Figma Security and Compliance
Figma empowers teams to build better products, with enterprise-grade security every step of the way. Our dedicated Security team makes sure your data is protected and your security and compliance obligations are met through continuous audits, privacy safeguards, and a robust security infrastructure.
Trusted by teams at
Find what you need in the Figma Trust Center
Figma maintains a Trust Center where you can find answers to frequently asked questions, explore our extensive security practices, and access and download our compliance documentation—like an SOC 2 Type II report or an ISO 27001 Certificate.
Certifications and Attestations
Learn more about Figma’s certifications, frameworks, and compliance programs—all meticulously designed to safeguard our customers’ data and privacy.
1 of 6
SOC 2 Type 2 / SOC 3
SOC 2 Type 2 / SOC 3
Figma has an SOC 2 Type 2 report that shows our commitment to protecting customer data through robust security, availability, and confidentiality controls that align with the AICPA Trust Services Criteria.
SOC 2 Type 2 / SOC 3
Figma has an SOC 2 Type 2 report that shows our commitment to protecting customer data through robust security, availability, and confidentiality controls that align with the AICPA Trust Services Criteria.
Add extra control with Governance+
For even more protection, the Governance+ add-on for Figma Enterprise gives you centralized controls like IP allowlisting, network restrictions, enforced 2FA, and extended idle session timeouts.
Your privacy rights are important to us
Figma ensures all personal data complies with the EU’s GDPR and the California Consumer Privacy Act (CCPA). Please visit Figma’s Privacy & Trust Center to learn more.
Read about Figma Security
Enforcing device trust on code changes
Here's how the Figma security engineering team leveraged commit signatures and Okta Device Trust certificates to protect GitHub release branches.
Explore how
Figma participates in TISAX assessment for the European automotive industry
At Figma, we love helping our customers build standout products—no matter their industry. TISAX gives product designers peace of mind, knowing their design work is securely managed and strictly compliant.
Read more
Server-side sandboxing: Containers and seccomp
Containers and secure computing mode (seccomp) are sandboxing primitives that offer a lighter weight alternative to virtual machines (VMs). Here we cover the differences between them, and how we use both at Figma to achieve security isolation.
Read more
