Figma · Figma Privacy Policy · View original document ↗

Enterprise Data Processing Agreement Carve-Out

Medium severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Figma recorded 4 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Figma Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This clause creates a hierarchical governance structure in which enterprise data processing agreements take precedence over the standard Privacy Policy, enabling customized data handling arrangements for organizational customers without requiring simultaneous modification of the public policy document.

Consumer impact (what this means for users)

Users operating under an enterprise agreement with data processing terms will have their personal data processing governed by the terms specified in that agreement rather than the standard Privacy Policy provisions. Users without such an agreement will continue to operate under the standard Privacy Policy as written.

How other platforms handle this

Signal Medium

Signal can optionally discover which contacts in your address book are Signal users, using a service designed to protect the privacy of your contacts. Information from the contacts on your device may be cryptographically hashed and transmitted to the server in order to determine which of your contac...

Walmart Medium

We collect information about you when you shop in our stores, including through store cameras, loyalty programs, payment processing systems, and other in-store technologies. This information is used to improve store operations, loss prevention, and marketing.

LinkedIn Medium

We target (and measure the performance of) ads to Members, Visitors and others both on and off our Services directly or through a variety of partners, using the following data, whether separately or combined: Data from advertising technologies on and off our Services, like web beacons, pixels, ad ta...

See all platforms with this clause type →

Monitoring

Figma has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you are using our Services pursuant to a separate agreement with Figma that includes data processing terms, such as an enterprise agreement, those terms will govern the processing of personal data to the extent they conflict with this Privacy Policy.

— Excerpt from Figma's Figma Privacy Policy

Applicable regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
Colorado AI Act
US-CO
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
UK GDPR
United Kingdom

Provision details

Document information
Document
Figma Privacy Policy
Entity
Figma
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 11, 2026
Record ID
CA-P-006778
Document ID
CA-D-00544
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
315fb012bac613a0c2ab4c786331faed0efcf8a6a9a30d7fb56cce37350ff08d
Analysis generated
May 8, 2026 13:38 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Figma
Document: Figma Privacy Policy
Record ID: CA-P-006778
Captured: 2026-05-08 13:38:05 UTC
SHA-256: 315fb012bac613a0…
URL: https://conductatlas.com/platform/figma/figma-privacy-policy/enterprise-data-processing-agreement-carve-out/
Accessed: July 4, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Figma's Enterprise Data Processing Agreement Carve-Out clause do?

This clause creates a hierarchical governance structure in which enterprise data processing agreements take precedence over the standard Privacy Policy, enabling customized data handling arrangements for organizational customers without requiring simultaneous modification of the public policy document.

How does this clause affect you?

Users operating under an enterprise agreement with data processing terms will have their personal data processing governed by the terms specified in that agreement rather than the standard Privacy Policy provisions. Users without such an agreement will continue to operate under the standard Privacy Policy as written.

Is ConductAtlas affiliated with Figma?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.