Vendor record · asana.com
What Asana promises about your data.
Where Asana publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Asana lists its sub-processors at asana.com/terms/subprocessors. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between September 13, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at asana.com/terms/data-processing (read October 14, 2026) gives you 30 days to object.
- Window
- 30
- Sub-processors
- 31
- Pages
- 7
- Copies
- 44
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Asana DPA
Asana's data processing agreement gives 30 days to object to a new sub-processor. Here is the clause, from our October 14, 2026 copy:
30
days to object
“4.2 Right to Object. Customer may object to Asana’s use of a new Subprocessor (based on reasonable grounds relating to data protection) by notifying Asana promptly in writing at [email address on the vendor's page] within thirty (30) days after receipt of Asana’s notice as described in Section 4.1.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Asana published it.
asana.com/terms/data-processing · read 2026-10-14 · fingerprint 3305949bfb5a05bd…
How it says it sends notice
“If Customer subscribes to receive updates available on Asana’s Subprocessors page, Customer will be automatically notified of new Subprocessors ten (10) business days before Asana authorizes such Subprocessor to process Customer Personal Data (or in the case of an emergency, as soon as reasonably practicable).”
asana.com/terms/data-processing · read 2026-10-14
Asana sub-processors
Asana publishes a sub-processor list at asana.com/terms/subprocessors; we last read it on October 15, 2026. It names 31 entries. The first 15, as the list prints them: Amazon Web Services, Inc.; Amplitude, Inc.; Anthropic, PBC; Apple, Inc.; Asana, Inc.; Asana France SAS; Asana Germany Gmbh; Asana Ireland Technology Limited; Asana Japan KK; Asana Poland sp. z o.o; Asana Software Australia Pty Ltd; Asana Software Canada Ltd; Asana Software Iceland ehf; Asana Software Ireland Limited; Asana Software Singapore Pte Ltd; and 16 more in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
31 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Asana keeps your data
We hold no statement about data retention from Asana's watched pages. The pages we watch: changelog asana.com/whats-new; data processing agreement asana.com/terms/data-processing; pricing page asana.com/pricing; privacy policy asana.com/privacy; sub-processor list asana.com/terms/subprocessors; terms of service asana.com/terms; trust and security page asana.com/trust. On training with customer data, Asana's data processing agreement (asana.com/terms/data-processing, in the copy read October 14, 2026) says: “(d) to de-identify or aggregate such Customer Personal Data for analysis and Service improvement, provided that Asana shall not make any attempt to re-identify such de-identified or aggregate data; and (e) as otherwise agreed in writing.”
Training on customer data
“In the normal course of the data importer's Service, the categories of personal data transferred might include (but are not limited to): name, email address, telephone, title, free text projects, and task lists entered by the data exporter or its End Users. *Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data …”
asana.com/terms/data-processing · read 2026-10-14
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 31 · 3 name an AI provider we list
Amazon Web Services, Inc.
Cloud service provider
United States, Germany, Ireland, Australia, and Japan
Amplitude, Inc.
Analytics and Data Visualization
United States
Anthropic, PBCAI · Anthropic
LLM Provider
United States
Apple, Inc.
Mobile push notifications
United States
Asana, Inc.
United States
Asana France SAS
France
Asana Germany Gmbh
Germany
Asana Ireland Technology Limited
Ireland
Asana Japan KK
Japan
Asana Poland sp. z o.o
Poland
Asana Software Australia Pty Ltd
Australia
Asana Software Canada Ltd
Canada
Asana Software Iceland ehf
Iceland
Asana Software Ireland Limited
Ireland
Asana Software Singapore Pte Ltd
Singapore
Asana Software UK Limited
United Kingdom
Asana Switzerland GmbH
Switzerland
Cloudflare, Inc.
Model Context Protocol (MCP) server
United States
Databricks, Inc.
Data Warehouse
United States
Eigen, Inc. dba StackAI
United States
Fireworks AI, Inc.AI · Fireworks AI
Cloud service provider
United States
Google, LLC (Google Cloud)
Cloud service provider
United States, Belgium, Frankfurt, London, Madrid, Milan, and Zurich
Hyperdoc Inc. (Recall.ai)
Transcription service provider
United States, Germany, Japan
Intercom, Inc
Artificial intelligence chatbot for customer support
United States
KMC Solutions
Philippines
OpenAI OpCo, LLCAI · OpenAI
LLM Provider
United States and Norway
Segment (Twilio, Inc.)
Customer Data Platform
United States
Service Cloud (Salesforce, Inc.)
Customer and sales support
United States
Tableau Software, LLC (Salesforce, Inc.)
Analytics and Data Visualization
United States
Tray.io
Integration infrastructure provider
United States
Vimeo, LLC
Video messaging
United States
Certifications the trust page names · CSA STAR · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · SOC 2 Type II · SOC 3
Laws the trust page names · GDPR · HIPAA
The pages' own stamps: Effective 2024-01-01 · Effective Date 2026-09-01 · LAST UPDATED 2026-09-11 · Last updated 2026-09-01
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates Asana. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Asana? With an email at asana.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Asana in your product? Hear the morning we read a change.
You get the lines that moved, in Asana’s own words, and the date any window closes. No card. Nothing to cancel.