← Back to Blog
Engineering·11 min read·Sep 24, 2026

Migrating Off Eaglesoft: What Clinical AI Can Extract From Patterson's Database Before, During and After the Cutover

Migrating Off Eaglesoft: What Clinical AI Can Extract From Patterson's Database Before, During and After the Cutover

Do you know which tables in your Eaglesoft database your clinical AI is reading from right now? If you are about to move off Patterson's on-premise server, you should — because that answer changes three times between the day you sign the conversion contract and the day you decommission the old box.

We covered the Dentrix side of this in our Dentrix cloud migration guide, and much of the operational logic carries over. That said, Eaglesoft has its own database engine, its own imaging stack and its own conversion quirks, and an agent tuned against Dentrix data will make different mistakes here.

Why Eaglesoft Migrations Are Harder Than The Conversion Quote Suggests

Eaglesoft is one of the two largest on-premise install bases in U.S. dentistry, and many of those servers have been accumulating records for a decade or more. Accordingly, practices now moving to Patterson Fuse, Dentrix Ascend, Curve, Denticon or Open Dental Cloud are carrying years of schema drift, custom note templates and imaging folders that nobody has audited since the original install.

A conversion vendor quotes against what maps cleanly. Your clinical AI, however, depends on what maps faithfully, and those two lists diverge in predictable places.

An Eaglesoft migration moves data from an SAP SQL Anywhere database on a practice server into a cloud PMS schema. Clinical AI quality depends on which fields map faithfully and which get flattened along the way.

What Is Actually Inside An Eaglesoft Database?

Under the hood, Eaglesoft runs on SAP SQL Anywhere (formerly Sybase SQL Anywhere), with imaging stored separately in a file-system hierarchy the application indexes by patient. This is why exporting the database and exporting the images are almost always separate line items on a conversion scope.

For the purposes of clinical AI, the data falls into four domains that behave differently under extraction:

  • Chart. Conditions, existing and completed procedures with CDT codes, treatment plans, perio charting and medical alerts. This is the domain your charting and summarization agents lean on hardest.
  • Clinical notes. Free-text and template-driven notes, signatures and lock status. These feed clinical note summarization and any retrieval pipeline built on top of it.
  • Ledger. Transactions, adjustments, payments, insurance claims, estimates and guarantor relationships. Insurance verification and fee-analysis agents read here.
  • Imaging. Radiographs, intraoral photos, mounts and annotations. This is the domain most often underprovisioned in both budget and timeline.

Each domain has its own failure mode during migration. Treating all four as one data transfer is how practices end up with an agent that summarizes a chart perfectly and misreads the balance attached to it.

Compliance First: BAAs, Extract Files And The Audit Trail

Before any conversation about model accuracy, keep in mind that a full Eaglesoft extract is the most concentrated PHI artifact your practice will ever produce. It contains every patient, every procedure, every medical alert and, in many cases, every radiograph, sitting in files that have to move between at least two vendors.

Here is the minimum control set we expect to see before the first extract runs:

  • A BAA with every hop. The conversion vendor, the destination PMS, any intermediate storage or ETL host, and your clinical AI vendor all need signed business associate agreements. An extract parked in an unscoped S3 bucket for the weekend is a reportable exposure under HIPAA and HITECH.
  • Encryption with customer-managed keys. Extract files should land in storage encrypted with a KMS key the practice or its MSP controls. That way, revoking vendor access after cutover is a key-policy change rather than a request and a promise.
  • A read-only extraction account. SQL Anywhere supports ODBC connections, so direct reads are technically possible. However, confirm that your Eaglesoft license and Patterson's integration terms permit third-party access before you point anything at the production database.
  • An audit trail per extract. Log who ran each extract, when, against which tables and to which destination, with CloudTrail or an equivalent covering every read of the landed files. When a patient asks where their records went, this log is the answer.

Our HIPAA guide for clinical AI in dental practices covers the broader BAA chain. For a migration, the practical rule is simple: if you can't name every system the extract touched, you aren't ready to run it.

