Canva
Transparency
Breakdown
| Subprocessor list | published; no entries could be read | 0 / 30 |
| Processing locations | no list | 0 / 8 |
| Purposes | no list | 0 / 7 |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 50 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Canva's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/canva"><img src="https://thirdpartyindex.com/badge/canva.svg" alt="Canva transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/canva)No tracked subprocessors.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
None extracted.
Listed as a subprocessor by (1)
Purposes as each company states them.
remove.bg remove.bg Support management and communication; Support management and Printing and Distribution Services
Security record
What public security catalogs list for Canva, in their words.
Data breaches
- Canva 137,272,116 accounts Email addresses; Geographic locations; Names; Passwords; Usernames
In May 2019, the graphic design tool website Canva suffered a data breach that impacted 137 million subscribers. The exposed data included email addresses, usernames, names, cities of residence and passwords stored as bcrypt hashes for users not using social logins.
Have I Been Pwned · evidence
Breach data from Have I Been Pwned (CC BY 4.0), which calls every entry a breach, including data scraped from public pages.
Service status
8 incidents in the last 90 days (4 major or critical, 4 minor, 0 with no stated impact) · typically resolved in 6 h · longest major: 8 h 51 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Some users may have issues with payments in Canva | major | 1 h 3 min evidence | |
| Some users may have issues using Canva | major | 19 min evidence | |
| Some users may have issues downloading video designs | major | 8 h 51 min evidence | |
| Users may have issue with Signup/Login via Microsoft | minor | 6 h 38 min evidence | |
| Some users may have issues using Canva | minor | 1 h 13 min evidence | |
| Some users may experience issues with formulas in downloaded Sheets | minor | 18 h 24 min evidence | |
| Users may experience errors uploading media | major | 1 h 50 min evidence | |
| Some users in Australia and New Zealand may experience slower load times when using Canva | minor | 6 h evidence |
As Canva's status page reports its own incidents (scheduled maintenance left out), read every few hours since .
Federal contracts
By funding agency. UEI TZ8JGM4GJX35 · checked Sep 27, 2026 · snapshot failing
| Agency | Prime awards | Obligated | Subawards | Subaward total | Years |
|---|---|---|---|---|---|
| Smithsonian Institution | 2 | $289.4K | — | — | 2024–2025 |
| U.S. Fish and Wildlife Service Department of the Interior | 1 | $39.5K | — | — | 2024 |
| Executive Office of the President new | 1 | $20.0K | — | — | 2026 |
| Drug Enforcement Administration Department of Justice | 5 | $8.0K | — | — | 2024–2026 |
Prime awards and subawards reported by prime contractors. Purchases through a reseller name the reseller, not the vendor.
Changes
None since tracking began.