The org chart tool that can't leak your data
Build, annotate, and share org charts from any CSV. Your data is encrypted before it leaves the browser — we literally cannot read it.
incl. free
no reformatting
free tier
vs $540+ elsewhere
From spreadsheet to org chart
in three steps
No special format required. Works with any HRIS export — Workday, BambooHR, or a plain spreadsheet.
Upload your CSV
Drag in your export. We preview the first five rows and auto-detect the data shape — Simple or Advanced mode.
Map columns once
We auto-suggest matches for common header names. Confirm or correct. The mapping is saved — next month's re-import is one click.
Explore & share
Navigate your chart, model restructures, export to PDF or SVG, and share via an encrypted link — the decryption key never touches our server.
Everything you need.
Nothing you don't.
Built for HR teams and people ops. Powerful enough for enterprise, simple enough for a 10-person startup.
Zero-knowledge encryption
Keys derived from your password via Argon2id. Data encrypted with XChaCha20 before upload. We store only encrypted bytes.
CSV import
Auto-detects columns from any HRIS. One-time mapping saved as a profile — re-import next month in one click.
Scenario modelling
Draft restructures in private. Side-by-side diff with colour-coded changes and redundancy cost analysis.
PDF & SVG export
Multi-page PDF with internal navigation links between departments. Unbranded on paid plans.
Shareable links
The decryption key lives after the # in the URL. Browsers never send # to servers. Zero-knowledge sharing.
Vacancy tracking
Vacant roles are first-class nodes. See headcount gaps at a glance. Advanced mode supports role sharing and interim appointments.
Change analytics
Diff two chart versions. Track affected headcount, reporting-line changes, and financial impact — all client-side.
Collaborative editing
One editor at a time with lock notices. Other users see the live read-only chart. No accidental overwrites.
Self-hosted (Company plan)
Deploy on your own infrastructure. SSO / SAML, Entra ID import, unlimited employees and version history.
Truly zero-knowledge.
Here's exactly how it works.
This isn't marketing copy. Here's the actual implementation.
You set a passphrase
Your browser derives a master key using Argon2id. The master key never leaves your device — not during login, not ever.
Data encrypted before upload
Your org chart is encrypted with XChaCha20-Poly1305 before it leaves the browser. Our server receives only opaque encrypted bytes. We cannot read them.
Share without exposing data
The decryption key is appended to the URL after #. Browsers never include the # fragment in requests to servers. Your recipients see the chart. We can't.
Private org charts. Finally.
Free forever. No credit card. Encrypted from day one.