The mapping decisions that take the longest are never technical. Which system masters a customer record after a phone order in NetSuite and a web order the same afternoon. Whether a bundle is one item or five in the ledger. Which NetSuite location feeds which Shopify buffer. The flow audit turns each of these into a written rule with an owner, because the code is easy once the business has decided, and endless when it has not.
Subsidiaries deserve their own sentence, because they are where clean NetSuite integrations go to get complicated. If your org runs multiple subsidiaries or nexus registrations, order routing, tax posting and settlement reconciliation all need explicit rules per entity, agreed with finance before build. The flow audit produces that mapping as a signed artefact, which is considerably cheaper than discovering an undocumented subsidiary during peak season reconciliation.
Security and access follow the principle of least privilege. The integration uses a dedicated integration role in NetSuite with permissions scoped to exactly the records it touches, credentials in your vault, and a quarterly access review as part of the care plan. No shared logins, no admin role because it was convenient, and a written answer to the auditor question of who can change what.
Architecture is deliberately dull. Shopify webhooks (orders, inventory, customers) arrive at a small service, verified by HMAC, and land in a queue. Workers apply your rules: order mapping, SKU translation, location aggregation, tax treatment. They write to NetSuite through SuiteTalk or the REST APIs with idempotency keys, so a redelivery can never double post. Failures retry with backoff, then surface on an exceptions screen naming the record and reason. NetSuite's schedulable scripts handle the return legs, pushing inventory and price changes onto the same queue in the opposite direction.
Reconciliation is the feature clients underestimate and value most. Every day, the integration compares order counts and sums between systems for the trailing window, inventory levels per SKU per location, and open exceptions, then emails a one page report. Finance stops trusting the sync on faith and starts trusting it on evidence. Month end changes from data entry to review, which for most teams is the entire business case.
Cutover is a parallel run. For two weeks the old process (usually an export ritual) runs alongside the new sync, and the reconciliation report compares them daily. When the report is boring for ten consecutive days, you switch off the old process. Rollback is keeping the old ritual warm, which costs nothing because it was already there.