Canva AI vs. Synthesia: data protection per plan
Canva AI (4 plans) and Synthesia (4 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | Canva AI | Synthesia |
|---|---|---|
| Provider based in | 110 Kippax St, Surry Hills, NSW 2010, Australia | Synthesia Ltd, 20 Triton Street, Regent's Place, 3rd Floor, London NW1 3BF, United Kingdom |
| Plans recorded | 4 | 4 |
| Hosting | mixed: all 4 plans | mixed: all 4 plans |
| Training on inputs | opt-out available: Canva Free, Canva Prono: Canva Business, Canva Enterprise | no: all 4 plans |
| DPA | no: Canva Free, Canva Proyes: Canva Business, Canva Enterprise | yes: all 4 plans |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: Canva AI Canva Business vs. Synthesia Starter
| Feature | Canva AICanva Business (Trust Center also lists 'Teams') | SynthesiaStarter |
|---|---|---|
| yes | yes | |
| Details: DPA available | yes (automatic) Provider’s DPA | yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan) Provider’s DPA |
| no | no | |
| Details: Training on inputs | Trust Center: 'For users who have a Canva Business or Enterprise account, you'll see that this control in the Privacy Settings page is disabled' and 'we don't use your business, team or enterprise content to improve AI-powered features, and we don't allow third parties to do so either.' Note: an opt-in option for Business, Teams and Enterprise admins has been announced as 'coming soon'. | AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan. |
| mixed | mixed | |
| Details: Data residency | Trust Center Privacy FAQ: 'Canva stores your data in the United States.' Processing by Canva group companies in Australia, New Zealand, the Philippines, the UK, Singapore, Europe and the USA (intra-group Data Transfer Agreement). Privacy policy (updated 2026-08-25) section 5: storage and processing in 'the United States, Australia, Singapore, European Union, United Kingdom, Philippines and New Zealand' and other countries. Sub-processor list (2026-04-17): AWS 'United States & EU', other hosting and AI service providers USA. Selectable EU data residency is not documented. According to the list, Nanonoble Pte. Ltd. does not process customer personal data for Canva Enterprise or customers with a signed Order Form. | Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | DPA Annex 1.B: 'Customer Personal Data… | Security Practices: deletion of customer… |
| Details: Data retention | DPA Annex 1.B: 'Customer Personal Data will be retained for as long as is necessary for the Permitted Purpose or required by applicable law.' | Security Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer. |
| differs by plan | not publicly documented | several tiers |
| Details: Price | not publicly documented | Pricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included. |
| yes | yes | |
| Details: AI features included | yes (pricing page: "20x more AI than Canva Free (Premium or Ultra AI)", comparison table "Higher AI access", "AI Pass add-on and AI top-ups available (extra cost)"; including Canva AI 2.0, Canva AI connectors, Magic Layers) | yes (1,250 credits/month according to the pricing page) |
| 6 sources | 8 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- Canva AI Canva Businessyes
- Synthesia Starteryes
- Synthesia Starter
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA
Training
- Canva AI Canva Businessno
- Synthesia Starterno
- Canva AI Canva Business
Trust Center: 'For users who have a Canva Business or Enterprise account, you'll see that this control in the Privacy Settings page is disabled' and 'we don't use your business, team or enterprise content to improve AI-powered features, and we don't allow third parties to do so either.' Note: an opt-in option for Business, Teams and Enterprise admins has been announced as 'coming soon'.
Synthesia StarterAI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
Hosting
- Canva AI Canva Businessmixed
- Synthesia Startermixed
- Canva AI Canva Business
Trust Center Privacy FAQ: 'Canva stores your data in the United States.' Processing by Canva group companies in Australia, New Zealand, the Philippines, the UK, Singapore, Europe and the USA (intra-group Data Transfer Agreement). Privacy policy (updated 2026-08-25) section 5: storage and processing in 'the United States, Australia, Singapore, European Union, United Kingdom, Philippines and New Zealand' and other countries. Sub-processor list (2026-04-17): AWS 'United States & EU', other hosting and AI service providers USA. Selectable EU data residency is not documented. According to the list, Nanonoble Pte. Ltd. does not process customer personal data for Canva Enterprise or customers with a signed Order Form.
Synthesia StarterSecurity Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
Sub-processors
- Canva AI Canva Businesslist available
- Synthesia Starterlist available
- Canva AI Canva Business
- Amazon Web Services (hosting, infrastructure, Canva AI; USA & EU)
- Anthropic (Canva AI; USA)
- ElevenLabs (Canva AI; USA)
- Features & Labels (Canva AI; USA)
- Google (hosting, infrastructure, security, Canva AI; USA)
- MongoDB (hosting; USA)
- Nanonoble Pte. Ltd. (Canva AI; USA; according to the list, not for Canva Education, Canva Enterprise or customers with a signed Order Form)
- OpenAI (Canva AI; USA)
- Snowflake (hosting; USA)
- Assembled (support; USA)
- Concentrix (support; Philippines)
- DeepL (translation; EU)
- Kaizo (support; EU)
- IBEX (support; USA)
- Zendesk (support; USA)
- Canva Austria GmbH (photo/video AI; EU & USA)
- Canva Pty Ltd (support; Australia)
- Canva Solutions Inc. (support; Philippines)
- Canva US, Inc. (support, printing; USA)
- Canva UK Operations Ltd (support, Flourish/Charts; EU)
- Leonardo.AI (AI; Australia & USA)
- Scene Group Ltd (Cavalry; EU)
- Serif (Europe) Ltd (Affinity; EU)
Synthesia Starter- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
Retention
- differs by plan
- Canva AI Canva BusinessDPA Annex 1.B: 'Customer Personal Data…
- Synthesia StarterSecurity Practices: deletion of customer…
- Canva AI Canva BusinessDPA Annex 1.B: 'Customer Personal Data will be retained for as long as is necessary for the Permitted Purpose or required by applicable law.'Synthesia StarterSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
Price
- differs by plan
- Canva AI Canva Businessnot publicly documented
- Synthesia Starterseveral tiers
- Canva AI Canva Business
not publicly documented
Synthesia StarterPricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included.
- Canva AI Canva Businessyes
- Synthesia Starteryes
- Canva AI Canva Business
yes (pricing page: "20x more AI than Canva Free (Premium or Ultra AI)", comparison table "Higher AI access", "AI Pass add-on and AI top-ups available (extra cost)"; including Canva AI 2.0, Canva AI connectors, Magic Layers)
Synthesia Starteryes (1,250 credits/month according to the pricing page)
Evidence
- Canva AI Canva Business6 sources
- Synthesia Starter8 sources
- Canva AI Canva Business
- Privacy Policy (last updated 2026-08-25)Privacy notice, retrieved 18 Oct 2026
- Data Processing Addendum (last updated 2025-10-30)DPA, retrieved 18 Oct 2026
- Canva's Sub-ProcessorsSub-processor list, retrieved 18 Oct 2026
- Trust Center – Privacy (incl. FAQ AI at Canva)Trust Center, retrieved 18 Oct 2026
- Canva List of Subprocessors (PDF, last updated 2026-04-17)Sub-processor list, retrieved 18 Oct 2026
- Canva Pricing: Compare Free, Pro, Business and Enterprise plansPricing page, retrieved 18 Oct 2026
Synthesia Starter- Pricing (rendered in browser, monthly/annual; EUR when retrieved from Germany, USD in the server-side version)Pricing page, retrieved 18 Oct 2026
- Security Practices (as of 2026-02-03)Trust Center, retrieved 18 Oct 2026
- Data Processing Addendum (PDF as of 2026-07-22, incorporated via Customer Terms)DPA, retrieved 18 Oct 2026
- Subprocessors (as of 2026-10-08)Sub-processor list, retrieved 18 Oct 2026
- Privacy Policy (effective 2026-10-01)Privacy notice, retrieved 14 Oct 2026
- Customer Terms of Service (effective 2026-07-20)Terms and conditions, retrieved 18 Oct 2026
- AI Governance Practices (published September 2024)AI governance, retrieved 14 Oct 2026
- Synthesia Trust Center (Vanta; ISO certificates viewable, SOC 2 and TIA via Request access)Trust Center, retrieved 18 Oct 2026
| Feature | Canva AI | Synthesia |
|---|---|---|
| differs by tool |
| yesall 4 plans |
| Details: DPA available |
|
|
| differs by tool |
| noall 4 plans |
| Details: Training on inputs |
|
|
| mixedall 4 plans | mixedall 4 plans | |
| Details: Data residency |
|
|
| list availableall 4 plans | list availableall 4 plans | |
| Details: List published |
|
|
| differs by tool |
| Security Practices: deletion of customer…all 4 plans |
| Details: Data retention |
|
|
| differs by tool |
|
|
| Details: Price |
|
|
| yesall 4 plans | yesall 4 plans | |
| Details: AI features included |
|
|
| 10 sources | 8 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by tool
- Canva AI
- noCanva Free, Canva Pro
- yesCanva Business (Trust Center also lists 'Teams'), Canva Enterprise
- Synthesiayesall 4 plans
- Canva AI
- Canva Free
no (DPA according to the Trust Center 'for Canva Business and Canva Enterprise only')
