In this edition

→ Before you connect a SuiteApp: 3 things worth checking
→ Sunrise 2027: What to figure out before you choose a WMS
→ AI, beyond the NetSuite box: Where does AI fit?
→ New offer: Build a practical AI roadmap for your business
→ Company news: Great Place to Work® x4, SOC 2 Type II, and news from the Techfino team

What to check before you trust a SuiteApp with
your data

From Bryan Willman Techfino, CEO/CIO

Every SuiteApp you install gets access to something. Most teams evaluate them on features and price, then fnd out later what the integration was actually doing with their credentials.

Here is what we look at before we let one near a client's production account:

1. Find out where the credentials live. Once the SuiteApp is connected, check whether an administrator can access the custom record or custom field where OAuth credentials are stored. If you can run a saved search and see the token in clear text, that’s a security concern. Another thing to check: if you can edit the custom record where the OAuth token is stored and make the Available in UI checkbox available, you may be able to see the credential directly.

2. Read the permission scope. A SuiteApp that only needs to read documents should not be requesting broad access that allows write access.

3. Check whether you can modify any ofthe files or scripts. Managed bundles are often locked from review. If not, that could be a real change management issue. Ensure you trust the vendor and the particular data sensitivity if you do find this.

We ran this on the new DocuSign SuiteApp for NetSuite and found OAuth credentials sitting in the clear. DocuSign confirmed it was a known product security issue, and at the time of publication, the issue had not yet been corrected.

If you’re running the SuiteApp, this is worth checking now. Bryan’s full write-up walks through what he found, why it matters, and the steps NetSuite admins can take to audit and protect their environment while the issue is being addressed.

READ THE FULL ARTICLE ON LINKEDIN →

02 · SUNRISE 2027

The WMS decision most teams make too early

If you run manufacturing or a warehouse on NetSuite, you have a deadline coming. Sunrise 2027 is the push toward 2D barcodes that will change what manufacturers need to capture on product labels and how that data moves through the warehouse. The work touches your labels, product data, scanners, printers, and WMS, so it’s worth sorting out your approach before the deadline gets close.

The question we get most often is NetSuite WMS or RF-Smart. Teams usually try to answer it first. It should be answered third. Answer these in order:

• Your picking logic. If your pick paths, wave logic, and putaway rules are complex, you are shopping for capability. If they are straightforward, native WMS handles more than people expect and you may save a license.

• Your item data. Neither system fixes bad product data. If your UOMs, dimensions, and bin structures are inconsistent today, you are going to spend that cleanup budget either way. It’s better to know that before you sign.

• Then the platform. Once you know what you need and what shape your data is in, the comparison gets much shorter. 

Our manufacturing expert, Sergio Moises, and the team break down the pieces that should be part of that conversation: What manufacturers need to know, NetSuite WMS or RF-Smart?, Scanners, printers, and label software, Is your product data ready?

WATCH THE AI WITHOUT REGRET MASTERCLASS →

03 · Where does ai fit?

AI, beyond the NetSuite box

AI is becoming part of the same conversations we’ve been having with clients for years: Where can technology make the business work better? What is worth implementing? And how do you move from experimenting to having a plan?

At Techfino, we’re digging into those questions across the business, not just within NetSuite. We’re helping businesses think through practical AI use across the systems and teams they already have, from figuring out where to start to putting the right strategy and guardrails in place.

NetSuite is still a big part of what we do. But it’s not the only technology conversation we’re having anymore.

We’ve also been building out free AI resources to help teams get started. On our Offers page, sort by AI to find our AI Prompting Guide, AI Policy Checklist, and AI Without Regret masterclass.

GET YOUR TEAM AUDIT-READY →