Every record carries a tenant identifier and is covered by a database-enforced row-level security policy. Application code cannot leak another tenant's data because it is never handed it.
Roles, permissions and the audit trail are platform primitives. The audit record is append-only — no role can edit or delete history.
Permission control at object, field and record level, driven by role, group and relationship to the record - not just coarse tiers of read, write and admin.
Portfolio financial data, salary-implied resource rates and commercially sensitive tender information all live in the same system as routine task data.
Immutable logging of every material action - who changed what, when, from what value to what value - retained per policy and exportable for audit.
Non-negotiable for governance credibility.
Single sign-on via SAML or OIDC against the corporate identity provider, plus SCIM automated user provisioning and de-provisioning driven by directory group membership.
Manual user administration does not scale and creates a real security exposure - leavers retaining access.
The ability to change object models, fields, layouts, workflows, lifecycles, permissions and reports through administrative configuration rather than development or vendor services.
This is the largest hidden cost differentiator in the whole comparison.
Pre-built or supported integration with the corporate ERP for cost actuals, commitments, purchase orders, cost centres, vendors and employee master data.
Manual re-keying of financial actuals is slow, error-prone and always late.
Import and where relevant round-trip of schedules from Microsoft Project (.mpp, XML) and Primavera (XER, P6 XML), preserving structure, dependencies and resource assignments.
Contractors and suppliers submit schedules in these formats - universally so in construction and infrastructure.
Built-in reporting and analytics - custom report building, cross-object queries, calculated fields, visualisation and scheduled distribution - without an external BI tool.
Determines how much of your reporting need is met in-platform versus requiring an external tool, extra licences and a data pipeline to maintain.
A supported connector or data warehouse feed exposing the underlying data model to external BI tools.
Enterprise reporting almost always ends up in Power BI.
Embedded AI - natural-language querying, generated status narrative, risk prediction, document summarisation - and agentic capability that takes actions rather than only producing text.
The fastest-moving area in the 2026 market and the one where marketing most outruns capability.
A documented, versioned REST API covering read and write across the object model, with authentication, rate limits and webhooks for event-driven integration.
The API determines whether the platform can integrate with your ERP, your existing PMO platform and your BI stack.
The ability to specify where data is stored and processed, including which cloud regions are offered and where AI processing occurs.
Relevant to Egyptian and EU data-handling obligations and to client contracts that specify data location.
Availability of a self-hosted or private-cloud deployment rather than multi-tenant SaaS only.
Matters where regulatory, client-contractual or sovereignty requirements preclude public cloud.
Full Arabic interface localisation with proper right-to-left rendering, plus Arabic content entry, search, sorting and correct rendering in reports and exports.
Directly relevant given Arabic is the working language for internal and technical documentation.
The availability of certified implementation partners, and specifically whether any operate in or near your region with local-language capability.
Implementation risk is where PPM programmes fail.
Every capability above states the lowest plan that includes it. Nothing here is an add-on and nothing is metered.
The full matrix shows all 71 capabilities and the lowest plan that includes each one.
