Privacy Ratings

Diagrams and whiteboards

Microsoft Visio privacy rating

Microsoft's diagramming app for flowcharts, org charts, floor plans and network diagrams, available as a Windows desktop app and in the browser as part of Microsoft 365. Cloud files are stored in OneDrive or SharePoint.

United States Five EyesPlatforms: Windows · Web

Summary

Microsoft Visio scores 56 out of 100 (grade D) on the diagrams and whiteboards criteria. It meets 5 of 8 criteria: no ads or data sales, transparency report, tells users about requests, TLS configuration and security headers. It partly meets independent audit. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

Score 56 out of 100. How scoring works

Criteria

  • No

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    Closed source.

  • No

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    Visio, like other Microsoft 365 apps, always sends required diagnostic data to Microsoft, which cannot be turned off.

    learn.microsoft.com

  • Yes

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Sold by subscription with no ads in Visio, and the privacy statement says personal files and documents are not used to target ads.

    microsoft.com

  • Partial

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    Microsoft 365 services have SOC 2 audits by an independent CPA firm. The reports are only available to customers through the Service Trust Portal.

    learn.microsoft.com

  • Yes

    Transparency report Weight 2 of 3

    Does the provider regularly publish how many government and legal requests it receives and how it responds?

    Publishes counts of government requests for consumer and enterprise data twice a year.

    microsoft.com

  • Yes

    Tells users about requests Weight 1 of 3

    Does the provider promise to tell users about requests for their data, unless a court forbids it?

    Microsoft notifies users and enterprise customers of requests for their data unless legally prohibited.

    microsoft.com

Automated tests

  • Yes

    TLS configuration Weight 2 of 3

    Does the website pass the Qualys SSL Labs test with a grade of A or better?

    Grade A+

    ssllabs.com

  • Yes

    Security headers Weight 1 of 3

    Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?

    Grade A+ (110/100+)

    developer.mozilla.org

  • Not tested yet

    Modern web standards Weight 1 of 3

    Does the website score 90% or higher on the Internet.nl website test?

    Not tested yet.

Other diagrams and whiteboards

All 12 diagrams and whiteboards