- Canva Pro
no (DPA according to the Trust Center 'for Canva Business and Canva Enterprise only')
- Canva Business (Trust Center also lists 'Teams')
yes (automatic)
Provider’s DPA - Canva Enterprise
yes (automatic)
Provider’s DPA
Synthesia- Basic (free of charge)
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Starter
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Pro
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Enterprise
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA
- Canva Free
Training
- differs by tool
- Canva AI
- opt-out availableCanva Free, Canva Pro
- noCanva Business (Trust Center also lists 'Teams'), Canva Enterprise
- Synthesianoall 4 plans
- Canva AI
- Canva Free
Trust Center: 'Canva won't use your user content to improve AI-powered features unless this is consistent with your Privacy Settings'; setting can be changed at any time; also applies to partners/service providers. Privacy policy (updated 2026-08-25): analysis of activity, content and uploads 'to train our algorithms, models and AI products and services using machine learning'; controlled via the Privacy Controls. The default value of the setting for individual accounts is not stated. AI Product Terms: 'Your Privacy Settings control whether Canva and our Technology Partners, may use your data to improve our AI services for everyone.' Canva Education: setting disabled, student content is not used.
- Canva Pro
Trust Center: 'Canva won't use your user content to improve AI-powered features unless this is consistent with your Privacy Settings'; setting can be changed at any time; also applies to partners/service providers. Privacy policy (updated 2026-08-25): analysis of activity, content and uploads 'to train our algorithms, models and AI products and services using machine learning'; controlled via the Privacy Controls. The default value of the setting for individual accounts is not stated. AI Product Terms: 'Your Privacy Settings control whether Canva and our Technology Partners, may use your data to improve our AI services for everyone.' Canva Education: setting disabled, student content is not used.
- Canva Business (Trust Center also lists 'Teams')
Trust Center: 'For users who have a Canva Business or Enterprise account, you'll see that this control in the Privacy Settings page is disabled' and 'we don't use your business, team or enterprise content to improve AI-powered features, and we don't allow third parties to do so either.' Note: an opt-in option for Business, Teams and Enterprise admins has been announced as 'coming soon'.
- Canva Enterprise
Trust Center: 'For users who have a Canva Business or Enterprise account, you'll see that this control in the Privacy Settings page is disabled' and 'we don't use your business, team or enterprise content to improve AI-powered features, and we don't allow third parties to do so either.' Note: an opt-in option for Business, Teams and Enterprise admins has been announced as 'coming soon'.
Synthesia- Basic (free of charge)
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Starter
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Pro
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Enterprise
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Canva Free
Hosting
- Canva AImixedall 4 plans
- Synthesiamixedall 4 plans
- Canva AI
- Canva Free
Trust Center Privacy FAQ: 'Canva stores your data in the United States.' Processing by Canva group companies in Australia, New Zealand, the Philippines, the UK, Singapore, Europe and the USA (intra-group Data Transfer Agreement). Privacy policy (updated 2026-08-25) section 5: storage and processing in 'the United States, Australia, Singapore, European Union, United Kingdom, Philippines and New Zealand' and other countries. Sub-processor list (2026-04-17): AWS 'United States & EU', other hosting and AI service providers USA. Selectable EU data residency is not documented.
- Canva Pro
Trust Center Privacy FAQ: 'Canva stores your data in the United States.' Processing by Canva group companies in Australia, New Zealand, the Philippines, the UK, Singapore, Europe and the USA (intra-group Data Transfer Agreement). Privacy policy (updated 2026-08-25) section 5: storage and processing in 'the United States, Australia, Singapore, European Union, United Kingdom, Philippines and New Zealand' and other countries. Sub-processor list (2026-04-17): AWS 'United States & EU', other hosting and AI service providers USA. Selectable EU data residency is not documented.
