Security and privacy

Updated
View as text
Open in Confluence
Open in ChatGPT Open in Claude

This branch exists because security reviews are a real part of choosing software, and vague reassurance wastes everybody's time. Each page below answers one question precisely, including the ones where the honest answer is "yes, that leaves your site, and here is how to stop it".

If you only read one page, read Security overview. It is written to be forwarded.

#The short version

Question

Answer

Where is diagram source stored?

In your Confluence site, as attachments and custom content

Who can see a diagram?

Whoever can see the page. There is no second permission model

What leaves the tenant?

Text diagram source for rendering, and whatever you send to AI

Can we stop that?

Yes: self-host the renderer, and switch AI off

Do draw.io and Excalidraw send anything?

No. They render entirely in the browser

#Every answer in detail

Security overviewA one page answer for a security review: where diagram data lives, what leaves your tenant, and the switches.Where diagrams are storedDiagram source is kept in your Confluence site as page attachments and app content, not in our database.draw.io XML inside PNG filesdraw.io diagrams keep editable XML inside the PNG itself. What that means for sharing and re-opening.Stored previews and thumbnailsIndexing attaches a rendered SVG preview to each diagram so pages and logged out readers can show it.What leaves your Confluence siteWhich languages render in the browser, which send source to the render service, and what AI and Rovo receive.Domains we connect toThe exact hosts Capable Diagrams connects to from the browser and the backend, and what each carries.Customer managed egressApproving your own domain means the browser fetches it directly, which is faster but skips the proxy guards.Anonymous and guest viewersLogged out readers never get an API token, so text diagrams come from the stored preview attachment.Scopes and permissionsThe Forge scopes the app requests, what each is for, and why stripping its space permissions breaks it quietly.AI and your diagram dataWhat is sent when you generate, edit or ask about a diagram, and the one switch that stops all of it.Hosting and data residencyWhere the Capable Diagrams services run and where to find our current trust and compliance documents.

Precise beats reassuring.