# Canva Canva declares [18 subprocessors](https://thirdpartyindex.com/vendors/canva#subprocessors), plus 5 of its own affiliates, in [its subprocessor list](https://content-management-files.canva.com/assets/en/f6022a49-58d4-40d8-88d3-803529880cc0), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/14463)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-28. [4 tracked vendors](https://thirdpartyindex.com/vendors/canva#used-by) name Canva as a subprocessor, including [remove.bg](https://thirdpartyindex.com/vendors/remove-bg), [FullFunnel](https://thirdpartyindex.com/vendors/fullfunnel-co) and [Donut](https://thirdpartyindex.com/vendors/donut). Canva (canva.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/canva - Documents last verified: 2026-11-11 - Transparency rating: 95/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Companies part of it: [remove.bg](https://thirdpartyindex.com/vendors/remove-bg) - Supply chain: relies on 11 tracked vendors directly, 97 within two hops, 297 within three; 4 tracked vendors rely on it directly, 8 within two hops, 18 within three - Cite as: Canva, Third Party Index, https://thirdpartyindex.com/vendors/canva (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://www.canva.com/trust/ | 2026-11-11 | 2026-11-11 | | Subprocessor list | https://content-management-files.canva.com/assets/en/f6022a49-58d4-40d8-88d3-803529880cc0 | 2026-11-11 | 2026-09-28 | | Data processing addendum | https://www.canva.com/policies/data-processing-addendum/ | 2026-11-11 | 2026-10-29 | | Privacy policy | https://www.canva.com/trust/privacy/ | 2026-11-11 | 2026-11-11 | | Terms | https://www.canva.com/policies/terms-of-use/ | 2026-11-11 | 2026-11-11 | | Security page | https://www.canva.com/security/ | 2026-11-11 | 2026-10-24 | | security.txt | https://www.canva.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 | | Status page | https://www.canvastatus.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (18) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Platform Hosting, Infrastructure and Canva AI Services | United States & EU | 2026-09-28 | | [Anthropic PBC](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | Canva AI Services | United States | 2026-09-28 | | [Assembled, Inc.](https://thirdpartyindex.com/vendors/assembled.md) | Support Management | United States | 2026-09-28 | | Concentrix Daksh Services Philippines Corporation | Customer Support | Philippines | 2026-09-28 | | [DeepL GmbH](https://thirdpartyindex.com/vendors/deepl.md) | Translation Services | EU | 2026-09-28 | | [ElevenLabs Inc.](https://thirdpartyindex.com/vendors/elevenlabs.md) (AI model provider: ElevenLabs) | Canva AI Services | United States | 2026-09-28 | | [Features & Labels, Inc.](https://thirdpartyindex.com/vendors/fal.md) | Canva AI Services | United States | 2026-09-28 | | [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Platform Hosting, Infrastructure, Security and Canva AI Services | United States | 2026-09-28 | | IBEX Global Solutions | Customer Support | United States | 2026-09-28 | | Kaizo Operations B.V. | Support Management | EU | 2026-09-28 | | Leonardo.AI | Canva & Affinity AI Services | Australia & United States | 2026-09-28 | | [MongoDB, Inc.](https://thirdpartyindex.com/vendors/mongodb.md) | Platform Hosting and Infrastructure | United States | 2026-09-28 | | Nanonoble Pte. Ltd. | Canva AI Services | United States | 2026-09-28 | | [OpenAI, LLC](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Canva AI Services | United States | 2026-09-28 | | Scene Group Ltd | Service Provider of Cavalry | EU | 2026-09-28 | | Serif (Europe) Limited | Service Provider of Affinity | EU | 2026-09-28 | | [Snowflake Inc.](https://thirdpartyindex.com/vendors/snowflake.md) | Platform Hosting and Infrastructure | United States | 2026-09-28 | | [Zendesk, Inc.](https://thirdpartyindex.com/vendors/zendesk.md) | Support Management | United States | 2026-09-28 | Read from ([evidence](https://thirdpartyindex.com/evidence/14463)). CSV: https://thirdpartyindex.com/vendors/canva/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai ### Its own affiliates (5) - Canva Pty Ltd (Australia) - Canva Austria GmbH (EU & United States) - Canva Solutions Inc. (Philippines) - Canva UK Operations Limited (EU) - Canva US, Inc. (United States) ## Web Technologies Canva's homepage made 91 requests to 15 domains, 8 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 8 third parties by category: Advertising 3 (Reddit, Inc., Microsoft; reviewed: Innovid); Analytics 3 (Meta, Cloudflare, LinkedIn); Tag managers 1 (Google Cloud); Issue trackers 1 (usually detected as Issue trackers: Sentry). