Asana AI — privacy & data policy

Provider: Asana. PromptPrivacy score: 66/100. Last verified August 26, 2026.

What happens to your data?

Asana processes account details, uploaded workspace content, and usage metadata to operate its work management platform and AI tools. Workspace metadata may be used to train internal ML models if enabled, but third-party AI partners are contractually barred from training on customer data. Personal information is shared with subprocessors to run the service but is not sold for third-party direct marketing.

Does it train on your data?

When AI features powered by Asana are enabled, Asana uses domain usage metadata to train internal machine learning models. When features rely on third-party LLM partners, those providers are contractually prohibited from using customer data to train their models. Admins and super admins can configure or disable AI preferences at any time via the admin console.

Can you opt out?

Yes. Administrators can adjust AI feature preferences at any time in the admin console. Additionally, individual users can exercise global privacy rights to delete or restrict processing, opt out of marketing communications, manage cookie settings, or broadcast Global Privacy Control signals.

Data retention

Asana retains user information for as long as necessary to fulfill the purposes described in the policy, provide services, or as instructed by the user or organization, unless a longer retention duration is required or permitted by law.

Encryption & security

Asana implements technical and organizational measures to safeguard data against unauthorized access, destruction, loss, or alteration, and stores user passwords in hashed format. Detailed technical standards and certifications are maintained on Asana's external Trust page.

Is it safe for work?

Yes. Asana provides robust enterprise-oriented controls, acting as a data processor for business accounts under enterprise contracts, supporting DPA/DPF compliance, allowing admin control over AI features, and contractually barring third-party LLM providers from training models on customer data.

Source policy: https://asana.com/terms/privacy-statement