Compliance frameworks, security audits, and quality certifications this company maintains.
InVision maintains SOC 2 Type II certification, providing enterprise customers with independent validation that InVision Design System Manager and Freehand platforms meet rigorous security, availability, and confidentiality controls for design asset and component data.
InVision is GDPR compliant, providing EU enterprise customers with data processing agreements, data subject rights fulfillment workflows, and privacy controls for design data stored and processed on the InVision platform.
InVision complies with the California Consumer Privacy Act, enabling California-based enterprise customers and individual users to exercise their rights regarding personal data stored within InVision products.
InVision holds ISO 27001 certification for its information security management system, satisfying enterprise procurement requirements from Fortune 500 customers in financial services and healthcare who require ISO certification for all design platform vendors.
InVision supports SAML 2.0 single sign-on integrated with Okta, Azure AD, and Google Workspace, enabling enterprise IT teams to enforce centralized identity management and access controls for all InVision platform users.
InVision supports SCIM 2.0 for automated user provisioning and deprovisioning, allowing enterprise customers to sync InVision workspace membership from their identity provider without manual seat management.
All design assets, component data, and collaboration activity transmitted through InVision DSM and Freehand are encrypted in transit using TLS 1.2 or higher, protecting sensitive enterprise design IP from interception.
InVision encrypts all customer design data at rest using AES-256, ensuring that enterprise design system components, brand assets, and Freehand collaboration sessions stored on InVision infrastructure are protected.
InVision supports HIPAA-compliant workflows for healthcare enterprise customers who use InVision DSM to manage design systems for patient-facing digital health products, with BAA available for qualifying enterprise accounts.
InVision has completed CSA STAR Level 2 certification, demonstrating third-party validated cloud security controls for enterprise customers in regulated industries evaluating InVision as a compliant design platform vendor.