and advanced features largely unused. A suite of AI and productivity modules was deployed:

• Salesforce Inbox Integration: Deployed globally to bridge the gap between CRM and native email clients (Outlook/Gmail), automatically logging all communications and calendar events to Contact and Opportunity records and introducing dynamic scheduling links to reduce administrative friction.
• Pipeline Inspection and Deal Health Automation: Replaced static list views with an AI-driven dashboard that uses historical win/loss data and machine learning to score active deals as High, Medium, or Low risk, highlighting week-over-week pipeline changes.
• Einstein Conversation Insights (ECI): Integrated with Zoom and Microsoft Teams, ECI uses natural language processing to transcribe and analyze client calls, extract action items, identify competitor mentions and pricing objections, gauge sentiment, and enable sales managers to create curated training playlists from successful pitches.
• Custom Measure Forecasting: Reconfigured the Salesforce forecasting engine to project revenue based on asset management–specific metrics like projected AUM management fees and Net New Assets, rather than generic closed-won amounts.

Phase 4: Organizational Health Remediation — Rescuing a Critically Degraded Environment

A comprehensive Salesforce Organizational Health Scan conducted using the native Salesforce Optimizer, Adaptive Shield, and Metazoa toolsets analyzed 87 distinct system health metrics — and returned an unprecedented 0.0% success rate (86 failures, 1 warning). The findings were stark:

• Security: 87.9% of critical security release updates were overdue (some since 2020). 80.3% of active users (110 of 137) held dangerously excessive administrative permissions, including ModifyAllData and ViewAllData — a massive insider threat vector.
• Data Governance: 182 personal data fields were completely unencrypted, and 6,554 fields lacked any compliance categorization, violating GDPR and CCPA requirements.
• Metadata Bloat: 98% of custom fields showed less than 10% usage; 455 fields were completely empty across every record. 53.4% of reports (907) and 54 dashboards hadn't been viewed in over a year. 87.4% of custom Apex classes were never executed.
• Data Integrity: Over 36% of the contact database (54,354 records) lacked valid, actionable information.

Vantage Point engineered a rigorous five-phase remediation roadmap:

1. Security Triage (0–30 Days): Forced patching of 58 overdue release updates. Complete overhaul of user profiles and permission sets, restricting ModifyAllData to core administrators. Enforcement of Single Sign-On via Azure AD.
2. Compliance Mapping (30–90 Days): Centralized data dictionary establishment. Compliance categorization of 6,554 undocumented fields. Audit of 50+ public groups and sharing rules.
3. Optimization (90–180 Days): Hard deletion of 455 unused fields and decommissioning of 31 unreferenced custom objects to simplify page layouts and improve query performance.
4. Technical Debt Purge (180–365 Days): Archiving 907 abandoned reports and 54 stale dashboards. Refactoring Apex code to eliminate 33.8% duplicate code lines.
5. Operational Excellence (365+ Days): Mass cleansing of 54,354 invalid contact records. Establishment of automated monitoring protocols for high-risk events like mass API downloads and login anomalies.

Technical Deployment at Scale

The sheer scale of custom development is reflected in deployment metrics. A single Gearset CI/CD migration from development to demo sandbox successfully migrated 868 distinct metadata items — including 101 changed components and 368 entirely new architectural elements — in just three minutes. The payload included custom Apex classes (ContentDocumentLinkTriggerHandler, ConvertWordToPDFQueueable, DownloadSharePointFileQueueable, Seismic callout handlers), Declarative Lookup Rollup Summaries for engagement metrics, dozens of Lightning Web Components and Aura components, and complex Flow architectures governing user provisioning, access control, and portal lifecycle management.

A significant infrastructure challenge arose during portal deployment when custom SSL certificates failed to serve correctly, defaulting to generic Salesforce certificates. After escalation to Salesforce engineering, the root cause was identified as an edge-network publication glitch. The resolution required premature activation of Salesforce Enhanced Domains across the production environment — a global change that Vantage Point carefully de-risked through thorough codebase audits confirming no hard-coded instance URLs existed in active Apex architecture.

The Results: Measurable Transformation Across the Enterprise

The cumulative impact of the Experience Cloud portal, enterprise integrations, AI deployment, and organizational remediation fundamentally transformed the firm's operational capabilities and directly supported the security of its $22.6 billion in AUM.

The unified Experience Cloud portal permanently replaced insecure email distribution with a centralized, password-protected, dynamically branded digital vault. Institutional clients gained modern self-service capabilities, while the firm established strict, role-based, programmatic access control and — for the first time — complete visibility into client engagement with distributed financial documents. The bespoke integration pipeline spanning Seismic, SharePoint, and Salesforce reduced the time required to build and distribute critical marketing materials by 85%, reclaiming massive operational bandwidth for higher-value advisory work.

The deployment of Sales Cloud Einstein, Salesforce Inbox, Pipeline Inspection, and Einstein Conversation Insights catalyzed the firm's shift from defensive asset retention to proactive pipeline management. With automated data entry, ML-powered deal scoring, and Dakota Marketplace intelligence integrated directly into the CRM, the sales organization was finally equipped to effectively prioritize and engage the 6,000 previously untouched leads. Meanwhile, the five-phase remediation roadmap eliminated catastrophic security vulnerabilities, enforced Shield Platform Encryption, optimized sharing models, established strict SSO protocols, and purged thousands of abandoned metadata assets — bringing the Salesforce org into full alignment with global financial regulatory requirements.

