# Canva

## Kurzbeschreibung
**“to empower everyone in the world to design anything and publish anywhere”.**


**Canva** is a browser-based platform for design, publishing, and visual communication. Users can use it to create, among other things, social posts, presentations, documents, websites, videos, and brand materials; in addition, it offers AI features for text, images, translation, code, and data-driven content.


**Canva** thus positions itself not only as a design tool, but as an integrated Visual Suite for individuals, teams, and companies

## Claim
Visual Suite for Everyone

## Geeignet für
- Images
- Design / Graphics
- Email / Communication
- Marketing & Advertising
- Presentations
- Writing & Editing
- Social Media
- Texts / Content
- Translations
- Video
- Websites / Landing Pages

## Kernfunktionen
- Image editing
- Image generation
- Data visualization
- Graphic Design
- Logo Design
- Mockups
- Poster design
- Presentations
- Social media content
- Text generation
- Thumbnail generation
- Translation
- Video generation
- Video editing
- Website Development
- Advertisements

## Preismodell
- **free:** Free basic version for designs, templates, and free content; suitable for creating simple social posts, presentations, posters, videos, logos, and designs. Pro content may contain watermarks for Free users or be licensed separately.
- **subscription:** **Canva Pro** For individuals and solo creators; includes premium content, templates, Brand Kit, Background Remover, Magic Resize, and AI-powered design features.


**Canva Business** For small businesses, solo entrepreneurs, and growing teams; includes everything in Pro plus higher AI access, advanced brand management, marketing/ad insights, collaboration, and shared workspaces.


**Canva Enterprise** For large organizations with multiple teams; includes enterprise security, SSO, SCIM, audit logs, data residency options, AI governance, advanced admin controls, approval workflows, integrations, and dedicated support.
- **other:** Free users can license individual Pro content for one design; in addition, there are print products as well as special offers for education and nonprofits.

## DSGVO und Datenschutz
**Gesamteinschätzung:** Conditional

**On-prem / local hosting: indirect / not available**


No on-prem, local, or self-hosting option for Canva was found on the website.


**Private Cloud / Data Center: Partially**


A dedicated private cloud is not clearly described on the website. Indirectly, the list of subprocessors for AWS mentions “United States & Europe (when selected),” which suggests selectable regions but does not explicitly confirm a private or isolated customer environment.


**EU SaaS / Managed: Partially**


Canva is available as a managed SaaS service. For EU coverage, there is an EEA representative, and the list of subprocessors includes a reference to Europe for AWS “when selected.” However, no clear, general commitment to full EU/EEA data residency for the entire service was found on the website.


**Hybrid: Indirect / Not Available**


No documented hybrid operating model was found on the website in which relevant processing takes place partly in a local/private cloud and partly externally.


**DPA: covered**


A Data Processing Addendum is documented and, according to the Trust Center, available for Canva Business and Canva Enterprise; the Terms indicate that it is incorporated into these contractual relationships.


**No Training: Partially**


Canva documents that Business, Teams, and Enterprise content is currently not used to improve AI-powered features, and third parties are also prohibited from doing so. However, a privacy settings model applies to general user content, meaning there is no blanket global exclusion. Thus, “no training” is not a universal rule but depends on the plan and settings.


**Open Source / Transparency Path: Indirect / Not Available**


No open-source, openly modeled, or self-hostable product variant was found on the website. The only positive aspect is the partial transparency regarding subprocessors and technical/organizational measures; a genuine open-source/sovereignty path is not documented.


**Data Processing**


Canva describes itself as a data controller in some cases relevant to the EU/EEA and as a data processor in certain customer scenarios. For international transfers outside Europe, Canva refers to contractual safeguards such as the EU Model Clauses and the UK Addendum. However, the published list of subprocessors shows that hosting, infrastructure, support, and AI processing may be handled by multiple companies and third-party providers in the U.S., Europe, Australia, and other countries. For EU users, it is therefore necessary to carefully distinguish between standard SaaS, Business/Enterprise DPAs, and optionally used AI or third-party provider functions.


**Conclusion**


From a website perspective, Canva is not documented for the EU/EEA region as a standard service that is unambiguously and consistently EU-resident or fully and straightforwardly GDPR-compliant. However, there are robust compliance components such as a Privacy Policy for Europe, an EEA representative, SCC-based transfer mechanisms, a DPA for Business/Enterprise, subprocessor transparency, and security certifications. Because server locations and EU data residency are not generally clearly defined, and several U.S. subprocessors are listed, a realistic assessment for the entire EU/EEA region is **limited**.


