How many subprocessors does Asana use?

Asana lists 34 subprocessors on its published list, including Amazon Web Services, Inc., Fireworks AI, Inc., Google, LLC (Google Cloud), Amplitude, Inc., and Anthropic, PBC and 29 more.

Where does Asana process customer data?

The subprocessors named by Asana are located in United States, Germany, Ireland, Japan, Australia, and Belgium and 15 other locations, as stated on its list.

How quickly does Asana report a personal data breach to customers?

According to its DPA, Asana reports a personal data breach to customers without undue delay, with no set deadline: “Asana will assist Customer by notifying it of a Security Incident without undue delay or within the time period required under Applicable Law.”

How much notice does Asana give before adding a subprocessor?

Asana's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Customer will be automatically notified of new Subprocessors ten (10) business days before Asana authorizes such Subprocessor to process Customer Personal Data”

How does Asana transfer personal data outside the EU?

Asana's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “The EU SCCs will apply to Restricted Transfers of Customer Personal Data protected by the GDPR”

When was Asana's subprocessor list last checked?

ClauseTrail last checked Asana's subprocessor list on September 26, 2026. Lists are re-checked daily.

How do I find out when Asana adds or removes a subprocessor?

ClauseTrail monitors Asana's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Asana Subprocessors List (September 2026): Changes and History

Asana names 34 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

Asana subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services, Inc.	Cloud service provider	United States, Germany, Ireland, Australia, Japan
2	Fireworks AI, Inc.	Cloud service provider	United States
3	Google, LLC (Google Cloud)	Cloud service provider	United States, Belgium, Frankfurt, London, Madrid, Milan, Zurich
4	Amplitude, Inc.	Analytics and Data Visualization	United States
5	Anthropic, PBC	LLM Provider	United States
6	Databricks, Inc.	Data Warehouse	United States
7	OpenAI OpCo, LLC	LLM Provider	United States, Norway
8	Segment (Twilio, Inc.)	Customer Data Platform	United States
9	Tableau Software, LLC (Salesforce, Inc.)	Analytics and Data Visualization	United States
10	Intercom, Inc	Artificial intelligence chatbot for customer support	United States
11	Service Cloud (Salesforce, Inc.)	Customer and sales support	United States
12	Amazon Web Services Inc (AWS Bedrock)	Artificial intelligence enabled functionality	United States, European Union
13	Apple, Inc.	Mobile push notifications	United States
14	Cloudflare, Inc.	Model Context Protocol (MCP) server	United States
15	Google, LLC	Mobile push notifications	United States
16	Google, LLC (Gemini Enterprise Agent Platform)	Artificial intelligence enabled functionality for Google Gemini	United States, Belgium, Frankfurt, London, Madrid, Milan, Zurich
17	Hyperdoc Inc. (Recall.ai)	Transcription service provider	United States, Germany, Japan
18	Tray.io	Integration infrastructure provider	United States
19	Vimeo, LLC	Video messaging	United States
20	Asana Software Australia Pty Ltd	—	Australia
21	Asana Software Canada Ltd	—	Canada
22	Asana France SAS	—	France
23	Asana Germany Gmbh	—	Germany
24	Asana Software Iceland ehf	—	Iceland
25	Asana Software Ireland Limited	—	Ireland
26	Asana Ireland Technology Limited	—	Ireland
27	Asana Japan KK	—	Japan
28	Asana Poland sp. z o.o	—	Poland
29	Asana Software Singapore Pte Ltd	—	Singapore
30	Asana Switzerland GmbH	—	Switzerland
31	Asana Software UK Limited	—	United Kingdom
32	Asana, Inc.	—	United States
33	Eigen, Inc. dba StackAI	—	United States
34	KMC Solutions	—	Philippines

Get an email when Asana changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Asana free

Key DPA terms at Asana

What Asana's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Asana will assist Customer by notifying it of a Security Incident without undue delay or within the time period required under Applicable Law.”
DPA, asana.com ↗
Notice of a new subprocessor: 10 days ahead

“Customer will be automatically notified of new Subprocessors ten (10) business days before Asana authorizes such Subprocessor to process Customer Personal Data”
DPA, asana.com ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“The EU SCCs will apply to Restricted Transfers of Customer Personal Data protected by the GDPR”

“Asana represents that Asana is self-certified under the Data Privacy Frameworks and will adhere to the Data Privacy Principles.”
DPA, asana.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Customer Personal Data is deleted or anonymized upon termination of the Agreement.”
DPA, asana.com ↗
Audit rights: Once a year

“Customer may request an Audit upon fourteen (14) days' prior written notice to Asana, no more than once annually, except, in the event of a Security Incident occurring on Asana's systems, in which case Customer may request an Audit within a reasonable period of time following such Security Incident.”
DPA, asana.com ↗

Documents we track for Asana

AI terms: checked September 26, 2026 asana.com ↗
DPA: checked September 26, 2026 asana.com ↗
Privacy policy: checked September 26, 2026 asana.com ↗
Subprocessor list: checked September 26, 2026 asana.com ↗
Terms of service: checked September 26, 2026 asana.com ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Asana subprocessors FAQ

How many subprocessors does Asana use?: Asana lists 34 subprocessors on its published list, including Amazon Web Services, Inc., Fireworks AI, Inc., Google, LLC (Google Cloud), Amplitude, Inc., and Anthropic, PBC and 29 more.
Where does Asana process customer data?: The subprocessors named by Asana are located in United States, Germany, Ireland, Japan, Australia, and Belgium and 15 other locations, as stated on its list.
How quickly does Asana report a personal data breach to customers?: According to its DPA, Asana reports a personal data breach to customers without undue delay, with no set deadline: “Asana will assist Customer by notifying it of a Security Incident without undue delay or within the time period required under Applicable Law.”
How much notice does Asana give before adding a subprocessor?: Asana's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Customer will be automatically notified of new Subprocessors ten (10) business days before Asana authorizes such Subprocessor to process Customer Personal Data”
How does Asana transfer personal data outside the EU?: Asana's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “The EU SCCs will apply to Restricted Transfers of Customer Personal Data protected by the GDPR”
When was Asana's subprocessor list last checked?: ClauseTrail last checked Asana's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when Asana adds or removes a subprocessor?: ClauseTrail monitors Asana's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.