Lucidchart is a web-based proprietary platform that is used to allow users who are located in multiple locations to collaborate with their colleagues in drawing, revising and sharing charts and diagrams.
What is the hosting environment or service model used to run your app?
Iaas
Which hosting cloud providers does the app use?
Aws
Customer support contact.
support@lucid.co
Questions
Questions or updates to any of the information you see here? Contact us!
How the app handles data
This information has been provided by Lucid Software Inc about how this app collects and stores organizational data and the control that your organization will have over the data the app collects.
Information
Response
Does the app or underlying infrastructure process any data relating to a Microsoft customer or their device?
Yes
What data is processed by your app?
Microsoft user ids and pasted links that match our domain
Does the app support TLS 1.1 or higher?
Yes
Does the app or underlying infrastructure store any Microsoft customer data?
Yes
What data is stored in your databases?
Microsoft user ids
If underlying infastructure processes or stores Microsoft customer data, where is this data geographically stored?
United States of America, Germany, Australia
Do you have an established data rentention and disposal process?
Yes
How long is data retained after account termination?
Less than 90days
Do you have an established data access management process?
Yes
Do you transfer customer data or customer content to third parties or sub-processors?
No
Questions
Questions or updates to any of the information you see here? Contact us!
Does the app perform automated decision making, including profiling that could have a legal effect or similar impact?
No
Does the app process customer data for a secondary purpose not described in the privacy notice (i.e. marketing, analytics)?
No
Do you process special categories of sensitive data (i.e. racial or ethnic origin, political opinion, religious or philosophical beliefs, genetic or biometric data, health data) or categories of data subject to breach notification laws?
No
Does the app collect or process data from minors (i.e., individuals under the age of 16)?
Yes
Is consent obtained from a parent or legal guardian?
Yes
Does the app have capabilities to delete an individual's personal data upon request?
Yes
Does the app have capabilities to restrict or limit the processing of an individual's personal data upon request?
No
Does the app provide individuals the ability to correct or update their personal data?
Yes
Are regular data security and privacy reviews performed (for example, Data Protection Impact Assessments or privacy risk assessments) to identify risks related to the processing of personal data for the app?
Yes
Questions
Questions or updates to any of the information you see here? Contact us!
Information
Response
Does your application integrate with Microsoft identity platform (Microsoft Entra ID) for single-sign on, API access, etc.?
Yes
Have you reviewed and complied with all applicable best practices outlined in the Microsoft identity platform integration checklist?
Yes
Does your app use the latest version of MSAL (Microsoft Authentication Library) or Microsoft Identity Web for authentication?
No
Does your app support Conditional Access policies?
No
If your app does not use one of the above libraries, what authentication library or libraries does it use?
We use version 2.2
Does your app support Continuous Access Evaluation (CAE)
N/A
Does your app store any credentials in code?
No
Apps and add-ins for Microsoft 365 might use additional Microsoft APIs outside of Microsoft Graph. Does your app or add-in use additional Microsoft APIs?
No
Data access using Microsoft Graph
Graph Permission
Permission Type
Justification
Microsoft Entra App ID
email
delegated
We need this to connect the Microsoft user to a Lucid user.