Canva is an online design and visual communication platform that helps individuals and organizations create presentations, social media graphics, videos, documents, and other visual content.

With Canva, organizations can customize templates, collaborate on designs, and create branded materials for digital and print use.

Is Canva HIPAA compliant? No, based on our research, Canva is not HIPAA compliant.

 

What changed this year?

As of September 2026, our review did not identify any publicly disclosed changes to Canva’s HIPAA-related policies or BAA terms. Its current Terms of Use, Data Processing Addendum, and Trust & Security Portal do not establish a publicly available HIPAA BAA offering.

 

Will Canva sign a business associate agreement (BAA)?

Canva does not publicly offer a business associate agreement, and we could not verify that it will sign one. Its Data Processing Addendum addresses personal data processing but is not a HIPAA BAA.

Under HHS guidance, a healthcare organization must have a BAA with a cloud service provider that creates, receives, maintains, or transmits electronic PHI on its behalf.

 

Conclusion

Canva has no publicly confirmed BAA offering and should not be treated as HIPAA compliant for handling PHI. Healthcare organizations can use it to create general educational or promotional materials that contain no PHI.

Learn more: HIPAA Compliant Email: The Definitive Guide

 

FAQS

What is a BAA?

A BAA is a legally binding contract establishing a relationship between a covered entity under HIPAA and its business associates. The purpose of this agreement is to ensure the proper protection of PHI as required by HIPAA regulations.

 

What is HIPAA?

HIPAA sets national standards for protecting the privacy and security of certain health information, known as PHI.

HIPAA is designed to protect the privacy and security of individuals’ health information and to ensure that healthcare providers and insurers can securely exchange electronic health information. Violations of HIPAA can result in significant fines and penalties for covered entities.

 

Who does HIPAA apply to?

HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. These are entities that perform certain functions or activities on behalf of the covered entity.