Provision record
Canva · Canva Privacy Policy · View original document ↗

Canva may process data as processor on behalf of customers

Common · 264 of 343 platforms
Stay ahead of the changes
Track Canva and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Canva's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

How other platforms handle this

Ford

We transfer personal data from the European Economic Area and Switzerland to other countries, some of which have not been determined by the European Commission to have an adequate level of data protection. When we do so, we use a variety of legal mechanisms, including contracts

Patreon

Patreon complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.

Reddit

Reddit, Inc., complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
In certain circumstances, we process personal data as a processor on behalf of our customer... it is the Canva customer that is responsible for the processing of your personal data and Canva's processing will be governed by the terms of the Data Processing Addendum.

Excerpt from Canva's Privacy Policy

Provision details

Document information
Document
Canva Privacy Policy
Entity
Canva
Tracking information
First captured by ConductAtlas
April 19, 2026
Text quoted from version
CA-V-006071, captured Aug. 26, 2026
Record ID
CA-P-068842
Document ID
CA-D-000204
Evidence Provenance
Source URL
Wayback Machine
Extracted-text SHA-256 (version CA-V-006071)
9375e11c3054a6e46dedd8a39df7dcd559e0a4a1efeb230f601f0688a4f2c0cd
Analysis generated
May 11, 2026 23:11 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-006071, captured Aug. 26, 2026 (checked Oct. 5, 2026)
Not the current version. The document's current version is CA-V-007727, captured Oct. 21, 2026; this clause has not been re-checked against it.
Citation Record
Entity: Canva
Document: Canva Privacy Policy
Record ID: CA-P-068842
Version: CA-V-006071
Captured: 2026-08-26 00:34:51 UTC
SHA-256: 9375e11c3054a6e4…
URL: https://conductatlas.com/platform/canva/canva-privacy-policy/provision/CA-P-068842/canva-may-process-data-as-processor-on-behalf-of-customers/
Accessed: Oct. 23, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does Canva's Canva may process data as processor on behalf of customers clause do?

The clause states: “In certain circumstances, we process personal data as a processor on behalf of our customer... it is the Canva customer that is responsible for the processing of your personal data and Canva's processing will be governed by the terms of the Data Processing Addendum.”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 264 platforms. See the full comparison.

Is ConductAtlas affiliated with Canva?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Canva.