Canva stores your data in the United States.
Canva is a global company with staff all around the world. Data is processed by Canva group members in Australia, New Zealand, the Philippines, the United Kingdom, Singapore, Europe and the United States pursuant to our intra-group Data Transfer Agreement.
We have a range of globally respected service providers around the world that help us deliver Canva to you. We require them to enter into Data Processing Agreements with Canva.
These agreements have been designed to comply with privacy laws protecting the data of our users around the world. For our users in Europe and the United Kingdom, they include the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. We also carry out transfer impact assessments on vendors that receive personal data from Europe and the United Kingdom to assess technical and organizational measures, in addition to security due diligence.
Yes. We have a team of specialists across Australia, the United States, United Kingdom, China and the Philippines and a network of advisors across the globe dedicated to ensuring we’re building a safe and trusted platform.
Your designs are set to our highest privacy setting by default. This means only people added to a design can access it, anyone that hasn’t been added will need to request access.
You can update the privacy of your designs so that anyone with the link can access, or use a view-only link, which will allow anyone on the internet with the link or URL to access your design. Because links can be on-forwarded or placed on the internet by recipients, be careful not to include any confidential information in designs with these settings enabled.
For more information on design privacy settings, see our help center article here.
Canva is committed to ensuring the safety of students and educators when using Canva for Education. We are a trusted partner to schools and districts, and strive to meet or exceed student data compliance obligations under applicable law. Canva for Education and our privacy policies are designed to meet our responsibilities under the Family Educational Rights and Privacy Act (FERPA) and the Children’s Online Privacy Protection Act (COPPA) and our compliance has been certified by iKeepSafe.
Canva is a signatory to the United States National Data Privacy Agreement (drafted by the Student Data Privacy Consortium) and has signed this model agreement with a number of States in the United States. For States or districts who have not signed onto the National Data Privacy Agreement, Canva offers a Data Processing Addendum (DPA) that is automatically incorporated into your agreement with us. Canva will also review data privacy and data sharing agreements at the State or district level. To find out how to enter into a National Data Privacy Agreement with Canva or provide an agreement for review, email firstname.lastname@example.org. If you are ready to start using Canva, go to: https://www.canva.com/education/
If you are a Canva Team customer, we offer a Data Processing Addendum (DPA) to Canva Teams that is automatically incorporated into your agreement with us.
For our customers in Europe and the United Kingdom, we act on your behalf as your Data Processor in relation to any personal data within your Team. So that you can meet your legal obligations, we have ensured the DPA contains the:
You can contact Canva at any time at email@example.com.
If you are in the United Kingdom, our local representative is:
European Data Protection Office UK (EDPO UK)
8 Northumberland Avenue,
London WC2N 5BY, United Kingdom
If you are in the European Economic Area, our local representative is
European Data Protection Office (EDPO)
Regus Block 1, Blanchardstown Corporate Park,
Ballycoolen Road, Blanchardstown,
Dublin, D15 AKK1, Ireland.