- Canva Business (Trust Center also lists 'Teams')
Trust Center Privacy FAQ: 'Canva stores your data in the United States.' Processing by Canva group companies in Australia, New Zealand, the Philippines, the UK, Singapore, Europe and the USA (intra-group Data Transfer Agreement). Privacy policy (updated 2026-08-25) section 5: storage and processing in 'the United States, Australia, Singapore, European Union, United Kingdom, Philippines and New Zealand' and other countries. Sub-processor list (2026-04-17): AWS 'United States & EU', other hosting and AI service providers USA. Selectable EU data residency is not documented. According to the list, Nanonoble Pte. Ltd. does not process customer personal data for Canva Enterprise or customers with a signed Order Form.
- Canva Enterprise
Trust Center Privacy FAQ: 'Canva stores your data in the United States.' Processing by Canva group companies in Australia, New Zealand, the Philippines, the UK, Singapore, Europe and the USA (intra-group Data Transfer Agreement). Privacy policy (updated 2026-08-25) section 5: storage and processing in 'the United States, Australia, Singapore, European Union, United Kingdom, Philippines and New Zealand' and other countries. Sub-processor list (2026-04-17): AWS 'United States & EU', other hosting and AI service providers USA. Selectable EU data residency is not documented. According to the list, Nanonoble Pte. Ltd. does not process customer personal data for Canva Enterprise or customers with a signed Order Form.
Synthesia- Basic (free of charge)
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Starter
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Pro
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Enterprise
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Canva Free
Sub-processors
- Canva AIlist availableall 4 plans
- Synthesialist availableall 4 plans
- Canva AI
- Canva Free
- Amazon Web Services (hosting, infrastructure, Canva AI; USA & EU)
- Anthropic (Canva AI; USA)
- ElevenLabs (Canva AI; USA)
- Features & Labels (Canva AI; USA)
- Google (hosting, infrastructure, security, Canva AI; USA)
- MongoDB (hosting; USA)
- Nanonoble Pte. Ltd. (Canva AI; USA; according to the list, not for Canva Education, Canva Enterprise or customers with a signed Order Form)
- OpenAI (Canva AI; USA)
- Snowflake (hosting; USA)
- Assembled (support; USA)
- Concentrix (support; Philippines)
- DeepL (translation; EU)
- Kaizo (support; EU)
- IBEX (support; USA)
- Zendesk (support; USA)
- Canva Austria GmbH (photo/video AI; EU & USA)
- Canva Pty Ltd (support; Australia)
- Canva Solutions Inc. (support; Philippines)
- Canva US, Inc. (support, printing; USA)
- Canva UK Operations Ltd (support, Flourish/Charts; EU)
- Leonardo.AI (AI; Australia & USA)
- Scene Group Ltd (Cavalry; EU)
- Serif (Europe) Ltd (Affinity; EU)
- Canva Pro
- Amazon Web Services (hosting, infrastructure, Canva AI; USA & EU)
- Anthropic (Canva AI; USA)
- ElevenLabs (Canva AI; USA)
- Features & Labels (Canva AI; USA)
- Google (hosting, infrastructure, security, Canva AI; USA)
- MongoDB (hosting; USA)
- Nanonoble Pte. Ltd. (Canva AI; USA; according to the list, not for Canva Education, Canva Enterprise or customers with a signed Order Form)
- OpenAI (Canva AI; USA)
- Snowflake (hosting; USA)
- Assembled (support; USA)
- Concentrix (support; Philippines)
- DeepL (translation; EU)
- Kaizo (support; EU)
- IBEX (support; USA)
- Zendesk (support; USA)
- Canva Austria GmbH (photo/video AI; EU & USA)
- Canva Pty Ltd (support; Australia)
- Canva Solutions Inc. (support; Philippines)
- Canva US, Inc. (support, printing; USA)
- Canva UK Operations Ltd (support, Flourish/Charts; EU)
- Leonardo.AI (AI; Australia & USA)
- Scene Group Ltd (Cavalry; EU)
- Serif (Europe) Ltd (Affinity; EU)
- Canva Business (Trust Center also lists 'Teams')
- Amazon Web Services (hosting, infrastructure, Canva AI; USA & EU)
- Anthropic (Canva AI; USA)
- ElevenLabs (Canva AI; USA)
- Features & Labels (Canva AI; USA)
- Google (hosting, infrastructure, security, Canva AI; USA)
- MongoDB (hosting; USA)
- Nanonoble Pte. Ltd. (Canva AI; USA; according to the list, not for Canva Education, Canva Enterprise or customers with a signed Order Form)
- OpenAI (Canva AI; USA)
- Snowflake (hosting; USA)
- Assembled (support; USA)
- Concentrix (support; Philippines)
- DeepL (translation; EU)
- Kaizo (support; EU)
- IBEX (support; USA)
- Zendesk (support; USA)
- Canva Austria GmbH (photo/video AI; EU & USA)
- Canva Pty Ltd (support; Australia)
- Canva Solutions Inc. (support; Philippines)
- Canva US, Inc. (support, printing; USA)
- Canva UK Operations Ltd (support, Flourish/Charts; EU)
- Leonardo.AI (AI; Australia & USA)
- Scene Group Ltd (Cavalry; EU)
- Serif (Europe) Ltd (Affinity; EU)
- Canva Enterprise
- Amazon Web Services (hosting, infrastructure, Canva AI; USA & EU)
- Anthropic (Canva AI; USA)
- ElevenLabs (Canva AI; USA)
- Features & Labels (Canva AI; USA)
- Google (hosting, infrastructure, security, Canva AI; USA)
- MongoDB (hosting; USA)
- OpenAI (Canva AI; USA)
- Snowflake (hosting; USA)
- Assembled (support; USA)
- Concentrix (support; Philippines)
- DeepL (translation; EU)
- Kaizo (support; EU)
- IBEX (support; USA)
- Zendesk (support; USA)
- Canva Austria GmbH (photo/video AI; EU & USA)
- Canva Pty Ltd (support; Australia)
- Canva Solutions Inc. (support; Philippines)
- Canva US, Inc. (support, printing; USA)
- Canva UK Operations Ltd (support, Flourish/Charts; EU)
- Leonardo.AI (AI; Australia & USA)
- Scene Group Ltd (Cavalry; EU)
- Serif (Europe) Ltd (Affinity; EU)
- Not for Canva Enterprise: Nanonoble Pte. Ltd. (according to the sub-processor list, no customer personal data for Canva Enterprise or customers with a signed Order Form)
Synthesia- Basic (free of charge)
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Starter
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Pro
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Enterprise
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Canva Free
Retention
- differs by tool
- Canva AI
- Privacy policy section 8: after account…Canva Free, Canva Pro
- DPA Annex 1.B: 'Customer Personal Data…Canva Business (Trust Center also lists 'Teams'), Canva Enterprise
- SynthesiaSecurity Practices: deletion of customer…all 4 plans
- Canva AI
- Canva FreePrivacy policy section 8: after account closure/deactivation, retention of profile data and User Content 'for a commercially reasonable time'; beyond that, for as long as a legitimate purpose exists (legal, audit, backup, archive).
- Canva ProPrivacy policy section 8: after account closure/deactivation, retention of profile data and User Content 'for a commercially reasonable time'; beyond that, for as long as a legitimate purpose exists (legal, audit, backup, archive).
- Canva Business (Trust Center also lists 'Teams')DPA Annex 1.B: 'Customer Personal Data will be retained for as long as is necessary for the Permitted Purpose or required by applicable law.'
- Canva EnterpriseDPA Annex 1.B: 'Customer Personal Data will be retained for as long as is necessary for the Permitted Purpose or required by applicable law.'
Synthesia- Basic (free of charge)Security Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- StarterSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- ProSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- EnterpriseSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
Price
- differs by tool
- Canva AI
- 0Canva Free
- not publicly documentedCanva Pro, Canva Business (Trust Center also lists 'Teams'), Canva Enterprise
- Synthesia
- 0 EUR/moBasic (free of charge)
- several tiersStarter
- 79 EUR/mo… (further prices in the details)Pro
- customEnterprise
- Canva AI
- Canva Free
0 (free plan according to the pricing page; amounts for the other plans not readable on retrieval)
- Canva Pro
not publicly documented (pricing page lists Pro; amount not readable on retrieval, see gaps)
- Canva Business (Trust Center also lists 'Teams')
not publicly documented
- Canva Enterprise
not publicly documented
Synthesia- Basic (free of charge)
EUR 0 or USD 0 per month (pricing page; no indication whether VAT is included)
- Starter
Pricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included.
