Where the reviewed products stand
Compare documented control across the named products and routes. Open a review for its plan, region and agreement (this is a selected sample).
0–10 on both axes · Higher and further right means more documented control
Exact scores & review links (9)
| Vendor | Data access & portability | Build & act |
|---|---|---|
| Bullhorn ATS/CRM ↗ | 6.2* | 5.1* |
| Greenhouse ↗ | 6.2* | 3.6* |
| Lever ↗ | 6.2* | 5.1* |
| Ashby ↗ | 7.6* | 5.8* |
| Workable ↗ | 7.6* | 5.7* |
| SmartRecruiters ↗ | 6.2* | 3.8* |
| Avionté ↗ | 6.1* | 4.9* |
| Recruit CRM ↗ | 7.1* | 4.8* |
| Permute ↗Publisher self-assessment | 8.0* | 7.1* |
Axes average three dimensions each: access, third-party access and exit horizontally; action, continuity and business logic vertically. Fixed 0–10 scale, midlines at 5 (overall grades use separate weights). * Some evidence is unresolved. Marker colors identify companies, not score bands. How to read the map ↗
Permute is included as a reference (it owns this site and is a publisher self-assessment). Its score is excluded from sample averages. Read the Permute review ↗
Public job feeds and authenticated candidate, application and interview records are separate routes. Confidential fields, recruiting permissions and retention can constrain extraction (a job posting feed does not establish an account backup).
Compare the six dimensions
| Overall control | |
|---|---|
| Data access | |
| Third-party accessibility | |
| External action | |
| Continuity | |
| Data exit | |
| Business logic and customization | |
Product scopes, dates & reviews
Bullhorn ATS/CRM
Recruiting and applicant tracking · Checked 2026-10-16
Bullhorn ATS/CRM REST entity/query/meta APIs and subscriptions, using customer-provisioned OAuth or registered partner clients; other Bullhorn products excluded.
Read findings and sources ↗Greenhouse
Recruiting and applicant tracking · Checked 2026-10-16
Greenhouse Recruiting / Harvest v3 candidate profile collection and candidate creation, using an approved partner OAuth application or a separate customer-only client-credentials integration; nested applications, attachments and other resources are not assumed included.
Read findings and sources ↗| Customer control | Bullhorn ATS/CRM ↗ | Greenhouse ↗ | Lever ↗ | Ashby ↗ | Workable ↗ | SmartRecruiters ↗ | Avionté ↗ | Recruit CRM ↗ | Permute ↗ |
|---|---|---|---|---|---|---|---|---|---|
| Category | Recruiting and applicant tracking | Recruiting and applicant tracking | Recruiting and applicant tracking | Recruiting and applicant tracking | Recruiting and applicant tracking | Recruiting and applicant tracking | Recruiting and applicant tracking | Recruiting and applicant tracking | Databases and data platforms |
| Overall control | |||||||||
| Data access | |||||||||
| Third-party accessibility | |||||||||
| External action | |||||||||
| Continuity | |||||||||
| Data exit | |||||||||
| Business logic and customization | |||||||||
| Assessment scope | Bullhorn ATS/CRM REST entity/query/meta APIs and subscriptions, using customer-provisioned OAuth or registered partner clients; other Bullhorn products excluded. | Greenhouse Recruiting / Harvest v3 candidate profile collection and candidate creation, using an approved partner OAuth application or a separate customer-only client-credentials integration; nested applications, attachments and other resources are not assumed included. | Lever recruiting / opportunities and their documented profiles through approved partner OAuth; customer API keys are a separate internal-workflow route. Requisitions and complete account reconstruction are excluded. | Ashby / candidate profiles through administrator-managed API keys on API version 2026-01-01, including paginated full/incremental lists and candidate create/update. MCP, closed-beta audit APIs, reports and assessment partner execution are outside this scope. | Workable recruiting / job-associated candidate collection, candidate create/update and candidate-deletion webhooks through scoped account or authorized integration tokens; Talent pool reads and HR employee data are excluded. | SmartRecruiters / candidates with at least one job application, candidate-profile updates and current collection traversal through the General Partner Integration; public postings and deprecated authorization-code onboarding are separate. | Avionté Front Office tenant-scoped talent IDs/details, Talent create/update and selected talent-stage webhooks, with a separate BOLD Talent Sources CSV report route. Back Office payroll and complete staffing-database replication are excluded. | Recruit CRM customer-token candidate API and documented candidate-create/resume-parser operations, alongside list CSV and paid account-export routes. Bill & Pay, native automation portability and whole-system restore are not established. | Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed. |
| Assessment checked | 2026-10-16 | 2026-10-16 | 2026-10-16 | 2026-10-16 | 2026-10-16 | 2026-10-16 | 2026-10-17 | 2026-10-17 | 2026-10-12 |
| Read the findings | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ |
Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗
Who can connect?
