How to export your data from WordPress VIP: what you can take out and what you cannot
A team leaving WordPress VIP at renewal or termination needs to know what it can take with it. Full database backups can be downloaded from the VIP Dashboard or with the VIP-CLI command export sql, and the GPL code for the site lives in the customer's GitHub repository, which VIP supplies for every application. Those two sources cover the content and the code, but they are separate exports with separate handling, and neither is a complete copy of the platform.
The database export holds posts, pages, options, users and most of the content, but media files are not in it. Uploaded images and documents need to be pulled from the storage VIP serves them from, and the URLs in the database must be rewritten once the media lives on the new host. The repository holds the themes, plugins and any custom code, but it does not hold the infrastructure configuration that VIP applied on your behalf. Confirm with VIP which environment variables, object cache settings and edge rules the site relies on, since those must be recreated by hand.
Before you rely on a backup, decide which environment you are exporting and when. The VIP Dashboard keeps hourly backups of a production environment available for download for the most recent 72 hours, with daily backups beyond that, so an export taken near the end of your contract is the one to plan around. Ask VIP in writing for the retention on your account and for a final export window, and keep a dated copy of each dump outside the platform. Test a restore of the database into a staging environment on your own infrastructure before the contract ends. VIP-specific services do not transfer. Caching, the CDN, VIP-managed plugins, the vendor's security response and the support channel all stop when the contract ends, so each one needs a replacement or a documented owner. Ask your team to list every service the site depends on today and mark which ones have an open-source or self-hosted equivalent. That list, together with the database dump, the media copy and the repository, is the basis for the migration plan.
Which WordPress VIP data you can export and how
This table lists each data type you need to move off WordPress VIP, the method and format for exporting it, and the limits that apply. Read it as a checklist: the database, code, media and configuration each come from a different place, and missing any one of them leaves the new site incomplete.
| Data type | Export method | Format and limits |
|---|---|---|
| Full database | Download from the VIP Dashboard application view, or run export sql with VIP-CLI | SQL dump. Automatic backups run for all environments. Hourly production backups are downloadable for the most recent 72 hours, with daily backups kept beyond that. |
| Application code | Clone the GitHub repository that VIP supplies for every application | Git repository with themes, plugins and custom code. Confirm you hold access to the repository and the full commit history before you start. |
| Uploaded media | Collect from the environment storage path; confirm the exact path and access method with VIP support | Files in the uploads directory. Media is not contained in the SQL dump, so plan a separate copy and check file counts. |
| Configuration and secrets | Document from the VIP environment settings, wp-config values and any VIP-managed services in use | Environment variables, salts, keys and service credentials. These are not in the database or repository and must be recreated on your own servers. |
| Backup retention window | Plan your cutover and copy date against the 72-hour hourly window | Anything older than the hourly window is available only as a daily backup, so older point-in-time states may be coarser. |
| Database engine and version | Check the dump header and your target stack before import | WordPress recommends MariaDB 10.11 or greater or MySQL 8.0 or greater, and PHP 8.3 or greater. |
How long VIP backups stay available and how to plan around the window
How long are WordPress VIP database backups available to download?
Hourly backups of a production environment are available for download for the most recent three days, which is 72 hours. Beyond that window, daily backups remain available. Backups are run automatically for all WordPress environments and can be viewed and downloaded in the application view of the VIP Dashboard. Treat the 72-hour hourly window as the short-term safety net and the daily set as the longer history you can still pull. Check the current retention in the VIP database backup documentation before you set any date, because the window is the constraint your cutover plan has to respect.
Should I choose my VIP cutover date based on the backup window?
Yes. The backup window is a fixed input to the cutover date, so plan backwards from it. Pick a switch date that leaves room to download, verify and restore a full export before any hourly backups you might need roll out of the 72-hour window. Build in time for a dry-run restore on your new host, DNS and TLS changes, and a rollback path. The exact duration of that work depends on database size, your hosting setup and who performs the restore, so estimate it against your own environment rather than a generic figure.
Why should I take a fresh full export shortly before the final switch?
