Canva (PDF import & editing): where do your PDFs go?
Sovereignty score
38/100
High exposureCanva (PDF import & editing) is published by Canva Pty Ltd (Australia). The vendor falls under the US CLOUD Act: US authorities can request your files, whatever the hosting country.
Score calculated for this tool alone, without document-type weighting.
Checkpoints
- CLOUD Act
- Exposed Primary storage hosted in the United States on AWS, with US subsidiaries subject to the US CLOUD Act.
- Jurisdiction
- Non-EU Australia — Australian law with transfers to the United States (AWS)
- Servers
- Non-EU Primary storage in the United States (AWS) with global processing (AU, US, EU, SG, UK)
- Retention
- Persistent Kept in your Canva workspace with no automatic deletion; residual backups after deletion
- AI
- Possible On individual Free/Pro accounts, use of content to improve AI is on by default (opt-out required in settings).
Quick answers
Is Canva (PDF import & editing) subject to the CLOUD Act?
Yes. Primary storage hosted in the United States on AWS, with US subsidiaries subject to the US CLOUD Act.
Where are files uploaded to Canva (PDF import & editing) hosted?
Primary storage in the United States (AWS) with global processing (AU, US, EU, SG, UK)
How long does Canva (PDF import & editing) keep your documents?
Kept in your Canva workspace with no automatic deletion; residual backups after deletion.
Does Canva (PDF import & editing) use your files to train AI?
On individual Free/Pro accounts, use of content to improve AI is on by default (opt-out required in settings).
Which certifications does Canva (PDF import & editing) claim?
ISO/IEC 27001 · SOC 2 Type II.
Our analysis
Widely used as shadow IT to touch up PDFs; persistent storage in the United States and AI reuse by default on individual accounts.
Source: Canva Privacy Policy & Trust Center ·
Alternatives for “Editing”
Tools with the same use, ranked by sovereignty score.
What about all your tools?
Get the sovereignty score of every PDF tool your teams use in 2 minutes. Free, no email, 100% local.