Where the reviewed products stand
Compare documented control across the named products and routes. Open a review for its plan, region and agreement (this is a selected sample).
0–10 on both axes · Higher and further right means more documented control
Exact scores & review links (12)
| Vendor | Data access & portability | Build & act |
|---|---|---|
| Acumatica ↗ | 7.7* | 4.6* |
| Oracle NetSuite ↗ | 7.1* | 5.4* |
| Odoo ↗ | 7.3* | 5.1* |
| JD Edwards EnterpriseOne ↗ | 7.7* | 5.6* |
| Oracle PeopleSoft ↗ | 7.7* | 3.6* |
| Microsoft Dynamics 365 Business Central ↗ | 7.6* | 4.4* |
| SAP Business One ↗ | 4.7* | 4.2* |
| SAP S/4HANA Cloud Public Edition ↗ | 4.7* | 4.2* |
| Oracle Fusion Cloud Financials ↗ | 4.7* | 4.2* |
| IFS Cloud ↗ | 7.7* | 4.1* |
| Microsoft Dynamics 365 Finance ↗ | 7.6* | 7.0* |
| Permute ↗Publisher self-assessment | 8.0* | 7.1* |
Axes average three dimensions each: access, third-party access and exit horizontally; action, continuity and business logic vertically. Fixed 0–10 scale, midlines at 5 (overall grades use separate weights). * Some evidence is unresolved. Marker colors identify companies, not score bands. How to read the map ↗
Permute is included as a reference (it owns this site and is a publisher self-assessment). Its score is excluded from sample averages. Read the Permute review ↗
Deployment, modules and customer permissions constrain ERP access. Reviews cover documented routes rather than assuming every module or custom extension can be restored.
Compare the six dimensions
| Overall control | |
|---|---|
| Data access | |
| Third-party accessibility | |
| External action | |
| Continuity | |
| Data exit | |
| Business logic and customization | |
Product scopes, dates & reviews
Acumatica
ERP · Checked 2026-10-12
Acumatica / customer-instance contract REST API, custom fields and workflow actions. License-specific capacity is retained instead of assuming one hosted-plan quota.
Read findings and sources ↗Oracle NetSuite
ERP · Checked 2026-10-12
NetSuite / customer SuiteTalk REST and SuiteQL plus separately licensed SuiteAnalytics Connect. Small Business accounts and distributed SuiteApps have different entitlements.
Read findings and sources ↗| Customer control | Acumatica ↗ | Oracle NetSuite ↗ | Odoo ↗ | JD Edwards EnterpriseOne ↗ | Oracle PeopleSoft ↗ | Microsoft Dynamics 365 Business Central ↗ | SAP Business One ↗ | SAP S/4HANA Cloud Public Edition ↗ | Oracle Fusion Cloud Financials ↗ | IFS Cloud ↗ | Microsoft Dynamics 365 Finance ↗ | Permute ↗ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Category | ERP | ERP | ERP | ERP | ERP | ERP | ERP | ERP | ERP | ERP | ERP | Databases and data platforms |
| Overall control | ||||||||||||
| Data access | ||||||||||||
| Third-party accessibility | ||||||||||||
| External action | ||||||||||||
| Continuity | ||||||||||||
| Data exit | ||||||||||||
| Business logic and customization | ||||||||||||
| Assessment scope | Acumatica / customer-instance contract REST API, custom fields and workflow actions. License-specific capacity is retained instead of assuming one hosted-plan quota. | NetSuite / customer SuiteTalk REST and SuiteQL plus separately licensed SuiteAnalytics Connect. Small Business accounts and distributed SuiteApps have different entitlements. | Odoo Online / Custom-plan external JSON-2/RPC access and downloadable database backups. Self-hosted Community and Odoo.sh module capabilities are not blended into this SaaS grade. | JD Edwards EnterpriseOne 9.2 / customer-installed AIS Data/Form Services and export orchestration. Contract answers cover US orders incorporating Oracle’s US Schedule P; World and Fusion are excluded. | PeopleSoft / PeopleTools QAS query services, customer-configured Integration Broker identity and the separately licensed Expenses wallet-entry operation. Contract answers cover US orders incorporating Oracle’s US Schedule P. | Microsoft Dynamics 365 Business Central online API v2.0 / company-scoped customers through Microsoft Entra service-to-service grants and supported webhooks; other Dynamics products are excluded. | SAP Business One 10.0 Service Layer OData v4: customer-managed company session, business-object collections and writes; direct SQL replication and complete ERP database restore are excluded. | SAP S/4HANA Cloud Public Edition 2608 Sales Order (A2X, OData V2), configured communication arrangement and supported sales-order entities; Private Edition, on-premises and whole-ERP migration are excluded. | Oracle Fusion Cloud Financials 26A REST invoice resources and authenticated customer service user; Fusion HCM, EPM, BICC extracts and complete account migration are excluded. | IFS Cloud 26R1 customer-authorized OData projections, selected entity sets and operations; entity APIs, direct database BI views and complete tenant restore are separate routes. | Dynamics 365 Finance public OData data entities, customer-registered Entra service application and separately enabled data events; BYOD, Dataverse virtual entities and legacy AX interfaces are excluded. | Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed. |
| Assessment checked | 2026-10-12 | 2026-10-12 | 2026-10-12 | 2026-10-12 | 2026-10-12 | 2026-10-16 | 2026-10-16 | 2026-10-16 | 2026-10-16 | 2026-10-16 | 2026-10-16 | 2026-10-12 |
| Read the findings | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ |
Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗
Who can connect?