Yes No- Unknown
A check means the column applies to that route (customer credentials can still require provider approval). Report exports use the customer account without separate API credentials. Open a connection method for its authentication, requirements and last review date.
What each review covers
Bullhorn ATS/CRM ↗
Bullhorn exposes recruiting entities through queries, metadata and create/update operations. Customer API credentials are support-provisioned, while partners register separate OAuth clients.
Bullhorn ATS/CRM REST entity/query/meta APIs and subscriptions, using customer-provisioned OAuth or registered partner clients; other Bullhorn products excluded.
Greenhouse ↗
Harvest v3 provides scoped candidate records and creation operations. Partner apps require an agreement; a customer-only client does not bypass that route. The retired v1/v2 Basic-auth API supplies no current capability credit.
Greenhouse Recruiting / Harvest v3 candidate profile collection and candidate creation, using an approved partner OAuth application or a separate customer-only client-credentials integration; nested applications, attachments and other resources are not assumed included.
Lever ↗
Lever exposes recruiting records through partner OAuth and separate customer keys. Rebuilding current opportunities is possible; webhook retries do not establish durable replay.
Lever recruiting / opportunities and their documented profiles through approved partner OAuth; customer API keys are a separate internal-workflow route. Requisitions and complete account reconstruction are excluded.
Ashby ↗
Ashby documents scoped API keys and candidate sync tokens with explicit expiry and full-sync recovery. Incremental updates are established; deleted candidate identities and native workflow portability remain unresolved.
Ashby / candidate profiles through administrator-managed API keys on API version 2026-01-01, including paginated full/incremental lists and candidate create/update. MCP, closed-beta audit APIs, reports and assessment partner execution are outside this scope.
Workable ↗
Workable provides scoped candidate APIs, update-time filters and deletion webhooks. Job-associated candidate data can be rebuilt; excluded Talent pool reads, replacement-style array writes and delivery-time webhook payloads matter.
Workable recruiting / job-associated candidate collection, candidate create/update and candidate-deletion webhooks through scoped account or authorized integration tokens; Talent pool reads and HR employee data are excluded.
SmartRecruiters ↗
SmartRecruiters separates customer-only credentials from partner integration approval. New partners use reviewed master and customer-level client credentials; candidate collection scope excludes people without applications.
SmartRecruiters / candidates with at least one job application, candidate-profile updates and current collection traversal through the General Partner Integration; public postings and deprecated authorization-code onboarding are separate.
Avionté ↗
Avionté documents tenant-scoped talent reads and a Talent operation that creates or updates records. API registration, licensing and integration review apply; a separate BOLD report exports selected talent-source data without establishing a whole-tenant extract.
Avionté Front Office tenant-scoped talent IDs/details, Talent create/update and selected talent-stage webhooks, with a separate BOLD Talent Sources CSV report route. Back Office payroll and complete staffing-database replication are excluded.
Recruit CRM ↗
Recruit CRM exposes a customer-token API on Business or higher and documents a candidate creation and resume-parser update path. Its export routes have different eligibility: list CSV works across plans, while paid accounts can request broader records and attachments.
Recruit CRM customer-token candidate API and documented candidate-create/resume-parser operations, alongside list CSV and paid account-export routes. Bill & Pay, native automation portability and whole-system restore are not established.
Permute ↗
Scoped APIs expose SQL reads, managed records and customer-authored operation code. Customer-built apps are supported, while complete workspace recovery, outbound CDC and minimum-plan access terms remain unresolved.
Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.