Design vendors and their subprocessors
2 design vendors with a tracked subprocessor list, re-checked daily.
- Canva subprocessors checked September 26, 2026
- Figma subprocessors checked September 26, 2026
Key DPA terms across design vendors
What each vendor's data processing agreement commits to. The vendor page quotes the sentence behind every answer.
| Vendor | Breach notification | Notice of a new subprocessor | Transfers outside the EU |
|---|---|---|---|
| Figma | Within 72 hours | 15 days ahead | Standard contractual clauses and the EU–US Data Privacy Framework |