CATEGORIES / DATABASES AND DATA PLATFORMS

Databases and data platforms software: how much control do you have?

Compare database access and governed data platform interfaces.

12 category vendor reviewsPermute reference includedProvider documentation, not live tenant tests

Where the reviewed products stand

Compare documented control across the named products and routes. Open a review for its plan, region and agreement (this is a selected sample).

Databases and data platforms: customer control map

0–10 on both axes · Higher and further right means more documented control

Data access and portability on the horizontal axis; build and act on the vertical axis. Exact scores and review links follow in the table. Dashed lines mark 5, not a grade threshold.BUILD WITH LIMITSMORE CUSTOMER CONTROLMORE DEPENDENCEPORTABLE, LESS EXTENSIBLE00551010Data access & portability →Build & act →Supabase Postgres: 10.0 / 9.9SUMongoDB*: 9.6 / 8.3MOMicrosoft SQL Server*: 8.9 / 8.3SSCockroachDB*: 8.1 / 4.5COElasticsearch*: 7.6 / 4.5ELNeon*: 8.9 / 5.0NEPermute*: 8.0 / 7.1PPinecone*: 7.6 / 4.5PIPlanetScale*: 8.0 / 5.0PLQdrant*: 7.6 / 4.5QDRedis*: 7.6 / 4.5RETurso*: 8.1 / 5.0TUWeaviate*: 7.6 / 4.5WE
Exact scores & review links (13)
Vendor positions
VendorData access & portabilityBuild & act
Supabase Postgres ↗10.09.9
MongoDB ↗9.6*8.3*
Microsoft SQL Server ↗8.9*8.3*
CockroachDB ↗8.1*4.5*
Elasticsearch ↗7.6*4.5*
Neon ↗8.9*5.0*
Permute ↗Publisher self-assessment8.0*7.1*
Pinecone ↗7.6*4.5*
PlanetScale ↗8.0*5.0*
Qdrant ↗7.6*4.5*
Redis ↗7.6*4.5*
Turso ↗8.1*5.0*
Weaviate ↗7.6*4.5*

Axes average three dimensions each: access, third-party access and exit horizontally; action, continuity and business logic vertically. Fixed 0–10 scale, midlines at 5 (overall grades use separate weights). * Some evidence is unresolved. Marker colors identify companies, not score bands. How to read the map ↗

Permute is included as a reference (it owns this site and is a publisher self-assessment). Its score is excluded from sample averages. Read the Permute review ↗

Direct database access and platform APIs have different boundaries. Reviews identify the assessed storage, queries and applications; category membership does not establish equivalent product scope.

Compare the six dimensions

Comparing 2 of 13 vendors
Overall control
Data access
Third-party accessibility
External action
Continuity
Data exit
Business logic and customization
Product scopes, dates & reviews

Supabase Postgres

Databases and data platforms · Checked 2026-10-12

Supabase hosted Postgres / customer SQL connections, APIs and logical exports. Self-hosting is an exit destination; hosted backup products have separate prices. Customer-operated logical replication is assessed separately from browser Realtime and managed alpha pipelines.

Read findings and sources ↗

MongoDB

Databases and data platforms · Checked 2026-10-16

Self-managed MongoDB Community replica set with native driver access, selected collections and quiesced BSON dump/restore; Atlas administration, sharded whole-project backup and retired Data API products are excluded.

Read findings and sources ↗
Customer controlSupabase Postgres ↗MongoDB ↗Microsoft SQL Server ↗CockroachDB ↗Elasticsearch ↗Neon ↗Permute ↗Pinecone ↗PlanetScale ↗Qdrant ↗Redis ↗Turso ↗Weaviate ↗
CategoryDatabases and data platformsDatabases and data platformsDatabases and data platformsDatabases and data platformsDatabases and data platformsDatabases and data platformsDatabases and data platformsDatabases and data platformsDatabases and data platformsDatabases and data platformsDatabases and data platformsDatabases and data platformsDatabases and data platforms
Overall control
Data access
Third-party accessibility
External action
Continuity
Data exit
Business logic and customization
Assessment scopeSupabase hosted Postgres / customer SQL connections, APIs and logical exports. Self-hosting is an exit destination; hosted backup products have separate prices. Customer-operated logical replication is assessed separately from browser Realtime and managed alpha pipelines.Self-managed MongoDB Community replica set with native driver access, selected collections and quiesced BSON dump/restore; Atlas administration, sharded whole-project backup and retired Data API products are excluded.Customer-administered SQL Server 2025 database using native SQL, compatible native database backup/restore and separately enabled table CDC; Azure Synapse, Fabric and server-wide migration are excluded.CockroachDB / Cloud SQL connections, table/query export and INSERT; changefeeds, database backups and complete cluster migration are excluded.Elasticsearch / selected-index search, PIT/search_after traversal and document indexing; snapshots, ingest pipelines and whole-deployment restore are excluded.Neon / Postgres branch SQL and pg_dump/pg_restore export; platform control-plane configuration, object storage and other Neon products are excluded.Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.Pinecone / serverless dense-index ID listing, vector fetch and upsert in selected namespaces; pod indexes, backups and full project migration are excluded.PlanetScale / Vitess/MySQL branch SQL through customer branch credentials; PlanetScale Postgres, control-plane API and native backup migration are excluded.Qdrant / selected collection point scroll and upsert; collection snapshots, deployment settings and full cluster migration are excluded.Redis / Redis Open Source selected-database string keys through SCAN, GET and SET; Redis Cloud control plane, non-string payloads, keyspace events and native backups are excluded.Turso / Turso Cloud SQL-over-HTTP selected database queries, mutations and SQL dump; local embedded runtime, beta change listeners and full organization migration are excluded.Weaviate / collection object traversal, selected vectors and object creation; backup restore, module configuration and full deployment migration are excluded.
Assessment checked2026-10-122026-10-162026-10-162026-10-222026-10-222026-10-222026-10-122026-10-222026-10-222026-10-222026-10-222026-10-222026-10-22
Read the findingsDetailed review ↗Detailed review ↗Detailed review ↗Detailed review ↗Detailed review ↗Detailed review ↗Detailed review ↗Detailed review ↗Detailed review ↗Detailed review ↗Detailed review ↗Detailed review ↗Detailed review ↗

Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗

Who can connect?

Credentials and approval by connection method

Yes No- Unknown

A check means the column applies to that route (customer credentials can still require provider approval). Report exports use the customer account without separate API credentials. Open a connection method for its authentication, requirements and last review date.

What each review covers

Supabase Postgres ↗

Supabase provides direct Postgres access and a documented restore path to self-hosting. Database portability is strong, but storage objects, auth settings and edge functions require separate migration work.

Supabase hosted Postgres / customer SQL connections, APIs and logical exports. Self-hosting is an exit destination; hosted backup products have separate prices. Customer-operated logical replication is assessed separately from browser Realtime and managed alpha pipelines.

Read the findings and sources ↗

MongoDB ↗

MongoDB offers customer-administered queries, writes and native scoped backup/restore. Replica-set change streams provide deletion events and resume tokens, while retained oplog history bounds recovery.

Self-managed MongoDB Community replica set with native driver access, selected collections and quiesced BSON dump/restore; Atlas administration, sharded whole-project backup and retired Data API products are excluded.

Read the findings and sources ↗

Microsoft SQL Server ↗

SQL Server provides customer-managed SQL access and native database backup/restore. Enabled CDC captures table changes, but edition eligibility, database grants and a finite LSN retention window constrain continuous extraction.

Customer-administered SQL Server 2025 database using native SQL, compatible native database backup/restore and separately enabled table CDC; Azure Synapse, Fabric and server-wide migration are excluded.

Read the findings and sources ↗

CockroachDB ↗

CockroachDB exposes SQL table queries and exports to CSV or Parquet. Exported rows do not include a complete cluster definition.

CockroachDB / Cloud SQL connections, table/query export and INSERT; changefeeds, database backups and complete cluster migration are excluded.

Read the findings and sources ↗

Elasticsearch ↗

Elasticsearch returns selected-index documents and search metadata. Default search limits do not establish complete index extraction.

Elasticsearch / selected-index search, PIT/search_after traversal and document indexing; snapshots, ingest pipelines and whole-deployment restore are excluded.

Read the findings and sources ↗

Neon ↗

Neon provides Postgres SQL access to a selected branch, database and role. Connection strings can target pooled or direct connections.

Neon / Postgres branch SQL and pg_dump/pg_restore export; platform control-plane configuration, object storage and other Neon products are excluded.

Read the findings and sources ↗

Permute ↗

Scoped APIs expose SQL reads, managed records and customer-authored operation code. Customer-built apps are supported, while complete workspace recovery, outbound CDC and minimum-plan access terms remain unresolved.

Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.

Read the findings and sources ↗

Pinecone ↗

Pinecone lists vector IDs on serverless indexes and fetches their values and metadata by ID. A list response alone is not a vector export.

Pinecone / serverless dense-index ID listing, vector fetch and upsert in selected namespaces; pod indexes, backups and full project migration are excluded.

Read the findings and sources ↗

PlanetScale ↗

PlanetScale’s Vitess product exposes a MySQL-compatible database connection scoped to a branch.

PlanetScale / Vitess/MySQL branch SQL through customer branch credentials; PlanetScale Postgres, control-plane API and native backup migration are excluded.

Read the findings and sources ↗

Qdrant ↗

Qdrant scroll returns collection point IDs and optional payloads and vectors. Vectors are excluded by default and must be requested.

Qdrant / selected collection point scroll and upsert; collection snapshots, deployment settings and full cluster migration are excluded.

Read the findings and sources ↗

Redis ↗

Redis exposes string values through GET and key identities through SCAN. This review covers string keys in one selected database.

Redis / Redis Open Source selected-database string keys through SCAN, GET and SET; Redis Cloud control plane, non-string payloads, keyspace events and native backups are excluded.

Read the findings and sources ↗

Turso ↗

Turso Cloud exposes SQL-over-HTTP operations and a database dump endpoint. Local embedded Turso and Cloud authorization are different routes.

Turso / Turso Cloud SQL-over-HTTP selected database queries, mutations and SQL dump; local embedded runtime, beta change listeners and full organization migration are excluded.

Read the findings and sources ↗

Weaviate ↗

Weaviate’s cursor API can enumerate collection objects and optionally their vectors. Multi-tenant collections require explicit traversal of tenants.

Weaviate / collection object traversal, selected vectors and object creation; backup restore, module configuration and full deployment migration are excluded.

Read the findings and sources ↗

Browse all categories ↗