Amazon Textract vs Datalab

Amazon Textract 96

AWS Health Dashboard with per-service, per-Region history (20). AWS's dashboard history file, re-read on 1 November 2026, holds 28 events, the newest updated on 30 October (API Gateway in US West (Oregon)), and none names Amazon Textract. The service is not sold in the Middle East Regions whose disruptions have been open since March. The one event that names it is the US East (N. Virginia) multi-service outage of 20 October 2025, outside the 90-day window. The public dashboard shows broad events only (30). Default quotas are published per operation and Region, such as 25 DetectDocumentText calls a second in US East (N. Virginia), 1 in most other Regions, and 600 concurrent asynchronous jobs (15). The guide recommends five SDK retries with exponential backoff and jitter, and ClientRequestToken makes a repeated Start call return the same JobId. Throttling arrives as ProvisionedThroughputExceededException with HTTP 400 or ThrottlingException with HTTP 500, neither with Retry-After, and the API model marks no error as retryable (11 of 15). The Amazon Textract SLA, last updated 5 May 2022, commits 99.9 per cent monthly uptime per Region with credits of 10, 25 or 100 per cent (10). Generally available since 29 May 2019 (10).

Datalab 58

Hosted lines. Status page at status.datalab.to (incident.io) with Website and Datalab API components; the history page is drawn by script, so components are confirmed and history isn't (15 of 20, 5 for history). Rate limits per plan with numbers, plus page and size limits (15). 429 is retryable with sample backoff, and 500 and 529 say to check a known request ID before resubmitting; webhooks deduplicate by request_id (13 of 15). Custom SLAs only for Enterprise (0). Generally available (10). 15+5+15+13+0+10 = 58.

Amazon Textract 58

The Textract API model last changed on 11 August 2026, a documentation update, 82 days before the re-check, and the JavaScript SDK client shipped 3.1161.0 on 30 October (20 of 30). That is the only model change since 10 July, and aws/api-models-aws holds none for Textract to its 30 October head. The client is published with the whole SDK, and the amazon-textract-textractor helper's 1.10.0 (11 August) is a helper release that doesn't change the service. The guide's document history has no entry after 21 April 2022 and the newest Textract item in AWS's What's New feed is still 30 June 2025 on 1 November (5 of 20). The 11 August model change leaves the 90-day window on 9 November. Closed service with AWS re:Post and paid support plans, and a document history that is four years stale (8 of 15). Official SDKs released on most working days (15). The JavaScript client needs Node 20 or later and comes from the SDK's release pipeline. The amazon-textract-textractor helper library released 1.10.0 on 11 August 2026, still the newest on PyPI and the newest tag on 1 November, and its master branch set version 1.10.1 on 23 October without a tag (10).

Datalab 79

Closed hosted service. Python SDK 0.9.1 on 6 November 2026 and a changelog entry on 4 November (30). Over twenty dated changelog entries since 8 August (20). Support by email, a Discord and public GitHub repositories for the open-source models; replies not sampled (12 of 15). An official Python SDK, current, no other languages (12 of 15). Package health not checked beyond release dates (5 of 10). 30+20+12+12+5 = 79.

Amazon Textract 74

IAM with identity policies per action, temporary credentials from AWS STS and rotation. Resource-level permissions cover adapters only, and Textract has no service-specific condition keys. No secret travels in a URL (30). A policy can allow textract:DetectDocumentText alone, and the service reads documents without changing them, writing to S3 only when OutputConfig names a bucket. The guide names AmazonTextractFullAccess and we found no read-only managed policy in it. The only destructive calls delete adapters (16 of 20). Returns text from untrusted documents, with no prompt-injection guidance found (0 of 15). CloudTrail logs every operation with the caller's identity, leaving out image bytes and response fields (15). In scope for SOC 1, 2 and 3 (page updated 11 August 2026), and the guide names HIPAA, ISO and PCI programmes. Vulnerability disclosure programme on HackerOne. aws.amazon.com's security.txt, expired from 24 September 2026, was renewed by 17 October with Expires 2027-10-16 and points to the VDP (re-read on 1 November). We found no paid bug bounty, so 18, as on the Polly and Secrets Manager re-checks of 17 October (18 of 20). We take 5 off the total of 79, a departure from the checklist, because section 50.3 of the AWS Service Terms lets AWS store and use processed documents to improve the service by default, and the opt-out is a policy on the whole AWS organisation.

