Canva Privacy-Safe Observability

Overview

Observe logical operations and provider requests separately. Keep metrics aggregate and logs content-free; do not assume undocumented rate-limit headers or fixed Canva latency thresholds.

Prerequisites

• Service and operation inventory plus local SLOs
• Telemetry allowlist/denylist, retention, and access controls
• Pinned endpoint/error/job contracts and incident routing

Instructions

Step 1: Define semantic signals

Name logical operation count, provider request count, status/provider-code class, latency distribution, job age/terminal state, queue depth, refresh result, and reconciliation outcome.

Step 2: Control dimensions