Business
BusinessDoesn't train on your data
EU hosting only on higher plans · DPA on request
Price: €170 / user / yr
Data
Canva and the GDPR: AI training, data location and DPA
Business: Doesn't train on your data. EU hosting only on higher plans · DPA on request.
Vendor: CanvaDesign, images and videoChecked on How we check
Verdict
Is Canva GDPR compliant?
No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.
Training
Does Canva train on your data?
Trains on your data by default?
CheckedDoesn't train on your data.
No, and it cannot be switched on: content from Teams, Business, Enterprise and Education users is not used to improve AI features
Source: canva.comCanva Shield page (5 Jan 2026)Checked on
Location
Where does Canva store your data?
Where data is stored by default
CheckedUnited States
Source: canva.comFAQ 'Where does Canva store my data?'Checked on
EU hosting on this plan
CheckedEU hosting only on higher plans.
Not on Business: a US or EU data residency preference needs an Enterprise, Campus or District plan
Source: canva.com'Before you start'Checked on
Contract
Does Canva sign a data processing agreement?
Data processing agreement (DPA)
CheckedDPA on request.
Yes, for Canva Business and Enterprise: the DPA forms part of the agreement (Terms of Use); 30 days' notice before new sub-processors
Source: canva.comPreamble, section 2.7Second source: canva.comChecked on
Processors
Who else handles Canva data?
Sub-processors (companies that handle the data for them)
Checked17 listed.
Public (list dated 17 Apr 2026): 15 third parties, 7 of them for Canva AI (AWS in US and EU; Anthropic, ElevenLabs, Features & Labels, Google, Nanonoble, OpenAI in the US), plus 8 Canva group entities
Source: canva.comLink to the most recent PDFSecond source: content-management-files.canva.comChecked on
EU–US Data Privacy Framework
CheckedOn the list.
Active (Canva US, Inc.; EU-US, Swiss-US, UK Extension)
Source: dataprivacyframework.govSearch 'Canva'Checked on
Security
Which certifications and admin controls does Canva have?
Security certifications
CheckedISO 27001, AICPA SOC 2, AICPA SOC 3 and PCI DSS
Source: canva.comSection 'Certifications'Checked on
Admin controls for AI
CheckedYes. Team administrators can switch Magic Studio AI features on or off and decide by role who can use them
Source: canva.comSection 'Built for the workplace'Checked on
Price
What does Canva cost?
Price, as shown in Germany
Checked€170 / user / yr.
EUR 170 per person/year (annual billing)
Source: canva.comBusiness card, annual toggleChecked on
The vendor doesn't say: retention.
Alternatives
Canva alternatives that don't train on your data
Other design, images and video tools whose business plan doesn't train on your data and includes a DPA.
The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.
Tool · PlanVerdictYour five rules
- remove.bg
monthly subscription · See details
Doesn't train on your dataEU hosting not documented · DPA in the terms
✓?✓✓✓
- Synthesia
Pro · $89 / mo
Doesn't train on your dataNo EU hosting · DPA on request
✓✕✓✓✓
- VEED
Business · See details
Doesn't train on your dataData in the EU by default · DPA in the terms
✓✓✓?✓
- Gamma
Business · €35 / user / mo
Doesn't train on your dataEU hosting not documented · DPA in the terms
✓?✓✓✕
- Invideo AI
Plus · €30 / user / mo
Doesn't train on your dataEU hosting not documented · DPA on request
✓?✓?✕
Need something your tools can't do?
We design and build what your team is missing, around the way you already work and the data rules you set.