Vendor Privacy Scorecard · Canva
Canva Magic Studio: is it safe for client information?
AI design and writing tools inside Canva for marketing work.
Bottom line
Fine for marketing content. Check the AI training setting on the account and keep client information out of designs.
Does it train on your data? By plan
Free and Pro: User or admin setting
Canva only trains on content with the user's permission, controlled in privacy settings.
Teams and Enterprise: User or admin setting
Admins can control the AI training setting for the team.
What an auditor will ask
- Trains AI on your data? Depends on plan
- Controlled by a privacy setting. Turn it off and record that you did.
- Retention you can control? Depends on plan
- Designs stay in your account until deleted.
- Signs a HIPAA BAA? No
- Not designed for health information.
- Staff may read your content? Depends on plan
- Follows Canva's content moderation terms.
Security certifications
- SOC 2 Type II
- ISO/IEC 27001
Set it up the safe way
- Turn off AI training in the account's privacy settings.
- Label AI-generated marketing images where your state requires it.
- Keep client names and photos out of AI prompts unless you have consent.
Canva trust centerBusiness privacy terms
Summarized from Canva's published terms, last checked 10/1/2026. Vendors change terms. Confirm every point against the agreement you actually signed. This is not legal advice.
Using Canva Magic Studio at work? An unvetted tool can cost you your license.
When an employee pastes client information or confidential files into Canva Magic Studio without the correct safeguards, licensing boards and regulatory bodies hold you responsible. AI Governance Rule Watch™ documents your approved tool roster, vendor reviews, and staff guidelines in permanent diligence records ready for any audit.
Founding member rate. Cancel anytime. Plus applicable taxes. Renews until canceled. Not legal advice and not a compliance certification.