Figma Make – AI Trust & Transparency Profile

Figma Make is an AI-powered prompt-to-app tool for transforming ideas and existing designs into functional prototypes and web applications.

Pricing: 5 Design & Development

Disclosure

Transparency Score

29%

4/14 points, 4 reviewed

0 approved N/A excluded · Published information only

Measures disclosure completeness across applicable fields. Not applicable items are excluded. This score is not a certification of quality, security, or regulatory compliance.

About this information

Information in this section may be inaccurate, incomplete or out of date. Errors can arise from automated website extraction, vendor submissions or human review. AISetApp does not guarantee its accuracy or completeness. “Reviewed” means a published statement was checked against the cited evidence; it does not confirm the underlying practice, certify compliance or endorse the vendor.

Check the original sources and confirm important information directly with the vendor before relying on it. Found an error? Request a correction

Legal entity & jurisdiction

No disclosure recorded

DPA availability

Published statement reviewed

Available publicly

Source, evidence & review details
Source:
https://www.figma.com/legal/dpa/
Supporting evidence:
This Data Processing Addendum (“ Addendum ”) forms part of the agreement(s) between Customer and Figma covering Customer’s use of the Figma Platform to which this Addendum is incorporated (“ Agreement ”) and governs Figma’s processing of Personal Data in Customer Content.
Last edited:
Statement reviewer:
Admin
Last reviewed:

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Article 50 disclosure notice

No disclosure recorded

Data residency

No disclosure recorded

Customer data used for training

No disclosure recorded

Retention period

No disclosure recorded

Subprocessor list published

Published statement reviewed

Yes

Source, evidence & review details
Source:
https://www.figma.com/sub-processors/
Supporting evidence:
Figma maintains an up-to-date list of all sub-processors below, including a description of their processing activities, the categories of personal data they process, and the locations where data is processed.
Last edited:
Statement reviewer:
Admin
Last reviewed:

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Breach notification timeframe

No disclosure recorded

Base models used

No disclosure recorded

Human oversight capability

No disclosure recorded

Annex III high-risk declaration

No disclosure recorded

ISO/IEC 27001

No disclosure recorded

ISO/IEC 42001

Published statement reviewed

Certified

Source, evidence & review details
Source:
https://www.figma.com/security/
Supporting evidence:
Trust you can verify: Figma is now ISO 42001 certified
Last edited:
Statement reviewer:
Admin
Last reviewed:

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

SOC 2

Published statement reviewed

Type II

Source, evidence & review details
Source:
https://www.figma.com/security/
Supporting evidence:
Figma has an SOC 2 Type 2 report that shows our commitment to protecting customer data through robust security, availability, and confidentiality controls that align with the AICPA Trust Services Criteria.
Last edited:
Statement reviewer:
Admin
Last reviewed:

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Correction requests will open here soon. Until then, please contact us. Contact us