NetSuite changes to plan for
Upcoming deadlines, security updates, and integration changes, with practical steps for your team.
The NetSuite changes
to plan for now.
Upcoming deadlines, security updates, and integration changes that may need your team’s attention.
- 1UAE compliance deadline
UAE electronic invoicing: January 2027 first phase
- Who should check
- Organizations with in-scope UAE business invoices, especially those at or above AED 50 million in revenue.
- Why it matters
- Structured invoicing via an accredited provider becomes mandatory in stages; an untested flow risks rejected documents and compliance problems.
- Timing
- First-phase provider appointment October 30, 2026 (now passed); mandatory use January 1, 2027
- First action
- Have your UAE tax owner confirm scope and accredited provider; test an invoice and credit note with your NetSuite team.
The amended provider deadline replaced an older July date. The Oracle SuiteApp is available but installation alone does not establish compliance; smaller businesses and government entities have later 2027 phases.
- 2Support ended
Project Resource Management support ended October 27
- Who should check
- Teams with the Project Resource Management SuiteApp still installed.
- Why it matters
- Oracle no longer provides updates, issue fixes or support for this SuiteApp.
- Timing
- Support ended October 27, 2026
- First action
- Check whether it remains installed, review dependent scripts and records, and plan a tested exit before uninstalling.
Oracle advised stopping use and uninstalling before October 27. The Oracle notice does not say the SuiteApp will automatically stop working on October 27. Do not uninstall without reviewing dependent processes first.
- 3Prepare now
Prepare Cloud EPM automations for login changes
- Who should check
- Cloud EPM teams using older login formats, EPM Automate versions or encrypted password files.
- Why it matters
- Scheduled close, reconciliation or data-load jobs may be unable to sign in.
- Timing
- Cloud EPM 26.11 and 26.12
- First action
- Review the versions and login settings used by scheduled jobs, then test the required updates.
This affects Cloud EPM, not every NetSuite account. Check your environment update notice and the EPM Agent exception described in the guidance.
- 4Security update
Review the security update for Linux reporting connections
- Who should check
- Teams whose SuiteAnalytics Connect reports or data feeds use Linux ODBC.
- Why it matters
- Older drivers are missing the security fixes included in the new version.
- Timing
- Driver 9.0.37.0 available October 19, 2026
- First action
- Confirm the installed driver version and test important reports before scheduling the upgrade.
Oracle strongly recommends the update. This notice does not set a date when older drivers will stop working, and it does not cover other driver platforms.
- 5November support ending
Cloud EPM Digital Assistant skills lose support in November
- Who should check
- Organizations using EPM Skills for Oracle Digital Assistant.
- Why it matters
- Support for those specific skills is scheduled to end during November.
- Timing
- November 2026 (no exact day given)
- First action
- Confirm whether your team uses those EPM Skills and review the applicable Oracle guidance before deciding on a tested alternative.
Support ending does not prove the skills automatically stop working. This does not apply to NetSuite AI Connector or every Oracle Digital Assistant capability.
- 62026 support target
Plan your HSBC Payment Automation transition
- Who should check
- Accounts Payable teams still using NetSuite Payment Automation linked to HSBC online, ACH, check or virtual-card payments.
- Why it matters
- Legacy SuiteApp support is targeted to end; an untested payment transition or premature HSBC account closure can interrupt supplier payments and audit access.
- Timing
- Support targeted to end December 31, 2026; new HSBC applications no longer accepted after March 4, 2026
- First action
- Inventory pending payments and HSBC accounts, confirm finance ownership, then test Intelligent Payment Automation and save bank statements before offboarding.
Oracle describes a targeted support end, not automatic SuiteApp removal. Installing the replacement does not finish HSBC offboarding; verify migrated vendor bank details, settle balances and checks, archive statements, and only then consider optional uninstall.
- 72027.02 functionality ending
Move legacy Cloud EPM Financial Reporting to Reports
- Who should check
- Cloud EPM teams still using the old Financial Reporting tool in Planning, close, consolidation, profitability or tax processes.
- Why it matters
- Unmigrated legacy reports will stop working when affected Cloud EPM environments move to the 27.02 update.
- Timing
- February 2027 Cloud EPM 27.02 update; account maintenance dates vary
- First action
- Inventory legacy Financial Reporting artifacts with your finance owner; migrate and reconcile a critical report in modern Reports before your upgrade.
This is a functionality stop, not just reduced support. Modern Reports is retained. Dynamic report conversion may need repairs; Oracle's snapshot migration guidance is inconsistent across pages. Confirm account version, permissions and downstream books or schedules.