Every party that touches an Eaglesoft extract needs a signed BAA: the conversion vendor, the destination PMS, any ETL or storage host, and the AI vendor. Encrypt landed files with a key the practice controls.

Which Chart Data Survives Extraction?

Structured chart data is the good news of most Eaglesoft conversions. Demographics, appointment history, completed procedures with CDT codes and tooth numbers, and six-point perio readings generally map to any modern cloud PMS with high fidelity.

What degrades is context rather than content. For instance, treatment plan status semantics such as proposed, accepted, rejected and deferred rarely line up one-to-one between Eaglesoft and the destination, so the converter picks the nearest match.

Where Chart Fidelity Slips

The chart-level losses we see most often are small individually and compounding in aggregate:

  • Treatment plan status collapse. Four or five legacy statuses frequently become two or three in the destination. An agent computing case acceptance rate across the cutover will report a step change that is purely a mapping artifact.
  • Surface and quadrant encoding. Tooth surfaces, supernumerary teeth and quadrant-level procedures are stored differently across systems. Eaglesoft uses Universal numbering, so if the destination or your AI layer normalizes to FDI, verify the mapping against our tooth numbering standards reference before trusting any tooth-level output.
  • Medical alerts as free text. Allergies and conditions entered as note text rather than structured alerts often convert as plain notes. A charting agent that checks structured alerts before suggesting a procedure will now miss them.
  • Existing versus completed work. Restorations recorded as existing (placed elsewhere) and completed (placed in-office) sometimes merge. That distinction matters for production reporting and for any model estimating restoration age.

None of these break the destination PMS for day-to-day scheduling. All of them change what a clinical AI believes about the patient, which is why chart validation belongs in your eval suite instead of a front-desk spot check.

Clinical Notes And Signatures

Eaglesoft clinical notes tend to convert as text blobs with a date and provider attached. What often fails to survive is the template structure, the lock or signature state, and the link between a note and the specific procedure it documents.

As a result, a summarization agent that previously retrieved the note attached to a D2740 on tooth 30 now has to infer that link from dates. Build that inference explicitly, attach a confidence score, and never present an inferred note-to-procedure link as a signed clinical fact.

Structured chart data such as CDT-coded procedures, tooth numbers and perio readings usually converts well. Treatment plan statuses, free-text medical alerts and note-to-procedure links are where fidelity slips.

What Happens To The Ledger?

The ledger is where conversions make the most deliberate trade-offs. Many conversion scopes bring over a balance forward per account plus a limited window of line-item history, rather than every transaction since the practice opened.

That is a reasonable accounting decision. However, it quietly removes the history that several AI workloads depend on.

Some examples of agents that lose signal when ledger history is truncated include:

  • Fee schedule analysis. Detecting fee schedule leakage requires comparing billed fees, allowed amounts and write-offs over time. A two-year window can hide a PPO fee schedule that was never updated after a 2019 renegotiation.
  • Patient lifetime value. A balance-forward entry erases the sequence of visits and payments a patient lifetime value model uses. The patient looks new in the destination even with fifteen years of history.
  • Insurance verification. Claim history, consumed frequency limitations and prior denials all inform an insurance verification agent. If older claims don't transfer, current-year frequency checks may still work while multi-year denial patterns disappear.

The fix is to extract the full ledger to your own governed storage even when the destination PMS only receives a balance forward. Your agents can then read historical ledger data from the archive and current activity from the new system, with the cutover date as a hard boundary between the two.

Imaging: The Line Item Most Conversion Quotes Underprice

Consider the arithmetic first. A practice with 4,000 active patients and an average of 40 images per chart is carrying roughly 160,000 image objects, before counting inactive patients whose records still fall inside the retention window.

Raw radiographs usually transfer, whether as DICOM, as JPEG or TIFF with a metadata sidecar, or through an imaging bridge that leaves originals on the legacy server. What transfers inconsistently is everything around the pixels.

