Where the reviewed products stand
Compare documented control across the named products and routes. Open a review for its plan, region and agreement (this is a selected sample).
0–10 on both axes · Higher and further right means more documented control
Exact scores & review links (4)
| Vendor | Data access & portability | Build & act |
|---|---|---|
| Google BigQuery ↗ | 9.3 | 6.3 |
| Databricks ↗ | 8.0* | 7.2* |
| Snowflake ↗ | 8.3* | 7.6* |
| Permute ↗Publisher self-assessment | 8.0* | 7.1* |
Axes average three dimensions each: access, third-party access and exit horizontally; action, continuity and business logic vertically. Fixed 0–10 scale, midlines at 5 (overall grades use separate weights). * Some evidence is unresolved. Marker colors identify companies, not score bands. How to read the map ↗
Permute is included as a reference (it owns this site and is a publisher self-assessment). Its score is excluded from sample averages. Read the Permute review ↗
Table queries, outbound change capture and ingestion into a warehouse are separate routes. Retention, configured tables and row identity bound recovery.
Compare the six dimensions
| Overall control | |
|---|---|
| Data access | |
| Third-party accessibility | |
| External action | |
| Continuity | |
| Data exit | |
| Business logic and customization | |
Product scopes, dates & reviews
Google BigQuery
Warehouses and lakehouses · Checked 2026-10-12
BigQuery / customer-managed Google Cloud project, GoogleSQL and export jobs. This is data infrastructure, not a bundled business application.
Read findings and sources ↗Databricks
Warehouses and lakehouses · Checked 2026-10-16
Databricks on AWS / customer service principal, SQL warehouse table queries/DML, result download and enabled Delta change data feed; only tables with an explicit identity/mutation contract qualify for CDC.
Read findings and sources ↗| Customer control | Google BigQuery ↗ | Databricks ↗ | Snowflake ↗ | Permute ↗ |
|---|---|---|---|---|
| Category | Warehouses and lakehouses | Warehouses and lakehouses | Warehouses and lakehouses | Databases and data platforms |
| Overall control | ||||
| Data access | ||||
| Third-party accessibility | ||||
| External action | ||||
| Continuity | ||||
| Data exit | ||||
| Business logic and customization | ||||
| Assessment scope | BigQuery / customer-managed Google Cloud project, GoogleSQL and export jobs. This is data infrastructure, not a bundled business application. | Databricks on AWS / customer service principal, SQL warehouse table queries/DML, result download and enabled Delta change data feed; only tables with an explicit identity/mutation contract qualify for CDC. | Snowflake / customer custom OAuth integration and granted SQL tables, standard table streams and COPY INTO customer storage; append-only/external-table streams and complete account migration are excluded. | Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed. |
| Assessment checked | 2026-10-12 | 2026-10-16 | 2026-10-16 | 2026-10-12 |
| Read the findings | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ |
Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗
Who can connect?
Yes No- Unknown
| Connection method | Customer credentials | Integrator credentials | Provider approval required |
|---|---|---|---|
| Google BigQuery ↗ | |||
| Customer IAM-authorized query and export jobs ↗ | |||
| Databricks ↗ | |||
| Customer-authorized application ↗ | |||
| Snowflake ↗ | |||
| Customer-authorized application ↗ | |||
| Permute ↗ | |||
| Scoped customer REST / TypeScript SDK ↗ | |||
| Permissioned end-user MCP ↗ | |||
A check means the column applies to that route (customer credentials can still require provider approval). Report exports use the customer account without separate API credentials. Open a connection method for its authentication, requirements and last review date.
What each review covers
Google BigQuery ↗
BigQuery exposes SQL and export jobs directly. IAM grants control access, while query processing, storage and destination charges determine the practical cost of moving data.
BigQuery / customer-managed Google Cloud project, GoogleSQL and export jobs. This is data infrastructure, not a bundled business application.
Databricks ↗
Databricks exposes governed SQL and retained Delta table changes. Change data feed begins after enablement and is not a permanent audit archive; consumers must manage table keys, retained versions and checkpoints.
Databricks on AWS / customer service principal, SQL warehouse table queries/DML, result download and enabled Delta change data feed; only tables with an explicit identity/mutation contract qualify for CDC.
Snowflake ↗
Snowflake exposes SQL table access and customer-consumable stream offsets. Standard streams can capture deletes, but they can become stale if table history is not consumed within its retention policy.
Snowflake / customer custom OAuth integration and granted SQL tables, standard table streams and COPY INTO customer storage; append-only/external-table streams and complete account migration are excluded.
Permute ↗
Scoped APIs expose SQL reads, managed records and customer-authored operation code. Customer-built apps are supported, while complete workspace recovery, outbound CDC and minimum-plan access terms remain unresolved.
Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.