techlist.io
KREN
figma

Designing in the cloud with confidence | Figma Blog (opens in new tab)

figmacloud-securitycloud-computingdata-protectiongdpr

Figma’s post announces that it has received the EU Cloud Code of Conduct compliance mark, making it one of only 17 companies to earn the designation at the time. The certification signals that Figma’s privacy and security practices have been independently validated against GDPR-related cloud data protection standards. Figma presents this as reassurance for global teams, particularly organizations operating in or expanding into Europe.

Commitment to Global, Secure Collaboration

  • Figma says scaling design work across regions requires a reliable and trustworthy product.
  • Its international strategy includes:
    • Building features for users around the world
    • Expanding its global presence
    • Protecting customers’ design intellectual property
    • Meeting regional security and compliance requirements
  • The company emphasizes transparency around its security practices and track record.

EU Cloud Code of Conduct Compliance

  • Figma became one of only 17 companies to receive the EU Cloud Code of Conduct compliance mark.
  • The Code is described as a leading European standard for cloud data protection.
  • The mark indicates that Figma has established processes intended to handle user data in compliance with the EU’s General Data Protection Regulation (GDPR).
  • Figma’s privacy and security policies were validated by SCOPE Europe, the accredited monitoring body for the Code.

What It Means for Customers

  • Figma users can have greater confidence that their design data is handled according to recognized security standards.
  • European organizations and companies planning international expansion can use Figma with clearer assurance about its compliance posture.
  • The company directs readers to the EU Cloud Code of Conduct and its broader security documentation for more information.

Figma’s practical message is that customers can continue using its cloud-based design platform with increased confidence in its European data protection and security controls.