The imaging elements that most often arrive degraded include:

  • Mounts. FMX and bitewing mount layouts define which image shows which region. Without them, an 18-image FMX arrives as 18 loose files, and an AI radiograph analysis pipeline has to re-infer anatomical position from pixels alone.
  • Annotations and measurements. Diagnostic markups, calibrated measurements and caries annotations are frequently flattened into the image or dropped. If your caries or bone-loss model used prior annotations as a baseline, that baseline is gone.
  • Acquisition metadata. Sensor type, exposure settings and capture timestamps affect how a model should treat an image. Losing them makes it harder to detect when a new sensor paired with the destination system shifts your input distribution.

Keep in mind that imaging often migrates on a different timeline than the database. Many practices run the new PMS for weeks while images still live on the Eaglesoft server, which creates its own dual-read problem.

Raw radiographs usually survive an Eaglesoft conversion. Mount layouts, annotations, calibrated measurements and sensor metadata often do not, which weakens any AI radiograph review that depends on image position or prior markup.

Here is how the data domains typically compare once the conversion lands:

Data domainTypically survivesCommonly degradedWhat the agent should do
Demographics and scheduleContact data, appointment history, provider assignmentCustom fields, family and guarantor linksRead from the destination after cutover
Chart and proceduresCDT codes, tooth numbers, perio readingsPlan statuses, existing versus completed workValidate against the legacy extract in the eval suite
Clinical notesNote text, date, providerTemplates, signatures, procedure linksFlag inferred links with a confidence score
LedgerBalance forward, recent line itemsMulti-year history, claim detailRead history from the governed archive
ImagingRaw radiographs and photosMounts, annotations, acquisition metadataTreat as loose images until re-mounted

What Does The Agent See During The Dual-Running Period?

The dual-running window is the most dangerous stretch for clinical AI because two systems both look authoritative. Front-desk staff are learning the new PMS, clinicians still open Eaglesoft to check an old radiograph, and your agent may be reading from either one depending on how its connectors were configured.

The signature failure mode is a stale-state read. For example, a patient reschedules in the new system on Tuesday, the Eaglesoft connector still polls the old appointment book, and your AI phone agent confirms the original Thursday slot.

Pin Every Data Domain To One Source

Therefore, the first rule of dual-running is that every data domain has exactly one source of truth at any given moment, keyed to a cutover timestamp. Before cutover the agent reads chart, ledger and schedule from Eaglesoft, and after it reads from the destination — with imaging allowed its own later cutover date if it migrates separately.

Every record the agent retrieves should carry its source system and extract timestamp in the context passed to the model. That way, the model can say the information comes from the legacy chart as of September 12 instead of presenting archived data as current.

Freeze Writes To The Legacy System

Agent writes are the second risk. If a note-drafting or claim-prep agent can write to both systems, a retry after a timeout can land a duplicate note in Eaglesoft and the original in the destination.

Accordingly, freeze all agent writes to Eaglesoft at cutover and route every write to the destination with an idempotency key. Anything that fails lands in a dead-letter queue for human review instead of retrying into whichever system happens to respond.

Re-Key Your Retrieval Layer

Patient IDs, procedure keys and note IDs change in the destination. If your retrieval layer was built on Eaglesoft keys, as described in our look at vector databases for clinical data, every embedded chunk now points to an ID that no longer exists in the live system.

Build a crosswalk table that maps legacy patient IDs to destination patient IDs and legacy procedure keys to new ones, then either re-key existing vectors through it or re-embed from the destination. Keep the crosswalk under the same access controls as the PHI it describes, because it is effectively a patient index.

During dual-running, pin each data domain to one source of truth by cutover timestamp, freeze agent writes to Eaglesoft, and tag every retrieved record with its source system so archived data never reads as current.

Run the agent in shadow mode against both systems for the first two weeks after cutover. Diff its outputs on the same patients, and treat every disagreement as either a mapping defect or a stale read until proven otherwise.

How Do You Know The Cutover Worked?

Reconciliation is usually framed as an accounting exercise, but it doubles as the best evaluation dataset you will ever get for free. You have the same patients, the same history and two representations of it, which makes every discrepancy a labeled test case.

