Guides Tool check
Canva & GDPR: Using the design tool in a legally compliant way
It's hard to imagine everyday agency life without Canva. As a US service, however, it needs the right framework.
Is Canva data protection compliant?
Canva can be used with a business subscription and a data processing agreement – the issue arises when personal data is included in uploads.
Canva processes account and usage data and is based outside the EU. For business use, therefore, a data processing agreement (DPA) is required, and users must be aware of what they are uploading.
Conditions for use
AV agreement/DPA for Teams, transparency regarding data transfer and – if Canva content is embedded – consent for any cookies.
- DPA/AV agreement for commercial use.
- Do not upload any sensitive personal data without clarification.
- For website embeds: check third-party requests.
Practical rules for the team
The most effective way to make a difference is through how we use it: any personal data included in designs or uploads should be a conscious decision.
A brief set of guidelines (specifying which data is permitted and which is not) helps prevent accidental breaches – much like with AI tools.
Conclusion
Canva can be used within the company – subject to an AV agreement and clear upload rules.
Not sure about the legal framework (contracts, privacy policy, website tracking)? Let’s have a quick chat and go through it together.
Let's take a quick look at your sites
In a 15-minute call you’ll see where your client sites stand — and how to secure them effortlessly.
FAQ
Can I use Canva for business?
Yes, provided you have a business subscription, a data processing agreement, and take care with personal data in uploads.
Do I need an AV contract with Canva?
For the business processing of personal data, yes – the Data Processing Addendum should be accepted and documented.
What do I have to watch out for with uploads?
Do not upload any sensitive personal data without proper authorisation, and establish clear rules within the team regarding what is permitted.