Security & privacy
Short version: your network diagrams never leave your computer. The editor runs entirely in your browser. We never
receive, store or see your topology, IP addresses, hostnames, VLANs, circuit IDs, serial numbers or anything else you type into a
diagram. Not in plain text, not encrypted, not in backups. We have no copy to lose.
Why this matters for network diagrams
A network diagram is a map for an attacker: where the firewalls sit, which management addresses reach which switches, which public IPs and circuits face the Internet, and what is running on each device. Documentation like that belongs under your control, not in another company's database. So NetworkSketch was designed so that we never hold it.
What stays on your computer
- Everything you put in a diagram: devices, hostnames, management and public IPs, VLANs, subnets, interfaces, circuit IDs, serial numbers, addresses, notes.
- Diagram files you save. They're written directly to the location you choose.
- The network check, auto-arrange, and PDF, PNG and CSV exports. They all run in your browser, not on a server.
- Optional autosave. The open diagram is kept in your browser's local storage on your device so a closed tab doesn't lose work. You can turn it off and clear it at any time from the account menu.
What we store
| Data | Why | Where |
|---|---|---|
| Email address | Your account and sign-in links | Our database (Cloudflare) |
| Sign-in sessions (hashed) | Keeping you signed in; limiting each account to one device at a time | Our database (Cloudflare) |
| Subscription status and plan | Knowing whether your account is active | Our database (Cloudflare) |
| Payment details | Billing | Stripe only. We never see or store card numbers. |
There is no database table, file store or API endpoint for diagram content.
How it's enforced
- No upload path. The only server calls the editor makes are “am I signed in and subscribed?”, sign-out, and opening Stripe's billing pages.
- Strict Content Security Policy. The browser is instructed to block the page from connecting to any server other than ours, and from loading any outside scripts.
- No third-party scripts. No analytics, ad trackers, chat widgets or session recording.
- No request logging on our API, and sign-in links and sessions are stored only as one-way hashes.
- Encrypted in transit (HTTPS with HSTS).
Verify it yourself
Open your browser's developer tools (F12), go to the Network tab, and build, check or export a diagram. You'll see no requests carrying your diagram. Your IT or security team is welcome to review this.
Questions
Email support@networksketch.com.