Skip to main content
Figma logo

Figma

Verified

“American to the core; the EU only borrows its files.”

Operating HQ
πŸ‡ΊπŸ‡Έ San Francisco, USA
where it's run
Legal domicile
πŸ‡ΊπŸ‡Έ Delaware, USA
where it's incorporated
Listing
NYSE: FIG
Monthly active users
13 million
Revenue
$749M (FY2024)
Employees
~2,726
14/100
Sovereign: Not
Control ↑
10
Data β†’
17

14 = midpoint of Control 10 & Data 17

ConfidenceHigh (88%)

Sovereignty Quadrant

Control ↑ who owns & governs the company  Β·  Data β†’ where your data lives. Every dot is a company β€” click to open it.

Where your data lives β†’ Who controls the company β†’ 8 companies Β· fully non-EU (0/0) TikTok β€” Data 32, Control 24 Google β€” Data 16, Control 14 Youtube β€” Data 14, Control 16 Ionos β€” Data 90, Control 90 Disneyplus β€” Data 16, Control 12 Telegram β€” Data 34, Control 14 Carrefour β€” Data 100, Control 32 Corriere β€” Data 100, Control 100 Microsoft β€” Data 26, Control 14 X β€” Data 14, Control 16 Amazon β€” Data 14, Control 10 Amazon β€” Data 66, Control 0 Bild β€” Data 100, Control 100 Reddit β€” Data 14, Control 10 Netflix β€” Data 24, Control 20 LinkedIn β€” Data 14, Control 16 Reuters β€” Data 26, Control 0 Pinterest β€” Data 12, Control 12 Discord β€” Data 16, Control 20 AliExpress β€” Data 18, Control 12 Twitch β€” Data 18, Control 16 Samsung β€” Data 62, Control 4 Canva β€” Data 24, Control 20 Spotify β€” Data 30, Control 68 Apple β€” Data 16, Control 16 GitHub β€” Data 16, Control 10 Uber β€” Data 16, Control 16 Salesforce β€” Data 20, Control 14 Deepl β€” Data 70, Control 78 Airbnb β€” Data 18, Control 18 Notion β€” Data 22, Control 16 Shopify β€” Data 18, Control 18 Mastercard β€” Data 36, Control 16 Dropbox β€” Data 14, Control 10 HubSpot β€” Data 24, Control 10 Stripe β€” Data 30, Control 30 Zalando β€” Data 52, Control 88 SAP SE β€” Data 68, Control 78 Atlassian β€” Data 18, Control 18 Proton β€” Data 72, Control 54 Miro β€” Data 100, Control 44 Klarna β€” Data 44, Control 42 Ecosia β€” Data 60, Control 92 Zoom β€” Data 20, Control 14 Adyen β€” Data 84, Control 84 GitLab β€” Data 26, Control 14 Slack β€” Data 14, Control 20 Hetzner β€” Data 84, Control 96 Deezer β€” Data 62, Control 66 Typeform β€” Data 100, Control 52 OVHcloud β€” Data 82, Control 94 Tutanota β€” Data 100, Control 100 BlaBlaCar β€” Data 54, Control 76 Qwant β€” Data 56, Control 88 Bitwarden β€” Data 28, Control 20 Contentful β€” Data 34, Control 48 Personio β€” Data 34, Control 58 Ikea β€” Data 34, Control 100 Meta Platforms β€” Data 18, Control 10 Whatsapp β€” Data 14, Control 12 Instagram β€” Data 28, Control 22 Avast β€” Data 60, Control 0 Paypal β€” Data 24, Control 32 Kaspersky β€” Data 56, Control 0 17 10 Figma
Figma β€” verified peers β€” automated estimate (0–50 pillars, normalized)

Every number below traces to 14 sourced facts across 9 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 88% β€” they lower confidence, never the score.

Control ↑

Who legally and economically controls the company

10/100
7 facts Β· 6 sources Β· mixed confidence
Legal & Jurisdiction
12

Incorporated in Delaware, run from San Francisco, terms governed by California law, and a US SEC registrant. EU law reaches it only contractually (SCCs, EU/UK GDPR representatives) as a data processor, not via establishment.

Why 12? 4 sourced facts · click to expand
Delaware corp, SF HQ

Figma, Inc. was incorporated in Delaware in October 2012 with principal executive offices in San Francisco.

SEC Form S-1 (Figma, Inc.) Β· as of 2025-07-01

California governing law

Figma's customer agreement and Terms are governed by the laws of the State of California.

Figma Software Services Agreement Β· as of 2025-01-10

SCCs + EU/UK reps, processor

For EEA/UK transfers Figma relies on EU Commission Standard Contractual Clauses (Module 2) and the UK Addendum, acting as data processor with EU and UK GDPR representatives (Figma GmbH, Berlin; Figma UK Ltd., London).

Figma Data Processing Addendum Β· as of 2025-01-10

EU-U.S. DPF certified

Figma self-certifies to the EU-U.S. Data Privacy Framework, the mechanism for moving EU personal data to the US.

Figma Privacy Policy Β· as of 2025-01-10

Control & Ownership
8

NYSE-listed with a dual-class structure giving CEO Dylan Field roughly 75% of voting power via 15-vote Class B shares; voting control and listing economics are wholly US/global, with no meaningful EU ownership.

Why 8? 3 sourced facts · click to expand
NYSE: FIG, IPO Jul 2025

Figma began trading on the NYSE under ticker FIG on July 31, 2025, after pricing its IPO at $33.

CNBC Β· as of 2025-07-31

15 votes/share Class B

Class B shares carry 15 votes each versus 1 for Class A, concentrating voting power with co-founder/CEO Dylan Field.