Datalab 56

Several hashed API keys with per-key 30-day spend caps, revoke-and-replace rotation, no scopes (24 of 30). Spend caps limit damage; results and files can be deleted by the key holder, and there's no read-only key (10 of 20). Returns document text with no prompt-injection guidance (2 of 15). cost_breakdown per request and usage tracking in the dashboard (8 of 15). A Secureframe trust centre and a SOC 2 report on the Team plan, TOTP enforcement for teams; no disclosure policy or security.txt found (12 of 20). 24+10+2+8+12 = 56.

Amazon Textract 85

Closed service under the AWS Customer Agreement and section 50 of the Service Terms, with Apache-2.0 SDKs (20 of 30). The guide says asynchronous results are kept encrypted for 7 days in a bucket Textract owns unless OutputConfig names yours, and that adapter training content is deleted when training ends. Section 50.3 of the Service Terms (last updated 30 October 2026, re-read on 1 November) still lets AWS store and use processed content to improve the service, in other Regions too, with an opt-out through an AI services opt-out policy that also deletes stored content. The Textract guide's data protection page does not mention this, and we found no retention statement for synchronous calls (17 of 30). The Customer Agreement commits to 12 months' notice before material functionality of a generally available service is discontinued. No dated Textract deprecation notices found (15 of 20). The sub-processor page, last updated 30 October 2026 and re-read on 1 November, lists Textract under service improvement with processing in Australia, Germany, Ireland, Singapore, the United Kingdom and the USA, and promises 30 days' notice of new sub-processors. Region is chosen per request across 16 Regions (17 of 20).

Datalab 68

Closed service under terms effective 30 June 2026 naming Endless Labs, Inc. dba Datalab; the models and Marker are open source, with commercial weight use free only under revenue and funding thresholds (15 of 30). Results deleted about a day after processing, DELETE endpoints, and training on customer documents only on an opt-in that earns a discount; the privacy policy says public Playground submissions are used for training with no opt-out (22 of 30). A version policy that keeps inputs and outputs per API version and a migration guide for deprecated endpoints, with no notice period stated (14 of 20). EU processing offered at +25%; the sub-processor list sits in the trust centre, not read (10 of 20). 15+22+14+10 = 61.

Amazon Textract 82

No OpenAPI, but the Smithy model is published in aws/api-models-aws, 25 operations under API version 2018-06-27 on the awsJson1_1 protocol (25). llms.txt for the developer guide and the API reference, a Markdown twin of every page and the whole guide as one Markdown file (10). Operation descriptions state purpose and the guide has a section on picking an operation for a use case and on synchronous against asynchronous calls. Few say when not to use them (15 of 20). 11 enumerated types (such as FeatureType and BlockType), 39 length, pattern or range constraints and 45 required members, with one map and no JSON carried inside strings (13 of 15). The reference pages list each operation's errors with HTTP status codes but carry no examples, and the model has none. The guide has request and response samples and SDK code (11 of 15). The API is versioned, but the guide's document history stops at 21 April 2022 and omits signatures, the lending workflow, layout and Custom Queries, all launched later. Model changes show only as commits in aws/api-models-aws (8 of 15).

Datalab 89

An OpenAPI 3.1 operation embedded in each reference page (spec version 0.0.1), no single downloadable file found (22 of 25). llms.txt with 159 pages and Markdown twins (10). Recipes say when to use each processor and mode (15 of 20). Typed request schemas with enums for output format and mode (12 of 15). An error table with type, HTTP code and whether to retry, plus SDK exception mapping (15). A written version policy and a dated changelog (15). 22+10+15+12+15+15 = 89.

Amazon Textract 35

No x402, MPP or L402 (0). Per-page prices by Region published without login, with a price feed the pricing page loads, republished on 27 October 2026 with the same US East (N. Virginia) page prices (20). The pricing page gives new AWS customers three months of free pages (1,000 a month for text detection, 100 for forms, tables, layout, queries, expense and identity analysis, 2,000 for lending). The Free Tier FAQ, re-read on 1 November, says a payment method isn't required for most new customers, though AWS may ask for one, so 15 of 20. A person signs up for the AWS account. IAM can mint keys by API only after that (0).

Datalab 40

No x402, MPP or L402 (0). Per-1,000-page rates for every processor and add-on on the public pricing page (20). A $10 to $20 monthly allowance with no card (20). A person signs up in a browser (0). 0+20+20+0 = 40.