API Vendor Scorecard

Use this checklist during vendor demonstrations to evaluate architectural soundness over UI polish.

JavaScript is required for interactive scoring. Print this checklist instead.

Technical Viability Score

1. API Architecture

RESTful or GraphQL API AvailableNot just SOAP or flat-file SFTP drops. Public API DocumentationDocumentation is available without an NDA or paid license. Webhook SupportSystem can push events in real-time rather than requiring constant polling.

2. Data Portability

Bulk Export APIAbility to extract the entire database programmatically without hitting severe rate limits. No Extortionate Export FeesContract does not specify punitive fees for retrieving your own data upon termination.

3. Security & Identity

SAML/OIDC Single Sign-OnSupports central identity management (Azure AD, Okta) without an "Enterprise" tier upcharge. Current SOC 2 Type IIReport is current within the last 12 months with no material exceptions. Granular RBAC via APIAPI keys can be scoped to specific endpoints and actions (least privilege).