Toronto's Premier ERP Data Archival Specialist
Blueacrobat Corporation is a Canadian company, founded in 2009 and based in the Greater Toronto Area, ISO/IEC 27001:2022 certified and SOC 2 Type II audited. We extract, back up and archive ERP and business data: the records, the relationships between them and the documents attached to them, verified against the source and kept usable for as long as the obligation to produce them lasts, whether the system is being retired, migrated away from, separated in a divestiture, or kept live and protected. Oracle NetSuite is where most of that work has been done and where our tooling runs deepest; the same archival model has been applied to SAP and other ERP data, and finance, IT and audit teams come to us when an ERP environment is about to change and the records still have to be producible years later.


What we do, and what we do not do
AcroXtract extracts the structured records of an ERP system, with their relationships and custom objects, and delivers them as a relational database you own; it runs against Oracle NetSuite and, as AcroXtract for SAP, against SAP. AcroFile extracts the document store, the File Cabinet in NetSuite, with its folder structure and keeps each document linked to its record. DBVault is the platform that hosts the resulting archive, whichever system it came from: read-only, searchable, with named roles and restriction profiles, and financial reporting for the periods the archive covers. For accounts that stay live, the continuous backup service captures what changed, on a schedule, into the same platform.
We do not load data into a successor ERP; the team implementing that system does, from what we deliver. We do not split an existing archive by legal entity as a service, host DBVault on your premises, or restore an ERP account automatically from a backup. Saying so early is what lets a security or migration team plan around us.
Why Choose Blueacrobat?
Experience with the difficult account
We have extracted and archived ERP data, most of it Oracle NetSuite, for HPE, Kimberly-Clark, Dropbox, Snapchat, NetApp and many others: long-lived instances, heavily customised accounts, multi-book and multi-subsidiary structures, and document stores that had to keep their folder structure. The case studies describe engagements of that kind in the reviewer's own words.
Verified against the source
A plausible row count is not treated as proof. Every extraction is compared with the source: record counts by type, financial totals,
referential integrity and field-level checks, then acceptance by your own users before sign-off. If people kept working in ERP during
the project, the delta is captured and verified again.
A fixed order of work
Map the account, extract, verify, user acceptance, then a delta where required. The sequence is the same on every engagement, which is
what lets a fixed shutdown date be planned against it, and what the service does not do is stated before the work starts: we do not
load data into a successor ERP, and the archive is read-only access to history, not a replacement for the application.
Assurance you can check
Blueacrobat is ISO/IEC 27001:2022 certified and SOC 2 Type II audited; the
Trust Centre describes the controls and how to obtain the certificate and the report. Every
engagement has a written scope and a named contact, and extraction runs with your own credentials, used read-only.
Questions about the company
The questions a finance, IT or security team asks before it works with us. The product pages answer the technical ones for each service; the Trust Centre carries the security detail behind the certification and the audit.
What does Blueacrobat do?
We extract, back up and archive ERP and business data, verify it against the source, and keep it usable after the system changes. That covers a one-time extraction before an account is retired or migrated away from, an extraction of the document store, hosted read-only access to the archive on DBVault, and scheduled backups of a live account. Blueacrobat is ISO/IEC 27001:2022 certified and SOC 2 Type II audited.
Which systems do you work with?
Oracle NetSuite is where most of our engagements have been and where our tooling runs deepest; it is the system most of this site describes. The same archival model runs against SAP through AcroXtract for SAP and hosted as DBVault for SAP, and the archives live on DBVault, our platform for ERP and business data archival and reporting; DBVault for NetSuite is its NetSuite flavour. If your system is not named here, describe it during scoping; the answer depends on how its data can be read.
What happens to my records when an ERP account is retired?
The records leave the account before access ends. We map the system, extract the structured records, relationships, custom objects and attached documents that are in scope, compare the result with the source, and hand it over as a database you own, as a DBVault archive, or both. What the vendor does with the account after the subscription ends is set out in its own terms; the planning rule is that nothing can be extracted from an account that has already closed.
Do I get a copy of the extracted database?
Yes. The extracted data is delivered as a MySQL database snapshot and a zip of the database and the File Cabinet, which you can load on your own infrastructure or in the cloud and query as you need, and as CSV where that is the agreed format. There is no API for onward migration; the database and the CSV exports are the hand-off. DBVault is a separate, hosted way to use the same archive without running a database.
Are the relationships between records preserved?
Yes. An archive in which an invoice no longer resolves to its customer, its order, its payments, its lines, its ledger impact and its attachments is a collection of rows, not a business record. The extraction keeps those relationships, including the ones custom records and fields carry, and the verification step checks them.
How do you know the extraction is complete?
A matching record count shows that rows arrived; it does not show that values, relationships or attachments survived. We compare the extracted data with the source at several layers: record counts by type, financial totals, referential integrity, field-level inspection, and then user acceptance by your own finance users, who find the problems a technical checklist does not. If people kept working in the system during the project, a delta extraction captures what changed and is verified again.
Where is my data hosted, and can I choose the region?
DBVault is cloud-hosted. The hosting region is agreed for each engagement, and regions outside our standard set are considered case by case, so tell us the residency requirement during scoping. Where a data-residency law applies, the region can be part of the engagement's requirements; whether a given configuration satisfies that law is a determination for your legal team, not something a hosting choice settles on its own.
What security assurance can you show a procurement or security team?
Blueacrobat is ISO/IEC 27001:2022 certified and SOC 2 Type II audited: the ISO/IEC 27001 certificate and the SOC 2 Type II report are available on request, and the Trust Centre describes the control families and the cadence of testing and review. Extraction runs with your own credentials, under your authorisation, within the limits the source system sets, and access to a DBVault archive is read-only and assigned through named roles and restriction profiles.
Can you back up a live account on a schedule?
Yes. AcroBackup for NetSuite, the continuous backup service, captures the records and files that changed since the previous run, on a schedule agreed for the account, into DBVault; today it runs for Oracle NetSuite accounts. It is a different need from a one-time decommissioning extraction. A backup is a copy with a recovery path; it does not restore an account automatically, and a full restoration still needs re-implementation and manual record re-import.
Who does what during an engagement?
We map, extract, verify and deliver. You provide a dedicated login used read-only, decide the record scope, confirm when data entry stops, and put the delivered archive in front of the people who will use it for acceptance. If you are moving to another ERP, the team implementing it loads what it needs from what we deliver; that load is their work, not ours.
A situation the questions above do not cover?
Tell us the date access ends, the record scope and who needs the archive, and we will say what the engagement would involve.
Our relationship with the ERP vendors
Blueacrobat is an independent company. NetSuite is Oracle's product and SAP is SAP SE's, and the names appear on this site to identify the systems our services work with. We work with the data in our customers' own accounts, with their credentials and their authorisation, within the limits each system sets, and we describe what a system does only where its vendor's own documentation says it. What we add begins where the application's job ends: when the account is retired, migrated away from or allowed to lapse, the records still have owners, retention periods, auditors and disputes.
How an engagement runs
Every engagement follows the same order. We inventory the system and agree the scope: record types, custom records, accounting books, the document store. We extract with a dedicated login used read-only. We compare the result with the source and put it in front of your users for acceptance. If people kept working in the system in the meantime, we capture a delta and verify it again. Then the archive is delivered as a database you own, hosted on DBVault, or both, and the account can close. The situations page describes the nine circumstances in which that work happens, and the case studies show it delivered.