Figure

Figure publicly advertises 3 compliance frameworks through a trust center hosted by Vanta.

Fintech & Financial Services

3

Advertised frameworks

Vanta

Trust center platform

First observed

Founding to trust center

See how a Home Equity Line of Credit with Figure can help you plan a home renovation project, consolidate high-interest debt, or fund your dream vacation!

Summary from the company’s website.

Publicly advertised compliance posture

As observed on September 8, 2026 on the organization’s public trust center.

  • ISO 27001

    International standard for an information security management system, certified by accredited bodies.

  • SOC 2

    Independent CPA audit of controls for security, availability, and confidentiality.

  • CCPA

    Publicly advertised on the organization’s trust center.

Compliance timeline

  1. September 8, 2026

    Posture last observed by Trust Index

Subprocessors

Third parties Figure discloses on its trust center. Linked entries have their own profile in the Trust Index.

24% chain trust: 7 of 29 disclosed subprocessors are themselves in the Trust Index.

  • Experian Credit Score provider
  • CoreLogic Valuations and lien matching
  • Method Intellidebt
  • Google Cloud Platform Cloud provider
  • Datadog Cloud monitoring
  • GitHub Version control
  • Confluent Managed Kafka provider
  • Auth0 Identity provider
  • Braze, Inc. Marketing campaigns
  • Clear Capital Property valuation
  • DataTree by First American Lien matching
  • Docmosis Pty Ltd Document generation
  • Full Story Session monitoring
  • Giact Systems, LLC Financial account verification
  • Incode Identity verification
  • Indecomm Document recording and fulfillment
  • Kastle AI Customer support
  • Middesk KYB
  • Mitek Systems, Inc. Identity verification
  • NICE inContact Customer support
  • OpenAI Document processing
  • Plaid Inc. Financial accounts
  • PointServ Income verification
  • Salesforce CRM
  • ServiceLink, LLC Notary
  • Socure KYC
  • Stewart Lending Title Title and appraisal services
  • TransUnion Identity verification
  • Zendesk Customer support

About this data

The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.

More in Fintech & Financial Services

How can we work together

Schedule a discovery session

A complimentary, exploratory meeting to discuss your business goals and challenges, identify potential solutions, and determine if our services align with your needs.

Hire us for a project

Augmenting a specific initiative or project, leveraging our expertise and resources to deliver a defined outcome.

Retain us long term

Ongoing collaboration and support through regular meetings, check-ins, and access to our team's collective knowledge and experience, empowering you to make informed decisions and drive sustained growth.