Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Sep 18, 2026; our capture on Oct 21, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“Asana AI features powered by AI Partners use metadata, personal information, and user-generated content (e.g., task titles and task descriptions).”
“Personal information may be transferred to overseas recipients if there are contractual agreements in place that ensure compliance with data protection standards in Japan.”
“Where a business subject to the CCPA has entered into a service or subscription agreement with Asana, Asana will act as a service provider to that business.”
“Asana will process such customers' personal information only for the purposes set forth in the applicable agreement and will cooperate with customers to fulfill their obligations with respect to deletion or access requests.”
“Asana will process such customers' personal information only for the purposes set forth in the applicable agreement and will cooperate with customers to fulfill their obligations with respect to deletion or access requests.”
“The provisions of Asana's DPA reflect Asana's services and multi-tenant infrastructure... Asana's DPA also seamlessly interoperates with other agreements and relevant Documentation.”
This document explains how Asana handles your personal information and sets rules for how it processes data on behalf of its business customers. Asana's AI features involve third-party AI Partners who access your work content, such as task titles and descriptions. Asana limits use of your work content to providing its services and advises users not to store sensitive personal data like social security numbers or financial account numbers in the platform.
Asana's Privacy Statement establishes the terms under which Asana collects, uses, shares, and retains personal information, and sets out users' and customers' rights with respect to that data. A globally applicable Data Processing Addendum, incorporated by reference into Subscriber Terms, governs Asana's processing of Customer Personal Data and limits that processing to purposes specified in the applicable agreement. Asana's AI features, operated through third-party AI Partners, process metadata, personal information, and user-generated content such as task titles and descriptions. Customer work content is restricted to service delivery purposes only, and Asana commits to cooperate with customers in fulfilling deletion and access requests. Cross-border transfers are addressed through incorporated US-EU, UK, and Swiss data privacy frameworks and Standard Contractual Clauses, with overseas transfers under Japanese law conditioned on contractual safeguards.
For an individual user, this document means Asana processes your personal information and work content — including task titles and descriptions — through its own systems and through third-party AI Partners when AI features are used. Asana restricts use of your work content solely to delivering its services and does not use it for other purposes. Asana advises that sensitive personal data such as financial account numbers and social security numbers should not be stored in Asana, as the platform is not designed to hold such information.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“Asana AI features powered by AI Partners use metadata, personal information, and user-generated content (e.g., task titles and task descriptions).”
“Personal information may be transferred to overseas recipients if there are contractual agreements in place that ensure compliance with data protection standards in Japan.”
“Where a business subject to the CCPA has entered into a service or subscription agreement with Asana, Asana will act as a service provider to that business.”
“Asana will process such customers' personal information only for the purposes set forth in the applicable agreement and will cooperate with customers to fulfill their obligations with respect to deletion or access requests.”
“Asana will process such customers' personal information only for the purposes set forth in the applicable agreement and will cooperate with customers to fulfill their obligations with respect to deletion or access requests.”
“The provisions of Asana's DPA reflect Asana's services and multi-tenant infrastructure... Asana's DPA also seamlessly interoperates with other agreements and relevant Documentation.”
“Asana's DPA is applied globally.”
“Asana's DPA is meant to cover customers globally and sets out relevant legal obligations and commitments related to Asana's processing of Customer Personal Data.”
“The DPA is incorporated by reference in a customer entity's Subscriber Terms with Asana.”
“Our Data Processing Addendum incorporates the latest data privacy frameworks between the US and EU, United Kingdom, and Switzerland as well as the EU and UK Standard Contractual Clauses...”
“We only use customer work content to provide our services, and not for any other purpose.”
“Customers should not store sensitive personal data (including financial account numbers and social security numbers) in Asana.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle AI Partners Access Metadata Personal Info and User Content and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.