Diagram protection

Cacoo uses HTTPS, which encrypts the data sent and received with SSL. Your diagrams on Cacoo are private, safe and secure unless you make them public or allow other users to view or edit them.

Server details

For security reasons, we don't publish the amount or specifications of our servers.

Mail servers' information

Emails from Cacoo are sent from the following IP addresses:


Please add these IP addresses if you restrict emails by the IP addresses.
You many refer to these information, listed on DNS as SPF record.

Security policy

We are committed to providing a secure environment to our customers.

We do not share your data with outside parties. Access to your data is limited to you and other users that you've allowed to access your work, except in the case of emergencies, i.e., fixing hardware problems.

We also periodically backup your data to prevent data loss.

We will delete your data immediately upon your request.

Systems and equipment

Data Center

The servers are located in a data center with 24/7/365 surveillance and security.


Our server has Linux installed.

Auto Updates of Security Patch

We maintain security by updating the server software to protect our users from security problems automatically.

We also have a reliable security system even if server software updates cannot occur automatically.

Disabling unnecessary services and ports

We disable unnecessary services that are initially programmed to start by default. We also publicize the minimum numbers of ports.


A firewall prevents unauthorized access to the server.

Encrypted data transfer by SSL

With SSL, the communication between the web browser and the server is encrypted. It helps to prevent your data getting lost, being edited, or spoofing.

Cacoo Security

Cacoo strives for higher security. We always verify the common attacks (such as XSS).

If there are any problems, we notify our users on the “bugs and requests” or “system failure information” websites immediately and deal with these problems promptly.

Access logs

We keep the access logs for a certain amount of time, but we don’t release this information to our customers.

How we deal with server outages

We monitor server reports 24/7. Our monitoring system notifies our operational team of system abnormalities. Our team follows up on reported abnormalities as soon as they come in.

We have an operational manual tailored for the event of a data center failure that will allow us to perform a rapid restoration.

Privacy policy

Please refer to the Nulab's Privacy Policy page.

How we backup data

To recover the data in case of server failure, we take record of backups in two ways:

  • Daily - backup recorded incrementally
  • Once a week - full database backup (4 generations of backups are stored.)

Both backups are stored on different servers and different media. The procedures for restoring data from the backup have been assured. Data backup is saved in a different data center from where the service is running.

In the case of failure, we will resume service with the backups.

System requirements

Cacoo can be used in the following environments.

[HTML5 version]

  • OS: Windows 7+ or Mac OS X
  • Web browsers: Microsoft Edge (After Creators Update), Safari 10.1 or older, Mozilla Firefox, and Google Chrome
    • The latest stable version of Mozilla Firefox or Google Chrome is recommended.

[Flash version]

Cacoo can be used in the following environments. We cannot guarantee this, but browsers on older versions should work, too.

  • OS: Windows 7+ or Mac OS X
  • Web browsers: Versions after Internet Explorer 9, Safari 5, Mozilla Firefox 3.6, and Google Chrome 6
  • Plugin: Flash Player 10.3 or newer

To use screenshots and PDF features, Cacoo Ninja needs to be installed on your Windows or Mac. Cacoo Ninja can be installed here.

If you are an Internet Explorer user and want to print diagrams, you’ll need to have Google Chrome Frame installed to display SVG. The IE printing page won't display the gradation of your diagrams.

Related topics:

Diagram and shape copyrights