{"format":"epicdraw-workspace","version":1,"charts":[{"id":"template-zero-trust-architecture-diagram","name":"Zero trust architecture diagram","paper":"white","pattern":"blank","wobble":0.22,"ppm":48,"nodes":[{"id":"zero-trust-architecture-diagram-n1","type":"lane","text":"","x":0,"y":0,"w":1720,"h":1110,"fill":"none","fst":"solid","seed":701,"font":"sans","fs":22,"bold":false,"lv":0,"lock":true,"z":-20,"ink":"navy"},{"id":"zero-trust-architecture-diagram-n2","type":"text","text":"Zero trust architecture diagram","x":42,"y":24,"w":1620,"h":64,"fill":"none","fst":"solid","seed":702,"font":"hand","fs":48,"bold":true,"lv":0,"align":"left","ink":"navy"},{"id":"zero-trust-architecture-diagram-n3","type":"text","text":"Show how every request passes a policy enforcement point that checks identity, device health and context before access.","x":42,"y":96,"w":1620,"h":44,"fill":"none","fst":"solid","seed":703,"font":"sans","fs":23,"bold":false,"lv":0,"align":"left","ink":"grey"},{"id":"zero-trust-architecture-diagram-n4","type":"line","text":"","x":42,"y":160,"w":1636,"h":4,"fill":"none","fst":"solid","seed":704,"font":"sans","fs":22,"bold":false,"lv":0,"rot":0,"head":"none","ink":"navy"},{"id":"zero-trust-architecture-diagram-n5","type":"text","text":"EXAMPLE TEMPLATE · Replace the example content, owners and dates with your own.","x":42,"y":1062,"w":1630,"h":30,"fill":"none","fst":"solid","seed":705,"font":"sans","fs":18,"bold":false,"lv":0,"align":"left","ink":"grey"},{"id":"zero-trust-architecture-diagram-n6","type":"text","text":"Control plane","x":45,"y":215,"w":300,"h":30,"fill":"none","fst":"solid","seed":706,"font":"sans","fs":19,"bold":true,"lv":0,"align":"left","ink":"grey"},{"id":"zero-trust-architecture-diagram-n7","type":"text","text":"Data plane","x":45,"y":600,"w":300,"h":30,"fill":"none","fst":"solid","seed":707,"font":"sans","fs":19,"bold":true,"lv":0,"align":"left","ink":"grey"},{"id":"zero-trust-architecture-diagram-n8","type":"rect","text":"Identity provider\nand MFA","x":500,"y":215,"w":265,"h":80,"fill":"sky","fst":"solid","seed":708,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n9","type":"rect","text":"Device health\n(MDM, EDR)","x":795,"y":215,"w":265,"h":80,"fill":"sky","fst":"solid","seed":709,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n10","type":"rect","text":"SIEM and\nthreat intel","x":1090,"y":215,"w":265,"h":80,"fill":"sky","fst":"solid","seed":710,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n11","type":"rect","text":"Data\nclassification","x":1385,"y":215,"w":265,"h":80,"fill":"sky","fst":"solid","seed":711,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n12","type":"rect","text":"Policy engine","x":790,"y":370,"w":280,"h":70,"fill":"sun","fst":"solid","seed":712,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n13","type":"rect","text":"Policy administrator","x":790,"y":470,"w":280,"h":70,"fill":"sun","fst":"solid","seed":713,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n19","type":"person","text":"User","x":60,"y":630,"w":90,"h":118,"fill":"white","fst":"solid","seed":719,"font":"sans","fs":16,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n20","type":"laptop","text":"Device","x":60,"y":750,"w":90,"h":118,"fill":"white","fst":"solid","seed":720,"font":"sans","fs":16,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n21","type":"server","text":"Workload","x":60,"y":870,"w":90,"h":118,"fill":"white","fst":"solid","seed":721,"font":"sans","fs":16,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n22","type":"rect","text":"Policy enforcement\npoint (gateway)","x":360,"y":700,"w":260,"h":180,"fill":"rose","fst":"solid","seed":722,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n27","type":"lane","text":"","x":820,"y":620,"w":855,"h":115,"fill":"none","fst":"solid","seed":727,"font":"sans","fs":22,"bold":false,"lv":0,"z":-2,"dash":true},{"id":"zero-trust-architecture-diagram-n28","type":"rect","text":"Apps segment","x":820,"y":620,"w":240,"h":115,"fill":"mint","fst":"solid","seed":728,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n30","type":"globe","text":"","x":1090,"y":624,"w":80,"h":108,"fill":"white","fst":"solid","seed":730,"font":"sans","fs":16,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n31","type":"text","text":"HR app\nOnly HR staff, on managed