-
Instructure Technical Webinar FAQ
What data was affected, who was affected, and how far back does the data go? During the week of May 18, customers with information potentially involved received an email from Canvas with instructions on how to access preliminary information regarding the institution’s data, including what specific fields related to each…
-
FAQs: Subprocessor Notification Regarding Pendo.io
Frequently Asked Questions about Subprocessor Notification regarding Pendo.io What is Pendo.io, and why are we adding this as a subprocessor? Pendo.io provides in-app communication and analytics. For more information about Pendo.io: Pendo.io Privacy Policy Pendo.io's Trust Page Pendo.io Address: Pendo.io, Inc. 301…
-
Subprocessor Notice: EU Data Processing for IgniteAI Agent (Canada)
As we prepare to launch the IgniteAI Agent in Canada on June 15, 2026, we are providing this Subprocessor Notification regarding the infrastructure used for this new feature. What is the IgniteAI Agent? IgniteAI Agent is an opt-in generative AI assistant embedded in Canvas that completes complex teaching and…
-
May 2026 Instructure Technical Webinar
We recently hosted a technical deep-dive webinar to provide a technical update on what happened, the architecture and controls involved in our response, and the security investments we're making going forward. The session was designed for technical stakeholders (CISOs, CTOs, security architects, Information Security teams,…
-
Instructure May 2026 Incident Fact Sheet
On April 29, 2026, Instructure became aware of certain unauthorized activities by an unauthorized third party (the “Threat Actor”) in its computing environment, specifically in its Canvas learning management system (LMS). On May 1, 2026, CrowdStrike Services (“CrowdStrike”) was engaged to provide investigative services and…
-
Transparency Report - 01/01/25 - 12/31/2025
Transparency Report Like many other technology companies, Instructure, Inc., or our affiliates (“Instructure”, “us”, “we”) may on occasion receive a request from a law enforcement or other government agency seeking access to our customer data. Our goal is to always protect our customers’ data, while complying with…
-
Update on Instructure’s Global Identity Proxy Service for Canvas Logins
We are committed to providing you with the most stable and reliable service possible, and that includes being transparent when issues arise. We want to provide an update following a temporary disruption some users experienced when attempting to log into Canvas recently. The Incident On January 12th, 2026, some Canvas users…
-
FAQs: Subprocessor Notification Regarding Pendo
FAQs: Subprocessor Notification Regarding Pendo What is Pendo.io, Inc., and why are we adding this as a subprocessor? Pendo provides in-app communication and analytics. For more information about Pendo: Pendo Privacy Policy Pendo Trust Page Pendo Address: Pendo.io, Inc. 301 Hillsborough St Raleigh, NC 27603 EU…
-
FAQs: Subprocessor Notification Regarding Confluent
Frequently Asked Questions about Subprocessor Notification regarding Confluent What is Confluent, and why are we adding this as a subprocessor? * Confluent provides a data streaming and message delivery platform to facilitate secure and efficient data transmission between internal systems. It is a managed Kafka provider…
-
FAQ • Subprocessor Notification Regarding PING
Frequently Asked Questions about Subprocessor Notification regarding PING What is the use case for Ping? * They provide identity management services. They will provide a unified login functionality for all services. More information about Ping* Ping Identity Corporation Privacy Policy * Ping Security * Ping Address: 1001…
-
Transparency Report - 01/01/24 - 06/30/2024
Transparency Report Published: August 12, 2024 Like many other technology companies, Instructure, Inc., or our affiliates (“Instructure”, “us”, “we”) may on occasion receive a request from a law enforcement or other government agency seeking access to our customer data. Our goal is to always protect our customers’ data,…
-
Instructure's Third-Party Processing Guide
Instructure's Third-Party Processing Guide lists the third party vendors that we use to deliver or provision our products (the "Services"). Services or features not yet generally available may be included within the list of Services for the purpose of providing Customers advance notice of new sub-processors or processing…
-
Transparency Report - 07/01/23 - 12/31/2023
Transparency Report Published: May 20, 2024 Like many other technology companies, Instructure, Inc., or our affiliates (“Instructure”) may on occasion receive a request from a law enforcement or other government agency seeking access to our customer data. Our goal is to always protect our customers’ data, while complying…
-
Canvas Badges & Canvas Credentials Data FAQs
What are Open Badges? Canvas Badges & Credentials allows users to issue and manage a standardized type of digital badges, called “Open Badges” (a “Badge”). A digital badge is a visual symbol of accomplishment. They can be awarded for any definable achievement and earned in many learning environments, games, or the…
-
Transparency Report - 01/01/23 - 06/30/2023
Transparency Report Published: October 30, 2023 Like many other technology companies, Instructure, Inc., or our affiliates (“Instructure”, “us”, “we”) may on occasion receive a request from a law enforcement or other government agency seeking access to our customer data. Our goal is to always protect our customers’ data,…