figmaOct 24, 2023

Figma Participates in TISAX Assessment for the European Automotive Industry | Figma Blog (opens in new tab)

Figma announced its participation in the Trusted Information Security Assessment Exchange (TISAX), a security and compliance benchmark for Europe’s automotive industry. The assessment is intended to reassure automotive customers that their design files are securely managed according to industry standards. Figma positions TISAX alongside its broader European data-protection efforts, including EU Cloud Code of Conduct certification and EU-based file hosting. ## TISAX and Automotive Data Security - TISAX is governed by the ENX Association on behalf of the German Automotive Industry Association (VDA). - It is widely recognized as a data-security and protection benchmark in Europe’s automotive sector, particularly in Germany. - Participation gives automotive product designers greater confidence that their Figma work is handled securely and compliantly. ## Figma’s Assessment Details Figma’s participation can be verified through the ENX portal using: - **Company:** Figma, Inc. - **Scope ID:** S3XH77 - **Assessment ID:** AV01AK-2 ## Broader European Compliance Efforts Figma describes TISAX as part of its wider investment in serving European customers: - It has received a compliance mark under the **EU Cloud Code of Conduct**. - Customers can choose to host Figma and FigJam files within the **European Union**. - These measures complement Figma’s broader security and compliance program. Figma’s participation in TISAX signals that organizations in the European automotive industry can use its collaborative design tools with greater assurance about security, compliance, and regional data-handling requirements.

cloud-hostingfigmainformation-securitycompliance+1

figmaSep 24, 2023

EU Hosting for Figma and FigJam Files | Figma Blog (opens in new tab)

Figma announced EU hosting for Figma and FigJam file data, giving European organizations more control over data location while retaining the benefits of its cloud platform. The service is intended to address regional privacy and regulatory concerns and is available exclusively to Enterprise customers. File contents are hosted primarily in Frankfurt, with backups in Dublin, though some metadata, login information, and temporary in-transit data remain outside the EU. ## EU Data Hosting Availability - Customers can host the document contents of Figma and FigJam files within the EU. - The option is available only on Figma’s Enterprise plan. - Existing customers can migrate files from the US after upgrading to Enterprise. - Account managers coordinate migration dates, and eligible customers can join a migration waitlist. ## Hosting Locations and Infrastructure - Primary file storage is located in Frankfurt, Germany. - Backup data is stored in Dublin, Republic of Ireland. - Figma uses AWS as its cloud infrastructure provider. ## Data Included and Excluded - EU hosting initially covers the contents of supported Figma and FigJam files. - User metadata and login data are not hosted within the EU. - Some data moving through Figma’s systems may be temporarily stored outside the EU. - Customers should consult Figma’s file-type breakdown to determine which data is covered. ## Security and Compliance Figma positions EU hosting as an addition to its existing security and privacy measures, including: - SOC 2 Type II reporting - ISO 27018 and ISO 27001 certifications - Level 2 adherence to the EU Cloud Code of Conduct The feature is particularly relevant to organizations such as Volkswagen Group, which require stronger control over data residency for regulatory and data-protection reasons. Organizations with strict EU residency requirements should evaluate which data types are covered and consider Figma Enterprise for localized file hosting.

cloud-hostingfigmafigjamaws+3