**Sources**


- [https://www.canva.com/policies/privacy-policy/](https://www.canva.com/policies/privacy-policy/)
- [https://www.canva.com/trust/privacy/](https://www.canva.com/trust/privacy/)
- [https://www.canva.com/policies/data-processing/](https://www.canva.com/policies/data-processing/)
- [https://www.canva.com/policies/data-processing-addendum-2024-08-22/](https://www.canva.com/policies/data-processing-addendum-2024-08-22/)
- [https://www.canva.com/policies/subprocessors/](https://www.canva.com/policies/subprocessors/)
- [https://content-management-files.canva.com/assets/en/1d37705a-4b0a-4f68-b136-95a0bb52ba28](https://content-management-files.canva.com/assets/en/1d37705a-4b0a-4f68-b136-95a0bb52ba28)
- [https://www.canva.com/security/](https://www.canva.com/security/)
- [https://www.canva.com/policies/msa/](https://www.canva.com/policies/msa/)

Canva documents a GDPR-compliant legal basis for users in the EU/EEA, names an EEA representative in Ireland, refers to Standard Contractual Clauses and the UK Addendum for international transfers, and provides a Data Processing Agreement (DPA) for Canva Business and Enterprise. At the same time, the website does not guarantee a clear, general EU/EEA server location for standard use; rather, the documentation refers to international data transfers, and the list of subprocessors mentions several processing operations in the U.S. GDPR-compliant use therefore appears realistic *only under certain conditions*, particularly with a Business/Enterprise contract, a DPA, and careful review of the features used and third-party apps.


**Positive**


The following are positively documented: a privacy policy with a section for the EEA, Switzerland, and the UK; EEA representation by the EDPO in Dublin; a commitment to provide appropriate safeguards for transfers outside Europe via EU Model Clauses and the UK International Data Transfer Addendum; DPA for Canva Business and Canva Enterprise; published list of subprocessors; privacy settings and the option to disable the use of Business/Enterprise content to improve AI-powered features; security certifications including ISO 27001 and SOC 2 Type II.


**Negative**


A negative or limiting aspect is that the website does not specify a clear, general server or data center location within the EU/EEA for all customer data. The privacy policy states that Canva Pty Ltd receives and processes data in Australia and that data may be transferred to other countries. The list of subprocessors cites several U.S. entities for key services, including AWS, Google, MongoDB, OpenAI, and Snowflake. The website does not clearly guarantee explicit, full EU data residency for the entire product; for AWS, it only states “United States & Europe (when selected).” On-premises/self-hosting is not specified on the website.


**Server Location**


The website does not consistently specify a fixed EU/EEA server location. The list of subprocessors lists “United States & Europe (when selected)” for Amazon Web Services; other key subprocessors for hosting/AI are listed as being located in the U.S. From this, EU data residency can only be inferred partially or on a case-by-case basis, not generally for all uses of Canva.

## Hosting und Daten
- **On-Prem / lokales Hosting:** unknown
- **Private Cloud / Rechenzentrum:** teilweise / indirekt
- **EU SaaS / Managed:** teilweise / indirekt
- **Hybrid:** unknown
- **AVV / DPA:** abgedeckt
- **Kein Training auf Kundendaten:** teilweise / indirekt
- **Open-Source / Transparenz-Pfad:** unknown

## Standort
**Land:** Australia

**Taxonomie:** Australia

Address, contact: Registered office/registered address: 110 Kippax St, Surry Hills 2010. Provider: Canva Pty Ltd. Authorized representative: Cliff Obrecht. Email: privacy@canva.com; copyright@canva.com. Telephone: +1 737 285 3388 (privacy contact, US listing)

## Vorteile
- Very broad range of functions in one platform: design, docs, presentations, websites, video, sheets, publishing.
- Very strong suitability for visual content and brand work.
- AI is deeply integrated (text, image, translation, interactive content, data-driven workflows).
- Good scalability from individual users to enterprise; enterprise with SSO, SCIM, audit logs, and data residency.
- Official privacy/security documentation is comparatively extensive.

## Nachteile
- Many truly relevant professional/governance features are not included in the Free plan, but rather in Pro/Business/Enterprise.
- Exact prices are partly dynamic/region-dependent; Business officially depends on location and team size.
- For GDPR-sensitive scenarios, Canva is not automatically EU-only, because international transfers/subprocessors outside the EU play a role.
- Free users see watermarks on Pro content or require individual licenses or an upgrade.

## Quellen
- Offizielle Website: https://www.canva.com

## Letzter Datenstand
2026-04-13

## Originalseite
https://kifox.ai/en/ki-tools/canva-en/