Asana

SaaS / Software United States Website Reviewed Sept. 2, 2026

Work management platform for projects, tasks, goals and cross-team workflows.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body Asana platform and supporting ISMS Current
ISO 27017, ISO 27018 and ISO 27701 Accredited third-party certification body Cloud security, PII protection and privacy information management for Asana Current
SOC 2 Type II and SOC 3 Independent third-party auditor Asana platform. SOC 3 published publicly; SOC 2 available under NDA Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Processor under its DPA; EU data residency available on Enterprise plans
HIPAA Security
Partial
HIPAA support available on eligible plans with a BAA

Assess Asana in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.