OVERALL CONTROL / 0.6-customer-control
Grades and scoring
Data access
25% of the overall score before applicability adjustment.
Scored answers and evidence
Read interface 7.5/10
Structured API for the declared product scope
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Structured read interface for the declared product and resources
Resolve a worker HRIS profile ↗
Structured read interface for the declared product and resources · Checked 2026-10-16
Bulk delivery -
-
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Email lookup example does not establish iterable whole-organization extraction
Resolve a worker HRIS profile ↗
Email lookup example does not establish iterable whole-organization extraction · Checked 2026-10-16
Query expressiveness 8.8/10
Documented structured API filters
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
GET /rest/people?email=...
Resolve a worker HRIS profile ↗
GET /rest/people?email=... · Checked 2026-10-16
Access cost barrier -
-
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Reviewed entitlement documentation; minimum eligible plan and fixed route-specific access charges remain unresolved
Authentication ↗
Reviewed entitlement documentation; minimum eligible plan and fixed route-specific access charges remain unresolved · Checked 2026-10-16
Third-party accessibility
20% of the overall score before applicability adjustment.
Scored answers and evidence
Third-party eligibility 7.5/10
Open registration under published review criteria
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
App Store submission, technical/security review and customer access after approval
Publishing to App Store ↗
App Store submission, technical/security review and customer access after approval · Checked 2026-10-16
Downstream permission -
-
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Reviewed access documentation; applicable downstream processing, AI and redistribution terms not established
Authentication ↗
Reviewed access documentation; applicable downstream processing, AI and redistribution terms not established · Checked 2026-10-16
External action
15% of the overall score before applicability adjustment.
Scored answers and evidence
Write interface 7.5/10
Create and update in one business domain
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Contract creation, POST contract documents and PUT contract custom fields
Hiring and contractor contracts ↗
Contract creation, POST contract documents and PUT contract custom fields · Checked 2026-10-16
Custom application path 5.0/10
Approved third-party applications using fixed interfaces
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Approved applications use the documented fixed API interfaces
Publishing to App Store ↗
Approved applications use the documented fixed API interfaces · Checked 2026-10-16
Continuity
15% of the overall score before applicability adjustment.
Scored answers and evidence
Refresh mechanism 7.5/10
Documented updated-since filters or webhooks
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Subscribed contract events and webhook callback
Webhook Quickstart ↗
Subscribed contract events and webhook callback · Checked 2026-10-16
Limit visibility -
-
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Production numeric throughput for declared routes not established
Authentication ↗
Production numeric throughput for declared routes not established · Checked 2026-10-16
CDC and deletion capture -
-
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Contract termination is not a hard-deletion contract
Webhook Quickstart ↗
Contract termination is not a hard-deletion contract · Checked 2026-10-16
Replay and gap recovery 5.0/10
Bounded redelivery or overlapping queries; no durable consumer checkpoint
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Up to ten failed-delivery retries with exponential backoff; disablement after repeated failure
Webhook Quickstart ↗
Up to ten failed-delivery retries with exponential backoff; disablement after repeated failure · Checked 2026-10-16
Data exit
20% of the overall score before applicability adjustment.
Scored answers and evidence
Export custody 7.5/10
Customer-held structured files or API records
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Customer-held structured API records within the declared resource scope
Resolve a worker HRIS profile ↗
Customer-held structured API records within the declared resource scope · Checked 2026-10-16
Post-cancellation access Disclosure
-
Disclosure only; does not reduce planned-exit credit.
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Applicable post-cancellation retrieval clause not established by reviewed technical documentation
Authentication ↗
Applicable post-cancellation retrieval clause not established by reviewed technical documentation · Checked 2026-10-16
Planned migration fidelity 7.5/10
Portable structured records on documented routes; whole-product completeness unverified
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Structured resource records can be retrieved; complete attachments, versions, relationships and native configuration remain unverified
Resolve a worker HRIS profile ↗
Structured resource records can be retrieved; complete attachments, versions, relationships and native configuration remain unverified · Checked 2026-10-16
Business logic and customization
5% of the overall score before applicability adjustment.
Scored answers and evidence
Logic authoring 2.5/10
External integration code; native business logic portability not established
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Customer integration code can run outside the provider; native workflow authoring not established
Authentication ↗
Customer integration code can run outside the provider; native workflow authoring not established · Checked 2026-10-16
Rights to custom logic -
-
Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped.
