If you want to receive email notifications of new Subprocessors, please submit your details using the sign-up form at the bottom of this page.
Last Updated: July 1, 2024
To support delivery of our Services, Figma, Inc. may engage and use data processors with access to certain Customer Personal Data (each, a "Subprocessor"). This page provides important information about the identity, location and role of each Subprocessor. Terms used on this page but not defined have the meaning set forth in the Terms of Service or superseding written agreement between Customer and Figma (the "Agreement").
Third Parties
Figma currently uses third party Subprocessors to provide infrastructure and other services, and to help us provide customer support and email notifications. Prior to engaging any third party Subprocessor, Figma performs diligence to evaluate their privacy, security and confidentiality practices, and executes an agreement implementing its applicable obligations.
Subprocessor List
Figma may use the following Subprocessors to host Customer Data, provide infrastructure that helps with delivery of our Services, or perform other Service functions:
Agora, Inc.
Subject matter, nature, and duration of processing: Figma uses Agora, Inc. for voice and audio services. Agora processes user data for the duration of the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Amazon Web Services, Inc.
Subject matter, nature, and duration of processing: Figma uses Amazon Web Services, Inc. to process and store user data for the duration set forth in the user's (or its organization's) agreement with Figma for hosting services and as a service provider for AI-enabled functionality.
Location (Country): United States of America, Germany, Ireland
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Civilized Discourse Construction Kit, Inc.
Subject matter, nature, and duration of processing: Figma uses Civilized Discourse Construction Kit, Inc. to host and provide one of Figma’s publicly available support forums. User posts made to Figma’s support forum are publicly available and retained until the user either deletes their post or their account is deleted.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Datadog, Inc.
Subject matter, nature, and duration of processing: Figma uses Datadog, Inc. for infrastructure monitoring. User data processed by Datadog, Inc. is retained for the duration set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
dbt Labs, Inc. (dbt Cloud)
Subject matter, nature, and duration of processing: Figma uses dbt Cloud for data analytics. User data processed by dbt Cloud is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Functional Software, Inc. (Sentry)
Subject matter, nature, and duration of processing: Figma uses Functional Software, Inc. for application error tracking and monitoring. User data processed by Functional Software, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Gainsight, Inc.
Subject matter, nature, and duration of processing: Figma uses Gainsight, Inc. to host and provide one of Figma’s publicly available support forums. User posts made to Figma’s support forum are publicly available and retained until the user either deletes their post or their account is deleted.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Google LLC
Subject matter, nature, and duration of processing: Figma uses Google Firebase to send push notifications on mobile apps (iOS and Android). User data processed by Google is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Jasper AI, Inc.
Subject matter, nature, and duration of processing: Service provider for AI-enabled functionality.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Microsoft Corporation (Azure)
Subject matter, nature, and duration of processing: Figma uses Microsoft Corporation (Azure) to process and store user data for the duration set forth in the user’s (or its organization’s) agreement with Figma for hosting services and as a service provider for AI-enabled functionality.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
ThoughtSpot Inc. (Mode)
Subject matter, nature, and duration of processing: Figma uses ThoughtSpot Inc. for data analytics. User data processed by ThoughtSpot Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
OpenAI, LLC
Subject matter, nature, and duration of processing: Service provider for AI-enabled functionality.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
SendGrid, Inc.
Subject matter, nature, and duration of processing: Figma uses SendGrid, Inc. for cloud-based email notification services. User data processed by SendGrid, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Sprinklr, Inc.
Subject matter, nature, and duration of processing: Figma uses Sprinklr, Inc. for cloud-based customer support services. User data processed by Sprinklr, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Snowflake, Inc.
Subject matter, nature, and duration of processing: Figma uses Snowflake, Inc. for cloud-based data warehouse. User data processed by Snowflake, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Twilio, Inc.
Subject matter, nature, and duration of processing: Figma uses Twilio, Inc. for identity management. User data processed by Twilio, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Zendesk, Inc.
Subject matter, nature, and duration of processing: Figma uses Zendesk, Inc. for cloud-based customer support services. User data processed by Zendesk, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Figma wholly owned subsidiaries
Subject matter, nature, and duration of processing: Figma uses its subsidiaries and employees of its subsidiaries to carry out processing as if it were conducted by Figma itself. User data processed by Figma wholly owned subsidiaries is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): Figma UK Ltd. (United Kingdom), Figma, Canada Ltd. (Canada), Figma Netherlands BV (Netherlands), Figma GmbH (Germany), Figma Japan KK (Japan), Figma France SAS (France), FigVentures LLC (United States), Figma Singapore Pte Ltd (Singapore), Visly, Inc. (United States), and Vmlapp Sweden AB (Sweden).
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Geographies: We may process personal data in Argentina, Australia, Brazil, Canada, the EEA, Japan, New Zealand, Singapore, the United Kingdom, and the United States.
Updates
As our business grows and evolves, the Subprocessors we engage may also change. We will endeavor to provide the owner of Customer’s account with notice of any new Subprocessors to the extent required under the Agreement, along with posting such updates here. Please check back frequently for updates.