Diagram Maker Pro

We understand that our customers need to be confident using Diagram Maker Pro, and be aware of our data collection practices. Diagram Maker Pro is a Microsoft 365 Copilot declarative agent that empowers users to create, edit, and visualize diagrams and flowcharts directly within Microsoft Copilot Chat using natural language — enabling collaborative visual communication without leaving the Copilot interface.

Note

This section is subject to change and we recommend that you check back quarterly for updates.

Licensing prerequisites

Microsoft 365 Copilot license required per user

A Microsoft 365 Copilot license is required per Diagram Maker Pro user. Every user who creates or edits diagrams through Diagram Maker Pro must be assigned one. Without a Copilot license, users cannot invoke Diagram Maker Pro through Microsoft 365 Copilot Chat.

The license is only needed for the people who actually use Diagram Maker Pro, not for every user in the tenant.

Requirement	Scope	Required
Microsoft 365 Copilot license	Per Diagram Maker Pro user	Yes
Diagram Maker Pro subscription (Microsoft AppSource)	Per tenant	Yes

Data Management Practices

Through the implementation of its different features, Diagram Maker Pro accesses, processes and stores several kinds of data:

• User profiles
• Diagram definitions and metadata
• Diagram source files (Mermaid, SVG, JSON)
• Collaboration and edit history
• Conversation history with the agent
• User interaction logs (anonymized)
• Marketplace subscription metadata

Here is how we're managing data for these different categories:

Data	Accessed	Cached	Stored	Backup	Notes
User profiles	✔	✔	🚫	🚫	Read at sign-in via Microsoft Graph (User.Read). Not persisted beyond the active session.
Diagram definitions	✔	✔	✔	✔	Diagram structure, shape data, and connections stored in Diagram Maker Pro's document store. Stored as long as the subscription is active.
Diagram source files	✔	✔	✔	✔	Original diagram files (Mermaid, SVG, JSON) stored for export, version control, and re-editing. Stored in tenant-isolated storage.
Collaboration history	✔	✔	✔	✔	Edit logs, version history, and collaboration metadata stored for audit trail. Stored as long as the subscription is active.
Conversation history	✔	✔	✔	✔	Agent conversation turns stored for audit trail and diagram creation history. Stored as long as the subscription is active.
User interaction logs	✔	✔	✔	✔	Anonymized interaction logs for usage analytics and feature optimization. Stored in anonymized form per tenant.
Marketplace subscription metadata	✔	✔	✔	✔	Received via Microsoft commercial marketplace SaaS webhooks. Stored for plan, status, and trial tracking.
Copilot Conversations	🚫	🚫	🚫	🚫	No access to other Copilot conversations. No cache. No storage.

No model training

No customer diagram data is used to train any AI or machine-learning model. Diagram Maker Pro only reads from user-provided natural language descriptions and generates Mermaid diagram output. No diagram content is sent to any third-party model provider, and no Witivio model is fine-tuned, indexed, or otherwise enriched with customer diagram data.

Tenant isolation

Tenant isolation is enforced in the data layer. Every record that belongs to a customer tenant (diagrams, subscription, conversation history) carries the caller's tenant context, and every query is filtered by that tenant.

Microsoft Graph

TIP

Permissions used are delegated permissions. Diagram Maker Pro operates on behalf of the authenticated user.

Scope	Description	Justification	Admin Consent Required
User.Read	Retrieve the properties and relationships of the signed-in user.	Allows Diagram Maker Pro to read user information and to identify the caller.	No

TIP

The Microsoft Entra ID App ID is: df3f7b0b-4265-46c5-946f-cabad2d0981c

Architecture and flow diagram

The agent receives diagram requests through Copilot Chat, interprets the natural language description, invokes plugin functions to generate Mermaid or SVG diagrams, stores diagram definitions, and returns visual output formatted for Copilot display.