Ownership and reusable export or independent execution of native workflow artifacts remain unresolved
Authentication ↗
Ownership and reusable export or independent execution of native workflow artifacts remain unresolved · Checked 2026-10-16
Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗
CUSTOMER CHOICE
Third-party accessibility
Organization tokens represent organization-wide integrations; worker tokens cannot substitute for employer authority. OAuth organization apps request explicit scopes and require x-client-id alongside the bearer token. App Store publication is reviewed.
Confirm who can connect, who owns the credentials and which uses are permitted. Customer consent and provider approval can be separate requirements; the selected plan and contract still matter.
READ / INTEGRATE
API and export routes
The people API returns employee profiles and supports a documented email lookup. Contract and document workflows use separate IDs and routes; retrieving an employee profile does not establish full payroll or contractor-document recovery.
| Access route | Authentication | Credential owner | Provider approval | Access requirement | Last checked |
|---|---|---|---|---|---|
| Deel scoped API access | OAuth 2.0 | Integration provider | Yes | App review | 2026-10-16 |
| Deel customer-owned application | API key | Customer | No | Customer-supplied credentials | 2026-10-16 |
Availability depends on your product, plan and agreement. See the documentation below for the requirements of each route.
ECONOMIC ACCESS
Cost, authentication and limits
Minimum plan, embedded-product entitlement and fixed API or partner fees remain unresolved. A sandbox demonstration does not establish production access or a free integration entitlement.
Check API entitlement, credential ownership and rate limits for the route you intend to use. Include review fees, customer-plan upgrades and ongoing access charges in the total.
ACT FROM OUTSIDE
External action
The contractor workflow documents creating contracts, attaching documents and setting custom fields. Signing and termination are separate consequential operations with their own actor and completion requirements.
Validate the supported operation, acting identity and permission scope (read access does not imply write permission). Ambiguous retries and revoked credentials also affect whether an external workflow can run safely.
KEEP ACCESS USEFUL
Continuity
Contract and people webhooks describe business transitions; termination changes employment state rather than deleting a record. Failed webhooks retry with exponential backoff and can be disabled after repeated failure; durable replay remains unverified.
CDC, deletions and recovery
| Question | Answer / applicable route | Evidence |
|---|---|---|
| Can ongoing extraction identify updates and deleted records on the declared route? | -Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Contract termination is not a hard-deletion contract | Webhook Quickstart ↗Contract termination is not a hard-deletion contractChecked 2026-10-16 |
| How can extraction recover after missed events or an interrupted consumer? | Bounded redelivery or overlapping queries; no durable consumer checkpointDeel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Up to ten failed-delivery retries with exponential backoff; disablement after repeated failure | Webhook Quickstart ↗Up to ten failed-delivery retries with exponential backoff; disablement after repeated failureChecked 2026-10-16 |
Useful ongoing access includes corrections and deletions, not only the first export. A failed request, changed filter or lost resource permission should not be interpreted as a deleted record.
LEAVE WITH YOUR DATA
Data exit and portability
People and contract records can be held externally before cancellation within granted scope. Payslips, legal documents, historical amendments and native policy configuration require independent retrieval checks.
Test the output against the destination’s required fields and history. Check stable identifiers, relationships, attachments and extraction time; a sample file proves only the coverage of that sample.
BUILD / INSPECT / REUSE
Business logic and customization
External applications can orchestrate documented contract steps. Native policy-definition ownership and independent execution remain unresolved (an approved contract action does not export the compliance process).
Custom API access, ownership of workflows and the right to export their definitions are separate questions. A custom-app capability alone does not establish that business rules can move to another system.