A fresh full export captures the content published up to the moment you stop writing to VIP, so editors do not lose posts, comments, or settings made after an older backup was taken. Any export taken weeks earlier will miss recent changes. Plan a content freeze for the final window, run the export as close to it as practical, verify the file, and then import it on the new host. Repeat the delta check on the day of the switch, because a backup taken days earlier leaves a gap that editors may not notice until after launch.
Can I pull backups from more than one VIP environment?
Yes, but each environment has its own backup set, so you need to confirm that every environment you depend on is covered. Production is usually the priority, but staging, development and any separate sites in your VIP account may hold content, customizations or test data your team still needs. Inventory each environment, confirm which ones have backups in the VIP Dashboard, and record which download corresponds to which environment and date. Ask VIP to confirm retention for each one, since the policy you read for production may not describe every environment.
How do I confirm backup retention with VIP before the contract ends?
Ask VIP in writing for the current retention period for hourly and daily backups on each environment, and for what happens to backups after the contract ends or the environment is decommissioned. Request a written answer and keep it with the migration record. Confirm whether you can still access the VIP Dashboard and VIP-CLI during the exit period, and whether any backups will be deleted at termination. Ask about the export command, which is export sql through VIP-CLI, and whether it works for every environment you need.
Do database backups cover my media files and code?
No. A database export contains posts, pages, settings, users and metadata, but it does not include uploaded media files, the theme and plugin code, or your VIP configuration. Media lives in object storage that you must copy separately, and code comes from the GitHub repository VIP provides for each application. Plan a separate transfer for each, verify that the media URLs and paths match the new host, and make sure the repository is complete before you rely on the database alone.
Is it safer to start the move early and keep VIP running?
Usually yes, because running a parallel environment gives you a working target and a fallback. Keeping VIP live until the new site passes checks reduces the pressure on the 72-hour window. Parallel running costs more while both environments are billed, so weigh that against the risk of losing recent content. Confirm your VIP contract terms for the overlap period, and agree with your team which environment is authoritative on each day of the cutover.
What does not come out of the database backup
A VIP database export carries posts, options and settings, but the rest of a working site lives elsewhere. The cards below cover the parts that sit outside the database or are not documented as exportable, and the workaround for each. Check every item against your own environment before you set a cutover date.
Uploaded media files
The database holds references to attachments, not the image, PDF or video files themselves. Copy the uploads directory from the VIP environment, or request a full copy of the media library through VIP support, and confirm the file count and total size match the attachment records in the export. Then check that the URLs stored in post content still resolve on the new host, since many sites hard-code the old domain. Expect a search-and-replace step on the database.
VIP platform configuration
Environment variables, domain mappings, redirects and cron schedules are set through the VIP platform rather than stored in the database. Record every value from the dashboard and your repository configuration before the environment is shut down. Anything not in your repository, such as secrets and scheduled jobs, must be recreated in your own deployment tooling. Ask VIP which of these are exportable in your contract.
Caching and edge rules
Page caching, object caching and cache purge rules run on VIP's container and CDN layer. None of this travels with the database. Document the cache exclusions, query string handling and purge triggers your site relies on, then choose replacements such as a page cache plugin, a reverse proxy and a CDN. Test logged-in users, cart or form pages and personalized content, since those are where caching mistakes appear first.
VIP-managed plugins and licenses
Some plugins loaded on VIP are provided by VIP or by third-party vendors under contracts tied to the platform. Inventory every plugin in the code repository, then mark which ones are GPL, which are proprietary and which exist only because VIP supplies them. Proprietary plugins need a new license for your own servers, and any functionality depending on a VIP-only service must be replaced or dropped.
Monitoring and alerting setup
Uptime checks, error alerts and performance dashboards configured for your environments are not part of the database export. Export the alert definitions you have access to, list the recipients and escalation paths, and recreate them in your monitoring stack before traffic moves. Ask VIP for the history of incidents and the logs you can retain, since those may not be available after the environment closes.
Access roles and admin accounts
WordPress user accounts and roles are stored in the database, but the people who could reach the VIP Dashboard, the GitHub repository and the deploy pipeline are controlled separately. Map who holds each role, remove dormant accounts, and reissue credentials on the new platform. Rotate any password hashes, API keys and application secrets that were stored in the environment, because they should be treated as exposed once the platform changes hands.
Why the GPL code is yours to keep but still has to be moved
WordPress core is released under GPLv2 or later, and the WordPress project treats plugins and themes as derivative works that must also be GPL. That means the core code, your custom themes and your custom plugins can be run on infrastructure you control without a license fee to WordPress. The licensing question is settled in your favor, but the code is not the same thing as your site. Your content, media files, user accounts, settings and the database state that ties them together still live in the environment VIP runs for you, and they have to be pulled out and reassembled on your side. Start by treating the GitHub repository that VIP provides for each application as the source of truth for code, and confirm that it holds every theme, custom plugin, mu-plugin and configuration file that actually runs in production, not just a subset.
Not every plugin in a VIP application is necessarily yours or freely licensed. VIP may supply proprietary or premium plugins, and those can carry their own license terms, redistribution limits or activation rules that do not follow the GPL. Build an inventory that lists each plugin and theme, its author, its license and whether it is vendored into the repository or loaded from elsewhere. For each item marked as proprietary, check the license text yourself and confirm with the vendor whether you may run it on your own hosting, under which account, and whether it needs a license key that VIP was handling for you. Do not assume a plugin that appears in the codebase is cleared for reuse.
Once the code inventory is complete, confirm that the repository, the database export and the media files describe the same site version. A repository commit that does not match the running code, or a plugin updated through a platform process and never committed, will leave you debugging a site that looks correct on paper and breaks in production. Record the commit that corresponds to the database export you take, and keep the list of licensed components alongside it so the handover to your own hosting team, or to a partner, starts from a verified baseline rather than from memory.
The sequence for a complete WordPress VIP export
This sequence turns a VIP-hosted site into a complete, verified copy on infrastructure you control, with code, database, media and configuration each accounted for before cutover. It is the order in which the work should happen so nothing is lost in the handover.
Inventory plugins, themes, media and integrations
Your team lists every active plugin, theme, must-use plugin, custom mu-plugin, scheduled task, third-party integration (payment, forms, search, CRM connectors, embeds) and external service the site calls. Note the version of each and whether it is licensed or proprietary, since commercial plugins need their own licenses on the new host. The step is done when the list is reviewed by the site owner and the engineering lead, and every item has an owner and a target replacement or a decision to keep it.
Clone the GitHub repository
Your engineering team clones the GitHub repository that WordPress VIP provides for the application, including all branches and tags in use, so the custom code and theme history move with the site. Confirm that the repository contains the WordPress core version pinned by the platform, your custom plugins and themes, and the configuration files you rely on. Record the commit hash running in production. The step is done when a local clone matches that production commit and the team can build the site from it.
Download a fresh full database backup
Download a new full database backup from the application view of the VIP Dashboard, or run the export sql command with VIP-CLI against the production environment. Take the backup as close to cutover as practical so content changes made after the first copy are included, and check the backup timestamp in the dashboard. Store the file with checksums in restricted storage. The step is done when the file opens without errors and its size and timestamp match what the dashboard or CLI reports.
Collect media and configuration
Copy the uploads directory and any media that sits outside the database or repository, including files served from external object storage or a CDN origin. Export the configuration your site depends on: environment variables and secrets (stored in your own secrets manager, not in the repository), redirect rules, cron jobs, DNS and certificate records, email sending settings and search index settings. Confirm the media file count and total size against the production source. The step is done when every media file is present in your storage and every configuration item has a documented new home.
Restore to a staging environment on the target stack
Build a staging environment on your target infrastructure using a PHP version that the WordPress requirements page currently recommends, and MariaDB or MySQL versions the same page lists as supported. Restore the database, deploy the cloned code and attach the media. Confirm the versions against the requirements page at the time of the restore, since the minimums change with WordPress releases. The step is done when the staging site starts, the admin login works and no fatal errors appear in the PHP and web server logs.
Verify record counts, URLs and integrations
Compare post, page, user, comment and term counts between production and staging, and check that internal links, image and media URLs, and canonical URLs resolve correctly after any domain or path change. Submit test forms, confirm that search and embedded third-party content work, and check that scheduled tasks run and produce the expected output. Note any mismatch in a defect log with an owner. The step is done when the counts match or each difference has an explained cause, and each form and scheduled task has passed a documented test.
Confirm the restored site loads before cutover
Run a final smoke test on staging that loads the main templates, key landing pages, the editorial dashboard and a sample of archive and media pages from a browser on a separate network. Confirm that caching, TLS and monitoring are active on the new stack, and that a fresh backup schedule is set. Keep the VIP site running until the staging sign-off is recorded. The step is done when the site owner signs off in writing and the rollback path to the VIP environment is documented and tested.
What to plan before the VIP contract ends
The export itself is the easy part. The decisions that shape it are when to cut over, which PHP and database versions the target will run, which WordPress release line to adopt, what VIP will keep and for how long, and whether WordPress is the right CMS at all. Settle these before the renewal or termination date forces a choice.
Cutover date and the 72-hour window
VIP keeps hourly backups of production available for download for the most recent three days, with daily backups beyond that. Plan the final export to fall inside that hourly window so you can recover a precise state if the cutover slips. Schedule a content freeze, announce it to editors, and run a fresh export on the day of cutover rather than relying on an older file.
Target PHP and database versions
WordPress.org recommends PHP 8.3 or greater and MariaDB 10.11 or greater, or MySQL 8.0 or greater. Your current VIP code may depend on runtime behavior or extensions that differ on a self-hosted stack. Run the codebase against the target versions in a staging environment before cutover, and confirm the exact PHP build and extensions with your host or your own platform team.
Current WordPress release line
WordPress 7.1 was released on August 19, 2026, and 7.1.3 followed on October 6, 2026. Only the most recent release in a series is actively maintained, so pin your target to the latest 7.1 point release at build time and confirm with your team which series you will follow after cutover. Check the release archive again on the day you build, because newer releases may have shipped.
VIP data retention and access timeline
Ask VIP in writing how long your environments, backups and repository access remain available after the contract end date, and whether any access is read-only. Confirm the date after which hourly and daily backups stop being downloadable, and whether VIP will provide a final full export on request. Record the answers in your cutover plan so the deadline is not discovered during the migration.
Stay on WordPress or move CMS
The export gives you the same GPL code and content whether you stay on WordPress or move elsewhere, but the work differs. Staying means rebuilding VIP-managed hosting, caching, and deploys. Moving to Drupal means rebuilding themes and plugins as modules and remapping roles. Decide this before you export, because it determines whether the database dump is the final artifact or only an input to a content migration.
Questions teams ask before exporting from WordPress VIP
How much effort does exporting from WordPress VIP take?
The database export itself is a download step, but the total effort depends on what sits around it. The main drivers are site size, the number of environments you need to reproduce (production, staging, development), how many custom plugins and themes you run, and the media volume that has to move with the database. Each custom plugin needs a decision on whether it is kept, rewritten or dropped, and each environment needs its own check. Ask any partner for a written scope that lists these items individually, since a quote built on a single flat estimate hides the largest variables.
Can an internal team export from WordPress VIP on its own?
Often yes, for the database and code, if the team already administers WordPress and has access to the VIP Dashboard and the project's GitHub repository. The harder parts are usually media, configuration that lives in the platform rather than the code, and rebuilding services VIP provided, such as edge caching, monitoring and backups. Teams without that operational experience typically bring in a partner for the cutover and the post-move runbook. Confirm internally who will own the target environment after the export before deciding.
What access does the export need from my team?
You need a user in the VIP Dashboard who can view the application and download backups, and rights to the GitHub repository that VIP supplies for each application. You also need a staging target where the export can be restored and tested, plus someone who can approve changes to DNS, media storage and email routing. Keep a written rollback plan that states how to return traffic to VIP if the restored site fails checks. Confirm the exact role names and repository permissions with WordPress VIP, since they can change.
How long is the export window in practice?
