Is Figma safe?
Review Figma security risks.

The following security profile for Figma includes the basics you’ll need for a vendor risk assessment: security certifications, supply chain details, privacy policy, terms of service, GDPR compliance, and more.

All Security Profiles

Figma Organization Details

Headquarters

United States

Hosting

Hosting locations

Security Program

Security Certifications

PCI Compliant

HIPAA Compliant

SOC 2 Compliant

GDPR Compliant

ISO 27001 Compliant

FedRamp Compliant

CSA Star Level 1
Compliant

Security Page

https://figma.com/security/

Security Portal

Bug Bounty

https://hackerone.com/figma

Vulnerability Disclosure

https://hackerone.com/figma

Terms of Service

https://www.figma.com/developer-terms/

Privacy Policy

https://figma.com/summary-of-policy/

Status Page

https://status.figma.com

Authentication

Authentication / SSO

Supported Okta Features

SAML
Create
Update
Deactivate

Supports SSO

Two-factor authentication via SMS

Two-factor authentication via E-mail

Two-factor authentication via Hardware

Two-factor authentication via Software

Two-factor authentication via TOTP

Two-factor authentication via U2F

OAuth Details

532352704633-6pkces9iboppp465idnovkcqtlsa8j7t.apps.googleusercontent.com - Figma

E-mail: [email protected]

532352704633-bikogglp6jd4ouavq3gr8bf82bvt8p58.apps.googleusercontent.com - Figma

E-mail: [email protected]

68994840458-eaosee3tcba6dmdsdjk4ev1ie5dbob2q.apps.googleusercontent.com - Figma

E-mail: [email protected]

1035183305161-023t9bv45iaqkhk2skm1ph1oh7t5viq9.apps.googleusercontent.com - Figma

E-mail: [email protected]

Figma Supply Chain

Swoogo
CloudApp
Marketo
Shopify
Statuspage
Splash
Bevy
Amazon Web Services (AWS)
Netlify
Discourse
Zendesk
BigMarker.com
Greenhouse Software
Google Workspace
Stripe
Segment
Google Analytics
Dropbox
Drift
Outreach.io
Figma
Wiz
Fastly
Apple Business Manager
Zoom Video Communications

Figma Subdomains

releases.figma.com
forum.figma.com
brand.figma.com
font-daemon.figma.com
cdn.figma.com
store-eu.figma.com
help.figma.com
go.figma.com
config.figma.com
store-uk.figma.com
forms.figma.com
static.figma.com
api-cdn.figma.com
store-ca.figma.com
friends.figma.com
events.figma.com
status.figma.com
store.figma.com
desktop.figma.com
store-jp.figma.com
info.figma.com
share.figma.com
schemavirtual2022.figma.com
hello.figma.com

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.

Try it free