devices","x":1190,"y":650,"w":470,"h":56,"fill":"none","fst":"solid","seed":731,"font":"sans","fs":17,"bold":false,"lv":0,"align":"left"},{"id":"zero-trust-architecture-diagram-n32","type":"lane","text":"","x":820,"y":750,"w":855,"h":115,"fill":"none","fst":"solid","seed":732,"font":"sans","fs":22,"bold":false,"lv":0,"z":-2,"dash":true},{"id":"zero-trust-architecture-diagram-n33","type":"rect","text":"Data segment","x":820,"y":750,"w":240,"h":115,"fill":"lavender","fst":"solid","seed":733,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n35","type":"db","text":"","x":1090,"y":754,"w":80,"h":108,"fill":"white","fst":"solid","seed":735,"font":"sans","fs":16,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n36","type":"text","text":"Customer data\nRead only, from the CRM workload","x":1190,"y":780,"w":470,"h":56,"fill":"none","fst":"solid","seed":736,"font":"sans","fs":17,"bold":false,"lv":0,"align":"left"},{"id":"zero-trust-architecture-diagram-n37","type":"lane","text":"","x":820,"y":880,"w":855,"h":115,"fill":"none","fst":"solid","seed":737,"font":"sans","fs":22,"bold":false,"lv":0,"z":-2,"dash":true},{"id":"zero-trust-architecture-diagram-n38","type":"rect","text":"Workloads segment","x":820,"y":880,"w":240,"h":115,"fill":"peach","fst":"solid","seed":738,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n40","type":"server","text":"","x":1090,"y":884,"w":80,"h":108,"fill":"white","fst":"solid","seed":740,"font":"sans","fs":16,"bold":true,"lv":0},{"id":"zero-trust-architecture-diagram-n41","type":"text","text":"Batch jobs\nService identity, no human logins","x":1190,"y":910,"w":470,"h":56,"fill":"none","fst":"solid","seed":741,"font":"sans","fs":17,"bold":false,"lv":0,"align":"left"},{"id":"zero-trust-architecture-diagram-n42","type":"text","text":"Never trust, always verify: every request is checked, and access is the least needed for that one session.","x":45,"y":1010,"w":1630,"h":30,"fill":"none","fst":"solid","seed":742,"font":"sans","fs":17,"bold":false,"lv":0,"align":"left","ink":"grey"}],"edges":[{"id":"zero-trust-architecture-diagram-e14","from":"zero-trust-architecture-diagram-n8","to":"zero-trust-architecture-diagram-n12","label":"","seed":714,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"zero-trust-architecture-diagram-e15","from":"zero-trust-architecture-diagram-n9","to":"zero-trust-architecture-diagram-n12","label":"","seed":715,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"zero-trust-architecture-diagram-e16","from":"zero-trust-architecture-diagram-n10","to":"zero-trust-architecture-diagram-n12","label":"","seed":716,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"zero-trust-architecture-diagram-e17","from":"zero-trust-architecture-diagram-n11","to":"zero-trust-architecture-diagram-n12","label":"","seed":717,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"zero-trust-architecture-diagram-e18","from":"zero-trust-architecture-diagram-n12","to":"zero-trust-architecture-diagram-n13","label":"","seed":718,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"zero-trust-architecture-diagram-e23","from":"zero-trust-architecture-diagram-n19","to":"zero-trust-architecture-diagram-n22","label":"","seed":723,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"r","ea":"l"},{"id":"zero-trust-architecture-diagram-e24","from":"zero-trust-architecture-diagram-n20","to":"zero-trust-architecture-diagram-n22","label":"","seed":724,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"r","ea":"l"},{"id":"zero-trust-architecture-diagram-e25","from":"zero-trust-architecture-diagram-n21","to":"zero-trust-architecture-diagram-n22","label":"","seed":725,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"r","ea":"l"},{"id":"zero-trust-architecture-diagram-e26","from":"zero-trust-architecture-diagram-n13","to":"zero-trust-architecture-diagram-n22","label":"Allow or deny","seed":726,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"l","ea":"t"},{"id":"zero-trust-architecture-diagram-e29","from":"zero-trust-architecture-diagram-n22","to":"zero-trust-architecture-diagram-n28","label":"","seed":729,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"r","ea":"l"},{"id":"zero-trust-architecture-diagram-e34","from":"zero-trust-architecture-diagram-n22","to":"zero-trust-architecture-diagram-n33","label":"","seed":734,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"r","ea":"l"},{"id":"zero-trust-architecture-diagram-e39","from":"zero-trust-architecture-diagram-n22","to":"zero-trust-architecture-diagram-n38","label":"","seed":739,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"r","ea":"l"}],"strokes":[],"imgs":{}}],"cur":"template-zero-trust-architecture-diagram"}