Figma compliance, certifications and attestations
Business apps · 14 certifications held · 5 from public registries · read Sep 24, 2026
| Certification | Evidence | ||
|---|---|---|---|
| SOC reports | |||
| SOC 2 Type II Vendor page | Type II | Vendor page | Sep 24, 2026 |
| SOC 3 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO standards | |||
| ISO/IEC 27001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27017 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27018 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27701 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| AI governance | |||
| ISO/IEC 42001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| CSA STAR for AI Level 1 AI-CAIQ CSA STAR Registry | Level 1 | CSA STAR Registry | Sep 23, 2026 |
| US government | |||
| FedRAMP Moderate Figma for Government FedRAMP Marketplace | Moderate | FedRAMP Marketplace | Sep 23, 2026 |
| Privacy and cloud | |||
| Data Privacy Framework Held EU-US, UK extension, Swiss-US; non-HR data and HR data. Figma, Inc. Data Privacy Framework List | Held | Data Privacy Framework List | Sep 23, 2026 |
| EU Cloud Code of Conduct Held Partner entry in the STAR Registry CSA STAR Registry and vendor page | Held | CSA STAR Registry and vendor page | Sep 24, 2026 |
| CSA STAR Level 1 CAIQ CSA STAR Registry | Level 1 | CSA STAR Registry | Sep 23, 2026 |
| Regional programs | |||
| BSI C5 (Germany) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| TISAX Held Vendor page | Held | Vendor page | Sep 24, 2026 |
From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.
History
| Date | Change | |
|---|---|---|
| Added FedRAMP Moderate Figma for Government | FedRAMP Marketplace | |
| In process FedRAMP Moderate Figma for Government | FedRAMP Marketplace | |
| Added CSA STAR First listed in the CSA STAR Registry | CSA STAR Registry | |
| Added Data Privacy Framework Figma, Inc. | Data Privacy Framework List |
About Figma
Collaborative design and Figma Make.
- Status
- Public
- Headquarters
- San Francisco, United States
- Founded
- 2012
- Website
- figma.com
No public evidence found for
- SOC reports
- SOC 1
- ISO standards
- ISO 9001, ISO 22301, ISO 20000, ISO 27799
- US government
- DoD IL, GovRAMP, TX-RAMP, CMMC, 800-171, 800-53, FIPS 140, ITAR, CJIS, IRS 1075, 508/VPAT
- Finance
- PCI DSS, PCI 3DS, SWIFT, 17a-4, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI, FISC, DORA
- Health
- HIPAA, HITRUST, HDS, NHS DSPT, PHIPA
- Life sciences (GxP)
- GxP, Part 11, Annex 11, CSV
- Privacy and cloud
- CBPR
- Regional programs
- Cyber Ess., G-Cloud, ENS, SecNum, IRAP, ISMAP, MTCS, K-ISMS
- Education
- FERPA, HECVAT, COPPA
Compare with SAP, ServiceNow, Workday, Dropbox, Slack