Data Security

Is dbdiagram SOC2-compliant?

Holistics is SOC2 Type II compliant. We’ve achieved our SOC 2 Report by partnering with Prescient Assurance, an independent auditor, and Vanta - the leading automated security platform - for continuous SOC2 compliance monitoring.

You can read the official blog post for more information. Please fill out this form to get access to our SOC2 report.

Where are dbdiagram' servers located?

Our servers are hosted with reputable data center providers in EU (Frankfurt).

Data Backup Policy

Data backup is performed regularly throughout the day. Backup data will be stored on another backup server to ensure data availability and recovery in case of any system failures.

Data Retention Policy

The data of users will be encrypted and stored in our database servers. The data will be removed entirely from our database if they delete their account.

You can delete your account and all associated data at any time from your account settings. See Remove your account.

How is my data protected?

Your data is encrypted both in transit and at rest. Internal access to production systems is limited to authorized personnel and governed by the controls covered in our SOC 2 Type II audit.

Is dbdiagram HIPAA-compliant?

dbdiagram is not HIPAA certified, but in practice this rarely affects teams in healthcare, because there is no patient data in dbdiagram to protect.

dbdiagram stores only the schema structure you author yourself: table names, column names, data types, and the relationships between them. Your table rows and column values are never sent to us, so no PHI or other sensitive records reach our systems in the first place.

Can you support our security review?

Yes. We can provide our SOC 2 Type II report and our Vendor Information Security Questionnaire, which together cover most assessment requirements, and we'll answer any remaining questions directly.

To get started, submit a request for our Custom plan.