From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

The root cause of this vulnerability lies in how Salesforce's Agentforce inherits permissions and data access from connected intake flows like Email-to-Case and Web-to-Case, without applying the governance controls originally designed for those individual components. When features are chained together, the combined data context passed to the AI agent's prompt can include sensitive information that was never intended to be surfaced at that level. This matters because AI agents operating with over-permissioned or poorly scoped data access can inadvertently expose customer records, case details, or other sensitive content to unauthorized parties. Organizations often assume that governance built for traditional software components automatically extends to AI-integrated workflows, which is a dangerous misconception as agentic systems introduce entirely new data flow paths that must be explicitly governed.