--- type: Guide title: NetSuite SuiteApp vs External AR App: How to Choose description: A SuiteApp is not always native. How to choose between a NetSuite SuiteApp and an external AR app: data location, API, cost, IT checks and examples. resource: https://accounting.events/resources/netsuite-suiteapp-or-external-ar-app/ tags: [netsuite suiteapp, netsuite suiteapps, suiteapps netsuite, netsuite suiteapp accounts receivable, suiteapp vs external app netsuite, built for netsuite meaning, is a suiteapp native, netsuite integrated suiteapp vs native, netsuite ar automation, netsuite dunning, netsuite accounts receivable] timestamp: 2026-10-27 author: Harry P. Smart fact_checked_by: Julie Turnbridge fact_checked: 2026-10-27 --- # NetSuite SuiteApp or external AR app: how to choose A vendor says it has a SuiteApp. This guide explains what that word does and does not tell you, and how to choose between a SuiteApp and an AR app that syncs with NetSuite from outside. **Choose a native SuiteApp when the work is basic reminders and you want one audit trail inside NetSuite. Choose an external AR app when you need reply handling, a payment portal, cash application or several ERPs. A SuiteApp is not always native, so ask where the data lives, which API the vendor uses and what your NetSuite concurrency allows.** **In short** - **Native SuiteApp:** the app runs inside NetSuite, so the data stays in your account. - **Integrated or hybrid SuiteApp:** a cloud service outside NetSuite syncs through the API and is updated separately. - **NetSuite's own dunning** is the Dunning Letters SuiteApp, a separate purchase that stops after the letter is sent. - **An external app needs** a role, tokens and a share of your API concurrency. A sandbox refresh deletes the token key and secret. **Related guides:** [NetSuite editions and modules](/resources/netsuite-editions-and-modules/), [NetSuite OneWorld pricing](/resources/netsuite-oneworld-pricing/), [ERP pricing compared](/resources/erp-pricing-compared/) A vendor tells you it has a SuiteApp. In NetSuite, that can mean the app runs inside your account, or that a cloud service sits behind a listing. Oracle's definition covers both, so the word alone does not tell you where your invoice data lives. The sections below show what to ask, and what each answer means for your AR team. ## What is a NetSuite SuiteApp? A SuiteApp is an application or bundle that extends NetSuite, developed by Oracle, a SuiteCloud Developer Network (SDN) partner or a customer. Oracle's [SuiteApps overview](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_3134602194.html) says you find and install SuiteApps at Customization > SuiteBundler > Search & Install Bundles. Some are also in the SuiteApp Marketplace inside NetSuite. Customers can build their own SuiteApps or hire Oracle's Professional Services to build one. Two details from the same page matter for a buyer: - **Access and fees:** "Some SuiteApps are available only to accounts designated by NetSuite. In some cases, extra fees may be required." - **Who built it:** on the Installed Bundles page, the Owner column shows the name of the SuiteApp developer. That is a quick check on any app already in your account. A SuiteApp is different from a NetSuite module. Modules are Oracle's own product features, such as OneWorld or Advanced Financials, sold with your NetSuite license. SuiteApps are extensions installed on top. ## Is every SuiteApp native? No. A native SuiteApp runs entirely inside NetSuite, an integrated SuiteApp is hosted outside and syncs through APIs, and a hybrid has parts in both. The partner glossary from Zone & Co (a NetSuite SuiteApp developer) describes native apps as ones that "operate entirely within NetSuite", with no external sync or second login. It describes integrated SuiteApps as third-party apps that run largely outside NetSuite and sync data through custom integrations or connectors. Partner guides also describe a hybrid type, with some components inside NetSuite and some outside. The listing does not show which type you are buying. Two apps in the SuiteApp Marketplace can store your collection notes in very different places. ### What does Built for NetSuite mean? Built for NetSuite is Oracle's verification program for SuiteApps. Partner sources describe it as a review of security, quality and data privacy, based on a questionnaire, customer references or a demo. It is renewed for major releases, it can be revoked, and Oracle gives no guarantee about the app. For integrated SuiteApps, the Zone & Co glossary says the certification "only extends to the integration components" and that "the full application is not reviewed or verified by NetSuite". For those apps, the badge covers the data connection only. ## SuiteApp or external AR app? A decision tree Start with what you need to happen after the first reminder: replies, portals, cash application and several ERPs point to an external app, and basic reminders with one audit trail suit a native SuiteApp. Answer the questions in order. Stop at the first answer that sends you to a result. | Step | Question | If yes | If no | |---|---|---|---| | 1 | Do you only need reminders and statements by days overdue? | A native SuiteApp such as Dunning Letters, plus saved searches for the aging view | Go to step 2 | | 2 | Do you need to read customer replies, record promises to pay or track disputes? | An