Canva (Magic Studio AI)
low riskAI Media Generationcanva.comverified 2026-06-27
Data-handling profile
- Trains on input
- Yes, on the consumer tier (enterprise tier excluded)
- Retention
- Default off for training on private content; free/individual users can opt in via Privacy settings; Teams, Business, Enterprise, and Education content is never used for AI training and this cannot be enabled.
- Data region
- Global
- Certifications
- SOC 2 Type IIISO 27001
- DPA available
- Yes
- Breach history
- none known (2019 Canva breach exposed ~137M user account records - emails, usernames, hashed passwords - via a separate, non-AI security incident)
- EU AI Act
- Magic Studio generative features trigger EU AI Act Art. 50 AI-content-disclosure obligations; Canva Shield program addresses provenance/watermarking and indemnification.
Sources
- https://www.canva.com/safe-ai-canva-shield/
- https://www.canva.com/trust/privacy/
- https://www.canva.com/help/using-magic-studio-safely-and-legally/
Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.
Change history
No material changes recorded since monitoring began.