If you want to receive email notifications of new Subprocessors, please submit your details using the sign-up form at the bottom of this page.

Last Updated: October 15, 2025

To support delivery of our Services, Figma, Inc. may engage and use data processors with access to certain Customer Personal Data (each, a "Subprocessor"). This page provides important information about the identity, location and role of each Subprocessor. Terms used on this page but not defined have the meaning set forth in the Terms of Service or superseding written agreement between Customer and Figma (the "Agreement").

Third Parties

Figma currently uses third party Subprocessors to provide infrastructure and other services, and to help us provide customer support and email notifications. Prior to engaging any third party Subprocessor, Figma performs diligence to evaluate their privacy, security and confidentiality practices, and executes an agreement implementing its applicable obligations.

Subprocessor List

Figma may use the following Subprocessors to host Customer Data, provide infrastructure that helps with delivery of our Services, or perform other Service functions:

Agora, Inc.

Subject matter, nature, and duration of processing: Figma uses Agora, Inc. for voice and audio services. Agora processes user data for the duration of the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Amazon Web Services, Inc.

Subject matter, nature, and duration of processing: Figma uses Amazon Web Services, Inc. to process and store user data for the duration set forth in the user's (or its organization's) agreement with Figma for hosting services and as a service provider for AI-enabled functionality.

Location (Country): United States of America, Germany, Ireland

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Anthropic PBC

Subject matter, nature, and duration of processing: Figma uses Anthropic as a service provider for AI-enabled functionality.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Cerebras Systems, Inc.

Subject matter, nature, and duration of processing: Figma uses Cerebras Systems Inc. as a service provider for AI-enabled functionality.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Cloudflare, Inc.

Subject matter, nature, and duration of processing: Figma uses Cloudfare, Inc. for web infrastructure support. User data processed by Cloudfare is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Datadog, Inc.

Subject matter, nature, and duration of processing: Figma uses Datadog, Inc. for infrastructure monitoring. User data processed by Datadog, Inc. is retained for the duration set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Decagon AI

Subject matter, nature, and duration of processing: Figma uses Decagon AI to provide self-serve automation for customer support inquiries. User data processed by Decagon AI is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Fireworks AI, Inc

Subject matter, nature, and duration of processing: Figma uses Fireworks.ai, Inc. as a service provider for AI-enabled functionality.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Functional Software, Inc. (Sentry)

Subject matter, nature, and duration of processing: Figma uses Functional Software, Inc. for application error tracking and monitoring. User data processed by Functional Software, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Gainsight, Inc.

Subject matter, nature, and duration of processing: Figma uses Gainsight, Inc. to host and provide one of Figma’s publicly available support forums. User posts made to Figma’s support forum are publicly available and retained until the user either deletes their post or their account is deleted.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Google LLC (Firebase)

Subject matter, nature, and duration of processing: Figma uses Google Firebase to send push notifications on mobile apps (iOS and Android). User data processed by Google is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Google LLC (Gemini)

Subject matter, nature, and duration of processing: Figma uses Google Gemini as a service provider for AI-enabled functionality.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Groq, Inc.

Subject matter, nature, and duration of processing: Figma uses Groq, Inc. as a service provider for AI-enabled functionality.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Hex, Inc.

Subject matter, nature, and duration of processing: Figma uses Hex, Inc. for data analytics. User data processed by Hex, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

IntouchCX, Inc.

Subject matter, nature, and duration of processing: Service provider for contractor staffing for Figma’s Product Support team to maintain customer service levels. User data processed by IntouchCX, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): Canada

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Jasper AI, Inc.

Subject matter, nature, and duration of processing: Service provider for AI-enabled functionality. User data processed by Jasper AI is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Microsoft Corporation (Azure)

Subject matter, nature, and duration of processing: Figma uses Microsoft Corporation (Azure) to process and store user data for the duration set forth in the user’s (or its organization’s) agreement with Figma for hosting services and as a service provider for AI-enabled functionality.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Modal Labs, Inc.

Subject matter, nature, and duration of processing: Figma uses Modal Labs, Inc. as a service provider for cloud sandbox environments.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

OpenAI, LLC

Subject matter, nature, and duration of processing: Service provider for AI-enabled functionality. User data processed by Open AI LLC is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Premier Talent Partners

Subject matter, nature, and duration of processing: Service provider for contractor staffing for Figma’s Product Support team to maintain customer service levels. User data processed by Premier Talent Partners is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Recraft, Inc.

Subject matter, nature, and duration of processing: Figma uses Recraft, inc for image processing for Figma Design.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

SendGrid, Inc.

Subject matter, nature, and duration of processing: Figma uses SendGrid, Inc. for cloud-based email notification services. User data processed by SendGrid, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Sprinklr, Inc.

Subject matter, nature, and duration of processing: Figma uses Sprinklr, Inc. for cloud-based customer support services. User data processed by Sprinklr, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Snowflake, Inc.

Subject matter, nature, and duration of processing: Figma uses Snowflake, Inc. for cloud-based data warehouse. User data processed by Snowflake, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Twilio, Inc.

Subject matter, nature, and duration of processing: Figma uses Twilio, Inc. for identity management. User data processed by Twilio, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Zendesk, Inc.

Subject matter, nature, and duration of processing: Figma uses Zendesk, Inc. for cloud-based customer support services. User data processed by Zendesk, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): United States of America

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Figma wholly owned subsidiaries

Subject matter, nature, and duration of processing: Figma uses its subsidiaries and employees of its subsidiaries to carry out processing as if it were conducted by Figma itself. User data processed by Figma wholly owned subsidiaries is retained as set forth in the user’s (or its organization’s) agreement with Figma.

Location (Country): Figma UK Ltd. (United Kingdom), Figma, Canada Ltd. (Canada), Figma Netherlands BV (Netherlands), Figma GmbH (Germany), Figma India Private Limited (India), Figma Japan KK (Japan), Figma France SAS (France), FigVentures LLC (United States), Figma Singapore Pte Ltd (Singapore), Visly, Inc. (United States), and Vmlapp Sweden AB (Sweden).

Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Geographies: We may process personal data in Argentina, Australia, Brazil, Canada, the EEA, India, Japan, New Zealand, Singapore, the United Kingdom, and the United States.

Updates

As our business grows and evolves, the Subprocessors we engage may also change. We will endeavor to provide the owner of Customer’s account with notice of any new Subprocessors to the extent required under the Agreement, along with posting such updates here. Please check back frequently for updates.