Yes No- Unknown
A check means the column applies to that route (customer credentials can still require provider approval). Report exports use the customer account without separate API credentials. Open a connection method for its authentication, requirements and last review date.
What each review covers
Acumatica ↗
Acumatica exposes contract REST interfaces and custom workflow actions. Integration capacity is licensed per instance and shown in customer monitoring screens.
Acumatica / customer-instance contract REST API, custom fields and workflow actions. License-specific capacity is retained instead of assuming one hosted-plan quota.
Oracle NetSuite ↗
NetSuite offers operational SuiteQL queries and a separately licensed database-driver route. Feature setup, role permissions and concurrency are distinct from the right to export a complete business record.
NetSuite / customer SuiteTalk REST and SuiteQL plus separately licensed SuiteAnalytics Connect. Small Business accounts and distributed SuiteApps have different entitlements.
Odoo ↗
Odoo Online offers a database backup and broad model API, but external data access requires Custom rather than Standard.
Odoo Online / Custom-plan external JSON-2/RPC access and downloadable database backups. Self-hosted Community and Odoo.sh module capabilities are not blended into this SaaS grade.
JD Edwards EnterpriseOne ↗
EnterpriseOne AIS exposes table/view queries with aggregation. The customer’s installed server and license determine the usable interface.
JD Edwards EnterpriseOne 9.2 / customer-installed AIS Data/Form Services and export orchestration. Contract answers cover US orders incorporating Oracle’s US Schedule P; World and Fusion are excluded.
Oracle PeopleSoft ↗
PeopleSoft provides query services and file downloads. Query security and effective-date defaults can substantially change the records returned.
PeopleSoft / PeopleTools QAS query services, customer-configured Integration Broker identity and the separately licensed Expenses wallet-entry operation. Contract answers cover US orders incorporating Oracle’s US Schedule P.
Microsoft Dynamics 365 Business Central ↗
Business Central supports tenant-admin granted application access and structured API records. API permissions and object permissions both apply, and the app cannot receive SUPER.
Microsoft Dynamics 365 Business Central online API v2.0 / company-scoped customers through Microsoft Entra service-to-service grants and supported webhooks; other Dynamics products are excluded.
SAP Business One ↗
Business One exposes ERP objects through a customer-managed Service Layer session. OData collections and writes are documented, while extraction completeness and commercial access still depend on the installed system.
SAP Business One 10.0 Service Layer OData v4: customer-managed company session, business-object collections and writes; direct SQL replication and complete ERP database restore are excluded.
SAP S/4HANA Cloud Public Edition ↗
Public Edition exposes a configured sales-order API with named read, create and update operations. Communication arrangements and service-specific entity rules constrain what an external application can do.
SAP S/4HANA Cloud Public Edition 2608 Sales Order (A2X, OData V2), configured communication arrangement and supported sales-order entities; Private Edition, on-premises and whole-ERP migration are excluded.
Oracle Fusion Cloud Financials ↗
Fusion Financials documents role-scoped invoice APIs and structured resource metadata. Customers can build REST clients, while opted-in features, object privileges and contractual costs define actual access.
Oracle Fusion Cloud Financials 26A REST invoice resources and authenticated customer service user; Fusion HCM, EPM, BICC extracts and complete account migration are excluded.
IFS Cloud ↗
IFS Cloud exposes projection APIs for customer integrations. Projection permissions, API classes and entity-specific query support define the interface; a Premium API classification does not establish a paid plan requirement.
IFS Cloud 26R1 customer-authorized OData projections, selected entity sets and operations; entity APIs, direct database BI views and complete tenant restore are separate routes.
Microsoft Dynamics 365 Finance ↗
Finance exposes public data entities through OAuth-authorized OData. Enabled data events can announce changes, but their delivery and recovery contract is separate from Dataverse change tracking and BYOD deletion support.
Dynamics 365 Finance public OData data entities, customer-registered Entra service application and separately enabled data events; BYOD, Dataverse virtual entities and legacy AX interfaces are excluded.
Permute ↗
Scoped APIs expose SQL reads, managed records and customer-authored operation code. Customer-built apps are supported, while complete workspace recovery, outbound CDC and minimum-plan access terms remain unresolved.
Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.