For organizations using Asana, the Asana Administrator has the authority to manage data access, exports, and deletions for their team members. How to Exercise Your Rights
Compliance relies heavily on security. If the platform isn't secure, compliance is moot. Asana holds high-level certifications (SOC 2 Type II and ISO 27001), which align well with the "reasonable security" measures required by CCPA. asana ccpa
Asana only uses sensitive personal information for business purposes for which consumers cannot opt out under the CCPA (e.g., security and fraud prevention). For organizations using Asana, the Asana Administrator has
By pairing Asana’s robust architecture with disciplined internal workflows, you can keep your projects moving without violating California’s privacy laws. For organizations using Asana
Asana uses this data to: