Asana’s commitment to privacy
From the development of new features to the way we implement technical and organizational privacy measures, Asana's commitment to data protection and privacy enables teams to work smarter with peace of mind.
Our global approach
Privacy and data protection are fundamental in maintaining and building trust with our customers globally.
Customer trust
Our privacy program focuses on trust by facilitating privacy protections for our customers’ data, giving our customers choice over their data, and respecting the rights of our customers.
Compliance and certifications
Asana's privacy program is designed to keep pace with the changing global privacy climate and our ISO 27018:2019 (Protecting Personal Data in the Cloud) and ISO 27701:2019 (Privacy Information Management) certifications demonstrate our commitment to global privacy standards.
Contractual safeguards
Asana offers our Starter, Advanced, Enterprise, and Enterprise+ customers a Data Processing Addendum that incorporates Data Privacy Frameworks between the EU, UK, Switzerland, and the US, as well as applicable standard contractual clauses.
Control your data
Regional data centers
Asana offers global data residency options with data centers in Europe, Australia, Japan, and US so customers have more control over where their data is stored.
Enterprise key management
Use your own encryption keys on your Asana data to gain more control and help meet your organization’s most critical compliance needs.
Explore more resources
Get more details on trust, privacy, and security at Asana.
Trust at Asana
100,000+ enterprises trust Asana with their data
Get the full overview of how Asana protects your work and adheres to global privacy laws.
Learn more
Privacy Statement
Get more details on privacy at Asana
Understand how we process your information and what rights you have under privacy laws.
Learn more
Asana Subprocessors
How we work with third parties
Learn how Asana engages third-party subprocessors and Asana affiliates to help us provide services to our customers.
Learn more
Still have questions? We have answers.
Privacy Compliance
How does Asana comply with applicable data protection regulations?
To demonstrate our commitment to global privacy standards, Asana has certifications of compliance with ISO 27018:2019 (Protecting Personal Data in the Cloud) and ISO 27701:2019 (Privacy Information Management).
We also work to ensure our agreements with our customers are up to date–our Data Processing Addendum incorporates the latest data privacy frameworks between the US and EU, United Kingdom, and Switzerland as well as the EU and UK Standard Contractual Clauses, which outlines our contractual privacy obligations and facilitates the transfer of data globally.
EU / UK**
Asana has established a comprehensive GDPR/UK GDPR compliance program and is committed to partnering with customers and vendors on our compliance efforts. Some significant steps Asana takes to align its practices with the GDPR/UK GDPR include:
Revising our policies and contracts with our partners, vendors, and users to reflect legislative developments;
-
Enhancing our security practices and procedures**;**
-
Closely reviewing and mapping the data we collect, use, and share**;**
-
Ensuring that we have robust internal privacy and security documentation**;**
-
Training employees on global privacy requirements and privacy/security best practices**; ***and