Where the reviewed products stand
Compare documented control across the named products and routes. Open a review for its plan, region and agreement (this is a selected sample).
0–10 on both axes · Higher and further right means more documented control
Exact scores & review links (12)
| Vendor | Data access & portability | Build & act |
|---|---|---|
| Fireflies.ai ↗ | 8.2* | 4.8* |
| Granola ↗ | 7.4* | 4.1* |
| Slack ↗ | 6.5* | 4.0* |
| Microsoft Teams ↗ | 7.6* | 4.9* |
| Twilio SendGrid ↗ | 4.7* | 4.8* |
| Twilio ↗ | 7.6* | 3.5* |
| Aircall ↗ | 6.2* | 5.9* |
| Calendly ↗ | 8.2* | 4.6* |
| Dialpad ↗ | 6.7* | 5.6* |
| Postmark ↗ | 7.6* | 4.5* |
| Zoom ↗ | 7.5* | 5.0* |
| Permute ↗Publisher self-assessment | 8.0* | 7.1* |
Axes average three dimensions each: access, third-party access and exit horizontally; action, continuity and business logic vertically. Fixed 0–10 scale, midlines at 5 (overall grades use separate weights). * Some evidence is unresolved. Marker colors identify companies, not score bands. How to read the map ↗
Permute is included as a reference (it owns this site and is a publisher self-assessment). Its score is excluded from sample averages. Read the Permute review ↗
Messages, email contacts and meeting transcripts are different record types. Each review limits export and write findings to its declared objects.
Compare the six dimensions
| Overall control | |
|---|---|
| Data access | |
| Third-party accessibility | |
| External action | |
| Continuity | |
| Data exit | |
| Business logic and customization | |
Product scopes, dates & reviews
Fireflies.ai
Communications and meetings · Checked 2026-10-12
Fireflies / customer API key, transcript GraphQL queries, audio-upload mutation and Webhooks V2. Live transcription and enterprise administration have separate limits.
Read findings and sources ↗Granola
Communications and meetings · Checked 2026-10-12
Granola / Business note API, note-reading MCP tools and personal CSV export. Enterprise sharing controls and privately held notes have separate boundaries.
Read findings and sources ↗| Customer control | Fireflies.ai ↗ | Granola ↗ | Slack ↗ | Microsoft Teams ↗ | Twilio SendGrid ↗ | Twilio ↗ | Aircall ↗ | Calendly ↗ | Dialpad ↗ | Postmark ↗ | Zoom ↗ | Permute ↗ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Category | Communications and meetings | Communications and meetings | Communications and meetings | Communications and meetings | Communications and meetings | Communications and meetings | Communications and meetings | Communications and meetings | Communications and meetings | Communications and meetings | Communications and meetings | Databases and data platforms |
| Overall control | ||||||||||||
| Data access | ||||||||||||
| Third-party accessibility | ||||||||||||
| External action | ||||||||||||
| Continuity | ||||||||||||
| Data exit | ||||||||||||
| Business logic and customization | ||||||||||||
| Assessment scope | Fireflies / customer API key, transcript GraphQL queries, audio-upload mutation and Webhooks V2. Live transcription and enterprise administration have separate limits. | Granola / Business note API, note-reading MCP tools and personal CSV export. Enterprise sharing controls and privately held notes have separate boundaries. | Slack / permission-scoped conversation APIs and app-authored writes, Events API, and owner public-channel JSON download. Commercial third-party apps use Marketplace distribution; private-conversation Discovery exports require separate entitlement. | Microsoft Teams / Microsoft Graph v1.0 channel messages and replies, delegated channel posting and channel-message subscriptions; tenant-wide Export APIs and migration-mode writes are separate. | Twilio SendGrid v3 Marketing Contacts export/upsert and Email API Event Webhook; inbound Parse, legacy Marketing APIs and Twilio Programmable Messaging are separate. | Twilio Programmable Messaging message records and US1 Bulk Export; customer-authorized Connect Apps are a separate delegated route with service limitations. | Aircall / shared-contact REST API list/create/update and contact webhooks; customer-private Basic authentication and approved partner OAuth have distinct eligibility. Call content and recordings are excluded. | Calendly / OAuth or customer personal-token scheduled-event lists, event cancellation and paid invitee webhooks. Scheduling creation, enterprise deletion APIs and native workflow migration are excluded. | Dialpad / company shared-contact REST v2 list/create/update and contact events through a company-admin key; third-party OAuth registration is assessed separately. Call recordings, SMS and local-user contacts are excluded. | Postmark / outbound message metadata search and email send for a selected server/message stream; inbound messages, binary attachments and complete mail archive are excluded. | Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded. | Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed. |
| Assessment checked | 2026-10-12 | 2026-10-12 | 2026-10-16 | 2026-10-16 | 2026-10-16 | 2026-10-16 | 2026-10-22 | 2026-10-22 | 2026-10-22 | 2026-10-22 | 2026-10-22 | 2026-10-12 |
| Read the findings | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ |
Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗
Who can connect?
