Figma AI Footnotes
What Figma's AI features do with your data, as Figma publishes it. Checked October 31, 2026.
Agent access
Official Figma MCP server: a remote server at https://mcp.figma.com/mcp for all seats and plans, and a desktop server for Full and Dev seats on paid plans. Writing to the canvas is in beta, free during the beta and planned as a usage-based paid feature. Read tool calls are rate limited by seat and plan, up to 600 per day on an Enterprise Full or Dev seat. source, source 2, source 3, source 4, source 5, source 6, source 7, source 8 · checked October 31, 2026
Stage: generally available. Authentication: Each user signs in with a Figma account and clicks Allow access for the client; only files the user can already access. Enterprise-managed authorization for Claude through Okta Cross App Access.
Figma Design Agent
Figma Design (Starter, Professional, Organization and Enterprise)
| On by default? | On by default: on Enterprise the organization-level AI setting is on by default; on Starter, Professional and Organization, AI cannot be turned off once enabled. On Figma for Government, the organization's AI control is off by default. source, source 2, source 3 · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Enterprise only: Admin > Settings > AI > AI features, for the whole organization or per workspace; only organization admins can change it. On Starter, Professional and Organization, AI can be enabled if it was disabled during beta but cannot be disabled again. source, source 2, source 3 · checked October 31, 2026 |
| Trains on customer data? | Varies by plan: the content training setting is on by default for Starter and Professional teams, where team admins can turn it off; it is off and cannot be turned on for Organization and Enterprise. Model providers never train on customer content, and Education and Government content is never used. source, source 2, source 3, source 4, source 5 · checked October 31, 2026 |
| Retention | Model providers run under zero data retention or an equivalent no-logging configuration and do not store data at rest. Figma keeps files, including prompts and generated content, for the life of the account or until deletion. source, source 2 · checked October 31, 2026 |
| Where data is processed | Figma's system card states that Figma stores Design Agent content in the United States and that model providers do not store it at rest. On Enterprise with localized file hosting, AI output in files is stored in the organization's selected location; AI chats are not localized, and localization covers data at rest only. Requests to AI model providers may be routed through global data centers, processed only in volatile memory, with the cache cleared within two hours. source, source 2, source 3, source 4, source 5 · checked October 31, 2026 |
| Model providers | Anthropic Claude (on Anthropic, AWS Bedrock and Google's enterprise platform), Google Gemini, OpenAI GPT (OpenAI and Microsoft Azure) and a Figma design edit model on Cerebras; Figma picks the model per task. The sub-processor list (updated October 23, 2026) names Anthropic, Amazon Web Services, Cerebras, Fireworks.ai, Google (Vertex), Jasper AI, Microsoft (Azure), OpenAI, QuiverAI and Recraft as AI model providers. source, source 2, source 3, source 4, source 5 · checked October 31, 2026 |
| Price | Included AI credits per seat per month: Full seats get 3,000 (Professional), 3,500 (Organization) or 4,250 (Enterprise); Collab, Dev and View seats get 500; Starter users get 150 a day, up to 500 a month. Admins can buy more by subscription or pay-as-you-go; the pay-as-you-go rate is shown in the admin dashboard. source, source 2, source 3, source 4, source 5, source 6 · checked October 31, 2026 |
Figma Make
Figma (all plans; Full seat for publishing and private sharing)
| On by default? | On by default: on Enterprise the organization-level AI setting is on by default; on Starter, Professional and Organization, AI cannot be turned off once enabled. On Figma for Government, the organization's AI control is off by default. source, source 2, source 3 · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Organization and team admins turn off AI features, including Make, at the organization or team level (Enterprise: Admin > Settings > AI > AI features, also per workspace). source, source 2 · checked October 31, 2026 |
| Trains on customer data? | Varies by plan: the content training setting is on by default for Starter and Professional teams, where team admins can turn it off; it is off and cannot be turned on for Organization and Enterprise. Model providers never train on customer content, and Education and Government content is never used. source, source 2, source 3 · checked October 31, 2026 |
| Retention | Model providers run under zero data retention or an equivalent no-logging configuration. Make files, including prompts, builds and outputs, are kept for the life of the account or until deletion. source, source 2 · checked October 31, 2026 |
| Where data is processed | Figma's system card states that Figma stores Make content in the United States and that model providers do not store it at rest. On Enterprise with localized file hosting, AI output in files is stored in the organization's selected location; AI chats are not localized, and localization covers data at rest only. source, source 2, source 3, source 4, source 5 · checked October 31, 2026 |
| Model providers | Anthropic Claude Sonnet and Opus (on Anthropic, AWS Bedrock and Google's enterprise platform), Google Gemini Pro and Flash, OpenAI GPT, and Figma's Fast Apply model on Fireworks; users pick the build model from a Figma-approved set. Modal Labs hosts the sandbox environments. source, source 2, source 3 · checked October 31, 2026 |
| Price | Consumption of the seat's AI credits: Make uses credits when it creates or changes code, including prompts sent through the MCP server. View, Collab and Dev seats can build Make files in drafts; a Full seat unlocks publishing and private sharing. source, source 2, source 3 · checked October 31, 2026 |
Connections to outside MCP servers
The Figma agent and Figma Make act as MCP clients. Featured connectors (vetted by Figma) are on all plans; custom connectors to any remote MCP server need a paid plan. On Organization and Enterprise, organization admins turn featured and custom connectors on or off for the whole organization (Admin > Settings > Connections > MCP connectors in Figma), choose who can create custom connectors, and publish them; workspace-level controls are not yet available. Write tools on custom connectors are off by default. source, source 2, source 3, source 4, source 5, source 6 · checked October 31, 2026
Compliance
- FedRAMP: Figma states it is FedRAMP authorized at the Moderate designation and that Figma Make is FedRAMP compliant. On Figma for Government, Figma Make is the only Figma AI feature available, and Make runs in a FedRAMP-authorized environment. Figma's security page links to its FedRAMP marketplace listing. source, source 2, source 3, source 4 · checked October 31, 2026
- ISO/IEC 42001: Figma has certified its AI management system against ISO/IEC 42001:2023. source · checked October 31, 2026
EU AI Act
Figma states that its AI Governance Program is certified to ISO/IEC 42001 and aligned with the EU AI Act, the NIST AI Risk Management Framework and the OECD AI Principles. source · checked October 31, 2026
Not published by Figma as of October 31, 2026
- Whether Figma offers a HIPAA business associate agreement
- Region choice for AI processing (Figma's localized file hosting covers data at rest only)
- Pay-as-you-go price per AI credit and the price of AI credit subscriptions (shown in the admin dashboard)
- An admin control for the Figma MCP server separate from the AI and connector controls
- Whether the Figma MCP server write tools will stay free after the beta, and their future price
Changes
No changes recorded since the first check on October 31, 2026.
How this page is made, and how to send a correction: method.