Figma Security and Compliance
Figma empowers teams to build better products, with enterprise-grade security every step of the way. Our dedicated Security team makes sure your data is protected and your security and compliance obligations are met through continuous audits, privacy safeguards, and a robust security infrastructure.
Trusted by teams at
Find what you need in the Figma Trust Center
Figma maintains a Trust Center where you can find answers to frequently asked questions, explore our extensive security practices, and access and download our compliance documentation—like an SOC 2 Type II report or an ISO 27001 Certificate.
Secure and private by design
Learn more about Figma’s certifications, frameworks, and compliance programs—all meticulously designed to safeguard our customers’ data and privacy.
1/7
SOC 2 Type 2 / SOC 3
SOC 2 Type 2 / SOC 3
Figma has an SOC 2 Type 2 report that shows our commitment to protecting customer data through robust security, availability, and confidentiality controls that align with the AICPA Trust Services Criteria. Additionally, anyone can download our SOC 3 Report, which includes a summary of the SOC 2 report along with an independent third-party auditor’s assessment of how effectively we implement and operate these controls.
Scope
Product: Figma Design, FigJam, Dev Mode
Region: United States, European Union (see File Hosting in the EU)
Trust Services Criteria: Security, Availability, Confidentiality
Most Recent Audit Period: December 5, 2024
The SOC 2 report is available for download in Figma's Trust Center.
SOC 2 Type 2 / SOC 3
Figma has an SOC 2 Type 2 report that shows our commitment to protecting customer data through robust security, availability, and confidentiality controls that align with the AICPA Trust Services Criteria. Additionally, anyone can download our SOC 3 Report, which includes a summary of the SOC 2 report along with an independent third-party auditor’s assessment of how effectively we implement and operate these controls.
Scope
Product: Figma Design, FigJam, Dev Mode
Region: United States, European Union (see File Hosting in the EU)
Trust Services Criteria: Security, Availability, Confidentiality
Most Recent Audit Period: December 5, 2024
The SOC 2 report is available for download in Figma's Trust Center.
Figma for Government
Design better citizen experiences
Modernize the way teams brainstorm, design, and build in government. Collaborate in a platform built to meet the security and creativity needs of government agencies.
Your privacy rights are important to us
Figma ensures all personal data complies with the EU’s GDPR and the California Consumer Privacy Act (CCPA). Please visit Figma’s Privacy & Trust Center to learn more.
Read about Figma Security
Enforcing device trust on code changes
Here's how the Figma security engineering team leveraged commit signatures and Okta Device Trust certificates to protect GitHub release branches.
Explore how
Figma participates in TISAX assessment for the European automotive industry
At Figma, we love helping our customers build standout products—no matter their industry. TISAX gives product designers peace of mind, knowing their design work is securely managed and strictly compliant.
Read more
Server-side sandboxing: Containers and seccomp
Containers and secure computing mode (seccomp) are sandboxing primitives that offer a lighter weight alternative to virtual machines (VMs). Here we cover the differences between them, and how we use both at Figma to achieve security isolation.
Read more