Vendor profile
Canva: where is customer data stored and processed?
Canva stores customer content in the USA, Australia, Singapore, the UK, the Philippines and New Zealand, and in the EU, though the EU country is not stated. Processing takes place in the same locations according to the privacy policy. The customer group is not stated, and the customer cannot choose region. The DPA is read, but it does not state where data is stored and names no specific sub-processor countries; the storage location comes from the privacy policy. Backup, identity, support and notifications have no stated location. The sub-processor list is linked but not reproduced on the page. Certifications are ISO/IEC 27001, SOC 2, SOC 3 and PCI DSS.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Europe (country not stated) | USA, Australia, Singapore, United Kingdom, Philippines, New Zealand |
| Processing | Europe (country not stated) | USA, Australia, Singapore, United Kingdom, Philippines, New Zealand |
Ownership and agreements
| Headquarters | Australia |
|---|---|
| Data processing agreement | Found and read |
| Certifications | ISO/IEC 27001, SOC 2, SOC 3, PCI DSS |