Asana compliance, certifications and attestations

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

Type IIVendor page

A public summary of a SOC 2 examination, readable without an NDA.

HeldVendor page

A certified information security management system.

HeldVendor page

Cloud-specific security controls on top of ISO 27001.

HeldVendor page

Protection of personal data in public clouds acting as processors.

HeldVendor page

A certified privacy information management system extending ISO 27001.

HeldVendor page

Authorization to sell a cloud service to US federal agencies.

ModerateFedRAMP MarketplaceAsana

Support for the Gramm-Leach-Bliley Act safeguards on financial data.

HeldVendor page

The vendor supports HIPAA-regulated health data and signs a Business Associate Agreement.

HeldVendor page

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data. Asana

A listing in the Cloud Security Alliance STAR Registry.

Level 1CSA STAR RegistryCAIQ

Support for student education records under FERPA.

HeldVendor page