Yes No- Unknown
A check means the column applies to that route (customer credentials can still require provider approval). Report exports use the customer account without separate API credentials. Open a connection method for its authentication, requirements and last review date.
What each review covers
Fireflies.ai ↗
Fireflies provides structured transcripts and selected meeting actions through GraphQL. Daily quotas on Free and Pro can matter more than the advertised per-minute burst rate.
Fireflies / customer API key, transcript GraphQL queries, audio-upload mutation and Webhooks V2. Live transcription and enterprise administration have separate limits.
Granola ↗
Granola now exposes scoped API keys and note-reading MCP tools. Its historical export is personal, not a company-wide backup, and excludes some note states.
Granola / Business note API, note-reading MCP tools and personal CSV export. Enterprise sharing controls and privately held notes have separate boundaries.
Slack ↗
Slack provides scoped conversation access under express downstream-use restrictions. An ordinary commercial app cannot bulk export message/file data without an additional agreement.
Slack / permission-scoped conversation APIs and app-authored writes, Events API, and owner public-channel JSON download. Commercial third-party apps use Marketplace distribution; private-conversation Discovery exports require separate entitlement.
Microsoft Teams ↗
Teams exposes channel messages through Microsoft Graph with explicit consent boundaries. Root messages and replies must both be traversed, and change notifications can be lost after bounded delivery recovery.
Microsoft Teams / Microsoft Graph v1.0 channel messages and replies, delegated channel posting and channel-message subscriptions; tenant-wide Export APIs and migration-mode writes are separate.
Twilio SendGrid ↗
SendGrid provides downloadable contact exports and asynchronous contact upserts. Its Event Webhook reports email activity with delivery retries up to 24 hours, which does not establish contact-record CDC.
Twilio SendGrid v3 Marketing Contacts export/upsert and Email API Event Webhook; inbound Parse, legacy Marketing APIs and Twilio Programmable Messaging are separate.
Twilio ↗
Twilio exposes message records and compressed daily activity exports. Connect Apps let customers authorize scoped read or billable actions, while bulk files and message status updates have different recovery boundaries.
Twilio Programmable Messaging message records and US1 Bulk Export; customer-authorized Connect Apps are a separate delegated route with service limitations.
Aircall ↗
Aircall exposes shared-contact records and change events. Collection scans have a 10,000-record pagination ceiling and need creation-date windows for larger sets.
Aircall / shared-contact REST API list/create/update and contact webhooks; customer-private Basic authentication and approved partner OAuth have distinct eligibility. Call content and recordings are excluded.
Calendly ↗
Calendly exposes scheduled events on Free and paid plans. Webhooks require a paid subscription and stop after a bounded delivery-failure window.
Calendly / OAuth or customer personal-token scheduled-event lists, event cancellation and paid invitee webhooks. Scheduling creation, enterprise deletion APIs and native workflow migration are excluded.
Dialpad ↗
Dialpad exposes shared contacts and contact change events. Company administrators control direct keys; multi-customer OAuth requires application registration with Dialpad.
Dialpad / company shared-contact REST v2 list/create/update and contact events through a company-admin key; third-party OAuth registration is assessed separately. Call recordings, SMS and local-user contacts are excluded.
Postmark ↗
Postmark returns outbound message metadata from the selected server and stream. The search interface is a bounded operational view, not a permanent mail archive.
Postmark / outbound message metadata search and email send for a selected server/message stream; inbound messages, binary attachments and complete mail archive are excluded.
Zoom ↗
Zoom provides meeting APIs and customer OAuth grants. Public distribution adds a review gate, and meeting records do not constitute a recording archive.
Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.
Permute ↗
Scoped APIs expose SQL reads, managed records and customer-authored operation code. Customer-built apps are supported, while complete workspace recovery, outbound CDC and minimum-plan access terms remain unresolved.
Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.