Where the reviewed products stand
Compare documented control across the named products and routes. Open a review for its plan, region and agreement (this is a selected sample).
0–10 on both axes · Higher and further right means more documented control
Exact scores & review links (7)
| Vendor | Data access & portability | Build & act |
|---|---|---|
| Appsmith ↗ | 3.0* | 5.6* |
| Bubble ↗ | 7.6* | 5.0* |
| Budibase ↗ | 7.6* | 4.5* |
| Glide ↗ | 4.7* | 4.8* |
| Retool ↗ | 3.0* | 5.6* |
| Softr ↗ | 7.6* | 4.9* |
| Permute ↗Publisher self-assessment | 8.0* | 7.1* |
Axes average three dimensions each: access, third-party access and exit horizontally; action, continuity and business logic vertically. Fixed 0–10 scale, midlines at 5 (overall grades use separate weights). * Some evidence is unresolved. Marker colors identify companies, not score bands. How to read the map ↗
Permute is included as a reference (it owns this site and is a publisher self-assessment). Its score is excluded from sample averages. Read the Permute review ↗
Application definitions, stored records and connected source data have separate migration paths. An exported definition still needs a compatible runtime, credentials and resources.
Compare the six dimensions
| Overall control | |
|---|---|
| Data access | |
| Third-party accessibility | |
| External action | |
| Continuity | |
| Data exit | |
| Business logic and customization | |
Product scopes, dates & reviews
Appsmith
App builders · Checked 2026-10-22
Appsmith / Git versioning of application definitions; backing database records, credentials, package licensing and full instance migration are excluded.
Read findings and sources ↗Bubble
App builders · Checked 2026-10-22
Bubble / Data API for explicitly exposed application data types; Workflow API, file payloads and native app-definition migration are excluded.
Read findings and sources ↗| Customer control | Appsmith ↗ | Bubble ↗ | Budibase ↗ | Glide ↗ | Retool ↗ | Softr ↗ | Permute ↗ |
|---|---|---|---|---|---|---|---|
| Category | App builders | App builders | App builders | App builders | App builders | App builders | Databases and data platforms |
| Overall control | |||||||
| Data access | |||||||
| Third-party accessibility | |||||||
| External action | |||||||
| Continuity | |||||||
| Data exit | |||||||
| Business logic and customization | |||||||
| Assessment scope | Appsmith / Git versioning of application definitions; backing database records, credentials, package licensing and full instance migration are excluded. | Bubble / Data API for explicitly exposed application data types; Workflow API, file payloads and native app-definition migration are excluded. | Budibase / Public API selected-table row search and creation; app/workspace exports, attachment bytes and external database replication are excluded. | Glide / Glide API v2 Big Table rows and row insertion; ordinary Glide Tables, computed-column parity, app layouts and full workspace migration are excluded. | Retool / manual Classic App definition export and import; new app-builder projects, resource credentials, Retool Database and whole-organization migration are excluded. | Softr / native Softr Database table records and record creation; app layouts, external data sources and complete workspace restore are excluded. | Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed. |
| Assessment checked | 2026-10-22 | 2026-10-22 | 2026-10-22 | 2026-10-22 | 2026-10-22 | 2026-10-22 | 2026-10-12 |
| Read the findings | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ |
Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗
Who can connect?
Yes No- Unknown
A check means the column applies to that route (customer credentials can still require provider approval). Report exports use the customer account without separate API credentials. Open a connection method for its authentication, requirements and last review date.
What each review covers
Appsmith ↗
Appsmith can version application definitions in a customer-selected Git repository. This assesses app definitions, separately from the data queried by the app.
Appsmith / Git versioning of application definitions; backing database records, credentials, package licensing and full instance migration are excluded.
Bubble ↗
Bubble can expose selected app data types through its Data API. Unchecked types stay unavailable, and privacy rules constrain user-authenticated access.
Bubble / Data API for explicitly exposed application data types; Workflow API, file payloads and native app-definition migration are excluded.
Budibase ↗
Budibase’s public API returns rows from a selected table. Development and published workspace IDs select different environments.
Budibase / Public API selected-table row search and creation; app/workspace exports, attachment bytes and external database replication are excluded.
Glide ↗
Glide API v2 operates only on Big Tables and remains in Public Beta. Other data-source types cannot use this route.
Glide / Glide API v2 Big Table rows and row insertion; ordinary Glide Tables, computed-column parity, app layouts and full workspace migration are excluded.
Retool ↗
Retool Classic Apps export queries, components and modules as JSON or a Toolscript archive. The export excludes resources.
Retool / manual Classic App definition export and import; new app-builder projects, resource credentials, Retool Database and whole-organization migration are excluded.
Softr ↗
Softr’s Database API exposes tables and records in authorized workspaces. Record fields use IDs by default; names can be requested for responses.
Softr / native Softr Database table records and record creation; app layouts, external data sources and complete workspace restore are excluded.
Permute ↗
Scoped APIs expose SQL reads, managed records and customer-authored operation code. Customer-built apps are supported, while complete workspace recovery, outbound CDC and minimum-plan access terms remain unresolved.
Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.