Weblify Security

How the Weblify Figma plugin and Chrome Extension handle Figma data, website copying, license checks, and network requests.

The Figma plugin is run directly from Figma's own servers, and runs inside of a your Figma file, which means that it inherits all of the security and infrastructure of the Figma platform, which exceed industry standards for data protection and security:

  • SOC 2 Type 2
  • SOC 3
  • Cloud Security Alliance (CSA) STAR: Level 1
  • ISO/IEC 27001:2013
  • ISO/IEC 27018:2019
  • EU Cloud Code of Conduct (COC): Level 2

There's no additional software that needs to be installed to use the Figma plugin, as Figma plugins run as a built-in part of Figma's own native functionality, and all Figma plugins Accessibile and can be instantly run from inside any Figma file, or via the official Figma Community ecosystem inside of the Figma app.

If your organization is already approved to use Figma, then you already have access to Figma plugins.

How Weblify handles Figma data ​

The Weblify Figma plugin builds website layouts in Figma, previews and exports Weblify pages, and inspects selected Figma layers as code.

Website building, preview generation, code inspection, and ZIP creation run inside the plugin. Generated files are downloaded directly to your computer.

The Figma plugin does not fetch or import third-party website URLs. Its Import Website tab links to the Weblify Chrome Extension instead.

Chrome extension website copying ​

The Weblify Chrome Extension reads the page or selected element only after you explicitly choose a copy action. It converts the page in your browser and writes the result to your clipboard so that you can paste it into Figma.

The extension may request images and fonts from the website being copied so they can be included in the Figma payload. It does not send the copied website or your Figma file contents to Hypermatic.

Accounts and usage events ​

Weblify contacts Hypermatic's account service to check trial usage and validate Pro license keys. These account requests can include the Weblify plugin ID, license key, and the Figma user ID and name made available to the plugin by Figma.

Weblify also records coarse product events containing the plugin name, event name, and a numeric value. These usage events do not include Figma layer contents or generated website code.