Security / trust page — Excalidraw+

Cited by

Facts read from this source

• Github security integration Report an error

  “We are using Github to keep up with security updates & scan for vulnerabilities.”

• Ci key scanning Report an error

  “We scan for service role keys during CI build and filter build process environment variables to ensure only those currently needed are used.”

• Encryption at rest Report an error

  “Excalidraw+ customers' data is secured using AES-256 encryption at rest and TLS encryption in transit.”

• Application level encryption Report an error

  “Additionally, sensitive details such as access tokens and keys undergo encryption at the application level before database storage.”

• Free e2e encryption Report an error

  “Free Excalidraw user's data are stored locally, and when shared protected by End-to-End encryption.”

• Role based access control Report an error

  “Organizational members in Excalidraw can be authorized to access specific resources.”

• Admin controls Report an error

  “Admins can control access, sharing & AI usage for the whole workspace and all its members.”

• Daily backups Report an error

  “All customer databases are backed up every day.”

• Point in time recovery Report an error

  “Point in Time Recovery allows restoring the database for 14 days.”

• Payment processor stripe Report an error

  “Excalidraw processes payments through Stripe and does not retain any personal credit card details of customers.”

• Stripe pci level1 Report an error

  “Stripe holds a highly recognized PCI Service Provider Level 1 certification.”

• Vulnerability scanning tools Report an error

  “Next to internal security reviews, we use various tools to scan our code for vulnerabilities including GitHub, Vanta.”

• Penetration testing Report an error

  “Yearly penetration testing”

• SOC 2 Report an error

  “We are currently SOC2 Type 1 & Type 2 compliant. You can find the report in our Trust Center.”

• Analytics privacy Report an error

  “We prioritize privacy, using GDPR-compliant SimpleAnalytics for tracking and self-hosted Umami for in-app usage and tooling tracking.”

• Status page Report an error

  “Our servers and services are automatically monitored and publicly accessible at the status page”

• Enterprise coming soon Report an error

  “Simply with Excalidraw Enterprise. coming soon”

• DPA available Report an error

  “Data Processing Agreement (DPA) DORA Addendum”

Scores citing this record

• The Microsoft 365 Admin Sharing, permissions & administration
• The Microsoft 365 Admin Security, AI controls & deployment
• The Microsoft 365 Admin Pricing transparency
• The Product Team Lead Sharing, permissions & administration
• The Product Team Lead Security, AI controls & deployment
• The Public-Sector Project Lead Sharing, permissions & administration
• The Public-Sector Project Lead Security, AI controls & deployment
• The Public-Sector Project Lead Pricing transparency
• The Skeptic Sharing, permissions & administration
• The Skeptic Security, AI controls & deployment
• The Works Council Member Sharing, permissions & administration
• The Works Council Member Security, AI controls & deployment
• The Workshop Facilitator Sharing, permissions & administration
• The Workshop Facilitator Security, AI controls & deployment
• The Workshop Facilitator Pricing transparency