Figma AI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ 1.1. Access to the Services . Subject to the terms and conditions of these Terms, Figma hereby grants Customer a limited, non-exclusive, non-transferable, non-sublicensable, revocable right for Customer (and, where applicable, Authorized Users) to access and use the Services for Customer’s internal business or personal purposes, depending on Customer’s account type. If Customer has a free account, Customer may use the Services for business or personal purposes, but paid accounts are for business use only. “ Authorized User ” means employees, contractors, and other persons associated with Customer who access or use the Figma Platform through your account. 1.2. Data Protection . Figma implements and maintains physical, technical, and administrative security measures designed to protect the applications and materials that Customer (or Customer’s Authorized Users) develop on or upload to the Services (“ Customer Content ”) from unauthorized access, use, or disclosure. The data processing addendum available at www.figma.com/dpa is incorporated into these Terms. Any categories of personal data or processing operations that are not set out in Figma’s Data Processing Addendum will be processed and protected by Figma in accordance with Figma’s Privacy Policy found at www.figma.com/privacy . 1.3. Non-Figma Resources . Applications and materials that are developed or provided by a party other than Figma, including design files, plugins, component libraries, services, products, platforms, integrations, and code components (collectively, “ Non-Figma Resources ”) are not part of the Services. ” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ (b) Upon any termination, discontinuation, or cancellation of Services or your Figma account, the following provisions of these Terms will survive: Service Terms, Billing (to the extent you owe any fees at the time of termination, discontinuation, or cancellation, including fees incurred prior to termination that haven’t been billed yet); Confidentiality; provisions related to Usage Data, Customer Content, and Feedback; Warranties and Disclaimers; Indemnity; Limitations of Liability; Termination; and the Miscellaneous provisions under Section 9. Upon any termination, to the extent permitted by applicable law, Figma will make all Customer Content then held by Figma available to you for electronic retrieval for a period of 30 days, but thereafter Figma may delete any stored Customer Content. Notwithstanding the foregoing, upon termination of this Agreement for breach of Section 9.12 (Export Control), you lose all right, title, and interest to Customer Content, and Figma may immediately quarantine, delete, or remove Customer Content, and immediately suspend your use of and access to the Figma Platform.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “Upon any termination, to the extent permitted by applicable law, Figma will make all Customer Content then held by Figma available to you for electronic retrieval for a period of 30 days, but thereafter Figma may delete any stored Customer Content. Notwithstanding the foregoing, upon termination of this Agreement for breach of Section 9.12 (Export Control), you lose all right, title, and interest to Customer Content, and Figma may immediately quarantine, delete, or remove Customer Content, and immediately suspend your use of and access to the Figma Platform.” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.