PRODSovereign European BaaS platformOpen Dashboard →

Native AI · 8 min read

Convex, Nhost vector search vs Aurabase NL2SQL

Affane Daylami · Fondateur · March 2, 2026

Back to blog

Both Convex and Nhost added vector search to their backend sometime in 2026. Aurabase covers this same ground with native pgvector — and goes further with a native NL2SQL endpoint that translates a natural language question into tree-validated SQL, executed as read-only. Here's what really distinguishes the three approaches.

This English text was generated automatically from the French original and has not been reviewed yet.

The essentials

Aurabase: native pgvector (3 dimension classes 768/1536/3072), RAG integrated via ragIngest()/rag(), and above all a native NL2SQL endpoint validated by syntactic tree. Convex and Nhost both offer solid vector search — but neither exhibits native NL2SQL in the strict sense: translating a natural language question into a validated, bounded SQL query, executed as read-only.

#
Native NL2SQL

The differentiator that neither competitor covers

The Aurabase NL2SQL endpoint validates each query generated by an LLM via a syntax tree (crate sqlparser): only SELECT, a list of authorized functions, a bounded LIMIT by default, and an explicit rejection of schema fields that the client would try to usurp. This is not a connector assembled on top of the backend — this is verified in the aura-aicode.

Convex has no equivalent — its database is not SQL, the question is not asked in the same terms. Nhost offers an AI assistant with access to the GraphQL schema, but not an NL2SQL endpoint exposed to your end users with a documented security contract. See our complete definition of NL2SQL and our article on securing against SQL injection generated by an LLM.

#
Vector search

native pgvector, without separate vector base to operate

Aurabase embeds pgvector directly into its Postgres 16 tenant image, with a native RAG pipeline — ingestion, chunking, embeddings, HNSW index per dimension class — exposed via two API calls, ragIngest() and rag(). See our complete RAG pipeline tutorial.

Convex offers robust embedded vector search, with reusable RAG and Agent components and configurable OpenAI embeddings support. Nhost automatically generates and maintains vector embeddings for semantic search. All three platforms cover this ground — the difference is in what comes after the vector search, not the search itself.

#
LLM Providers

Three native clients, not a generic router

Aurabase natively integrates OpenAI, Anthropic and Gemini — each with a dedicated client in aura-ai, with automatic circuit breaker failover in the event of a provider failure. See our article on native providers vs OpenAI compatible endpoints for the exact details of this distinction.

#
Overview

What distinguishes the three AI approaches

Native NL2SQLYes — validated by syntax treeNo (Convex, Nhost)
Vector searchnative pgvector, HNSW per dimensionYes, solid in both
RAGNative, 2 API callsReusable components (Convex)
DatabasePostgreSQL 16 standardNon-SQL (Convex) / Postgres+Hasura (Nhost)
Native LLM Providers3 (OpenAI, Anthropic, Gemini)Undocumented equivalent
No mocking tone, a verified fact

Convex and Nhost are truly investing in their respective AI capabilities — their vector search is mature and documented. Native NL2SQL remains, to this day, ground that neither of the two covers in the strict sense.

#
Frequently Asked Questions

FAQs

Does Convex offer native NL2SQL?+
No. Convex exposes vector search and reusable RAG/Agent components, but its database is not SQL — there is no NL2SQL equivalent in the sense of a natural language question translated into a validated SQL query.
Does Nhost offer native NL2SQL?+
No. Nhost offers an AI assistant with GraphQL schema access and auto-generated vector embeddings, but no native NL2SQL endpoint exposed to your end users with a documented security contract.
What makes NL2SQL Aurabase native rather than an added connector?+
Validation is done by syntax tree directly in aura-ai, with strict restriction to SELECT queries, a bounded LIMIT and rejection of schema fields usurped by the client — verified in the code, not a call to a third-party service assembled on top of the backend.

READY TO DEPLOY?

Your backend in five minutes.

No credit card required · 500 MB free · 50,000 MAU