WordPress VIP makes hourly backups of a production environment available for download for the most recent three days (72 hours), and daily backups are available beyond that. Plan your snapshot around that retention: pick a backup that matches the content freeze you agree with editors, and download it well before the window closes. Restoring, testing and cutting over take longer than the download and depend on your target environment, so ask for a timeline in writing that separates these phases.
Is a database export alone enough to leave WordPress VIP?
No. A full database backup holds posts, pages, users, options and most settings, but it does not contain the theme and plugin code, which lives in the GitHub repository, or the uploaded media files, which must be copied separately. Environment configuration, scheduled jobs, caching rules, redirects set at the edge, and third-party service keys also need to be recorded and rebuilt. Treat the database as one of several inputs and make a checklist that covers code, media, configuration and secrets before you start.
Do WordPress updates and licensing change after leaving VIP?
WordPress is released under GPLv2 or later, so the core software you run after leaving VIP is the same open-source code. What changes is who applies updates and checks them. WordPress applies automatic major release updates by default on sites created since WordPress 5.6, but plugins and themes receive automatic updates only in special cases that the WordPress.org API controls. Your team must plan patching for plugins and themes, and check the current version and PHP and database requirements with the WordPress.org requirements page before selecting a host.
What should I ask for in a written quote for this export?
Ask for a fixed scope that names each application, environment, plugin, theme and media set in scope, along with the deliverables: a restored and tested target, a runbook, a rollback procedure and handover notes. Request a timeline by phase and a list of client inputs, such as access grants and decisions you must make. Ask which items are one-time and which recur, such as hosting, backups and patching. DeployOpen works from a written scope and does not publish a price list, so the quote follows from that document.
Choosing the next step after the export
After the export, the team has to decide whether to keep running the same WordPress code on infrastructure it controls or to move the content to a different open-source CMS. The choice sets the amount of work. Staying on WordPress keeps the theme, custom plugins and content model largely intact, so the effort centers on replacing what VIP provided: hosting, edge caching, media storage, backups, patching and code review. Moving to another CMS means the export becomes an input to a content migration, with schema mapping, theme rebuilds and editorial role redesign.
Before choosing, confirm which parts of your VIP environment you actually depend on. Check the plugins and mu-plugins in your GitHub repository, the PHP and database versions your code requires, and whether any VIP-specific functions or caching behavior appear in the code. Ask your team how many people publish, what workflows they rely on, and whether multisite or multiple languages are in use. Those answers decide whether a like-for-like move is a bounded project or a rebuild. The WordPress license page explains that plugins and themes you carry forward remain subject to the GPL, which matters if you plan to change or redistribute them.
For the step-by-step work on running WordPress yourself, read the guide on moving from WordPress VIP to self-hosted WordPress. For a move to Drupal, read the guide on migrating from WordPress VIP to Drupal, which covers rebuilding themes and custom plugins as Drupal modules. Use this exported data as the input to either path, and treat the choice as a scoping decision that you make with written requirements and a clear owner for the platform after go-live.
How DeployOpen works on this
DeployOpen approaches a WordPress VIP export as a fixed-scope piece of work inside your own infrastructure. We agree in writing which backups, media, code and configuration move, how they are checked, and who holds each piece once the export is complete.
How we scope
- Inventory every VIP environment, database backup source and media location before any work starts
- Agree in writing which backup window, file set and repository state the export will cover
- Confirm with your team which backups are still within the VIP retention window at scoping
How we build
- Set up a restore target on infrastructure you control to test the downloaded database dump
- Map media files, plugins, themes and configuration from the export into the self-hosted layout
- Test the restored site against the original, comparing content, URLs and user accounts
How we hand over
- Deliver a written runbook covering each export step, file location and verification result
- Document which VIP-managed services need replacements, so no gap is left after cutover
- Transfer access, copies and records to your team, with a clear list of what was removed
How we support
- Offer ongoing support, upgrades and continuous testing as a retainer after handover
- Keep the export procedure repeatable so you can refresh a copy before decommissioning VIP
- Confirm the support terms and response expectations in the written scope before work begins

