Powering Canva's
Global Payment
Infrastructure

PCI-L1 Token Vault

• Provider independence: Switch volume between processors without re-collecting card details from customers
• Seamless failover: If a PSP declines, retry through another provider using the same vaulted token — instantly
• AES-256 encryption, SHA-512 hashing, TLS 1.3 in transit
• PCI DSS Level 1 (v4.0), ISO 27001 and ISO 27701 certified

Network Tokenization

• Auto card updates: Visa, Mastercard, and Amex automatically update tokens when cards are lost, reissued, or expire — zero action from Canva or the subscriber
• +2–5% authorization rate improvement vs. raw PAN transactions
• Up to −10 basis points interchange savings on qualifying Visa transactions
• Per-transaction cryptograms for MIT/subscription renewals — impossible to replay

AI Smart Routing

Machine learning models trained on real-time and historical transaction data across the entire Yuno network. Optimizes for approval rate, cost, or a blend of both.

• Analyzes historical approval rates by card type, issuer, country, and amount
• Real-time provider performance signals (latency, approval rate, error rates)
• Automatic retry — analyzes decline reason codes and cascades to the next best provider in milliseconds
• Network-level intelligence: patterns from 100s of merchants, invisible to any single merchant

Dynamic Rule-Based Routing

Deterministic if/then rules via no-code dashboard. Define exactly how transactions should route.

• Route by: card country, BIN range, currency, payment method, amount tier
• Fallback cascading: primary → secondary → tertiary PSP per region, automatic
• Performance thresholds: auto-redistribute traffic if a provider's approval rate drops below X%
• Use together with Smart Routing: rules set the guardrails, AI optimises within them

Checkout Builder

• Enable/disable payment methods per region from the dashboard
• Drag-and-drop ordering of payment methods
• Display conditions: show UPI only for Indian customers, GrabPay only for Singapore/Malaysia — without code
• Custom names, logos, and required fields (CVV, postal code) per method
• Brand styling: colours, typography, button style — matching Canva's design system

A/B Testing

• Pass different SDK config options per session to run payment method experiments
• SDK session options override Checkout Builder settings — test without touching baseline config
• Measure conversion impact of payment method ordering, presentation, and selection

Authentication Flows

• Frictionless: Card network recognises the device as low-risk — completes without OTP or redirect
• Challenge: OTP or biometric for higher-risk transactions — AI selects the right flow per transaction
• 3DS Exemptions: Configure per-route exemptions (amount thresholds, trusted subscribers, MIT) to minimise friction for Canva's 31M+ paid users
• 3DS2 native SDK for mobile — in-app authentication without full-page redirects

Integration Options

• Checkout SDK — Yuno handles all 3DS logic automatically (recommended)
• Direct / Redirect — PCI-compliant self-hosted checkout
• External MPI — Canva can use their own authentication provider and pass results (ECI value, cryptogram, transaction ID) to Yuno. This lets Canva maintain existing 3DS infrastructure while benefiting from Yuno's cross-gateway retry logic.
• Supported providers: Netcetera, Checkout.com, and others — configurable per card route

Subscription Lifecycle

• Full API control: create, update, pause, resume, cancel
• Trial period support: free trials, partial trials, payment validation flag
• Automatic subscription status management: CREATED → ACTIVE → CANCELED
• Configurable dunning: retry schedules with escalating notification strategies

Failed Payment Recovery

• Automatic retries through alternative providers via Smart Routing
• Network token auto-updates — prevents failures from expired or reissued cards before they happen
• Monitors integration — real-time detection of systemic renewal failures triggers automatic rerouting
• Stored credentials (CIT/MIT) framework maintained for all renewal processing

Automated Reconciliation

Yuno collects settlement files from each payment provider, reconciles against processed transactions, and surfaces discrepancies in real time.

Report API — For Canva's Data Platform

Automated, scheduled pulls of payment data into Canva's Snowflake warehouse.

• POST to create report (date range + filters) → GET status → download .zip/.csv
• 4 report types: transactions, settlements, refunds, reconciliation summary
• Filters: payment status, method, currency, country, transaction type
• Webhook integration for real-time event streaming

Fraud Prevention

Canva currently runs Adyen Radar and Stripe Radar inside their respective gateways — two separate fraud models with different rule sets depending on which gateway processes. With Yuno, a single fraud vendor sits upstream of all gateways.

• 3rd-party integrations: Forter, Riskified, Kount, Signifyd — plug in via Dashboard, no dev required
• One model, one rule set applied consistently regardless of acquirer
• Yuno native AI: device fingerprinting, geolocation, behavioural biometrics, spending patterns
• Stripe Early Fraud Warnings (TC40/SAFE signals) relayed to fraud platforms for continuous model training

Payouts

Creator royalty disbursements to template creators across 190+ countries — at scale, in local currency.

• Unlimited batch payout requests in a single API call
• Local currency deposits via local payment rails — no cross-border FX fees for creators
• Payout methods: bank accounts, debit cards, digital wallets
• Real-time status tracking and webhooks: CREATED → PENDING → SUCCEEDED
• Referenced Payouts — reference a previous payment to retrieve card details, eliminating PCI overhead