Figma
Security and trust center evidence
Figma is a design platform for teams who build products
Summary
Figma has 3 registry-verified rows in the CertReports index, last verified 2 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Figma is listed in the FedRAMP registry as FedRAMP Authorized, as of 19 Sep 2026. The FedRAMP authorization was issued 28 Feb 2025 with Schellman Compliance, LLC as the assessor, per the registry as of 19 Sep 2026. Figma is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ), issued 13 Apr 2022, as of 17 Sep 2026. Figma is listed in the EU-US Data Privacy Framework registry as Active, covering the EU-US Certification, SW-US Certification and UK Extension Certification, as of 17 Sep 2026. The Data Privacy Framework listing was originally issued 16 Nov 2018 and is recorded with an expiry of 22 Jul 2027, as of 17 Sep 2026.
- FedRAMP Authorized, listed in FedRAMP registry, issued 28 Feb 2025, assessed by Schellman Compliance, LLC (as of 19 Sep 2026)
- CSA STAR Level 1 self-assessment (CAIQ), listed in CSA STAR registry, issued 13 Apr 2022 (as of 17 Sep 2026)
- EU-US Data Privacy Framework: Active (EU-US, SW-US, UK Extension Certifications), issued 16 Nov 2018, expires 22 Jul 2027 (as of 17 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among design tools vendors
3verified rows
Category median 0, across 34 indexed design tools vendors. Figma has more verified rows than 97 percent of them.
design-collaborationdesign-systemprototypingui-ux
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedFedRAMP Authorized
as of 1 Nov 202646 sources · Schellman Compliance, LLC
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: UK Extension Certification, EU-US Certification, SW-US Certification
as of 2 Nov 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.
Subprocessors
No subprocessor list captured yet.
Change history
- 22 Sep 2026Trust centre movedTrust centre URL is now https://www.figma.com/.
- 19 Sep 2026Trust centre movedTrust centre URL is now https://www.figma.com/security/.
Similar vendors with evidence
Related by product tags and the Design tools category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
UXPin
Design tools
UXPin is the design tool ideal for interactive prototyping, design systems and
Supernova
Design tools
Design system platform joins developers and designers together
Zeplin
Design tools
Deliver on the Promise of Design
Onshape
Design tools
Onshape is a product development platform that brings together all the tools needed to develop a product from conception to
Evidence against regulations
All regulations for FigmaHow much of each regulation’s vendor requirements Figma’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read