SEC Form S-1 (Figma, Inc.) Β· as of 2025-07-01

Field ~75% of votes

Dylan Field controls approximately 75% of total voting power, including votes from co-founder Evan Wallace's family trust shares.

Yahoo Finance (S-1 takeaways) Β· as of 2025-07-01

Data β†’

Where your data lives and who can reach it

17/100
7 facts Β· 5 sources Β· mixed confidence
Data & Infrastructure
22

Entire service runs on AWS; an opt-in EU data-residency option (Frankfurt/Dublin) covers only file contents at-rest for Enterprise customers and excludes metadata, login data, billing and AI, while remaining on a US hyperscaler exposed to the CLOUD Act.

Why 22? 4 sourced facts · click to expand
AWS Frankfurt/Dublin

Figma's Data Residency Solution is hosted on AWS data centers regardless of region chosen, using eu-central-1 (Frankfurt) primary and eu-west-1 (Dublin) for recovery.

Figma Help Center (EU localized hosting) Β· as of 2026-06-01

Enterprise-only, at-rest only

EU hosting is available only to Enterprise-plan customers and applies to data at-rest, not in-transit.

Figma Blog (EU hosting) Β· as of 2023-09-25

Metadata/login/AI excluded

User metadata, login data, billing information, comments, file names, fonts, Dev Mode and AI chats are explicitly excluded from EU localization and stay centralized.

Figma Help Center (EU localized hosting) Β· as of 2026-06-01

US processing via SCCs/DPF

Personal data is transferred to the US for processing, safeguarded by Standard Contractual Clauses and the EU-U.S. DPF.

Figma Data Processing Addendum Β· as of 2025-01-10

Operations & People
10

Headquartered and led from San Francisco, US-centered workforce, and US-dollar financials reported to the SEC; EU presence is limited to GDPR-representative entities, not operational center of gravity.

Why 10? 3 sourced facts · click to expand
San Francisco HQ

Figma's principal executive offices are at 760 Market Street, San Francisco, California.

SEC Form S-1 (Figma, Inc.) Β· as of 2025-07-01

$749M revenue (FY2024)

Figma reported FY2024 revenue of $749 million, in US dollars, in its US SEC filing.

Tomasz Tunguz (S-1 analysis) Β· as of 2025-07-01

EU presence = GDPR reps

Figma's EU/UK operational footprint is limited to GDPR-representative entities Figma GmbH (Berlin) and Figma UK Ltd. (London).

Figma Data Processing Addendum Β· as of 2025-01-10

Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) β†’

What we don’t know 3 open questions β€” they lower confidence, never the score
  • ?

    What share of Figma's economic ownership (Class A + B) sits with EU-domiciled investors post-IPO?

    Could marginally raise the ownership read, but voting control is firmly with Dylan Field regardless.

  • ?

    Does Figma offer or plan a fully EU-sovereign hosting tier (EU-operated cloud, EU keys, metadata included) beyond the AWS at-rest residency?

    Would materially change the infra score; current evidence shows only partial AWS-based at-rest residency.

  • ?

    Exact current global vs EU employee distribution as of 2026.

    Affects precision of the operations score, though SF-centered leadership is clear.

EU Cloud Sovereignty Framework lens

The EU Cloud Sovereignty Framework formally targets cloud service providers, not SaaS apps; the rows below are an analogous mapping for orientation, not a certification.

Strategic

US-headquartered, NYSE-listed, founder-controlled; strategic direction set entirely from San Francisco with no EU governance lever.

weak

Legal & jurisdictional

Delaware incorporation, California governing law, US SEC registrant; EU reaches it only via SCCs, the EU-U.S. DPF and GDPR-representative entities.

weak

Data & AI

Opt-in EU file-content residency exists, but metadata, login data, AI chats and comments stay centralized in the US.

moderate

Operational

Leadership, workforce and USD reporting are US-centered; EU footprint limited to GDPR-rep entities in Berlin and London.

weak

Supply chain

Core infrastructure depends on AWS, a US hyperscaler, across all regions including the EU residency option.

weak

Technological

No EU-owned or EU-operated infrastructure; technology stack and IP controlled from the US.

weak

Security & compliance

Holds SOC 2 Type II, ISO 27001/27018 and adheres to the EU Cloud Code of Conduct (Level 2), but underlying control sits with a US provider exposed to the CLOUD Act.

moderate

Environmental sustainability

No Figma-specific EU sustainability disclosure reviewed; inherits AWS data-center environmental profile.

not assessed
EU alternatives
πŸ‡ͺπŸ‡Έ Penpot penpot.app EU-controlled

Open-source design and prototyping tool from Kaleidos (Spain); self-hostable in the EU, giving full data and infrastructure sovereignty as a genuine Figma alternative.

πŸ‡¨πŸ‡³ Pixso pixso.net not an EU alternative

A Figma-like collaborative design tool, but China-based; not an EU-sovereignty improvement and listed only for completeness.

πŸ‡ͺπŸ‡Ί Specify / EU-hosted self-managed Penpot penpot.app with caveats

Self-hosting Penpot on an EU-sovereign cloud removes US hyperscaler exposure, but requires in-house ops and lacks Figma's feature breadth and AI tooling.

How the method works

Methodology v2 (provisional): the score is the midpoint of two axes β€” Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.

Spotted an error? Every claim is sourced β€” challenge it and we correct the record.
  • 2026-06-12 β€” Initial golden profile, authored from primary sources (human + AI review).

Report Incorrect Data

Found an error in this company's profile? Help us improve our data by submitting a correction.

Required so we can follow up if needed. We won't share your email.

Verified 2026-06-12 Β· Human + AI joint review (sources independently checked) Β· Methodology