Source
Security / trust page — FigJam
Checked for FigJam on 1 Nov 2026
- Page
- https://www.figma.com/security/
- Checked
- 1 Nov 2026, 09:20 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:3c5a122d6930123f72b2193aaca8aaaf6d22dfebf32e61934affe58f4e3acdb8
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Trust center Report an error
“Figma maintains a Trust Center where you can find answers to frequently asked questions, explore our extensive security practices, and access and download our compliance documentation.”
-
SOC 2 Report an error
“Figma has an SOC 2 Type 2 report that shows our commitment to protecting customer data through robust security, availability, and confidentiality controls that align with the AICPA Trust Services Criteria.”
-
Soc3 Report an error
“Figma has an SOC 3 report that shows our commitment to protecting customer data through robust security, availability, and confidentiality controls that align with the AICPA Trust Services Criteria.”
-
Iso42001 Report an error
“Figma has certified its AI management system against ISO/IEC 42001:2023.”
-
EU cloud code of conduct Report an error
“The EU Cloud Code of Conduct translates GDPR requirements into practical guidelines for Cloud Service Providers, offering cloud-specific approaches, recommendations, and a roadmap that aligns with GDPR and international standards like ISO 27001 and ISO 27018.”
-
“The Cloud Computing Compliance Controls Catalogue (C5) certification exists to meet rigorous, German government–backed standards for security, transparency, and operational resilience, providing independent assurance for regulated and public-sector customers, especially in Germany and the EU.”
-
TISAX Report an error
“Trusted Information Security Assessment Exchange (TISAX) is a European automotive industry-standard information security assessment (ISA) catalog based on key aspects of information security and requirements from the international standard ISO 27001.”
-
Csa caiq Report an error
“At least annually, Figma completes the Consensus Assessments Initiative Questionnaire (CAIQ) based on the Cloud Controls Matrix (CCM) in order to provide customers with assurance over our security and compliance posture”
-
Fedramp Report an error
“FedRAMP Authorized”
-
Bug bounty Report an error
“Learn more about Figma's Bug Bounty program and Uptime status”
-
Governance plus Report an error
“the Governance+ add-on for Figma Enterprise gives you centralized controls like IP allowlisting, network restrictions, enforced 2FA, and extended idle session timeouts.”
-
Security team Report an error
“Our dedicated Security team makes sure your data is protected and your security and compliance obligations are met through continuous audits, privacy safeguards, and a robust security infrastructure.”
1 fact read from this page is not shown because it could not be confirmed on the page as captured.
Scores citing this record
- The Microsoft 365 Admin Security, AI controls & deployment
- The Product Team Lead Security, AI controls & deployment
- The Skeptic Security, AI controls & deployment
- The Workshop Facilitator Security, AI controls & deployment