Live data from Hacker News

Draw.io: Online Diagramming Website

github.com

31–40 of 197 posts

Re: Draw.io: Online Diagramming Website

#31

Ok, just a note to everyone ! It is online service and your diagrams are stored in the "cloud" and you have zero control over it. Please, do not post your company's secret in form of diagrams. Recently, we caught one of the contractors using Draw.io to make diagrams of brand new systems that we are designing(we are fortune 40 company). System is expensive, very sensitive.

On the flip side, we use Google G Suite so the majority of our documents are stored with Google, and draw.io's cloud support seamlessly works with our G Suite drives.

Our G Suite administrators have plenty of control over the G Suite Google Drives that would be used with draw.io and our Google accounts.

The only bits of our data we don't trust with Google are PHI

Re: Draw.io: Online Diagramming Website

#34

Ok, just a note to everyone ! It is online service and your diagrams are stored in the "cloud" and you have zero control over it. Please, do not post your company's secret in form of diagrams. Recently, we caught one of the contractors using Draw.io to make diagrams of brand new systems that we are designing(we are fortune 40 company). System is expensive, very sensitive.

that is if you save it, it is my understanding the actual objects drawn and linked on screen are entirely stored in the DOM of your browser until you click "save" and send it to a cloud location. "saving" to your browser or device just creates a "download" of static blob data in a variable

i have confirmed this with a local instance of draw.io

Re: Draw.io: Online Diagramming Website

#36

Ok, just a note to everyone ! It is online service and your diagrams are stored in the "cloud" and you have zero control over it. Please, do not post your company's secret in form of diagrams. Recently, we caught one of the contractors using Draw.io to make diagrams of brand new systems that we are designing(we are fortune 40 company). System is expensive, very sensitive.

"cloud" != "public"

If you save it in your Google Drive, you can control who has access. Even better if it's your organization's GSuite

Re: Draw.io: Online Diagramming Website

#38
post #31

Ok, just a note to everyone ! It is online service and your diagrams are stored in the "cloud" and you have zero control over it. Please, do not post your company's secret in form of diagrams. Recently, we caught one of the contractors using Draw.io to make diagrams of brand new systems that we are designing(we are fortune 40 company). System is expensive, very sensitive.

On the flip side, we use Google G Suite so the majority of our documents are stored with Google, and draw.io's cloud support seamlessly works with our G Suite drives. Our G Suite administrators have plenty of control over the G Suite Google Drives that would be used with draw.io and our Google accounts. The only bits of our data we don't trust with Google are PHI

This is where my reply was going. Authenication to Google Drive is client-side and direct to google.com. There is no draw.io server anywhere that can access your Google Drive.

Re: Draw.io: Online Diagramming Website

#39
post #17

Creating a tool like this requires significant resources, is there a business model behind it?

The core team has a 15 year contract with an Atlassian consulting firm to produce and support the Confluence and Jira integrations with a revenue share model. Last financial year that earned us $3.1M, up from $1.8M the year before.

Thank you for keeping this open! It really is a gift to anyone who wants full control of their tools. I sometimes use it together with inkscape, tikz and graphviz.

I quite like the draw.io nextcloud app as well, though I guess it could also be a storage provider on the website for better integration :)

Re: Draw.io: Online Diagramming Website

#40
post #17

Creating a tool like this requires significant resources, is there a business model behind it?

The core team has a 15 year contract with an Atlassian consulting firm to produce and support the Confluence and Jira integrations with a revenue share model. Last financial year that earned us $3.1M, up from $1.8M the year before.

That's really great! It's really hard to find examples of business models built around free software that brings in straighforward revenue. Good luck!
Post reply on HN