The checks we run include but are not limited to:

  • Count parity. Patient, procedure, appointment and image counts per provider should match within a documented tolerance. An active patient count that drops by 6% overnight almost always points to a mismatch in how each system defines active status.
  • Sampled chart diffs. Pull 200 to 400 charts stratified by provider, record age and procedure mix, then diff legacy against destination field by field. Weight the sample toward records older than five years, because that is where schema drift concentrates.
  • Agent output parity. Run the same summarization, charting and verification prompts against both systems for the sampled patients. Our guide to clinical AI evals covers how to score those diffs so a formatting change doesn't mask a clinical one.
  • Balance reconciliation. Aged receivables by guarantor should tie out between the legacy ledger and the balance forward. If 3% of 4,000 accounts disagree and each takes 20 minutes to resolve, that is 40 hours of front-desk time to plan for instead of discover.

All of these checks produce artifacts worth keeping. After all, they become the regression suite you rerun the next time the destination vendor ships a schema change.

Treat reconciliation as an eval: compare record counts, diff a stratified sample of 200 to 400 charts field by field, and run identical agent prompts against both systems to catch mapping defects before clinicians do.

After The Cutover: Keeping The Legacy Archive Useful

Decommissioning the Eaglesoft server rarely means deleting its data. State record-retention rules commonly require seven to ten years for adult records and longer for minors, so the legacy extract becomes a long-lived, read-only archive.

That archive remains valuable to clinical AI. Moreover, it is the only place where full ledger history, original imaging annotations and pre-conversion treatment plan statuses still exist in their native form.

Here is how we structure the post-cutover archive so agents can use it safely:

  • Read-only, versioned storage. Land the final extract in object storage with versioning and object lock, encrypted under a practice-controlled KMS key. The archive should be impossible to modify and trivial to audit.
  • A dedicated retrieval tool. Expose the archive to agents through a separate entry in the tool registry, labeled as historical. The model then has to choose deliberately to consult legacy data, and every such call is logged.
  • Drift monitoring from day one. The destination system records data differently from Eaglesoft, so your models will see a distribution shift at the cutover date. Set up model drift monitoring with the cutover as a known change point so later, genuine drift doesn't hide in the migration noise.

Finally, document the crosswalk, the per-domain cutover timestamps and the known mapping losses in one place. The next person debugging an odd agent answer about a 2017 crown will need all three.

Frequently Asked Questions

These are the questions practice operators and their IT partners raise most often when scoping an Eaglesoft cutover.

Can a clinical AI read Eaglesoft's database directly?

Eaglesoft runs on SAP SQL Anywhere, so ODBC reads are technically possible. Use a read-only account, confirm your Patterson license permits third-party access, and land extracts only in storage covered by a BAA.

How long should a practice keep the legacy Eaglesoft server running?

Plan on 60 to 90 days of read-only access for reconciliation, then a retained archive for the state record-retention window, which commonly runs seven to ten years for adults and longer for minors.

Do embeddings built on Eaglesoft data need to be rebuilt after cutover?

Usually yes. Patient IDs, procedure keys and note IDs change in the new system, so re-key vectors through a crosswalk table or re-embed from the destination, or retrieval will return orphaned chunks.

Should the agent write back to Eaglesoft during dual-running?

No. Freeze agent writes to the legacy system at cutover and send every write to the destination with an idempotency key, so a retried draft note or claim never lands twice or in the wrong system.

Who needs to sign a BAA in an Eaglesoft migration?

Every party that touches the extract: the conversion vendor, the destination PMS, any storage or ETL host, and the AI vendor. A PHI extract sitting in an unscoped bucket is a reportable exposure.

Planning Your Eaglesoft Cutover

If you are scoping an Eaglesoft migration and already run clinical AI on top of the legacy database, the team at NexV builds and operates HIPAA-grade agent systems across dental PMS, imaging and claims environments every week. Reach out for a working session — we'll map which of your agents read which Eaglesoft domains, name the mapping losses you're about to hit, and leave you with a dual-running plan covering the crosswalk, the write freeze and the reconciliation evals.