Lesson 2 of 5
Archiving, retention and legacy access
13 min
Once you decide that data will be retained but not migrated, you have to decide where it will live and for how long. That plan must survive the shutdown of the old system. Many programs remember to plan the go-live and forget to plan the legacy system's end of life, then pay for an unused legacy system for years because nobody can prove it is safe to turn off.
Retention requirements come from outside IT
Retention periods are set by tax law, commercial law, product liability, contracts, industry rules and pending litigation. They differ by country, by data category and sometimes by company. They are not something the migration team should guess. For Alternadores del Norte's data, Contoso's legal and tax advisers in Mexico and the US produced a retention schedule listing each data category with its period, the event that starts the clock and the owner. Any legal hold (data that must be kept because of litigation or investigation) overrides the schedule until it is released.
Options for retained data
| Option | How it works | Strengths | Weaknesses |
|---|---|---|---|
| Keep the legacy system read-only | The legacy ERP stays up with users locked to display access | Simple; full context; familiar to users | Ongoing cost, patching and security risk; a temporary answer |
| Data archiving in the source | Archive objects write data to archive files; display through archive access | SAP standard; reduces database size; mature tooling | Needs the source system to read archives unless moved elsewhere |
| SAP Information Lifecycle Management (ILM) | Rule-based retention management: archiving and destruction governed by retention rules, with legal holds | Enforces retention and destruction by policy | Requires design and configuration effort |
| ILM retention warehouse | Legacy data moved to a low-cost store so the source system can be decommissioned | Legacy system can be shut down; data stays accessible for audit | Reporting is limited compared with the live system; needs planning early |
SAP describes SAP ILM as managing the lifecycle of live and archived data based on rules, to cope with data protection and retention regulations. SAP positions three key scenarios: retention management (rule-based archiving and destruction of transactional documents), simplified blocking and deletion of personal master data, and the retention warehouse for decommissioning legacy systems. In classic data archiving, archive objects are run through Archive Administration (transaction SARA). Exact ILM features and licensing depend on your release and contract, so confirm them with SAP before you design around them.
A legacy end-of-life plan
- Go-liveLegacy ERP set to read-onlyUsers locked to display roles; interfaces off; batch jobs stopped
- Go-live + 1 to 12 monthsRead-only periodYear-end close, audits and returns use the legacy ERP for history
- After the first auditDecommissioning decisionRetention schedule checked; data moved to archive or retention store
- DecommissionLegacy ERP switched offAccess to retained data verified before shutdown
- End of retentionDestructionData destroyed per schedule, unless under legal hold
The first year after go-live is usually when history is needed most: the first year-end close, the first external audit on the new system, warranty claims and returns against old deliveries. Plan the read-only period to cover at least those events, then decommission deliberately rather than leaving the old system running indefinitely.
Prove retained data is usable
Retained data is only useful if people can find and read it. Before the legacy system is switched off, test the access path: can finance display a closed 2021 invoice with its line items? Can an auditor see the document's change history? Can a buyer find the purchase history for a supplier? These checks are as much part of the migration's acceptance as reconciling open items.
- Pick sample requestsTypical audit, tax, warranty and dispute requests, chosen with the owners
- Run them on retained dataThrough the planned access path, by the people who will use it
- Compare with the sourceResults match what the live legacy system showed
- Record evidenceSample, result, who checked, date
- Approve decommissioningOwners and internal audit sign before shutdown
What would you do?
Eighteen months after company code 1910 went live, Contoso is still paying to run Alternadores del Norte's legacy ERP in read-only mode "just in case". What should the program recommend?
- Retention periods come from legal, tax and compliance, not from IT; legal holds override them.
- Options: read-only legacy, data archiving, SAP ILM retention management and the ILM retention warehouse.
- Plan the legacy end of life: read-only period, decommissioning decision, shutdown, destruction.
- Test access to retained data with real requests before switching the old system off.
Check your understanding · not graded
Lesson check
1. Who sets retention periods?
2. Which SAP ILM scenario supports decommissioning legacy systems?
3. What overrides a retention schedule until released?
4. What should happen before the legacy system is switched off?