Asana

Asana publicly advertises 6 compliance frameworks through a trust center hosted by Conveyor.

Productivity & Collaboration

6

Advertised frameworks

Conveyor

Trust center platform

November 2025

First observed

~14 yrs

Founding to trust center

Asana, Inc. is an American software company based in San Francisco, California whose flagship Asana service is a web and mobile "work management" platform designed to help teams organize, track, and manage their work.

Summary from Wikipedia.

Publicly advertised compliance posture

As observed on September 8, 2026 on the organization’s public trust center.

  • SOC 3

    Public summary of a SOC 2 audit, intended for general distribution.

  • ISO 27701

    Publicly advertised on the organization’s trust center.

  • ISO 27018

    Publicly advertised on the organization’s trust center.

  • ISO 27001

    International standard for an information security management system, certified by accredited bodies.

  • ISO 27017

    Publicly advertised on the organization’s trust center.

  • SOC 2

    Independent CPA audit of controls for security, availability, and confidentiality.

Compliance timeline

  1. 2011

    Company founded

  2. November 2025

    Trust center first observed in public web archives

  3. September 8, 2026

    Posture last observed by Trust Index

Roughly 14 years elapsed between founding and the earliest archived capture of a public trust center. Archive coverage is incomplete, so the page may have existed earlier.

Security & compliance hiring

Open roles on the organization’s public job board, a signal of active investment in security and compliance.

  • Director of Security Engineering
  • Security Engineer, Threat Response
  • Security Risk Manager
  • Senior Privacy Engineer
  • Senior Product Manager, Enterprise Data Governance
  • Senior Security Technical Program Manager

Named as a subprocessor by

Organizations in the Trust Index that disclose Asana as a subprocessor.

About this data

The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.

More in Productivity & Collaboration

  • 8x8

    8x8.com

    Advertises 8 frameworks

  • ABBYY

    abbyy.com

    Advertises 4 frameworks

  • Agentui

    agentui.ai

    Advertises 2 frameworks

  • Aliceapp

    aliceapp.ai

    Advertises 3 frameworks

  • Alkmist

    alkmist.com

    Advertises 2 frameworks

  • Amego

    amego.com

    Advertises 2 frameworks

How can we work together

Schedule a discovery session

A complimentary, exploratory meeting to discuss your business goals and challenges, identify potential solutions, and determine if our services align with your needs.

Hire us for a project

Augmenting a specific initiative or project, leveraging our expertise and resources to deliver a defined outcome.

Retain us long term

Ongoing collaboration and support through regular meetings, check-ins, and access to our team's collective knowledge and experience, empowering you to make informed decisions and drive sustained growth.