Is draw.io safe?

Clean risk

Creates and edits diagrams online with files stored in Google Drive.

This extension provides an online diagram editor for flowcharts, UML, entity relation diagrams, network diagrams, mockups, and more. It works around Google Drive for storage and can import .vsdx, .vsd, Gliffy, and Lucidchart files. The listed permissions indicate support for multiple interface languages.

JGraphv24.4.14Chrome Web Store
0Risk
Who publishes it

JGraph Ltd - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
JGraph
Declared legal entity
JGraph Ltd
Registered address
Artisans House, 7 Queensbridge, Northampton NN4 7BF, GB
Registered contact
JGraph Ltd

Same store account

2 other listings published from this account, 60k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 24.4.14. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store an unlimited amount of data in your browser

    unlimitedStorage

Where it sends data

Destinations our analysis observed draw.io contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • Google Drivewidely used

    draw.io sends data to Google Drive. Named as a recipient by 38 other extensions we have analysed.

Updated 30 September 2026onlkggianjhjenigcpigpjehhpplldkc