Figma Security
Peace of mind by design
Figma helps teams brainstorm, design and build better products – from start to finish, and always with security in mind. You can trust Figma – and our dedicated security team – to keep your data safe with enterprise-grade security features, compliance audits, privacy protections and all the capabilities of a fully on-demand, cloud environment.
Modern, cloud-native environments
Figma’s infrastructure is cloud-native, which means our security team can take advantage of the unparalleled scale and flexibility of the cloud. By building on top of trusted cloud vendors, Figma users benefit from the combination of an enterprise-grade network architected to protect their information and the deep expertise of Figma’s dedicated security team that is engineering-focused and always on.
Here are other measures we take to ensure Figma is secure for you and your team.
Data protection
To keep all your work secure, Figma encrypts data at rest and in transit. While our services are hosted in US-based AWS facilities, servers live within Figma's own VPCs to prevent unauthorized network requests.
Identity management
Easily manage access with any identity provider that supports SAML and SCIM, including Azure AD, Okta, OneLogin, and more. And use SAML SSO, 2FA, and domain capture to securely deploy Figma across your entire organization.
Service reliability
To keep you up and running 24/7/365, Figma's infrastructure is backed by three data centers to protect service availability. You'll also have peace of mind with real-time status updates and Figma's built-in version history.
A high bar for privacy and security
Our security measures exceed industry standards for data protection and security.
SOC 2 Type 2
Trust Services Principles
Learn more
SOC 3
Service Organization Controls
View report
Cloud Security Alliance (CSA) STAR: Level 1
Certification for cloud provider security and privacy controls
View Listing
ISO/IEC 27001:2022
Global standard for information security management systems
View certification
ISO/IEC 27018:2019
Global standard that focuses on protection of personal data in the cloud
View certification
EU Cloud Code of Conduct (COC): Level 2
Certification for cloud provider data privacy and protection (Verification ID: 2020LVL02SCOPE013)
View Listing
Trusted Information Security Assessment Exchange
TISAX is a European automotive industry-standard information security assessment (ISA) catalog.
Company Name: Figma, Inc.
Assessment-ID: AV01AK-2
Scope ID: S3XH77
TISAX and TISAX results are not intended for the general public.
Request More Info
For peace of mind, additional security and privacy compliance documentation is available via request.
Your privacy rights are important to us
Figma is dedicated to ensuring that all customer and employee personal data is treated in accordance with the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Your data belongs to you
Figma is committed to keeping your information secure and private. Your content is important to you and we take the responsibility of protecting it seriously. We’ve defined roles and responsibilities in our Shared responsibility security model to help you understand your responsibilities.
The details on what data we collect, how we collect it, what we do with it, how you can opt-out in, are available in our Privacy Policy, and instructions on how to retrieve and/or delete data from Figma are available here.
Inside Figma Security
Inside Figma Security: our approach to security at speed
Learn about how the Figma security team helps us ship products securely, without impacting the pace of development. Our approach to security at speed.
Explore how
Inside Figma Security: How we use data
Data is a vital component in how we improve Figma day by day. Learn more about what kind of data we use and how we use it.
Read more