Figma Subprocessors

Last Updated: July 14, 2021

To support delivery of our Services, Figma, Inc. may engage and use data processors with access to certain Customer Personal Data (each, a "Subprocessor"). This page provides important information about the identity, location and role of each Subprocessor. Terms used on this page but not defined have the meaning set forth in the Terms of Service or superseding written agreement between Customer and Figma (the "Agreement").

Third Parties

Figma currently uses third party Subprocessors to provide infrastructure and other services, and to help us provide customer support and email notifications. Prior to engaging any third party Subprocessor, Figma performs diligence to evaluate their privacy, security and confidentiality practices, and executes an agreement implementing its applicable obligations.

Subprocessor List

Figma may use the following Subprocessors to host Customer Data, provide infrastructure that helps with delivery of our Services, or perform other Service functions:

Entity Name: Agora, Inc.
Subject matter, nature, and duration of processing:
Figma uses Agora, Inc. for voice and audio services. Agora processes user data for the duration of the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Entity Name: Amazon Web Services, Inc.
Subject matter, nature, and duration of processing:
Figma uses Amazon Web Services, Inc. to process and store user data for the duration set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Entity Name: Civilized Discourse Construction Kit, Inc.
Subject matter, nature, and duration of processing: Figma uses Civilized Discourse Construction Kit, Inc. to host and provide one of Figma’s publicly available support forums.  User posts made to Figma’s support forum are publicly available and retained until the user either deletes their post or their account is deleted.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Entity Name: Datadog, Inc.
Subject matter, nature, and duration of processing: Figma uses Datadog, Inc. for infrastructure monitoring. User data processed by Datadog, Inc. is retained for the duration set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Entity Name: Functional Software, Inc. (Sentry)
Subject matter, nature, and duration of processing: Figma uses Functional Software, Inc. for application error tracking and monitoring. User data processed by Functional Software, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Entity Name: Mode Analytics, Inc.
Subject matter, nature, and duration of processing: Figma uses Mode Analytics, Inc. for data analytics. User data processed by Mode Analytics, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Entity Name: PlanetScale, Inc.
Subject matter, nature, and duration of processing: Figma uses PlanetScale, Inc. for its database clustering system. User data processed by PlanetScale, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Entity Name: SendGrid, Inc.
Subject matter, nature, and duration of processing: Figma uses SendGrid, Inc. for cloud-based email notification services. User data processed by SendGrid, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Entity Name: Twilio, Inc.
Subject matter, nature, and duration of processing: Figma uses Twilio, Inc. for identity management. User data processed by Twilio, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Entity Name: Zendesk, Inc.
Subject matter, nature, and duration of processing: Figma uses Zendesk, Inc. for cloud-based customer support services. User data processed by Zendesk, Inc. is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses

Entity Name: Figma wholly owned subsidiaries: Figma UK Ltd., Figma Canada Ltd., Figma Netherlands BV, Visly, Inc., Visly Technologies UK Limited, and Vmlapp Sweden AB.
Subject matter, nature, and duration of processing: Figma uses its subsidiaries and employees of its subsidiaries to carry out processing as if it were conducted by Figma itself. User data processed by Figma wholly owned subsidiaries is retained as set forth in the user’s (or its organization’s) agreement with Figma.
Location (Country): Figma UK Ltd. (United Kingdom), Figma, Canada Ltd. (Canada), Figma Netherlands BV (Netherlands), Visly, Inc. (United States), Visly Technologies UK Limited (United Kingdom), and Vmlapp Sweden AB (Sweden).
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses


Geographies: We may process personal data in Argentina, Australia, Brazil, Canada, the EEA, New Zealand, Japan, India, Israel, Singapore, South Africa, Taiwan, the United Kingdom, and the United States.

Updates

As our business grows and evolves, the Subprocessors we engage may also change. We will endeavor to provide the owner of Customer’s account with notice of any new Subprocessors to the extent required under the Agreement, along with posting such updates here. Please check back frequently for updates.