Content submitted by Managed Users (workplace or organization users) is classified as Customer Data owned and controlled by the subscribing Customer, which may manage, share, modify, or delete that content under the Customer Agreement.
This analysis describes what Asana's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that Managed Users' task data, messages, files, and related content are under the operational control of the subscribing Customer rather than the individual user, including the ability to expand access, share content, or delete it entirely.
Under this clause, employees or other Managed Users who submit content to Asana have no direct data control rights against Asana; their content is governed by the Customer Agreement between Asana and their employer or subscribing organization. The Customer may access, modify, share, or delete Managed User content as permitted under that agreement.
Cross-platform context
See how other platforms handle Managed User Data Controlled by Customer and similar clauses.
Compare across platforms →"When you or another Managed User submit content or information to the Service, such as messages or files ("Customer Data"), you acknowledge and agree that, as between Asana and Customer, the Customer Data is controlled by Customer and the Customer Agreement provides Customer with choices and control over that Customer Data. For example, Customer may manage permissions, enable or disable third party integrations, or take steps to expand, consolidate or share the contents of Asana portfolios, projects, tasks and subtasks, and these choices and instructions may result in the access, use, disclosure, modification or deletion of certain or all Customer Data.Excerpt from Asana's Terms of Service
1) REGULATORY LANDSCAPE: This provision engages GDPR Articles 4 and 28 regarding the controller-processor relationship and employee data rights.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that Managed Users' task data, messages, files, and related content are under the operational control of the subscribing Customer rather than the individual user, including the ability to expand access, share content, or delete it entirely.
Under this clause, employees or other Managed Users who submit content to Asana have no direct data control rights against Asana; their content is governed by the Customer Agreement between Asana and their employer or subscribing organization. The Customer may access, modify, share, or delete Managed User content as permitted under that agreement.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Asana.