Asana
Security and trust center evidence
From the small stuff to the big picture, Asana organizes work so teams know what to do, why it matters, and how to get it
Summary
Asana has 3 registry-verified rows in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 19 Sep 2026, Asana is listed in the FedRAMP registry as FedRAMP Authorized, issued 22 Jun 2026 and assessed by Schellman Compliance, LLC. Asana is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ), issued 13 Aug 2022, as of 17 Sep 2026. Asana is listed in the EU-US Data Privacy Framework registry as active, covering the UK Extension Certification, the EU-US Certification, and the SW-US Certification, as of 17 Sep 2026. Asana's EU-US Data Privacy Framework certification was originally issued 13 Oct 2016, as of 17 Sep 2026. The EU-US Data Privacy Framework listing for Asana is current through 12 Aug 2027, as of 17 Sep 2026.
- FedRAMP Authorized - listed in the FedRAMP registry, issued 22 Jun 2026, assessor Schellman Compliance, LLC (as of 19 Sep 2026)
- CSA STAR Level 1 self-assessment (CAIQ), issued 13 Aug 2022 (as of 17 Sep 2026)
- EU-US Data Privacy Framework - active (UK Extension, EU-US, SW-US Certifications), current through 12 Aug 2027 (as of 17 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among project management vendors
3verified rows
Category median 1, across 51 indexed project management vendors. Asana has more verified rows than 94 percent of them.
project planningtask trackingteam collaborationwork management
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedFedRAMP Authorized
as of 1 Nov 202646 sources · Schellman Compliance, LLC
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: UK Extension Certification, EU-US Certification, SW-US Certification
as of 26 Oct 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.
Subprocessors
No subprocessor list captured yet.
Change history
- 19 Sep 2026Trust centre movedTrust centre URL is now https://asana.com/trust.
Similar vendors with evidence
Related by product tags and the Project management category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Wrike
Project management
Wrike is a work management platform that delivers real-time project and task insight to its
NimbleWork
Analytics
NimbleWork is a leading B2B SaaS provider of collaborative AI-powered Adaptive Work and Project Management products and
Innovative Way
Project management
Pipelineapp.io makes it easy to orchestrate people inside and outside your company to get things done, consistently, on-time, and on the
Hive Technology
Project management
Use Hive's project management software to manage your projects, track tasks and collaborate with teams of any
Evidence against regulations
All regulations for AsanaHow much of each regulation’s vendor requirements Asana’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read