- 8Cloud EPM access changes
Check Cloud EPM audit, AI and Java compatibility before 2027
- Who should check
- Cloud EPM teams with Enterprise Data Management audit users, Linux/UNIX EPM Automate on JDK 17, or environments held below 26.08.
- Why it matters
- The affected setup could restrict audit downloads, lose access to Generative AI or run automation on a deprecated JDK.
- Timing
- EDM audit roles: Cloud EPM 26.12; Linux JDK 17 support deprecation: 27.01; deferred-environment AI limit: end of January 2027
- First action
- Confirm the actual Cloud EPM products, version and update notice; test one authorized audit, AI or EPM Automate workflow.
These are separate configuration-specific changes, not a general NetSuite ERP shutdown. JDK support deprecation does not itself prove runtime failure. Account update dates vary.
- 92027.1 access change
Prepare employee, vendor and partner sign-ins for 2FA
- Who should check
- Accounts with Employee, Vendor or Partner users who sign in directly to NetSuite.
- Why it matters
- NetSuite plans to enable the broader two-factor sign-in setting automatically; unenrolled users may need setup and recovery support.
- Timing
- NetSuite 2027.1 account upgrade (no universal calendar date)
- First action
- Have your security owner review role types, sign-in methods and readiness to enroll before the account update.
Administrators can disable the broader setting, restoring prior role-level rules; highly privileged roles remain protected. SAML/OIDC sign-in takes precedence, and Customer Center roles are not included.
- 10Prepare for 2027.1
Prepare integrations for new sign-in requirements
- Who should check
- Teams using NLAuth or setting up new TBA or OAuth connections.
- Why it matters
- Some existing sign-in methods will stop working, while new integrations must meet updated requirements.
- Timing
- NetSuite 2027.1; final TBA target 2028.2 is tentative
- First action
- Confirm how each integration signs in and ask its owner or vendor for a transition plan.
Exceptions apply to existing IssueToken and non-PKCE OAuth integrations. SuiteAnalytics Connect ODBC/JDBC is excluded from the tentative final TBA target.
- 11Prepare for 2027.1
Update custom AI tools that use the legacy SDF format
- Who should check
- Teams using AI Connector custom tools built with the legacy SDF tool object.
- Why it matters
- These tools can no longer be deployed in the old format and are due to stop running in 2027.1.
- Timing
- September 2026 deployment change; runtime milestone 2027.1
- First action
- Ask your developer or vendor whether your custom tools need to move from tool to toolset.
This change applies to the legacy custom-tool format, not every SuiteScript or AI feature.
- 12Confirm timing
Confirm your EPM Sync update schedule
- Who should check
- Teams using EPM Connector and related Sync SuiteApps.
- Why it matters
- A version mismatch or incorrectly timed update can interrupt integration jobs.
- Timing
- Profitability Sync 26.1 and EPM Connector 26.2.1: November 3, 2026
- First action
- Verify the Connector and Sync versions installed in your account, then test a permitted integration flow before changing jobs.
An earlier Oracle notice named October 20 for Profitability Sync; Oracle now confirms November 3 as the vendor release milestone. Your production account has a separate push notice. Account Reconciliation Sync 26.2 is separately dated October 20.
- 13Plan ahead
Plan your transition from SOAP integrations
- Who should check
- Teams with custom or vendor-managed integrations that still use SOAP.
- Why it matters
- Those integrations will stop working when SOAP is removed.
- Timing
- Final removal: NetSuite 2028.2
- First action
- Identify the business processes each integration supports and confirm the replacement options with its owner.
Oracle’s pages disagree on the earlier endpoint-support change: 2027.1 in the overview or 2027.2 in the FAQ. Both give 2028.2 for final removal.
- 14Plan ahead
Prepare custom scripts for SuiteScript 2.1
- Who should check
- Teams with SuiteScript 1.0, 2.0 or 2.x customizations.
- Why it matters
- Older customizations need review and testing before support is reduced and legacy versions stop running.
- Timing
- 2027.1 critical-only support; 2028.1 runtime defaults; 2028.2 final transition
- First action
- Identify active scripts and their owners, then prioritize testing for business-critical processes.
Changing a version label is not a substitute for testing. Some features still require a specific script version; check those requirements before making changes.