external app, or an integrated SuiteApp that states it handles replies | Go to step 3 | | 3 | Do you need a customer portal with card and ACH payments? | An external app, or a payments SuiteApp. NetSuite's own Payment Link has five prerequisites before one invoice carries a link | Go to step 4 | | 4 | Do you run more than one ERP, or entities outside NetSuite? | An external app that connects to each ledger | Go to step 5 | | 5 | Can your NetSuite admin own tokens, roles and sandbox refreshes? | Either side works. Go to step 6 | Prefer a native SuiteApp, or a vendor that sets up and maintains the connection for you | | 6 | Does the vendor say "SuiteApp"? | Ask where the data lives, which API it uses and who maintains it at each NetSuite release | Ask which API it uses and what role and concurrency it needs | The tree sorts by need. Any app can fall on either side of step 2 or step 3, so check each claim against the vendor's own NetSuite page. ### The tree as plain rules 1. **Basic reminders only:** a native SuiteApp keeps the letters, the log and the aging data in one place. 2. **Replies, promises and disputes:** NetSuite's dunning has no dispute or promise-to-pay state, so this need points outside it. 3. **Portal and online payment:** decide on the portal and the payment method as two separate questions. 4. **Several ERPs:** an app that lives inside NetSuite cannot chase invoices in another ledger. 5. **No admin capacity:** an external connection needs someone to own its tokens and role. 6. **The word "SuiteApp":** treat it as a listing, and ask the three questions about data, API and upgrades. ## What does NetSuite's own Dunning Letters SuiteApp cover? NetSuite sends dunning letters through the Dunning Letters SuiteApp, which Oracle sells separately through your account manager, with no public price. What Oracle's help pages state about it: - **Purchase and install:** a paid, managed bundle built by NetSuite (bundle ID 392827), installed through SuiteBundler. It needs the Multiple Currencies feature, Advanced PDF/HTML Templates, SuiteFlow, server and client SuiteScript, and the License Client SuiteApp. - **Levels:** up to 15 levels per procedure, set by days overdue. A level can start from -1 to -99 days, which sends a reminder before the due date. - **Sending:** letters go by email. Each run of the email queue or the PDF print queue handles 100 letters at a time. PDFs come only from the manual print queue. - **Logging:** system notes record every automated and manual dunning action. - **Disputes:** there is no dispute field that drives dunning. You pause a customer or invoice manually with a pause reason. - **Bounces:** "The SuiteApp cannot detect bounced email messages." Finance charges sit outside the SuiteApp. You run Assess Finance Charges manually, and a customer can be assessed only once per day. Credit hold is a customer setting of Auto, On or Off. For a UK reader, this is the NetSuite side of credit control: letters by days overdue, with every follow-up after the letter left to your team. ## What does an external AR app need from NetSuite? An external AR app needs REST web services, an integration record, a dedicated integration user with a limited role, OAuth 2.0 or token-based sign-in, and a share of your account's API concurrency. A typical setup, based on published vendor install guides: 1. Your admin enables REST web services and OAuth 2.0. 2. The admin creates an integration record at Setup > Integration > Manage Integrations. 3. The admin creates a dedicated employee and a custom role for the integration. 4. For machine-to-machine OAuth 2.0, the admin uploads a certificate and pairs the user, role and integration. 5. The vendor maps custom fields such as subsidiary, currency and payment terms. 6. You test in sandbox, then repeat in production with its own integration record. ### How much API concurrency do you have? Oracle's [concurrency governance page](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N259503.html) sets a default limit by service tier. Web services and RESTlets share the same limit, and each SuiteCloud Plus license raises it. | Service tier | Default limit (no SuiteCloud Plus) | With one SuiteCloud Plus license | |---|---|---| | Standard | 5 | 15 | | Premium | 15 | 25 | | Enterprise | 20 | 30 | | Ultimate | 20 | 30 | Premium, Enterprise and Ultimate accept more SuiteCloud Plus licenses, each adding 10. SuiteCloud Plus is sold separately and is not part of any tier. You can cap each integration at Setup > Integration > Integration Management > Integration Governance. On a Standard account with no SuiteCloud Plus, an AR app shares five concurrent requests with every other integration you run. Ask the vendor how many it uses at peak. ### What happens after a sandbox refresh? Oracle's [token-based authentication page](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1515141510.html) states: "After a sandbox refresh, Token Key and Token Secret are deleted and must be regenerated." Production tokens are not affected. Production integration records copy into sandbox, and Oracle advises you to review them, so a connected AR tool needs new sandbox credentials after each refresh. ## Which API should the vendor use, and when do SOAP and TBA stop? New AR integrations should use REST web services with OAuth 2.0, because Oracle is retiring SOAP web services and stops new token-based