Classification and AI ceiling
Every diagram has a classification: Public, Internal, Confidential or Restricted. It says what the diagram holds, not who sees it; sharing says who sees it. The level then decides what can leave: a public link, a guest, the Assistant, Claude.
On this page
The four levels
The four words are the same everywhere, printed in the title block and kept in exports. What each level allows depends on where the diagram lives.
| Level | In My diagrams | In an organisation |
|---|---|---|
| Public | Can be shown through a read-only link, without an account. | May leave the organisation: a public link is possible if your organisation allows it. |
| Internal | The default. No read-only link. | Internal use: named sharing, guests possible, no public link. |
| Confidential | Sensitive: printed in the title block; a sentence warns you at each invitation. The Assistant reads it if your settings allow it. | Sensitive: no guest and no link; the Assistant reads it if your organisation allows it. |
| Restricted | Very sensitive: printed in the title block, never read by the Assistant, no link. | Very sensitive: only the people named open it, the Assistant does not read it; an administrator reaches it only through traced emergency access. |
How a diagram gets its level
A diagram's level is the highest of three things: the level set on the diagram, the highest level set on one of its elements, and the organisation's floor. A new diagram starts at the organisation's default, Internal unless your organisation chose another one.
- Raise it: anyone who edits the diagram. Marking one element Confidential makes the whole diagram Confidential.
- Lower it: only the diagram's owner. In an organisation, a lower classification is recorded in the audit log.
- See why: the classification chip next to the diagram's name, or Classification…, shows the level, which elements raise it and what the Assistant may read.
Classification says what the diagram holds; Share says who sees it. A Confidential diagram shared with a colleague stays Confidential.
The AI ceiling
The AI ceiling is the highest level the Assistant may read. A diagram above it is never sent to the AI service: the Assistant says so on it and offers to change its classification. Restricted is never read, whatever the ceiling.
| Where the diagram lives | The Assistant reads up to | Who changes it |
|---|---|---|
| My diagrams (Free, Pro, Pro+) | Confidential | You, in your AI settings |
| Team | Confidential | An owner or a security administrator |
| Enterprise | Internal | An owner or a security administrator, and a second one approves a raise |
On your own, the app says The Assistant reads up to; in an organisation, AI ceiling. Lowering the ceiling takes effect at once; raising it needs a recent sign-in. See Turn on the Assistant for your organisation.
Claude and guests have their own limits
- Claude, connected through MCP, reads up to Confidential in My diagrams and up to Internal in Team and Enterprise organisations. Restricted diagrams are never shared. See Claude and MCP for your organisation.
- Guests of an organisation open diagrams up to Internal only.
- Read-only public links exist only for Public diagrams. See Read-only public links.
What this means for you
- Classify what the diagram holds, element by element when only one part is sensitive: a payment provider's credentials store, a customer database.
- Keep the default Internal for most work diagrams: they can be shared by name, reviewed, and read by the Assistant.
- Use Restricted rarely. It closes the diagram to the Assistant and to everyone not named.
- Check the ceiling before turning on the Assistant for your organisation: diagrams above it are left alone.
Was this page helpful?Your answer is anonymous and counts only if you accepted measurement.
What went wrong?
Don't write personal data.