Asana

asana.com · facts updated 12 hours ago

Privacy facts at a glance

Jurisdictions: US · EU · DE · IE · AU · JP
Subprocessors: 13
Breach notification: Asana's Trust Center FAQ references a defined SLA or timeframe for notifying customers in the event of a data breach, but the specific timeframe is not stated in the excerpts provided.
Transfer mechanism: EU-US Data Privacy Framework, UK-US and Swiss-US Data Privacy Frameworks, and EU/UK Standard Contractual Clauses
DPA available: Yes
Certifications: ISO 27001:2022 · ISO/IEC 27017:2015 · ISO/IEC 27018:2019 · ISO/IEC 27701:2019 · SOC 2 Type 1 · SOC 2 Type 2 · SOC 3 · CSA STAR · TX-RAMP · HIPAA
GDPR addressed: Yes
CCPA addressed: Yes

Named subprocessors

Amazon Web Services, Inc. Google, LLC (Google Cloud) Amplitude, Inc. Anthropic, PBC Databricks, Inc. OpenAI, Inc. Segment (Twilio, Inc.) Tableau Software, LLC (Salesforce, Inc.) Intercom, Inc OpenAI, LLC Service Cloud (Salesforce, Inc.)

Tracked documents

https://asana.com/privacy checked 13 hours ago

https://asana.com/terms checked 13 hours ago

Data processing agreement

https://asana.com/terms/data-processing checked 12 hours ago

Subprocessor list

https://asana.com/terms/subprocessors checked 14 hours ago

Security / trust page

https://trustcenter.asana.com/ checked 13 hours ago

Recent changes

Data processing agreement 12 hours ago

Document updated.

major Subprocessor list 14 hours ago

Asana added three new subprocessors: Google, LLC (Google Cloud) as a Cloud Service Provider in the US and EU, Google, LLC (Google Vertex) for AI-enabled functionality (Google Gemini) in the US and EU, and Hyperdoc Inc. (Recall.ai) as a Transcription Service Provider in the US.

moderate Security / trust page 1 day ago

Asana added a 'Risk Profile' section describing secure hosting and risk mitigation practices available upon request, and added a 'Subprocessors' section heading (with no listed content).

Data processing agreement 4 days ago

Document updated.

Subprocessor list 4 days ago

Document updated.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Asana in your workspace.

Get notified when Asana adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial

No card required.