Canva is an online design and visual communication platform with a mission to empower everyone in the world to design anything and publish anywhere. It encompasses the entire visual communication process, across ideation, creation, collaboration, and publishing. It is available through web browsers, as well as through iOS, Android and desktop apps.

Canva is committed to the security and privacy of the information that our customers entrust to us. We are pleased to be able to provide our customers with visibility into our security controls and practices by sharing this security profile. In this profile, you will find the following:

• Information paper providing an overview of Canva's security and privacy controls
• Summary of Canva's information security policies
• Summary report of Canva's latest penetration test
• ISO 27001 certificate and Statement of Applicability
• SOC 2 Type II report
• PCI DSS attestation of compliance
• Completed CAIQ, VSA, SIG Lite, HECVAT self-assessment questionnaires