Share the latest version of your Canva designs with your team, right inside of monday.com!
Canva is one of the best professional online design platforms of today. You can create videos, presentations, social media posts, print designs and much more, without any design experience.
With Canva Embedded, you can bring your designs into monday.com and share them with your team. Easily embed your creations in workdocs, dashboards and as part of your boards for easy collaboration. Any changes you make in Canva, will automatically be visible in monday.com, so you don’t have to worry about exporting and uploading the latest version of your work.
Security & Compliance
Security
Does the developer periodically perform penetration testing?
Not answered
Does the developer have a dedicated security and privacy point of contact for such issues or questions?
Not answered
Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?
Yes
All user input is checked using Regular Expressions and are required to match a specific input pattern.
Does the app protect against mass parameter assignment attacks?
No
We do not have a back-end nor store any customer data
Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?
Yes
We do not encode or sanitise data, but all user input is checked using Regular Expressions and are required to match a specific input pattern.
Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?
No
Our app does not have a back-end and as such does not make any requests that can be forged.
Does the developer have mechanisms to notify monday.com in case of a security breach?
Yes
We will use the Marketplace Review board for the app and/or Slack
Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?
Yes
Our infrastructure is hosted by Google Cloud Platform (Firebase) who is responsible for installing security updates regarding their services. Our applications are regularly scanned for vulnerabilities in, and updates to, 3rd party packages by Snyk. Any recommendations are immediately applied and released.
Compliance
Is the app certified with the information security standard ISO/IEC 27001:2022?
Not answered
Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?
Not answered
Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?
Not answered
Is the app compliant with the General Data Protection Regulation (GDPR)?
Not answered
Data
Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).
Not answered
Where does the app store logs data?
Not answered
Where does the app store the app data?
Not answered
Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?
No
We do not log anything
Is customer data segregated from the data of other customers (for example logically or physically)?
No
We do not store any customer data
Privacy
Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?
Yes
All systems using Google Workspace account based SSO, with MFA required
Does the developer protect access to customer data based on the principle of least privilege?
No
We do not store any customer data
Reviews
December 10, 2024
JC: difficult to navigate and use
February 15, 2024
DM: Slight learning curve on the user interface.
September 3, 2023
DS: Cannot visualize my graphic projects easily and save from Adobe softwares easily without getting out of my programs.
June 29, 2023
RL: why should we pay for this app
May 24, 2023
BB: Doesn't work. Doesn't add universally. Added to one dashboard, broke the dashboard.
February 1, 2023
EM: need a button to sign into my account
July 31, 2022
ZV: Cool app!
Installation history
We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.