Where the reviewed products stand
Compare documented control across the named products and routes. Open a review for its plan, region and agreement (this is a selected sample).
0–10 on both axes · Higher and further right means more documented control
Exact scores & review links (4)
| Vendor | Data access & portability | Build & act |
|---|---|---|
| Docusign ↗ | 4.7* | 5.7* |
| Dropbox Sign ↗ | 4.7* | 4.8* |
| PandaDoc ↗ | 4.7* | 4.5* |
| Permute ↗Publisher self-assessment | 8.0* | 7.1* |
Axes average three dimensions each: access, third-party access and exit horizontally; action, continuity and business logic vertically. Fixed 0–10 scale, midlines at 5 (overall grades use separate weights). * Some evidence is unresolved. Marker colors identify companies, not score bands. How to read the map ↗
Permute is included as a reference (it owns this site and is a publisher self-assessment). Its score is excluded from sample averages. Read the Permute review ↗
Envelope metadata, signed files, audit evidence and reusable templates are separate artifacts. A status API alone does not establish a complete agreement archive.
Compare the six dimensions
| Overall control | |
|---|---|
| Data access | |
| Third-party accessibility | |
| External action | |
| Continuity | |
| Data exit | |
| Business logic and customization | |
Product scopes, dates & reviews
Docusign
Document signing · Checked 2026-10-22
Docusign / eSignature REST v2.1 envelope metadata and envelope create/update; OAuth applications. Document bytes, authoritative-copy transfer and full agreement-platform migration are excluded.
Read findings and sources ↗Dropbox Sign
Document signing · Checked 2026-10-22
Dropbox Sign / signature-request list and send operations using a customer API key; signed-file archival and complete template migration are excluded.
Read findings and sources ↗| Customer control | Docusign ↗ | Dropbox Sign ↗ | PandaDoc ↗ | Permute ↗ |
|---|---|---|---|---|
| Category | Document signing | Document signing | Document signing | Databases and data platforms |
| Overall control | ||||
| Data access | ||||
| Third-party accessibility | ||||
| External action | ||||
| Continuity | ||||
| Data exit | ||||
| Business logic and customization | ||||
| Assessment scope | Docusign / eSignature REST v2.1 envelope metadata and envelope create/update; OAuth applications. Document bytes, authoritative-copy transfer and full agreement-platform migration are excluded. | Dropbox Sign / signature-request list and send operations using a customer API key; signed-file archival and complete template migration are excluded. | PandaDoc / document-list metadata and template-based document creation via production API keys; signed binaries and complete content-library migration are excluded. | Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed. |
| Assessment checked | 2026-10-22 | 2026-10-22 | 2026-10-22 | 2026-10-12 |
| Read the findings | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ |
Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗
Who can connect?
Yes No- Unknown
| Connection method | Customer credentials | Integrator credentials | Provider approval required |
|---|---|---|---|
| Docusign ↗ | |||
| eSignature REST v2.1 envelope metadata and envelope create/update ↗ | - | ||
| Dropbox Sign ↗ | |||
| signature-request list and send operations using a customer API key ↗ | - | ||
| PandaDoc ↗ | |||
| document-list metadata and template-based document creation via production API keys ↗ | - | ||
| Permute ↗ | |||
| Scoped customer REST / TypeScript SDK ↗ | |||
| Permissioned end-user MCP ↗ | |||
A check means the column applies to that route (customer credentials can still require provider approval). Report exports use the customer account without separate API credentials. Open a connection method for its authentication, requirements and last review date.
What each review covers
Docusign ↗
Docusign returns envelope status records. Search needs a date, envelope ID or transaction ID; older envelopes require an explicit date range.
Docusign / eSignature REST v2.1 envelope metadata and envelope create/update; OAuth applications. Document bytes, authoritative-copy transfer and full agreement-platform migration are excluded.
Dropbox Sign ↗
Dropbox Sign returns signature-request records for the account or authorized team members.
Dropbox Sign / signature-request list and send operations using a customer API key; signed-file archival and complete template migration are excluded.
PandaDoc ↗
PandaDoc exposes document metadata with lifecycle dates, status and folder filters. Document bodies require separate detail or download routes.
PandaDoc / document-list metadata and template-based document creation via production API keys; signed binaries and complete content-library migration are excluded.
Permute ↗
Scoped APIs expose SQL reads, managed records and customer-authored operation code. Customer-built apps are supported, while complete workspace recovery, outbound CDC and minimum-plan access terms remain unresolved.
Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.