# Miro privacy rating

An online collaborative whiteboard for diagrams, sticky notes, mind maps, flowcharts and workshops, with templates, AI features and desktop and mobile apps.

## Summary

Miro scores 34 out of 100 (grade F) on the diagrams and whiteboards criteria. It meets 2 of 8 criteria: tells users about requests and TLS configuration. It partly meets no ads or data sales, independent audit and security headers. It does not meet open source, no trackers or telemetry and transparency report. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://miro.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Web, Windows, macOS, Android, iOS
- Home page trackers: Google Fonts (not scored), Google Tag Manager, OneTrust (not scored), YouTube embed (not scored)
- Category: [Diagrams and whiteboards](https://privacyratings.com/diagrams/)
- Grade: F (34/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The website loads Google Tag Manager, and the privacy policy describes third-party advertising and analytics services that use cookies and trackers. | https://miro.com/legal/privacy-policy/ |
| No ads or data sales | Partial | Sold by subscription, but the privacy policy says it uses cookies and trackers with advertising partners for interest-based advertising of its own service. | https://miro.com/legal/privacy-policy/ |
| Independent audit | Partial | Holds SOC 2 Type II, ISO 27001 and ISO 42001 certifications, with reports available on request through its trust center rather than published. | https://trust.miro.com/ |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | Yes | The terms of service say Miro notifies the customer in advance of legally required disclosures of customer content when the law permits. | https://miro.com/legal/terms-of-service/ |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=miro.com&hideResults=on |
| Security headers | Partial | Grade B (70/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=miro.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/diagrams/miro/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/diagrams/miro.md