Vendor Platforms
Salesforce, DealCloud, ERPs, vertical SaaS
Shadow IT
Sheets, Notion, Zapier, scripts, AI subs
Consulting & Point Solutions
Boutique builds, specialized tools
Habitat
Configurable operating system
Security
Authentication
SSO available (often paid tier)
Per-tool logins, shared accounts, or none
Per-tool, fragmented across stack
SSO/SAML by default
Row-level isolation
Application-layer (configurable)
None
Varies per tool
Database-level RLS, tenant_id on every row
Field-level permissions
Available (complex to configure)
None
Rarely implemented
RBAC per field, most-restrictive-wins
Audit trail
Basic change history
None
Per-tool, not unified
Every state change and AI action logged
AI governance
AI typically outside security model
Ungoverned — users paste anything
Per-tool, no shared governance
AI inherits full security model
Data
Entity model
Fixed or semi-configurable
No schema — anything goes
Frozen at delivery
Fully configurable entities, fields, relationships
Validation & integrity
Available (requires setup per field)
None — mixed types, duplicates, blanks
Whatever was built at handoff
Validation rules, computed fields, formula engine
Portability
Export limits, API caps, proprietary formats
Data scattered across dozens of tools
Locked in per tool
PostgreSQL — no export limits, no rate restrictions
Cross-entity relationships
Within vendor's model only
Flat tables — no relationships
Per-tool silos, no joins
Configurable relationships, rollups, computed fields
Institutional memory
Accumulates but doesn't compound
Zero — every project starts fresh
Frozen at handoff, doesn't evolve
Shared intelligence layer with full provenance
AI
Integration model
Bolted on — plugins or vendor features
Copy-paste into consumer AI tools
Per-tool AI, no shared context
Framework: context → execution → guardrails → audit
Security inheritance
May bypass field-level security
No security — no awareness of permissions
No unified security across AI tools
Agents see only what user is authorized to see
Extensibility
Limited to vendor's AI roadmap
Easy to try new prompts, no governance
Fixed at delivery
Inherits full framework, security, and telemetry
Fine-tuning
Not available
Not available
Separate project, not integrated
Per-tenant, per-pipeline-stage model resolution
Learning across interactions
None
No persistence between sessions
None
Few-shot learning from prior interactions
Cost visibility
Bundled or opaque pricing
Hidden in consumer subscriptions
Per-tool billing, no attribution
Per-tenant attribution, per-call telemetry
Workflows & Processing
Business workflows
Field updates, notifications, approvals
When X, do Y (Zapier)
Static — whatever was built
Visual flow builder: branching, parallel, approvals, async
Backend job framework
Vendor-managed, limited access
Cron jobs or manual scripts
Custom-built, frozen at handoff
Dedicated job framework: three-level hierarchy, serverless dispatch
Orchestration scope
Within the vendor platform only
Across tools via fragile API glue
Per-tool, not cross-system
Anything — databases, documents, AI, APIs, external systems
Error handling & retry
Basic retry, email alerts
None — silent failures
Varies by implementation
Automatic retry, job isolation, dependency gating
Async / heavy processing
API-based async available on some platforms
Synchronous — blocks the user
If architected for it
Async serverless, parallel dispatch, non-blocking
Integration
Internal architecture
Hub-and-spoke through vendor API
Point-to-point glue (Zapier, scripts)
Each tool has its own API and model
Single data model — all capabilities share entities
External data
Vendor-controlled connectors
Manual imports, CSV, copy-paste
Custom-built per engagement
Configurable import pipelines, analytics DB replication
Maintenance burden
Plugin updates, API version changes
Whoever built it maintains it (if they're still here)
Permanent — you inherit everything
Managed — platform handles infrastructure and updates
Extensibility & Scale
New entity type
Custom object (if supported)
New spreadsheet — no governance
New engagement, new invoice
Configuration + admin UI, no code change
New workflow
Custom code or third-party tool
New Zapier chain — fragile
New SOW
Dedicated job framework: define, register, deploy
New AI capability
Wait for vendor roadmap or buy plugin
New prompt in a consumer tool — ungoverned
New project
Inherits full framework, security, and telemetry
Infrastructure scaling
Vendor-managed, opaque limits
Not designed for scale
If architected for it at delivery
Scale up (cell resources) and scale out (serverless instances)
Multi-tenancy
Vendor-managed, mature
Not available
Rarely implemented
Isolated cells — dedicated or shared deployment
Concurrent processing
Within vendor limits, API-based
Not available
If architected for it
Parallel serverless dispatch, dependency gating
Cost
Trajectory
Grows annually — seats + plugins + maintenance
Cheap to start, expensive to maintain and fix
Large upfront + ongoing + re-engagement fees
Stabilizes as foundation is built
Hidden costs
Consultant hours, plugin sprawl, migration risk
Data quality, security incidents, rebuilds
Integration maintenance, inherited technical debt
New capabilities are incremental, not greenfield
Subscription dependency
Vendor pricing changes affect budget
Workflows break when consumer AI prices change
Tool subscriptions accumulate over time
Usage-based, infrastructure managed