Azure Document Intelligence vs Datalab

Azure Document Intelligence 25

Read as a closed service with official SDKs, from the service's own models as this run reads other Azure and AWS listings. The REST specification in Azure/azure-rest-api-specs has had no API or description change since 3 August, only tooling (TypeSpec suppressions on 3 and 13 August, the folder move of 28 September, linter rulesets on 14 October). The what's new page's newest entry is the March 2026 tax model update, more than 180 days back. The newest SDK releases, Java 1.0.10 on 18 August and 1.0.11 on 6 October 2026, only raise azure-core and azure-core-http-netty. Dependency-only releases count half on the 90-day line and can't set the recency line, as azure-translator, so the 8 October departure that gave 15 on the Java date is withdrawn (0 of 30). Two dependency-only releases at half each, and no service change, in 90 days (0 of 20). A what's new page with one entry in 2026, Microsoft Q&A and the SDK issue trackers on GitHub, which we did not read (8 of 15). Official SDKs in four languages target the current GA API, but Python (1.0.2, 26 March 2025), JavaScript (1.1.0, 8 May 2025) and .NET (1.0.0, 16 December 2024) have had no release since (12 of 15). The Python package declares Python 3.8 to 3.12 and is built in the azure-sdk pipelines, whose results we did not check (5 of 10). 0+0+8+12+5 = 25.

Datalab 79

Closed hosted service. Python SDK 0.9.1 on 6 November 2026 and a changelog entry on 4 November (30). Over twenty dated changelog entries since 8 August (20). Support by email, a Discord and public GitHub repositories for the open-source models; replies not sampled (12 of 15). An official Python SDK, current, no other languages (12 of 15). Package health not checked beyond release dates (5 of 10). 30+20+12+12+5 = 79.

Azure Document Intelligence 82

Hosted reading. Azure status page with a history of post-incident reviews (20). In the window from 3 August 2026 the history holds two reviews. One, on 29 September 2026 from 10:03 to 15:58 UTC, covers Azure OpenAI, Foundry Models and Azure AI services with intermittent failures and latency in Sweden Central, one region and some requests, so minor. The other, 30 September to 1 October, is network gateways and doesn't name Document Intelligence. Minor only (20 of 30). Limits published with numbers, 15 analyse calls, 50 result reads, 5 model management calls and 10 list calls a second on S0 (15). The limits page asks for retry logic, exponential backoff on 429 and at least 2 seconds between polls, and the 202 response carries Retry-After. No idempotency key exists for a repeated analyse call (12 of 15). The pricing page links Microsoft's Online Services SLA, a download we did not open, so half (5 of 10). API version 2024-11-30 is GA (10). 20+20+15+12+5+10 = 82.

Datalab 58

Hosted lines. Status page at status.datalab.to (incident.io) with Website and Datalab API components; the history page is drawn by script, so components are confirmed and history isn't (15 of 20, 5 for history). Rate limits per plan with numbers, plus page and size limits (15). 429 is retryable with sample backoff, and 500 and 529 say to check a known request ID before resubmitting; webhooks deduplicate by request_id (13 of 15). Custom SLAs only for Enterprise (0). Generally available (10). 15+5+15+13+0+10 = 58.

Azure Document Intelligence 20

No x402, MPP or L402 (0). Per-1,000-page prices are public through the Azure Retail Prices API without a login, while the pricing page shows "$-" until a script fills it (20). F0 gives 500 pages a month, but it sits on an Azure account, and the free account page asks for a phone number and a credit or debit card (0). A person signs up in a browser (0).

Datalab 40

No x402, MPP or L402 (0). Per-1,000-page rates for every processor and add-on on the public pricing page (20). A $10 to $20 monthly allowance with no card (20). A person signs up in a browser (0). 0+20+20+0 = 40.

