# Diagrams and whiteboards privacy ratings

Diagram editors and online whiteboards.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [draw.io](https://privacyratings.com/diagrams/draw-io/) | B (80/100) | United Kingdom (Five Eyes) | An open-source diagramming app for flowcharts, UML, network and architecture diagrams that runs in the browser or as a desktop app, and saves files to the device or to a storage service the user chooses. |
| [Mermaid](https://privacyratings.com/diagrams/mermaid/) | B (80/100) | Unknown | An open-source JavaScript library that renders flowcharts, sequence, class, Gantt and other diagrams from Markdown-like text definitions. It is built into many documentation tools and code hosting sites. |
| [Excalidraw](https://privacyratings.com/diagrams/excalidraw/) | C (65/100) | Czechia | An open-source virtual whiteboard for sketching hand-drawn style diagrams in the browser. Drawings are stored locally, and shared links and live collaboration are end-to-end encrypted. A paid hosted workspace, Excalidraw+, is also offered. |
| [Microsoft Visio](https://privacyratings.com/diagrams/microsoft-visio/) | D (56/100) | United States (Five Eyes) | Microsoft's diagramming app for flowcharts, org charts, floor plans and network diagrams, available as a Windows desktop app and in the browser as part of Microsoft 365. Cloud files are stored in OneDrive or SharePoint. |
| [FigJam](https://privacyratings.com/diagrams/figjam/) | D (47/100) | United States (Five Eyes) | Figma's online whiteboard for brainstorming, diagrams, flowcharts and meetings, with sticky notes, templates, widgets and AI features, running in the browser and in Figma's apps. |
| [Lucidchart](https://privacyratings.com/diagrams/lucidchart/) | F (38/100) | United States (Five Eyes) | A web-based diagramming app from Lucid Software for flowcharts, org charts, network and architecture diagrams, with real-time collaboration, data linking and AI features. |
| [Miro](https://privacyratings.com/diagrams/miro/) | F (34/100) | United States (Five Eyes) | An online collaborative whiteboard for diagrams, sticky notes, mind maps, flowcharts and workshops, with templates, AI features and desktop and mobile apps. |
| [Mural](https://privacyratings.com/diagrams/mural/) | F (34/100) | United States (Five Eyes) | An online visual collaboration whiteboard for workshops, brainstorming, diagrams and planning, with templates, facilitation tools and AI features, plus desktop and mobile apps. |
| [Whimsical](https://privacyratings.com/diagrams/whimsical/) | F (31/100) | United States (Five Eyes) | An online workspace for flowcharts, mind maps, wireframes and diagrams on shared boards, with real-time collaboration, AI generation and desktop apps. |
| [PlantUML](https://privacyratings.com/diagrams/plantuml/) | F (30/100) | Unknown | An open-source Java tool that generates UML and other diagrams, such as sequence, class, activity, Gantt and mind maps, from plain-text descriptions. It runs locally or through a public or self-hosted rendering server. |
| [tldraw](https://privacyratings.com/diagrams/tldraw/) | F (29/100) | United States (Five Eyes) | A collaborative infinite-canvas whiteboard for sketching and diagramming in the browser, with optional accounts for saving and sharing files. It is built on the tldraw SDK, which developers can embed in their own apps. |
| [yEd](https://privacyratings.com/diagrams/yed/) | F (25/100) | Germany (Fourteen Eyes) | A free desktop diagram editor from yWorks for flowcharts, network diagrams, UML and org charts, known for its automatic layout algorithms. A browser version, yEd Live, is also available. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?
- **Transparency report** (weight 2): Does the provider regularly publish how many government and legal requests it receives and how it responds?
- **Tells users about requests** (weight 1): Does the provider promise to tell users about requests for their data, unless a court forbids it?
- **TLS configuration** (weight 2, automated): Does the website pass the Qualys SSL Labs test with a grade of A or better?
- **Security headers** (weight 1, automated): Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
- **Modern web standards** (weight 1, automated): Does the website score 90% or higher on the Internet.nl website test?

Source: https://privacyratings.com/diagrams/