Figma AI

AI-powered design assistance natively embedded in the world's leading collaborative design platform

Recraft

Professional AI image generation and design tool with brand-consistent vector and raster output

Figma AI

Moderate

15/25

Recraft

Caution

11/25

Score Breakdown

DimensionFigma AIRecraft

Data Residency

Where is your data stored and processed?

Figma AI: Primarily hosted on AWS US; EU data residency options available for Enterprise customers upon request

Recraft: Cloud-hosted with no published information on data centre locations or EU-specific hosting options. UK company but infrastructure details not publicly disclosed.

3/5

Primarily hosted on AWS US; EU data residency options available for Enterprise customers upon request

2/5

Cloud-hosted with no published information on data centre locations or EU-specific hosting options. UK company but infrastructure details not publicly disclosed.

Legal Jurisdiction

Which laws govern the company and your data?

Figma AI: Figma Inc. is a US public company (NYSE: FIG) incorporated in Delaware; DPAs available for GDPR; subject to US legal jurisdiction and CLOUD Act

Recraft: UK limited company. Post-Brexit UK operates under UK GDPR, which is GDPR-equivalent but outside EEA jurisdiction. Adequate for most EU use cases.

2/5

Figma Inc. is a US public company (NYSE: FIG) incorporated in Delaware; DPAs available for GDPR; subject to US legal jurisdiction and CLOUD Act

3/5

UK limited company. Post-Brexit UK operates under UK GDPR, which is GDPR-equivalent but outside EEA jurisdiction. Adequate for most EU use cases.

Data Retention & Training

Is your data used for model training?

Figma AI: Customer design files are not used to train AI models; third-party AI providers are contractually prohibited from training on customer data

Recraft: User owns generated images. Training data practices and retention policies not extensively documented in public materials.

4/5

Customer design files are not used to train AI models; third-party AI providers are contractually prohibited from training on customer data

3/5

User owns generated images. Training data practices and retention policies not extensively documented in public materials.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Figma AI: SOC 2 Type II certified; HIPAA BAA available for Organisation and Enterprise plans; GDPR-compliant

Recraft: No SOC 2 or ISO 27001 certifications publicly confirmed. Series B company — certifications may be in progress.

3/5

SOC 2 Type II certified; HIPAA BAA available for Organisation and Enterprise plans; GDPR-compliant

1/5

No SOC 2 or ISO 27001 certifications publicly confirmed. Series B company — certifications may be in progress.

Regulatory Fit

Suitability for regulated industries and professional services

Figma AI: HIPAA BAA and SSO make Figma usable in healthcare and regulated enterprise contexts; EU data residency option extends suitability for GDPR-sensitive organisations

Recraft: UK GDPR applies. No formal certifications or EU-specific data residency. Suitable for creative and marketing use cases with lower compliance requirements.

3/5

HIPAA BAA and SSO make Figma usable in healthcare and regulated enterprise contexts; EU data residency option extends suitability for GDPR-sensitive organisations

2/5

UK GDPR applies. No formal certifications or EU-specific data residency. Suitable for creative and marketing use cases with lower compliance requirements.

Total Score

15/25

11/25

Best For

Figma AI

Best for privacy-conscious teams who need strong data retention controls; teams on a tight budget; enterprises requiring SSO integration.

Recraft

Best for teams on a tight budget.

Detailed Comparison

Figma AI vs Recraft: Trust & Compliance Comparison

Figma AI (Figma, US) scores 15/25 overall with a Bronze (Moderate) trust badge. AI-powered design assistance natively embedded in the world's leading collaborative design platform. Recraft (Recraft, GB) scores 11/25 with a Review Required (Caution) trust badge. Professional AI image generation and design tool with brand-consistent vector and raster output.

Dimension-by-Dimension Breakdown

#### Data Residency

Figma AI leads with 3/5 vs 2/5.

●Figma AI (3/5): Primarily hosted on AWS US; EU data residency options available for Enterprise customers upon request

●Recraft (2/5): Cloud-hosted with no published information on data centre locations or EU-specific hosting options. UK company but infrastructure details not publicly disclosed.

#### Legal Jurisdiction

Recraft leads with 3/5 vs 2/5.

●Figma AI (2/5): Figma Inc. is a US public company (NYSE: FIG) incorporated in Delaware; DPAs available for GDPR; subject to US legal jurisdiction and CLOUD Act

●Recraft (3/5): UK limited company. Post-Brexit UK operates under UK GDPR, which is GDPR-equivalent but outside EEA jurisdiction. Adequate for most EU use cases.

#### Data Retention & Training

Figma AI leads with 4/5 vs 3/5.

●Figma AI (4/5): Customer design files are not used to train AI models; third-party AI providers are contractually prohibited from training on customer data

●Recraft (3/5): User owns generated images. Training data practices and retention policies not extensively documented in public materials.

#### Certifications

Figma AI leads with 3/5 vs 1/5.

●Figma AI (3/5): SOC 2 Type II certified; HIPAA BAA available for Organisation and Enterprise plans; GDPR-compliant

●Recraft (1/5): No SOC 2 or ISO 27001 certifications publicly confirmed. Series B company — certifications may be in progress.

#### Regulatory Fit

Figma AI leads with 3/5 vs 2/5.

●Figma AI (3/5): HIPAA BAA and SSO make Figma usable in healthcare and regulated enterprise contexts; EU data residency option extends suitability for GDPR-sensitive organisations

●Recraft (2/5): UK GDPR applies. No formal certifications or EU-specific data residency. Suitable for creative and marketing use cases with lower compliance requirements.

Certifications at a Glance

Certification	Figma AI	Recraft
SOC 2 Type II	Yes	No

Overall Verdict

Figma AI has a clear trust advantage, scoring 15/25 compared to Recraft's 11/25. Figma AI particularly excels in data residency, data retention & training, certifications, regulatory fit.

Frequently Asked Questions

Which is better for EU compliance, Figma AI or Recraft?

Figma AI has a TrustKit score of 15/25 while Recraft scores 11/25. Figma AI currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Figma AI and Recraft compare on data residency?

Figma AI scores 3/5 for data residency (Primarily hosted on AWS US; EU data residency options available for Enterprise customers upon request), while Recraft scores 2/5 (Cloud-hosted with no published information on data centre locations or EU-specific hosting options. UK company but infrastructure details not publicly disclosed.).

Are Figma AI and Recraft GDPR compliant?

Both tools are assessed across five compliance dimensions. Figma AI has a regulatory fit score of 3/5 and Recraft scores 2/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool