Trust at Asana
More than 100,000 of the world’s most innovative businesses trust Asana to orchestrate their work.
Secure your work
We take a security by design approach to protecting your data and have built our platform using best practices for highly available, scalable, and secure cloud applications.
Security infrastructure
Asana’s best-in-class security starts at the foundational level and includes protocols such as password hashing, routine security assessments, least privilege access, security-focused software development, and a public bug bounty program.
Operational security
Asana’s information security team continuously implements new security controls and monitors Asana for malicious activity across physical data centers, networks, and IT devices.
Product security
Asana provides a robust set of in-product data protection and admin controls to give you greater visibility and control over your data. Enterprise admins can securely deploy Asana to their organizations with multi-factor authentication, SSO, and SAML 2.0.
Monitor system availability
We offer full transparency into system status and performance.
Uptime and availability
Asana offers transparency into real-time and historical platform status, and a 99.9% uptime commitment to our Enterprise customers.
Business continuity
Asana’s infrastructure investments provide daily backups, regional backups, and recovery procedures for restoring services in the event of unavoidable failures.
Protect your privacy
We're committed to protecting and honoring your privacy rights. We have established a comprehensive privacy compliance program, aligning our practices with regulations such as the General Data Protection Regulation and the California Consumer Privacy Act. Read more.
Privacy controls
Asana provides in-product admin controls and both user and object-level permissions, plus the ability to define which third-party applications are accessible to your team.
Data governance
Asana allows customers to export and delete data at the organization level and automate full-domain exports through our API.
Data residency
Asana offers global data residency options to ensure customers have more control over where their data is stored.
Certifications and attestations
Read more about our compliance programs, including SOC 2 and ISO/IEC 27001:2013.
More security resources
Take a deeper dive into Asana’s security practices and philosophy by downloading our trust and security whitepaper today.
Read the whitepaper