Canva
Verified“Australian-born, now redomiciling to the US — and never EU.”
- Valuation
- ~$42B
- Revenue
- ~$3.5B ARR
- Data host
- AWS
- Headcount
- ~10K+
22 = midpoint of Control 20 & Data 23
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 16 sourced facts across 8 independent sources, last verified 2026-06-12. 4 open questions hold confidence at 82% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
18
Incorporated and run outside the EU. Operating company is Australian (Canva Pty Ltd, Surry Hills, Sydney) and as of early 2025 sits under a newly created Delaware (US) parent set up to enable a US listing. EU law reaches the company only insofar as it serves EU users under GDPR — Canva Pty Ltd is the named EU/UK data controller with an EU representative (EDPO, Dublin) — but no part of the legal entity is EU-domiciled or EU-enforceable as a home jurisdiction. Scores in the 'run outside the EU' band.
Why 18? 4 sourced facts · click to expand
Operating entity is Australian
Canva Privacy Policy · as of 2026-06-12
Delaware parent established to prepare US listing
Tech Times · as of 2026-06-13
EU/GDPR reach via named controller and EU representative
Canva Privacy Policy · as of 2026-06-12
Cofounder states US entity will list in America
Tech Times · as of 2026-06-13
Control & Ownership
22
Founders (Perkins, Obrecht, Adams) hold roughly 35-38% economic stake and significant influence, and two of three founders are Australian-based — a partial non-US/non-EU anchor. But the economic majority sits with global/US capital (Sequoia, T. Rowe Price, Dragoneer, Felicis, Franklin Templeton, Fidelity, JPMorgan) alongside Australian VCs (Blackbird, AirTree), and the chosen listing venue is a US exchange via the new Delaware parent. No EU voting or EU economic majority. Foreign-controlled relative to the EU; scores in the 0-30 band.
Why 22? 4 sourced facts · click to expand
Founders' combined economic stake
Revenue Memo (Who owns Canva) · as of 2026-06-12
Major holders are US/global, not EU
Revenue Memo (Who owns Canva) · as of 2026-06-12
Listing venue intended to be US
Tech Times · as of 2026-06-13
Private; valuation set by secondary share sales
Tech Times · as of 2026-06-13
Data →
Where your data lives and who can reach it
Data & Infrastructure
18
User data lives on Amazon Web Services, a US hyperscaler — Canva runs essentially all production on AWS (S3, ECS, RDS, DynamoDB, CloudFront) with 230+ PB in S3. Canva offers an EU data-residency setting (US/EU options), but EU residency runs on AWS EU regions, not EU-owned infrastructure, leaving CLOUD Act / foreign-law exposure. Combined with the new US Delaware parent and a US subsidiary operating under the EU-US Data Privacy Framework, foreign-law reach is material. EU regions on a US hyperscaler at best; default global processing pulls it lower. Scores at the low end of the 'US/foreign hosting' to 'EU region on US hyperscaler' boundary.
Why 18? 4 sourced facts · click to expand
Customer data hosted on AWS
Canva Statement of Technical & Organisational Measures · as of 2026-06-12
Scale of AWS dependence
AWS Storage Blog (Canva) · as of 2026-06-12
Data residency option exists but limited
Canva Help Center (Data residency) · as of 2026-06-12
Default processing spans many non-EU countries
Canva Privacy Policy · as of 2026-06-12
Operations & People
30
Operations are centered in Sydney (the operating HQ and engineering base remain Australian), with a large global footprint — Manila, US (Austin/Seattle), London — ~10K+ staff, USD-reported revenue (~$3.5B ARR FY2025), and an IPO-veteran US CFO (ex-Zoom). EU presence is sales/market-facing, not a center of gravity. Mixed-but-non-EU: Australian-led operations with growing US orientation. Scores in the foreign-centered-to-mixed band, just above pure 0-30 because the operating nerve centre is Sydney rather than the US.
Why 30? 4 sourced facts · click to expand
Workforce size and reporting currency
Backlinko (Canva statistics) · as of 2026-06-12
US-oriented finance leadership
Tech Times · as of 2026-06-13
Global office footprint outside EU
SQ Magazine (Canva workforce) · as of 2026-06-12
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
4 open questions — they lower confidence, never the score
- ?
Does Canva have a dual-class / super-voting structure giving founders voting control disproportionate to their ~35-38% economic stake?
If founders hold majority voting control, the ownership picture is Australian-controlled despite US/global economics — would modestly raise the ownership score; if not, US/global capital dominates governance.
- ?
Which specific AWS regions back Canva's EU data-residency option, and is any of it ring-fenced from US-parent / CLOUD Act access (e.g. AWS European Sovereign Cloud)?
Determines whether EU residency is meaningful sovereignty or just an AWS-EU region under US foreign-law reach; affects the infra score.
- ?
Will the Delaware redomicile move the GDPR controller or principal entity away from Canva Pty Ltd (Australia)?
A shift of the controlling entity to a US holdco would further reduce EU legal reach and the legal score.
- ?
Has Canva filed an S-1 or set a listing venue/date?
A US listing would crystallise US ownership/economics and lower the ownership score further; no filing exists as of mid-2026.
EU Cloud Sovereignty Framework lens
SEAL targets cloud service providers; applied here as an analogous sovereignty mapping for a SaaS vendor, not a certification.
Strategic
Strategy is US-oriented: Delaware parent and stated intent to list in America; no EU strategic anchor.
Legal & jurisdictional
Australian operating entity under a new US Delaware parent; EU reach limited to GDPR over user data.
Data & AI
All data on AWS (US hyperscaler); EU residency option exists but on AWS regions, not EU-owned infra.
Operational
Operating HQ and engineering remain in Sydney; significant non-EU global footprint, EU is sales-facing.
Supply chain
Core dependency on AWS plus US-based sub-processors; concentration on a single US cloud.
Technological
Platform built natively on AWS-managed services (S3, ECS, RDS, DynamoDB); high foreign-cloud lock-in.
Security & compliance
GDPR controller named, EU rep (EDPO), SCCs/UK IDTA and EU-US Data Privacy Framework adherence by US subsidiary.
Environmental sustainability
Not evaluated; inherits AWS data-centre footprint, no independent verification gathered.
EU alternatives
EU-rooted online design/graphics tool; smaller scale and likely uses mainstream (often US) cloud — verify hosting before relying on it for sovereignty.
Canva-style design editor under Vista; EU/Ukraine roots but part of a US-headquartered group (Vista) — control sits outside the EU.
Open-source desktop DTP, self-hostable so no third-party cloud dependency; not a like-for-like SaaS collaborative editor.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology