Canva

SaaS / Software Australia Website Reviewed Sept. 2, 2026

Browser-based design and brand templates platform with team collaboration, brand kits and print fulfilment, widely used by marketing teams.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body Canva production platform and supporting ISMS Current
ISO/IEC 27017:2015 and ISO/IEC 27018:2019 Accredited third-party certification body Cloud security controls and protection of PII in public cloud for Canva services Current
SOC 2 Type II Independent third-party auditor Canva platform; report available to customers under NDA Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Canva acts as processor under its DPA; SCCs and UK IDTA available

Assess Canva in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.