Copilot Declarative Agent Configuration

Diagram Maker Pro exposes its capabilities to Microsoft 365 Copilot as a declarative agent with the following configuration:

Agent Definition

• File: declarativeAgent.json
• Schema: Microsoft Copilot declarative agent schema v1.5+
• Instructions: LLM instructions for interpreting diagram requests, converting natural language to Mermaid syntax, handling diagram refinements
• Conversation Starters:
  • "Create a flowchart for an approval process"
  • "Draw an organization chart for a team of 10"
  • "Design a Gantt chart for a 3-month project"
  • "Make a mind map for project planning"
  • "Create a sequence diagram for a login flow"

OpenAPI Plugin

• File: ai-plugin.json
• Schema: Microsoft Copilot plugin schema v2.4+
• Namespace: diagrammaker
• Functions exposed: Create diagram, edit diagram, export diagram, retrieve diagram

Plugin Runtime

• Type: OpenAPI
• Spec: openapi.yaml (OpenAPI 3.0+ specification)
• Authentication: OAuth 2.0 via OAuthPluginVault
  • Uses delegated user tokens (on-behalf-of flow)
  • No application credentials stored in the plugin
• Response Format: SVG or Mermaid diagram with interactive capabilities in Copilot UI

Plugin Functions

Function	Description	Input	Output
createDiagram	Create a new diagram from natural language description	Diagram type, description, style options	Mermaid syntax, SVG rendering, diagram ID
editDiagram	Modify an existing diagram based on user request	Diagram ID, edit instructions	Updated Mermaid syntax, SVG rendering
listDiagrams	List diagrams created by the user or in conversation	Optional filters	Diagram list with metadata
getDiagramDetails	Retrieve full definition and rendering of a diagram	Diagram ID	Mermaid source, SVG, metadata
exportDiagram	Export diagram in multiple formats	Diagram ID, target format (SVG, PNG, PDF, Mermaid)	File content or download link

The plugin interprets diagram requests, generates Mermaid syntax, renders diagrams as SVG, stores diagram definitions, and handles version control and export.

Diagram Format Support

Diagram Maker Pro supports creation and manipulation of:

Type	Format	Rendering
Flowcharts	Mermaid → SVG	Standard flowchart shapes and connectors
UML Diagrams	Mermaid → SVG	Class, sequence, state, use-case diagrams
Org Charts	Mermaid → SVG	Hierarchical organizational structures
Gantt Charts	Mermaid → SVG	Project timelines and dependencies
Mind Maps	Mermaid → SVG	Brainstorming and concept mapping
Sequence Diagrams	Mermaid → SVG	Interaction and message flows
State Diagrams	Mermaid → SVG	State machines and transitions
Entity Relationship	Mermaid → SVG	Database and system relationships
Pie Charts	Mermaid → SVG	Data distribution visualization
Bar Charts	Mermaid → SVG	Comparative data visualization

Trial subscriptions

A tenant on a Microsoft AppSource trial can invoke Diagram Maker Pro with the following limitations:

• Diagram complexity capped (limited nodes/connections)
• Export formats limited to SVG and Mermaid (PNG/PDF unavailable)
• Diagram storage limited (e.g., 10 diagrams maximum)
• A banner in responses indicates trial mode and expiration date
• Trials run for seven days by default

No data handling differs between trial and paid subscriptions.

Resource Endpoints

All traffic uses HTTPS protocol on port 443. Here is a short description of each flow:

Name	Comments
diagrammaker.teams-pro.com	Public Diagram Maker Pro plugin service endpoint. Accepts OpenAPI calls from Copilot with delegated user tokens.
graph.microsoft.com	Microsoft Graph — minimal usage (user.read for profile).
login.microsoftonline.com	Microsoft Entra ID — token acquisition, validation, and on-behalf-of exchange.
*.applicationinsights.azure.com	Application Insights telemetry (optional).
admin.teams-pro.com	Admin portal for subscription and configuration management.
subscriptions.witivio.com	Subscription validation and licensing.

All plugin invocation operates under the authenticated user's delegated permissions. Diagram Maker Pro stores diagram definitions but does not require access to user mailbox, calendar, or other Microsoft 365 services.

Security & Compliance

Diagram Maker Pro follows Microsoft 365 Copilot agent security and compliance standards:

• Delegated permissions only — minimal Graph access (user.read); no mailbox, calendar, or collaboration data access
• On-behalf-of token flow — user tokens obtained from Copilot for user identification only
• Tenant isolation — all diagrams and conversation history scoped to the tenant
• GDPR compliant — Azure-hosted in Europe, diagram data never persisted for external use
• No external training — diagram definitions never sent to external LLM providers or used for model fine-tuning
• Adaptive authentication — OAuth tokens managed per Microsoft Copilot's lifecycle