Skip to content

← DirectoryCompare →

Canva

canva.com

Good
Top 38%of 296 ai vendor vendors measured

Online design platform with AI-powered creative tools.

ai vendor⚠ Unverified — automated scan only, no vendor confirmationScanned 9/6/2026Added 9/3/2026

Score breakdown

Verification bonus+0/5 bonus pts

Claimed profile

Domain ownership verified by claiming the profile0/5
Governance+0/31 bonus pts

HIPAA

Not found0

Board-level oversight

Requires vendor submission — not yet collected.

SOC 2 Type II

Not found0

SOC 2 Type I

Not found0

ISO 27001

Not found0

ISO 42001

Not found0
Security hygiene & transparency17/28 pts

security.txt

security.txt file foundPass
Contact field present+2
Expires field present0/2
Encryption field present0/1

Disclosure policy

Security disclosure page found+3
Page references vulnerability reporting+2

Source: canva.com/.well-known/security.txt · Scanned 9/6/2026

HTTPS + HSTS

HTTP redirects to HTTPS+3
HSTS header enforced+2

Source: response headers from canva.com · Scanned 9/6/2026

Trust page

Public trust/security page found0/5

Security headers

Content-Security-Policy header0/3
X-Frame-Options header+2
X-Content-Type-Options: nosniff+2
Referrer-Policy header+1

Source: response headers from canva.com · Scanned 9/6/2026

Incident historypending

Signals planned: breach-history lookup, incident response quality assessment. This category is coming soon.

AI safetypending

Signals planned: model card presence, training data disclosure, published red-team results. Some checks will be partially automated via website scanning; others require vendor submission.

Rubric v1.3.0 · 17/28 implemented pts · click a category to see details

Current:Good
With verification:Excellent(+6pts)
Claim this profile to improve your grade →

Add a PGP Encryption: field to /.well-known/security.txt to earn +1pt.

Score history (4 updates)

↑ improving
D+ · 14/38pts · v1C- · 17/38pts · v2B- · 17/28pts · v3B- · 17/28pts · v4
v1D+ → C- → B- → B-v4

Score history

v3

Grade improved: C- → B-

9/6/2026

v2

Grade improved: D+ → C-

Score +3pts (14 → 17)

httpsHsts.httpsRedirect added (+pts)

9/3/2026

Scanned 3d ago

Certifications & disclosures

Something look wrong? Signed-in users can flag a certification below — an Entropy admin reviews every report.