To prevent human error, you should add an un-do function for mass updates. Many small non-profit organizations cannot afford to pay eTapestry for a database reset, especially if it's over a non-critical error.