{
  "slug": "asana",
  "category": "task-management",
  "name": "Asana",
  "description": "Work management platform for teams, with tasks, projects, timelines, boards and workflow automation. Data is hosted by Asana.",
  "website": "https://asana.com",
  "license": null,
  "platforms": [
    "web",
    "windows",
    "macos",
    "android",
    "ios"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 20,
  "coverage": 100,
  "summary": "Asana scores 20 out of 100 (grade F) on the task management criteria. It partly meets no ads or data sales and independent audit. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.",
  "url": "https://privacyratings.com/task-management/asana/",
  "markdown": "https://privacyratings.com/task-management/asana/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://reports.exodus-privacy.eu.org/en/reports/com.asana.app/latest/",
      "note": "Exodus finds Google Analytics, Crashlytics, Firebase Analytics and Tag Manager in the Android app, and the website loads advertising trackers."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://asana.com/terms/privacy-statement",
      "note": "Funded by subscriptions with no ads in the product, but the privacy statement describes targeting cookies and sharing data with partners for advertising."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://asana.com/trust",
      "note": "States SOC 2 Type 2 and ISO 27001 audits, but the reports are only available through its trust center on request."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google DoubleClick",
        "host": "ad.doubleclick.net",
        "effect": "no"
      },
      {
        "name": "Google reCAPTCHA",
        "host": "www.google.com",
        "effect": "none"
      },
      {
        "name": "Google Tag Manager",
        "host": "inline code",
        "effect": "no"
      },
      {
        "name": "OneTrust",
        "host": "cdn.cookielaw.org",
        "effect": "none"
      }
    ],
    "tested_at": "2026-10-01T06:38:40.352Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}