Does Canva (incl. Canva AI / Magic Studio) keep data in Australia?

Canva stores your data in the United States.

Note: The data residency setting (Enterprise, Campus and District plans) lets admins pick "No Preference", "United States" or "European Union" only. The 23 October 2026 sub-processors list shows Amazon Web Services with locations "United States, EU, Australia & Japan" and SharonAI Pty Ltd (hosting and infrastructure) in Australia, but Canva publishes no Australian storage option or commitment for customer data.

Data is processed by Canva group members in Australia, New Zealand, the Philippines, the United Kingdom, Singapore, Europe and the United States pursuant to our intra-group Data Transfer Agreement.

Note: Some processing happens in Australia, but no option keeps processing there. Canva AI: the sub-processors list (23 October 2026) names Anthropic, Baseten, ElevenLabs, Features & Labels, Fireworks.ai, Google, Kling AI, Nanonoble and OpenAI as "Canva AI Services" in the United States; Alibaba Cloud (Singapore & United States); Byteplus (Indonesia & Malaysia); AWS (United States, EU, Australia & Japan); Canva Austria (EU & United States); and Leonardo.AI (Australia & United States). Canva's AI Product Terms say "your Input may be shared with our Technology Partners, for the specific purpose of providing you with the functionality."

Concentrix Daksh Services Philippines Corporation Customer Support Philippines

Note: The quote is a table row (name, purpose, location) from the sub-processors PDF dated 23 October 2026. Other support rows: Assembled (US), IBEX Global Solutions (US), Zendesk (US), Kaizo (EU), DeepL translation (EU), Canva Pty Ltd (Australia), Canva Solutions Inc. (Philippines), Canva US, Inc. (US) and Canva UK Operations (EU).

This setting is currently only available for the US and EU.

Note: No plan offers an Australian data region. The data residency setting needs an Enterprise, Campus or District plan and an Organization Admin. Canva's help page also says "Data residency isn’t a compliance solution."

Different data types migrate at different times.

Note: Where the US or EU setting is used, the "Currently supported" data types are designs and comments, media files, folders, audit logs and search indexes; other data is not listed. The sub-processors list marks Alibaba Cloud, Byteplus, Kling AI and Nanonoble with "***These Subprocessors do not process Customer Personal Data for Canva Education, Canva Enterprise or Customers with a signed Order Form with Canva." Conflicting signals: Canva's privacy page says it stores data in the United States, but the 23 October 2026 sub-processors list includes Australia among AWS's locations and lists SharonAI Pty Ltd (hosting and infrastructure) in Australia. Canva does not say which customer data, if any, is stored in Australia, so storage stays not_au.

The vendor does not publish a statement on this.

Note: The Trust & Security Portal's compliance list is SOC 2 Type 2, ISO/IEC 27001, PCI DSS, EU-US DPF, GDPR, CCPA, DSA and VPAT; IRAP is not listed. Canva's government page cites SOC 2 Type II, ISO 27001 and GDPR only.