3RD PARTY API EVALUATION FRAMEWORK

Basic Info

• Name
• What is for?
• Communication Protocol
• Based on OpenSource?
• Time on the market (maturity)

Authentication/Authorization

• Identity Store
• Identity Mechanism
• IP Whitelisting?
• Human Accounts vs Machine Accounts?

Cloud Vendor

• Runs on which cloud Vendor (public/private)?
• VPC Peering allowed?
• Decentralized?

Data Storage

• At Rest Encryption?
• Cryptography level (AES-256 Quantum Safe)?
• Ability to Eject and Terminate Contract?

Environments

• Sandbox?

Telemetry

• Observability Tooling? (eg. Cloudwatch logs, log dumps)
• External Audits?
• Compliance w/ GDPR and similar?

SLA

• Rate Limiting?
• Failover Protection?
• Data Limits?
• IOps Limits?
• Contracted SLA (eg. 99.9999)
• 1st Line Support Response Time
• 1st Line Support Time
• 2nd Line Support POC?

Pricing

• Billing Metric
• Available Plans (w/ limits)