// Trust & Security Report
Canva Pty Ltd
Canva is a web-based design platform offering free design tools for education tier (teachers & students), plus paid consumer and enterprise tiers (Pro, Teams, Business, Enterprise). Canva for Education is the free tier for K-12 and higher education.
Certifications held
5
Maturity
Enterprise
Trains on your data
Yes
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on canva.com“Canva is ISO 27001 certified. Canva is regularly audited against ISO 27001 standards by independent third party auditors”
Verify on canva.com“Canva processes your personal data in accordance with European laws and regulations, such as the General Data Protection Regulation (GDPR) and UK General Data Protection Regulation (UK GDPR). DPA contains the EU Standard Contractual Clauses, UK International Data Transfer Addendum”
Verify on canva.com“Canva for Education is certified compliant with FERPA. Canva has signed the National Data Privacy Agreement and State-level addenda.”
Verify on canva.com“Canva for Education's privacy policies are designed to meet responsibilities under the Family Educational Rights and Privacy Act (FERPA) and the Children's Online Privacy Protection Act (COPPA) and its compliance has been certified by iKeepSafe”
> Show 3 unconfirmed / not-held certifications
// Privacy & AI training
Trains on customer data
Yes
Data processing agreement
Offered
Data region
Multi-region (US, Australia, Singapore, EU, UK, Philippines, New Zealand). Enterprise customers can set preferred data residency. AWS-hosted infrastructure.
For free and Pro users: AI training is enabled by default but users can opt out in privacy settings. For Teams, Business, Enterprise, and Education accounts: Content is NOT used to train AI and this cannot be turned on. Education users specifically: student content is never used for AI training.
// Security controls
// Products & data scope
data: Student designs, collaboration data. Student personal data NOT used for AI training.
Free for verified teachers and students. K-12 and higher education. FERPA/COPPA certified. No AI training on student content. LMS integrations with Google Classroom, Canvas, Blackboard, Schoology, D2L, Moodle, Microsoft Teams.
data: User designs and metadata. AI training opt-out available in privacy settings.
Free tier with basic design tools
data: User designs and metadata. AI training opt-out available in privacy settings.
Paid individual tier
data: Team/organizational designs. NOT used for AI training (cannot be enabled). SSO, SCIM, role-based access, audit logs.
Paid team/organizational tiers with enterprise features including data residency preference
// At a glance
Pricing model
Freemium (Free education tier; Free/Pro individual tiers; Teams/Business/Enterprise organizational tiers)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Canva Pty Ltd's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
trust.canva.com