integrations from release 2027.1. Oracle's [SOAP web services end-of-life article](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_2104046421.html) gives these dates: | NetSuite release | What changes | |---|---| | 2025.2 | The last planned SOAP endpoint | | 2027.1 | No new integrations built with token-based authentication (TBA) or SOAP | | 2027.2 | Only the 2025.2 SOAP endpoint is supported | | 2028.2 | All SOAP endpoints are disabled | Oracle states that existing REST integrations on TBA keep running and that OAuth 2.0 is preferred. Oracle's article is clear for SOAP. Whether the 2027.1 cutoff also covers REST and RESTlets built on TBA is not settled in Oracle's text, so ask the vendor which method its connector uses today and when it plans to move. ## What happens at each NetSuite release? NetSuite ships two releases a year, and each one can change records and scripts that a connected app relies on. For a managed bundle such as Dunning Letters, Oracle states that accounts upgrade automatically. Partner sources say an integrated app is updated and maintained separately from NetSuite, by its vendor, on its own schedule. The 2026.1 release shows why this matters. RSM, a NetSuite partner, reported breaking changes including keyed journal sublists, changed script IDs and removal of the legacy NetSuite.com ODBC data source. Ask every vendor who tests the connection in the release preview, and how fast it ships a fix. ## What does each route cost? The Dunning Letters SuiteApp has no public price, other SuiteApps may carry extra fees, and an external app adds a subscription plus any SuiteCloud Plus licenses you need for concurrency. | Cost item | What is published | |---|---| | Dunning Letters SuiteApp | Separate purchase through your NetSuite account manager; no public price | | Other SuiteApps | "In some cases, extra fees may be required" (Oracle) | | External AR app | A subscription from the vendor. Kolleno lists $650 per user a month on BusinessPay ([Kolleno pricing page](https://www.kolleno.com/pricing)). Upflow's last published prices were $440 a month for Grow and $880 for Scale; it now quotes by gross invoice value; it was last published at $440 a month for Grow and $880 for Scale | | SuiteCloud Plus | Sold separately, needed only if the integration exceeds your concurrency limit | | Admin time | Role, tokens, sandbox refreshes and release testing for any external connection | Upflow's current prices are hidden. The figures above are last reported, not confirmed by Upflow. For NetSuite license costs, see [NetSuite editions and modules](/resources/netsuite-editions-and-modules/) and [NetSuite OneWorld pricing](/resources/netsuite-oneworld-pricing/). ## What will IT ask before connecting a third-party tool? IT will ask for a dedicated integration user, a limited role, OAuth 2.0 for new builds, separate sandbox credentials and IP restrictions, and it will check what the vendor's certifications actually cover. - **Dedicated user and role:** one employee record and one custom role per integration, so access can be audited and removed. - **No token management:** the integration user should not hold the Access Token Management permission. - **OAuth 2.0 for new builds:** in line with Oracle's SOAP and TBA dates. - **Separate sandbox credentials:** sandbox and production each get their own. - **IP restrictions:** set per role for web services access. - **Two-factor sign-in:** it applies to people. Token and OAuth integrations are non-interactive and are not subject to it. - **Certifications:** Oracle's SOC 2 Type 2 and ISO 27001 reports cover Oracle's platform, not your configuration or the vendor's own service. Ask for the exact record permissions the vendor needs. Oracle does not publish a least-privilege role for AR integrations, so the list depends on the calls each app makes. ## Examples of what vendors state AR tools grouped by what each vendor or listing states about its NetSuite connection, alphabetical inside each group. This is not a ranking. | Group | Tool | What is stated | Source | |---|---|---|---| | Stated as a SuiteApp | A/R Post | "A fully-integrated SuiteApp" with "no external integrations; everything stays in one place", built by Fortis with We Are Outpost | Stated by vendor | | Stated as a SuiteApp | Dunning Letters | A managed bundle built by NetSuite, sold separately | Stated by Oracle | | Stated as a SuiteApp | Kolleno | "Official SuiteApp Integration Partner"; syncs with NetSuite in real time | Stated by vendor | | Stated as a SuiteApp | Upflow | Native SuiteApp in the NetSuite Marketplace; "real-time bi-directional sync"; supports OneWorld | Stated by vendor | | Stated as a sync | Tesorio | "Deep, bidirectional sync"; its FAQ asks whether a SuiteApp is required and gives no answer | Stated by vendor | | No side assigned | Billtrust | A listed SuiteApp connector | Stated by a third party | | No side assigned | Chaser | "Built for NetSuite" and "direct API integration"; where the app runs is not stated | Stated by vendor | | No side assigned | HighRadius | Two-way, real-time data flow with OneWorld support; a third party says RadiusOne AR is a SuiteApp with Built for NetSuite status | Vendor and a third party | | No side assigned | Versapay | "Native integration" with NetSuite; a third party calls it a certified SuiteApp | Vendor and a third party | | Custom ERP connection | Paidnice | Not