Azure Document Intelligence 71

Microsoft Entra ID bearer tokens with Azure RBAC and managed identities, or two resource keys. The OpenAPI document and the docs give the key only as a header (30). RBAC can limit a caller, but a resource key reaches every data-plane call, among them deleting custom models, and nothing asks for confirmation. Analysis itself changes nothing (14 of 20). The service returns text from untrusted documents, and no guidance on injected instructions was found in the pages read (0 of 15). The Foundry Tools diagnostic logging page describes Audit and RequestResponse logs through Azure Monitor once the owner adds a diagnostic setting. We did not confirm the fields for Document Intelligence (12 of 15). MSRC coordinated disclosure and bounty policies and a CSAF feed. The microsoft.com security.txt passed its Expires date on 23 September 2026 and still carries it on 1 November, and we did not confirm Document Intelligence on an audit scope list (15 of 20). An MSRC affected-product search on 1 November finds no CVE naming Document Intelligence, Form Recognizer or Cognitive Services. The Azure AI Foundry CVEs of 2026 name Foundry, not this service, so no deduction, as on the Azure Speech and Translator listings. 30+14+0+12+15 = 71.

Datalab 56

Several hashed API keys with per-key 30-day spend caps, revoke-and-replace rotation, no scopes (24 of 30). Spend caps limit damage; results and files can be deleted by the key holder, and there's no read-only key (10 of 20). Returns document text with no prompt-injection guidance (2 of 15). cost_breakdown per request and usage tracking in the dashboard (8 of 15). A Secureframe trust centre and a SOC 2 report on the Team plan, TOTP enforcement for teams; no disclosure policy or security.txt found (12 of 20). 24+10+2+8+12 = 56.

Azure Document Intelligence 79

Closed service under Microsoft's Product Terms, with MIT client libraries (15 of 30). The data privacy page, dated 22 July 2026, says data is processed in the resource's region, held with results for 24 hours in storage shared by customers in that region and logically isolated, then deleted, with a delete call for earlier removal. It says nothing on whether documents are used to improve the service, the Product Terms' training clause covers generative AI services only, and we did not read the Data Protection Addendum (22 of 30). The overview gives a version table with dated retirements, v2.1 on 15 September 2027, announced three years ahead, and v3.0 on 30 March 2029 (20). Processing stays in the resource's region. The sub-processor list is on the Service Trust Portal, which we did not read (12 of 20).

Datalab 68

Closed service under terms effective 30 June 2026 naming Endless Labs, Inc. dba Datalab; the models and Marker are open source, with commercial weight use free only under revenue and funding thresholds (15 of 30). Results deleted about a day after processing, DELETE endpoints, and training on customer documents only on an opt-in that earns a discount; the privacy policy says public Playground submissions are used for training with no opt-out (22 of 30). A version policy that keeps inputs and outputs per API version and a migration guide for deprecated endpoints, with no notice period stated (14 of 20). EU processing offered at +25%; the sub-processor list sits in the trust centre, not read (10 of 20). 15+22+14+10 = 61.

Azure Document Intelligence 64

API reading. pages limits what is analysed, outputContentFormat=markdown gives one Markdown string and add-ons are off unless asked for. The result still carries every word and line with polygons, with no field selection, and the limits page allows a response of up to 500 MB (14 of 25). List calls page with nextLink. No filter on models or operations, and an analysis result comes back whole (12 of 20). Errors are JSON with a code, a message and an inner code such as InvalidContentLength or ModelNotReady that says what to change (16 of 20). No idempotency key, so a repeated POST starts and bills a second analysis. Results stay for 24 hours, so polling again is safe (10 of 20). A call needs only a model ID, api-version and a URL or bytes, and SDKs exist for Python, JavaScript, .NET and Java. Every analysis takes a POST and at least one GET (12 of 15).

Datalab 73

Output as Markdown, HTML, JSON or chunks, page_range to limit pages, and cost_breakdown on results (20 of 25). File listing and pipeline endpoints, little else to paginate (14 of 20). Typed errors with retry guidance an agent can follow (18 of 20). No idempotency key; the docs say to poll a known request ID instead of resubmitting, and webhooks may be retried (12 of 20). Official Python SDK and CLI, one language (9 of 15). 20+14+18+12+9 = 73.