Virtual Whiteboards & Diagramming
4.8/5.0
VerifiedFreeLast technical review:
Markdown for AI (.md)

draw.io

Open-source professional diagramming software focused on user privacy.

Pricing

$0/mo

Free
Score

4.8/5

License
Apache-2.0
Last technical review
2026-10-28
Available plansVisit website (opens in a new tab)

Technical Overview

draw.io is a versatile, open-source (Apache 2.0) diagramming tool for flowcharts, UML, network diagrams, and system architecture. It prioritizes user privacy by allowing data to be stored locally or in third-party storage providers, with no external server intervention. It integrates natively into major professional ecosystems like Google Drive, Microsoft Teams, Atlassian suites, and VS Code.

Analyst Evaluation: Pros and Limitations

Verified Advantages

  • Open data model with zero vendor lock-in risk.
  • Extensive native integration with enterprise tools like Atlassian and Microsoft.
  • Apache 2.0 licensing ensures transparency and self-hosting capability.

Technical Considerations

  • User interface can feel cluttered due to high tool density.
  • Enterprise support depends on third-party vendors for specific integrations.

Technical Capabilities & Features

5/7
Included:REST & GraphQL API
Included:SSO / SAML Authentication
Included:Self-Hosted Option
Included:Full Data Export
Included:Role-Based Access Control (RBAC)
Not available:Custom Domains & SSL
Not available:Immutable Audit Logs
Scorecard
Show detailsHide details

Technical Scorecard: draw.io

85/100
DX & Tech Documentation
Excellent
91/100
Pricing Fairness
Excellent
96/100
Security & Governance
Favorable
77/100
Data Portability & Sovereignty
Favorable
71/100
Performance & Reliability
Excellent
91/100
Pricing & TCO
Show detailsHide details

Pricing

$0.00/mo

Model: FREE.

Free Tier Verification:

  • No credit card required
  • Commercial use allowed
  • Unlimited usage with no expiration
  • No mandatory watermarks
Get draw.io (opens in a new tab)

Billing Risks & Hidden Clauses: draw.io

Audited Billing Critical Points:
  • None, the tool is fully open source without hidden paywalls.
Total Cost of Ownership (TCO) Projection: draw.io$0.00/mo
Deterministic cost estimation at 12 and 36 months based on team size, including SSO tax premiums and annual prepay discounts.
Show detailsHide details
Licensing Cost (1 to 100+ seats)
$0/forever
Unlimited team members with zero penalties
SSO Tax (SAML Enterprise)
$0no surcharge
No artificial security barriers
3-Year Investment (Software TCO)
$0total
operates under a zero-cost or open-source model. Licensing TCO is identical:
Usage Surcharges & Bill Shock Simulator: draw.ioWhat usage costs as you scale
Detect overage penalties before they impact engineering budget.
Show detailsHide details

Prototype / MVP (10 GB)

Included base quota in plan: 10 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Suitable for development; verify concurrent connection limits.

Base Production (50 GB)

Included base quota in plan: 50 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Implement table compression policies and temporal partitioning.

Active Growth (250 GB)

Included base quota in plan: 250 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Offload cold backups to standard object storage (S3).

Large Scale (1.000 GB (1 TB))

Included base quota in plan: 1,000 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Migrate to dedicated instance or self-hosted cluster to curtail I/O fees.

Security & Data Exit
Show detailsHide details

Compliance & Security Standards: draw.io

SOC 2 Type IINot reported
ISO 27001Not reported
GDPR / RGPDNot reported
HIPAANot reported
PCI-DSSNot reported
Jurisdiction & Legal Sovereignty
🇺🇸United States [US]Subject to US CLOUD ActGDPR DPA Available
SSO Availability (SAML Enterprise)
No SSO Documented
Data Residency
SELF_HOSTEDEUUSAWS
AI Privacy Policy
Not evaluated
Data Liberation & Migration Runbook: draw.ioPG_DUMP · JSON · CSV
Actionable escape runbook and credential export guarantees to mitigate vendor lock-in.
Show detailsHide details
Supported Structured Export Formats
PG_DUMPJSONCSVPARQUET
Password Hash Portability
Exportable Hashes (Bcrypt / Argon2): Zero Forced Retention

Allows extracting password hashes in standard formats to migrate without forcing user resets.

CLI Command / Rescue Endpoint
docker exec -t draw-io pg_dump -U postgres > backup.sql
Exit Protocol & Migration Notes

Direct database-level export without proprietary password encryption.

Deployment & Infrastructure Requirements: draw.ioApache-2.0
Hardware specs and Docker directives to run on local servers, dedicated VPS, or Kubernetes without telemetry leak to the cloud.
Show detailsHide details
Minimum Memory1 GB RAM (Recommended)
Compute CPU1 vCPU
Runtime / LanguageJavaScript
Code LicenseApache-2.0
Docker CLI Directive
docker run -d --name draw-io -p 8080:8080 draw-io:latest
Companion Services & Dependencies:
PostgreSQL 15+Redis 7+
Community & Repository
Show detailsHide details

Technical Reputation of draw.io

89/100 Technical Trust

Frequent Praises in Production

  • Open data model with zero vendor lock-in risk.
  • Extensive native integration with enterprise tools like Atlassian and Microsoft.
  • Apache 2.0 licensing ensures transparency and self-hosting capability.

Reported Production Frictions

  • User interface can feel cluttered due to high tool density.
  • Enterprise support depends on third-party vendors for specific integrations.
Commercial Treatment & Vendor Lock-in:1-Click Cancellation

Immediate cancellation from account settings without phone calls or forced retention.

Open source repository activity: draw.io9,026
Stars, forks and release cadence
Show detailsHide details
Stars9.0k
Forks1.3k
Open Issues40
SPDX LicenseApache-2.0
Latest Commit DetectedOct 23, 2026

Frequently Asked Technical Questions (draw.io)

Is draw.io truly free for enterprise use?

Yes, draw.io is free. The Apache 2.0 license permits commercial use, modification, and distribution without license fees or artificial barriers like paywalls for core security features.

Where are my diagrams stored?

You control storage. Files can be saved locally on your device or in integrated cloud services like Google Drive, SharePoint, OneDrive, or GitHub repositories.

Does draw.io have access to my diagram data?

No. As a client-side or locally-run tool, draw.io does not store diagrams on its own servers, ensuring the company has no access to your confidential information.

Direct Alternatives

All tools in draw.io
Embed Verification Badge
Official Badge
Show detailsHide details
TheJudex Verified - draw.io