Datalab vs OpenDocRouter

Datalab 68

Closed service under terms effective 30 June 2026 naming Endless Labs, Inc. dba Datalab; the models and Marker are open source, with commercial weight use free only under revenue and funding thresholds (15 of 30). Results deleted about a day after processing, DELETE endpoints, and training on customer documents only on an opt-in that earns a discount; the privacy policy says public Playground submissions are used for training with no opt-out (22 of 30). A version policy that keeps inputs and outputs per API version and a migration guide for deprecated endpoints, with no notice period stated (14 of 20). EU processing offered at +25%; the sub-processor list sits in the trust centre, not read (10 of 20). 15+22+14+10 = 61.

OpenDocRouter 49

Closed service under the LlamaIndex terms with an OpenDocRouter addendum, SDKs MIT (15). The docs, the OpenAPI document and the addendum agree that nothing is stored without cache: true, cached results are encrypted and kept 24 hours, uploads are deleted once read or after an hour, and request records are kept for billing. The terms say LlamaIndex trains no models on user content. No DPA or retention period for request records was found, and the privacy notice dates from March 2024 and doesn't mention the service (22 of 30). No deprecation policy. Recipe and price versions are dated, and the terms allow changes and price changes without notice (3 of 20). The addendum names Anthropic, Google and OpenAI as examples of model providers that receive pages, leaves its infrastructure providers unnamed and gives no data location beyond processing in the United States (5 of 20).

Datalab 56

Several hashed API keys with per-key 30-day spend caps, revoke-and-replace rotation, no scopes (24 of 30). Spend caps limit damage; results and files can be deleted by the key holder, and there's no read-only key (10 of 20). Returns document text with no prompt-injection guidance (2 of 15). cost_breakdown per request and usage tracking in the dashboard (8 of 15). A Secureframe trust centre and a SOC 2 report on the Team plan, TOTP enforcement for teams; no disclosure policy or security.txt found (12 of 20). 24+10+2+8+12 = 56.

OpenDocRouter 41

Bearer API keys created in the dashboard, and the terms say a key can be revoked. No scopes, expiry or rotation were found, and the dashboard needs a sign-in we didn't have (20 of 30). No read-only or restricted key found. One key can spend credit and read cached results, with spending bounded by the prepaid balance (6 of 20). The API returns untrusted document text and no prompt-injection guidance was found. Document URLs must be public HTTPS on the default port (0 of 15). GET /v1/parse/{id} shows what each request did and cost, and the docs mention a usage log keyed by X-Request-Id. No audit log found (8 of 15). SECURITY.md in both SDK repositories asks for private reports to security@runllama.ai, covering the SDK and the APIs it calls, with no acknowledgement time, which this run scores 7. No security.txt per the 8 October check, no advisories in OSV, and LlamaIndex's SOC 2 statement (read for llamaparse on 4 November) names the LlamaParse Platform, so no certification is confirmed for this service (7). 20+6+0+8+7 = 41.

Datalab 73

Output as Markdown, HTML, JSON or chunks, page_range to limit pages, and cost_breakdown on results (20 of 25). File listing and pipeline endpoints, little else to paginate (14 of 20). Typed errors with retry guidance an agent can follow (18 of 20). No idempotency key; the docs say to poll a known request ID instead of resubmitting, and webhooks may be retried (12 of 20). Official Python SDK and CLI, one language (9 of 15). 20+14+18+12+9 = 73.

OpenDocRouter 84

API reading. pages selects pages, markdown and layout are opt-in on GET through expand, and a poll returns no document text without it (22 of 25). Results over 4 MB come in parts with next_cursor, and pages and expand size the output. There is no endpoint to list past requests (16 of 20). Errors have stable codes, 402 includes required_usd and available_usd, 429 and 503 include Retry-After and every response has X-Request-Id (19 of 20). No idempotency key. cache: true returns stored pages free on a repeat and failed pages can be resent alone, but a sync request without the cache is charged again if resent (12 of 20). Two required fields, and official SDKs in Python and TypeScript (15).

Datalab 58

Hosted lines. Status page at status.datalab.to (incident.io) with Website and Datalab API components; the history page is drawn by script, so components are confirmed and history isn't (15 of 20, 5 for history). Rate limits per plan with numbers, plus page and size limits (15). 429 is retryable with sample backoff, and 500 and 529 say to check a known request ID before resubmitting; webhooks deduplicate by request_id (13 of 15). Custom SLAs only for Enterprise (0). Generally available (10). 15+5+15+13+0+10 = 58.

OpenDocRouter 68

Read with the hosted lines. The site still links no status page. LlamaIndex's Statuspage at llamaindex.statuspage.io lists LlamaParse Docs, API and UI components and none for OpenDocRouter. A vendor status page with no component for the product takes 15 in this run, as sentry-mcp and honeycomb-mcp do (15). Its history shows no incident in October or November 2026 and none naming OpenDocRouter. The service launched on 7 October 2026, so the record covers 28 days, read as a short record (15). Limits are published with numbers, 300 parse calls and 60 polls a minute and 10 requests running at once per account (15). 429 and 503 carry Retry-After per the docs, each page error is marked as worth retrying or not, and cache: true makes a repeated request free. There is no idempotency key, and without the cache a resend is charged again. Kept at 13 as partly met (13). No SLA found, and the terms allow changes with or without notice (0). The API is version 1 with 1.0.0 SDKs and no beta or preview label (10). 15+15+15+13+0+10 = 68.

Datalab 40

No x402, MPP or L402 (0). Per-1,000-page rates for every processor and add-on on the public pricing page (20). A $10 to $20 monthly allowance with no card (20). A person signs up in a browser (0). 0+20+20+0 = 40.

OpenDocRouter 30

No x402, MPP or L402 (0). Token prices for every model, an average and a maximum charge per page, the layout price and the 5% top-up fee are public on the models page and in the docs (20). New accounts get $5 of promotional credit. Whether a card is needed at sign-up isn't stated and the dashboard needs a sign-in (10 of 20, our call until that's confirmed). A person signs in through a browser to create a key (0).