Vendor profile
Figma: where is customer data stored and processed?
Figma stores customer content mainly in the USA, and Enterprise customers can opt into EU storage for certain Figma and FigJam files, but the country is not stated. Customer groups are not given in the sources, so this is not confirmed as a consumer or business product. The data processing agreement (version 30 March 2026) has been read, but it does not state where data is stored; the storage location comes from other sources or is not found. Login identity for users outside EU/EEA runs through Twilio in the USA, while support is provided from Canada, the Philippines and several Figma entities (Australia, Brazil, France, India, Ireland, Japan, Singapore). Email is sent via SendGrid and push via Firebase, both in the USA, and analytics for Figma Weave goes through Twilio Segment in the USA.
Checked 12 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Europe (country not stated) | USA |
|---|
| Processing | – | USA |
|---|
| Login and user account | – | –
Only for customers in other regions: USA |
|---|
| Logs and telemetry | – | USA |
|---|
| Analytics and metadata | – | USA |
|---|
| Notifications and email | – | USA |
|---|
| Support | Germany, France, Ireland, Sweden, Europe (country not stated) | Canada, Philippines, Australia, Brazil, India, Japan, Singapore, South Korea, Israel, United Kingdom, USA, New Zealand |
|---|
| AI features | Europe (country not stated), Belgium, Netherlands, Spain | USA, Indonesia, Malaysia, Singapore, Israel, United Kingdom |
|---|
Only outside the EU/EEA, with no European alternative stated: Processing, Logs and telemetry, Notifications and email, Analytics and metadata.
Ownership and agreements
| Owner | Figma, Inc. (USA) |
|---|
| Headquarters | USA |
|---|
| Data processing agreement | Found and read |
|---|
| Certifications | SOC 2, SOC 3, ISO/IEC 27001, ISO/IEC 27018, ISO/IEC 42001, FedRAMP |
|---|
Sub-processors (45)
| Name | Country | Purpose |
|---|
| Agora, Inc. | USA | Lyd i produktet og tale-til-tekst |
| Amazon Web Services, Inc. | USA | Skyinfrastruktur |
| Amazon Web Services, Inc. (Bedrock) | USA | Innholdsmoderering |
| Automattic Inc. (Akismet) | USA | Innholdsmoderering |
| Cloudflare, Ltd. | USA | Webinfrastruktur |
| Cloudinary | USA | Skyinfrastruktur |
| Datadog, Inc. | USA | Infrastrukturovervåking og feilsøking |
| Digital Ocean | USA | Midlertidig prosessering |
| Functional Software, Inc. (Sentry) | USA | Feilsporing og overvåking |
| Castle Global, Inc (Hive) | USA | Innholdsmoderering |
| Modal Labs, Inc. | USA | Skyinfrastruktur for sandkasser |
| OpenAI, LLC | USA | Innholdsmoderering |
| Snowflake, Inc. | USA | Skybasert datavarehus |
| Twilio, Inc. (Segment) | USA | Dataanalyse |
| Twilio, Inc. | USA | Identitetshåndtering |
Sources