- Pro
Pricing page in browser (retrieved from Germany, EUR): EUR 79 per month with monthly billing (6,000 credits/month); EUR 49 per month with annual billing (72,000 credits/year); higher credit tiers up to EUR 600/month (monthly) or EUR 372/month (annual). Server-side version in USD: USD 89 or USD 64 per month, tiers up to USD 676/month. No indication whether VAT is included.
- Enterprise
Custom (pricing page: 'Custom', 'tailored pricing'; FAQ: 'Enterprise pricing is custom')
- Canva Free
- Canva AIyesall 4 plans
- Synthesiayesall 4 plans
- Canva AI
- Canva Free
yes (pricing page 2026-10-18: "Up to 20 Standard or Premium AI uses"; comparison table Standard AI: "Limited AI access")
- Canva Pro
yes (Pro page: “Access premium content, brand tools, and AI features”, including Canva AI 2.0, Magic Layers, Canva Code; pricing page: "10x more AI than Canva Free (Premium or Ultra AI)", comparison table "High AI access", "AI Pass add-on available (extra cost)")
- Canva Business (Trust Center also lists 'Teams')
yes (pricing page: "20x more AI than Canva Free (Premium or Ultra AI)", comparison table "Higher AI access", "AI Pass add-on and AI top-ups available (extra cost)"; including Canva AI 2.0, Canva AI connectors, Magic Layers)
- Canva Enterprise
yes (pricing page: "20x more AI than Canva Free (Premium or Ultra AI)"; Canva AI 2.0 and Canva AI connectors marked "Soon"; comparison table: "Contact Sales to learn more about AI access for Enterprise")
Synthesia- Basic (free of charge)
yes (500 credits/month, videos with watermark according to the pricing page)
- Starter
yes (1,250 credits/month according to the pricing page)
- Pro
yes (6,000 credits/month according to the pricing page)
- Enterprise
yes
- Canva Free
Evidence
- Canva AI10 sources
- Synthesia8 sources
- Canva AI
- Privacy Policy (last updated 2026-08-25)Privacy notice, retrieved 18 Oct 2026
- AI Product Terms (effective 2026-06-26)Terms and conditions, retrieved 18 Oct 2026
- Terms of Use (effective 2026-08-19)Terms and conditions, retrieved 14 Oct 2026
- Data Processing Addendum (last updated 2025-10-30)DPA, retrieved 18 Oct 2026
- Canva's Sub-ProcessorsSub-processor list, retrieved 18 Oct 2026
- Trust Center – Privacy (incl. FAQ AI at Canva)Trust Center, retrieved 18 Oct 2026
- Canva List of Subprocessors (PDF, last updated 2026-04-17)Sub-processor list, retrieved 18 Oct 2026
- Canva Pricing: Compare Free, Pro, Business and Enterprise plansPricing page, retrieved 18 Oct 2026
- Canva ProProvider product page, retrieved 14 Oct 2026
- Canva Help Center: Manage your privacy preferencesHelp article, retrieved 18 Oct 2026
Synthesia- Pricing (rendered in browser, monthly/annual; EUR when retrieved from Germany, USD in the server-side version)Pricing page, retrieved 18 Oct 2026
- Security Practices (as of 2026-02-03)Trust Center, retrieved 18 Oct 2026
- Data Processing Addendum (PDF as of 2026-07-22, incorporated via Customer Terms)DPA, retrieved 18 Oct 2026
- Subprocessors (as of 2026-10-08)Sub-processor list, retrieved 18 Oct 2026
- Privacy Policy (effective 2026-10-01)Privacy notice, retrieved 14 Oct 2026
- Customer Terms of Service (effective 2026-07-20)Terms and conditions, retrieved 18 Oct 2026
- AI Governance Practices (published September 2024)AI governance, retrieved 14 Oct 2026
- Synthesia Trust Center (Vanta; ISO certificates viewable, SOC 2 and TIA via Request access)Trust Center, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
Canva AI compared with
Synthesia compared with
Individual pages: Canva AI, Synthesia. All tools in the category: Image & design.