AGREEMENTS / API DOCS / PROGRAM REQUIREMENTS
Documented conditions
Answers below come from public provider materials. Every answer retains its source check date, scope (a partner agreement does not describe every customer route). Customer contracts and live behavior still need verification.
| Question | Answer / applicable route | Evidence |
|---|---|---|
| What structured read interface is documented? | Structured API for the declared product scopeDeel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Structured read interface for the declared product and resources | Resolve a worker HRIS profile ↗Structured read interface for the declared product and resourcesChecked 2026-10-16 |
| How can customers retrieve data in bulk? | -Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Email lookup example does not establish iterable whole-organization extraction | Resolve a worker HRIS profile ↗Email lookup example does not establish iterable whole-organization extractionChecked 2026-10-16 |
| What queries can a customer issue outside the provider UI? | Documented structured API filtersDeel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. GET /rest/people?email=... | Resolve a worker HRIS profile ↗GET /rest/people?email=...Checked 2026-10-16 |
| Who decides whether a chosen third party may connect? | Open registration under published review criteriaDeel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. App Store submission, technical/security review and customer access after approval | Publishing to App Store ↗App Store submission, technical/security review and customer access after approvalChecked 2026-10-16 |
| What extra commercial condition applies to the routes supplying the assessed read capability, relative to the lowest paid plan? | -Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Reviewed entitlement documentation; minimum eligible plan and fixed route-specific access charges remain unresolved | Authentication ↗Reviewed entitlement documentation; minimum eligible plan and fixed route-specific access charges remain unresolvedChecked 2026-10-16 |
| What permission is needed for the documented downstream use? | -Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Reviewed access documentation; applicable downstream processing, AI and redistribution terms not established | Authentication ↗Reviewed access documentation; applicable downstream processing, AI and redistribution terms not establishedChecked 2026-10-16 |
| Which external write operations are documented? | Create and update in one business domainDeel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Contract creation, POST contract documents and PUT contract custom fields | Hiring and contractor contracts ↗Contract creation, POST contract documents and PUT contract custom fieldsChecked 2026-10-16 |
| How can customers connect an application they build or choose? | Approved third-party applications using fixed interfacesDeel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Approved applications use the documented fixed API interfaces | Publishing to App Store ↗Approved applications use the documented fixed API interfacesChecked 2026-10-16 |
| What mechanism supports repeatable extraction of changes? | Documented updated-since filters or webhooksDeel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Subscribed contract events and webhook callback | Webhook Quickstart ↗Subscribed contract events and webhook callbackChecked 2026-10-16 |
| How are integration limits disclosed? | -Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Production numeric throughput for declared routes not established | Authentication ↗Production numeric throughput for declared routes not establishedChecked 2026-10-16 |
| Where can a usable data copy be delivered? | Customer-held structured files or API recordsDeel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Customer-held structured API records within the declared resource scope | Resolve a worker HRIS profile ↗Customer-held structured API records within the declared resource scopeChecked 2026-10-16 |
| What retrieval rights are documented at cancellation? | -Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Applicable post-cancellation retrieval clause not established by reviewed technical documentation | Authentication ↗Applicable post-cancellation retrieval clause not established by reviewed technical documentationChecked 2026-10-16 |
| How can customers define their own business logic? | External integration code; native business logic portability not establishedDeel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Customer integration code can run outside the provider; native workflow authoring not established | Authentication ↗Customer integration code can run outside the provider; native workflow authoring not establishedChecked 2026-10-16 |
| What rights or portability are documented for custom workflow artifacts? | -Deel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Ownership and reusable export or independent execution of native workflow artifacts remain unresolved | Authentication ↗Ownership and reusable export or independent execution of native workflow artifacts remain unresolvedChecked 2026-10-16 |
| What usable data or native definitions can leave before cancellation? | Portable structured records on documented routes; whole-product completeness unverifiedDeel API 2026-01-01 / organization people and contractor contract operations; partner App Store OAuth and organization tokens are distinct routes, with worker tokens separately scoped. Structured resource records can be retrieved; complete attachments, versions, relationships and native configuration remain unverified | Resolve a worker HRIS profile ↗Structured resource records can be retrieved; complete attachments, versions, relationships and native configuration remain unverifiedChecked 2026-10-16 |
SOURCES / SCOPE / HISTORY
Sources and open questions
This review is based on the documentation below. Live account behavior and customer-specific agreements haven’t been tested.
Still to confirm
- Lowest eligible plan and fixed API access fees
- Applicable downstream-use and customer cancellation terms
- Complete file, history and configuration recovery
- Native workflow artifact ownership and independent execution
- Complete declared update and deletion identity coverage
Documentation
Assessment checked 2026-10-16. Each answer retains its source and applicable route; the check date does not establish live account behavior.