Question 1

What are the security benefits of a cloud-native infrastructure?

Accepted Answer

Cloud-native environments provide a number of security benefits including greater visibility and control over the access and usage of applications, reduced attack surface due to ephemeral compute services of cloud applications, and ensured data backup by cloud providers. Figma customers also benefit from our use of industry-standard cloud resources and the output of the cloud security community is leveraged to better protect user data.

Question 2

How do I report a potential security vulnerability in Figma products?

Accepted Answer

Anyone can report security issues by contacting our support team. We also have a bug bounty program for security researchers and we allow customers to conduct their own penetration test in alignment with our program rules (e.g. test your own data, report any findings to us first).

Question 3

What security certifications do you have?

Accepted Answer

Figma maintains SOC 2 Type II compliance and is certified to ISO 27001, ISO 27018, the EU Data Protection Code of Conduct for Cloud Service Providers pursuant article 40 of the GDPR.

Question 4

What personal data does Figma access, store, or process from customers?

Accepted Answer

To provide our services, Figma collects limited personal information about users, including name, email address, job title, and, if you enable two-factor authentication, a phone number. You retain sole discretion over what you include in your designs on the Figma Platform. Figma also complies with all applicable data protection laws and regulations such as GDPR and CCPA. More information is available in our privacy policy.

Question 5

Does Figma have any rights to my data?

Accepted Answer

All data that you upload to or develop on the Figma platform remains owned by you and is treated as your confidential information.You can find more information about how to retrieve and delete your information at https://www.figma.com/data-portability-and-deletion/.

Figma安全
设计让人心平气和

现代云计算环境

数据保护

身份管理

服务可靠性

隐私和安全的高标准

SOC 2类型2

SOC 3（充电状态3）

云安全联盟（CSA）STAR:1级

ISO/IEC 27001:2022标准

ISO/IEC 27018:2019

欧盟云行为准则（COC）：2级

可信信息安全评估交换

请求更多信息

您的隐私权对我们很重要

您的数据属于您

Figma安全内部

Figma Security内部：我们快速实现安全的方法

Figma安全内幕：我们如何使用数据

常见安全问题

了解有关Figma的更多信息

Figma安全设计让人心平气和