Key Technologies and Integrations

• Salesforce Unlimited Edition — core CRM platform
• Salesforce Experience Cloud (Customer Community Plus licenses) — dual-branded client portal
• Salesforce Sales Cloud Einstein — AI-powered sales intelligence
• Salesforce Inbox — email and calendar integration (Outlook/Gmail)
• Pipeline Inspection — AI-driven deal health scoring
• Einstein Conversation Insights (ECI) — NLP-powered call transcription and analysis
• Custom Measure Forecasting — AUM-specific revenue projections
• Salesforce Shield Platform Encryption — deterministic encryption for PII protection
• Salesforce Enhanced Domains — modern URL routing and browser compatibility
• Seismic Enablement Cloud — portfolio report generation (custom API integration)
• Microsoft SharePoint / Microsoft 365 — document staging and collaboration
• sFiles (AppExchange) — SharePoint-to-Salesforce file integration
• Dakota Marketplace — institutional buyer and consultant intelligence
• Gearset — CI/CD deployment management
• Declarative Lookup Rollup Summaries (DLRS) — engagement metric calculations
• Azure Active Directory — Single Sign-On enforcement
• Zoom & Microsoft Teams — virtual meeting platform integration for ECI
• Adaptive Shield & Metazoa — organizational health scanning and analysis
• Custom Apex, Lightning Web Components (LWC), Aura Components, and Flows — bespoke portal and automation architecture

Why It Matters: Lessons for Asset Management Organizations

This transformation illustrates a pattern increasingly common across the asset management industry: firms with strong market positions and deep investment expertise finding themselves constrained by legacy operational infrastructure that was never designed for the pace, security requirements, and client expectations of modern financial services. The gap between "having Salesforce" and actually leveraging the platform's full capabilities — especially on an Unlimited Edition license — represents one of the most significant sources of untapped value in the industry.

Three lessons stand out for similar organizations. First, the Experience Cloud portal demonstrates that secure, branded client engagement doesn't require massive standalone portal investments. By engineering a dynamic, multi-brand architecture within a single community, the firm achieved enterprise-grade personalization while maintaining operational simplicity. Second, the Dakota/Shield encryption conflict highlights a critical and often overlooked challenge: in highly regulated environments, third-party managed package installations can collide with security infrastructure in ways that aren't documented by either vendor. Firms must anticipate these conflicts and engage consultants who understand both sides of the equation. Third, the organizational health findings — 0.0% across 87 metrics — serve as a cautionary tale about the hidden cost of deferred platform maintenance. Technical debt accumulates silently but can rapidly become an existential operational and compliance risk.

For asset managers navigating digital transformation, the takeaway is clear: technology strategy must be holistic. Deploying flashy new portals and AI tools atop a foundation of over-privileged users, unencrypted PII, and thousands of abandoned metadata artifacts is building on sand. The most impactful transformations address the full stack — from client-facing digital experiences to back-end security and data governance — simultaneously.

Frequently Asked Questions

How does Salesforce Experience Cloud support secure financial document distribution for asset managers?

Salesforce Experience Cloud enables firms to build centralized, password-protected client portals with role-based access control, replacing insecure email distribution. Using Customer Community Plus licenses, robust sharing rules, and deep role hierarchies, the platform ensures that each authenticated user sees only the financial documents associated with their specific accounts. Combined with custom data models that capture engagement analytics (file access, download frequency, timestamps), Experience Cloud provides both the security and visibility that modern financial regulations demand.

What is the best approach when a Salesforce managed package conflicts with Shield Platform Encryption?

When managed packages fail to install or execute due to Shield Platform Encryption — particularly deterministic encryption on standard fields like Contact Name — the recommended approach is to provision a dedicated API Integration User exclusively for the application and assign a custom permission set with the View Encrypted Data system permission. This precisely scoped grant allows the package's Apex classes to query encrypted fields without requiring the firm to disable encryption or compromise its compliance posture.

How can asset management firms measure the ROI of a Salesforce digital transformation?

ROI in financial services Salesforce transformations manifests across multiple dimensions: operational efficiency gains (e.g., 85% reduction in report distribution time), security posture improvements (elimination of overdue patches and over-privileged access), client engagement visibility (granular analytics replacing zero-visibility email distribution), and revenue enablement (activation of thousands of previously untouched leads through AI-powered pipeline management). The most meaningful metric is often the shift from a defensive, retention-focused posture to proactive revenue generation supported by clean data, automated workflows, and AI-driven insights.

What should an asset management firm look for in a Salesforce consulting partner?

Look for a partner with deep financial services domain expertise — one that understands regulatory requirements (GDPR, CCPA, SEC), the nuances of institutional client structures, and the specific data models required for AUM-based businesses. The partner should demonstrate experience across the full Salesforce ecosystem (Experience Cloud, Sales Cloud, Einstein AI, Shield, and enterprise integrations), maintain rigorous CI/CD deployment practices, and be willing to address foundational health issues alongside new feature development. A senior-only consulting team with a strong client retention track record is a strong indicator of sustained delivery quality.

Ready to Transform Your Asset Management Operations?

Vantage Point specializes in Salesforce and HubSpot implementations for regulated industries — from financial services and healthcare to insurance and fintech. With 150+ clients, 400+ engagements, and a senior-only team of US-based consultants, we bring deep expertise to every project.

Contact Vantage Point to discuss your digital transformation journey.

A globally recognized value-oriented asset management firm is one of many organizations that have partnered with Vantage Point to modernize their operations. Names and identifying details have been changed to protect client confidentiality.