Where the reviewed products stand
Compare documented control across the named products and routes. Open a review for its plan, region and agreement (this is a selected sample).
Only one independent product is reviewed here. Its position does not establish a category average or coverage of other products.
0–10 on both axes · Higher and further right means more documented control
Exact scores & review links (2)
| Vendor | Data access & portability | Build & act |
|---|---|---|
| Amazon S3 ↗ | 9.3* | 5.6* |
| Permute ↗Publisher self-assessment | 8.0* | 7.1* |
Axes average three dimensions each: access, third-party access and exit horizontally; action, continuity and business logic vertically. Fixed 0–10 scale, midlines at 5 (overall grades use separate weights). * Some evidence is unresolved. Marker colors identify companies, not score bands. How to read the map ↗
Permute is included as a reference (it owns this site and is a publisher self-assessment). Its score is excluded from sample averages. Read the Permute review ↗
Object bytes, version history and service configuration have separate recovery requirements. Findings apply to the declared bucket and object routes.
Compare the six dimensions
| Overall control | |
|---|---|
| Data access | |
| Third-party accessibility | |
| External action | |
| Continuity | |
| Data exit | |
| Business logic and customization | |
Product scopes, dates & reviews
Amazon S3
Object storage · Checked 2026-10-12
Amazon S3 general-purpose buckets / customer IAM grants, object APIs and notifications. Archive classes and directory buckets have different behavior and charges.
Read findings and sources ↗Permute
Databases and data platforms · Checked 2026-10-12
Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.
Read findings and sources ↗| Customer control | Amazon S3 ↗ | Permute ↗ |
|---|---|---|
| Category | Object storage | Databases and data platforms |
| Overall control | ||
| Data access | ||
| Third-party accessibility | ||
| External action | ||
| Continuity | ||
| Data exit | ||
| Business logic and customization | ||
| Assessment scope | Amazon S3 general-purpose buckets / customer IAM grants, object APIs and notifications. Archive classes and directory buckets have different behavior and charges. | Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed. |
| Assessment checked | 2026-10-12 | 2026-10-12 |
| Read the findings | Detailed review ↗ | Detailed review ↗ |
Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗
Who can connect?
Yes No- Unknown
| Connection method | Customer credentials | Integrator credentials | Provider approval required |
|---|---|---|---|
| Amazon S3 ↗ | |||
| Customer-granted cross-account role ↗ | |||
| Permute ↗ | |||
| Scoped customer REST / TypeScript SDK ↗ | |||
| Permissioned end-user MCP ↗ | |||
A check means the column applies to that route (customer credentials can still require provider approval). Report exports use the customer account without separate API credentials. Open a connection method for its authentication, requirements and last review date.
What each review covers
Amazon S3 ↗
Customers control S3 object access through IAM and can download their files. The main exit barriers are data volume, transfer charges, encryption keys and storage-class retrieval conditions.
Amazon S3 general-purpose buckets / customer IAM grants, object APIs and notifications. Archive classes and directory buckets have different behavior and charges.
Permute ↗
Scoped APIs expose SQL reads, managed records and customer-authored operation code. Customer-built apps are supported, while complete workspace recovery, outbound CDC and minimum-plan access terms remain unresolved.
Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.