Also worth reviewing
Does a slow record follow-up need to block a save? Event Subscriber scripts can run eligible tasks after a record is created, updated or deleted. Test the supported event, error handling and duplicate safeguards before moving any approval-sensitive logic. Review asynchronous record events →
Enabling NetSuite AI for specialized CRM users? A customized Specialized User: CRM role can enable the AI Connector with three deliberate Full-level permissions, while retaining existing record limits. Review licenses, SSO and access tests first. Review CRM AI permissions →
Planning a CPQ migration? Keep the migration bundle that preserves your existing configurations. Removing it afterward can permanently delete the legacy data it retains. Review the CPQ data-protection guidance →
Considering AI tools for bank reconciliation? Authorized tools can submit or reject match suggestions. Review access and finance controls before enabling this optional capability. Review AI banking permissions →
Allowing AI to create NetSuite records or access files? New MCP tools can run approved record actions, create supported transactions and access permitted File Cabinet folders. Test effective roles, folder access and duplicate-transaction safeguards before enabling these workflows. Review AI action and file controls →
Working with vendor-owned inventory in WMS? NetSuite supports consigned items in selected mobile workflows, but not every warehouse task is supported. Confirm account compatibility and test a small item flow before adopting it. See WMS consignment guidance →
Considering OAuth 2.0 for EPM Data Exchange? Eligible NetSuite EPM Connector connections support an authorized OAuth 2.0 option. Check your connector type and test before switching. Explore the EPM OAuth option →
Connecting your financial reports with OAuth 2.0? NetSuite enables OAuth in accounts using SuiteAnalytics Connect, but existing refresh jobs retain their current authentication until you authorize a change. Test NetSuite2.com permissions, OAuth2Token renewal and scheduled extracts before switching. Review Connect OAuth readiness →
Reviewing supply plans and MRP messages? Eligible NetSuite Next accounts using MRP can compare planned supply, pegged demand and planning messages in a new SuiteAnalytics workbook. Confirm the latest planning run, access permissions and filters before relying on its output. Explore MRP planning visibility →
Generating assemblies through CPQ? In CPQ Configurator 2.1.2, eligible template-generated assemblies can receive independent BOM copies. Test the Advanced BOM and item creation settings before editing manufacturing records; keep legacy CPQ migration bundles when required. Review CPQ assembly BOM behavior →
Reviewing compliance audit approvals? Compliance 360 version 3.1.0 adds an optional approval step before an audit is completed. Check reviewer roles and test a full approval cycle before enabling it. Explore the Compliance 360 approval workflow →
Missing a Salesforce–NetSuite data flow? An eligible licensed Salesforce Connector can now synchronize additional supported records in one direction. Check source ownership, identity mapping, existing-record backfill and error handling before turning it on. Explore Salesforce custom data syncs →
Exploring AI assistance in finance and operations? Oracle announced SuiteSkills on October 26. Start with one approved business task, check the available skill and access permissions, and review the results before granting any action authority. Explore SuiteSkills and practical controls →
Planning a new NetSuite implementation? SuiteExpress is initially available for software-industry customers in the United States and Canada. Confirm eligibility and data-governance approvals before treating it as part of your implementation plan. Review SuiteExpress availability →
Starting a U.S. technology business? Oracle NetSuite QuickStart offers eligible early-stage startups a free finance platform, subject to monthly record, email and document caps and other limits. Confirm eligibility and financial-control needs before onboarding. Review QuickStart eligibility and limits →
Evaluating industry AI in NetSuite Next? Industry SuiteAgents are announced as available for Software, Product and Construction in NetSuite Next; other industries remain planned. Check account access, user permissions and approval steps before adopting a workflow. Review SuiteAgent availability and controls →
Using Enterprise PCM's original agent or relying on older calculation diagnostics? The original agent and Performance Assistant were retired with the 26.11 update; the enhanced agent retains performance analysis, while diagnostic statistics have a new default retention. Confirm your environment and test the replacement workflow. Review Enterprise PCM agent and diagnostics guidance →
Automating restricted-fund releases? Non-Profit Financial Management 1.0.2 can create eligible release-from-use-restriction transactions from an approved saved search. Test grouping, account settings and finance controls before scheduling. Review non-profit finance automation →
Other updates to review
Bank imports may need attention. Automatic imports can pause when a bank connection needs renewed multi-factor authentication (MFA). Check the connection banner, confirm the authorized person can renew it, and verify the next import. Read the bank-feed recovery guidance →
New options for custom development. Event Subscriber scripts can run work in the background after a record event. New custom-tool File Cabinet capabilities require Administrator setup and the appropriate role permissions. Availability depends on your account’s phased NetSuite Next rollout. Explore the new capabilities.
More sign-in options for reporting connections. Connect OAuth 2.0 enablement does not force existing connections to change their authentication method. Oracle’s enablement notice.
We can help you review your setup, test a change, or plan a larger project. Discuss your NetSuite needs →