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (8) - Meta: 14 requests to facebook.net, facebook.com; Facebook Pixel - Google Cloud: 4 requests to google.com, googletagmanager.com; Google Sign-in, Google Tag Manager (its subprocessor list names it too) - Reddit, Inc.: 4 requests to reddit.com, redditstatic.com; Reddit Ads - Microsoft: 3 requests to bing.com; Microsoft Advertising - Sentry: 3 requests to sentry.io - Cloudflare: 2 requests to cloudflare.com, cloudflareinsights.com; Cloudflare Browser Insights, cdnjs, crypto-js 4.0.0 - LinkedIn: 2 requests to licdn.com, linkedin.com; Linkedin Insight Tag - Innovid: 1 request to tvsquared.com ### Unknown (1) Domains not identified yet: advertisinganalytics.com ### First party (1) - Canva: 54 requests to canva.com; Cloudflare, HSTS, MobX, Open Graph, Sentry, core-js 3.32.2 6 tracked companies loaded by the homepage are not in Canva's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (4) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Donut](https://thirdpartyindex.com/vendors/donut.md): Content design and creation - [FullFunnel](https://thirdpartyindex.com/vendors/fullfunnel-co.md): Brand and design assets - [ParentSquare](https://thirdpartyindex.com/vendors/parentsquare.md): Connection between ParentSquare and district staff Canva account. No personally identifiable information is processed or stored. - [remove.bg](https://thirdpartyindex.com/vendors/remove-bg.md): Support management and communication; Support management and Printing and Distribution Services ## Security record Breaches listed by Have I Been Pwned (CC BY 4.0, haveibeenpwned.com): - Canva, 2019-05-24: 137272116 accounts; data: Email addresses, Geographic locations, Names, Passwords, Usernames ## Service status Incidents it reported on its own status page. - Last 90 days: 1 reported incidents (1 major or critical, 0 minor, 0 with no impact stated) - Typical time to resolve: 37 min - Status page last read: 2026-11-12 - 2026-10-08: Some users may have issues using Canva (major) - 2026-07-31: Some users may have issues with payments in Canva (major) - 2026-07-13: Some users may have issues using Canva (major) - 2026-07-12: Some users may have issues downloading video designs (major) - 2026-07-09: Users may have issue with Signup/Login via Microsoft (minor) - 2026-07-09: Some users may have issues using Canva (minor) - 2026-07-06: Some users may experience issues with formulas in downloaded Sheets (minor) - 2026-07-02: Users may experience errors uploading media (major) ## Incidents reported by Canva's subprocessors Incidents reported in the last 30 days on their own status pages by 6 vendors Canva lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-12: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000347 (minor) - 2026-11-11: [Assembled](https://thirdpartyindex.com/vendors/assembled#status), which Canva lists as a subprocessor, reported Degraded performance in the Assembled app (no impact stated) - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical) - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor) - 2026-11-11: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Scribe v3 Live outage (major) - 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated) - 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated Errors On API (minor) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor) - 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated errors with image generation (minor) - 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor) - 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000337 (minor) - 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000336 (minor) - 2026-11-06: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Choppy audio on Agent conversations using Eleven v4 Turbo (minor) - 2026-11-06: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Choppy audio on Agent conversations using Eleven v4 Turbo (minor) - 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated) - 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor) - 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor) - 2026-11-04: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Intermittent Sign in issue (no impact stated) - 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported File upload errors in ChatGPT (minor) - 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000321 (minor) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor) - 2026-10-30: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported ElevenCreative - Image & Video - Degraded performance (minor) - 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000319 (minor) - 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor) - 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor) - 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor) - 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated) - 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor) - 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major) - 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major) - 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major) - 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major) - 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Delays in customer support responses (no impact stated) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor) - 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Elevated errors affecting Connectors (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Authentication errors for some users (major) - 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Canva lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000301 (critical) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Claude MCP connection not working (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported EU - STT - Increase in latency in the EU Residency for Speech-to-Text requests (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Inbound Twilio calls experiencing intermittent connection failures (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Marketing website (no impact stated) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported EU Agents disruption in SIP calls (major) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Increased Rate of LLM Failure Errors on Agent Platform Calls (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Request failures with the V3 model (major) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported \[Isolated environments\] Issue with voices on EU and India Residency environments (major) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Instant Voice Clone creation failures (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported EU Residency - Issue with the Agents platform, TTS and Scribe in the EU residency server (major) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported EU Residency - Conversation history not showing for recent calls (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Some support request forms may be unavailable (no impact stated) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported ElevenReader Elevated Error Rates (no impact stated) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Website authentication rejecting all frontend requests (critical) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Website Slowness and API Request Latency (major) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Increased Dubbing Latency and Failure Rate (major) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Agent SIP Conversation Disruption (major) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Some TTS requests seeing increased latency (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Elevated error rate for Eleven Multilingual v2 model (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Payment Issues (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Increased error rate for Forced Alignment (major) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Transfer to Human not working correctly (major) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Elevated error rates for TTS v3, Dubbing, STT (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Elevated error rates querying voices (minor) - 2026-10-21: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Increased API error rate (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000299 (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor) - 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Canva lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor) - 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000294 (critical) - 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported File Download errors (minor) - 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000290 (minor) - 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000287 (critical) - 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Widespread feature degradation (major) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor) - 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Canva lists as a subprocessor, reported INC20000277 (minor) - 2026-10-13: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Multiple US endpoints experiencing timeouts and latency (major) - 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Canva lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor) - 2026-10-13: [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs#status), which Canva lists as a subprocessor, reported Instant Voice Clone creation failures (minor) ## Federal contracts U.S. government prime awards and reported subawards to its UEI (TZ8JGM4GJX35), from USAspending, by funding agency. Records show funding, not use. | Agency | Department | Prime awards | Obligated | Subawards | Subaward total | First | Last | |---|---|---|---|---|---|---|---| | Smithsonian Institution | Smithsonian Institution | 2 | $289.4K | — | — | 2024-07-19 | 2025-06-04 | | U.S. Fish and Wildlife Service | Department of the Interior | 1 | $39.5K | — | — | 2024-02-01 | 2024-09-19 | | Executive Office of the President | Executive Office of the President | 1 | $20.0K | — | — | 2026-02-26 | 2026-02-26 | | Drug Enforcement Administration | Department of Justice | 5 | $8.0K | — | — | 2024-08-05 | 2026-01-30 | 9 records ([evidence](https://thirdpartyindex.com/evidence/10516)). Details: https://thirdpartyindex.com/vendors/canva/federal The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/canva ## Security contact From its security.txt (https://www.canva.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/642)): - Contact: https://canva.com/security/bug-bounty - Contact: https://www.canva.com/help/describe-your-issue - Disclosure policy: https://canva.com/security/vulnerability-disclosure - Acknowledgments: https://bugcrowd.com/engagements/canva/hall_of_fames - Security jobs: https://www.canva.com/careers/jobs/?specialty=security - Languages: en - No expiry date --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api