listed as a SuiteApp; not listed as Built for NetSuite. Connects to NetSuite (two-way sync, custom fields, OneWorld supported) through a custom implementation on its Custom plan, set up by an implementation specialist. Custom from $999 a month, quoted for your setup | Stated by vendor | "No side assigned" means the vendor's NetSuite page does not say whether the app runs inside NetSuite. Ask each vendor the three questions in the decision tree before you sign. ## Common questions ### What is a NetSuite SuiteApp? A SuiteApp is an application or bundle that extends NetSuite. Oracle, SuiteCloud Developer Network partners or customers build them, and you install them through SuiteBundler or the SuiteApp Marketplace. ### Is a SuiteApp the same as a NetSuite module? No. Modules are Oracle's own product features sold with your NetSuite license, such as OneWorld. SuiteApps are extensions installed on top, built by Oracle, partners or customers. ### What does Built for NetSuite mean? Built for NetSuite is Oracle's verification program for SuiteApps, covering security, quality and data privacy. It is renewed for major releases and can be revoked, Oracle gives no guarantee, and for integrated apps it covers only the integration components. ### Is a SuiteApp better than an external app? A native SuiteApp suits basic reminders, because the data and the log stay in NetSuite. An external app suits reply handling, portals, cash application and several ERPs, at the cost of a role, tokens and API concurrency to manage. ### Does NetSuite have built-in dunning? NetSuite's dunning is the Dunning Letters SuiteApp, which Oracle sells separately through your account manager. It sends letters by days overdue, up to 100 per run, and it does not detect bounced emails or track disputes. ### How long does it take to connect an AR tool to NetSuite? Oracle states no typical time. Vendors state their own: Upflow says connecting takes less than five minutes, Tesorio says "weeks, not months", and HighRadius gives 6 to 8 weeks in the FAQ on its NetSuite integration page, which is written for AP. ### Is it safe to connect a third-party collections tool to NetSuite? It can be, with a dedicated integration user, a limited role, OAuth 2.0 and separate sandbox credentials. Oracle's SOC 2 Type 2 and ISO 27001 reports cover Oracle's platform, so ask the vendor for its own security reports too. ## Where the figures come from - SuiteApp definition, install route, fees and the Owner column: [Oracle, SuiteApps overview](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_3134602194.html). - Native and integrated SuiteApps, and Built for NetSuite scope: Zone & Co glossary, "What is an integrated NetSuite SuiteApp?" and "BFN certification" (partner glossary). - Dunning Letters SuiteApp: [Oracle, Dunning Letters](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_4026576646.html) and its setup and sending pages in the NetSuite help center. - Finance charges: [Oracle, finance charges](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N1301640.html). - Concurrency limits: [Oracle, concurrency governance](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N259503.html). - Sandbox refresh and tokens: [Oracle, token-based authentication and sandbox](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1515141510.html) and [Oracle, integration records in sandbox](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1515139626.html). - SOAP and TBA dates: [Oracle, SOAP web services end of life](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_2104046421.html). - 2026.1 breaking changes: RSM technology blog, "NetSuite 2026.1 critical changes". - Vendor statements: each vendor's own NetSuite integration page (Upflow, Kolleno, Tesorio, Chaser, HighRadius, Versapay and the Custom ERP connection row) and the Fortis A/R Post page. Third-party SuiteApp claims for HighRadius, Versapay and Billtrust: Viewpoint Analysis. - Prices: [Kolleno pricing page](https://www.kolleno.com/pricing); Upflow last reported figures. No vendor paid to appear on this page. ## Sources Sources checked by Julie Turnbridge on October 27, 2026: 1. [SuiteApps overview](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_3134602194.html) (docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/art...) 2. [concurrency governance page](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N259503.html) (docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/sec...) 3. [token-based authentication page](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1515141510.html) (docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/sec...) 4. [SOAP web services end-of-life article](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_2104046421.html) (docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/art...) 5. [Kolleno pricing page](https://www.kolleno.com/pricing) (kolleno.com/pricing) 6. [Oracle, Dunning Letters](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_4026576646.html) (docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/sec...) 7. [Oracle, finance charges](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N1301640.html) (docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/sec...) 8. [Oracle, integration records in sandbox](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1515139626.html) (docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/sec...)