Figma achieves C5 accreditation, strengthening cloud security for customers across the DACH region

Today, Figma announced that it has achieved C5 accreditation, the Cloud Computing Compliance Criteria Catalogue developed by the German Federal Office for Information Security (BSI), strengthening security and compliance for customers across Germany, Austria, and Switzerland.

C5 is a recognized standard for assessing the security, availability, and confidentiality of cloud services. Independent accreditation confirms that Figma meets rigorous requirements for information security, risk management, and operational transparency. This helps organizations across DACH collaborate in the cloud with greater confidence.

“Achieving C5 accreditation is an important milestone for Figma in the DACH region,” said Mareike Busche, senior director of DACH and CEE at Figma. “It demonstrates our commitment to meeting the high security and compliance expectations of customers in Germany, Austria and Switzerland, and enables us to serve organizations with complex regulatory needs.”

Figma is now listed on the BSI C5 register, giving customers greater visibility into Figma’s security controls and operational practices. This makes it easier for organizations in sectors such as government, public sector, and finance to assess Figma against their internal compliance and assurance needs.

This milestone builds on Figma’s continued investment in the DACH region, including full German-language localization and the option for enterprise customers to store data locally within the European Union. Today, Figma is trusted by many of Germany’s most innovative companies including almost 90% of DAX 40 companies that use Figma to design and build products together.

With C5 accreditation, Figma continues to expand its enterprise-ready security and compliance capabilities, supporting teams across the DACH region as they design, collaborate, and build with confidence.