Company: ASAN
Filing Date: 2025-12-02
Form Type: 10-Q
Source: 0001477720-25-000237
Chunk: 96

Company: Asana, Inc.
Filing Date: 2025-12-02
Form: 10-Q
Item: Part I, Item 4
Chunk 96
---
 third-party software could result in errors or a failure of our platform or mobile application. Any of the foregoing would disrupt the distribution and sale of subscriptions to our platform and harm our business, results of operations, and financial condition. 

We, and the third parties with whom we work, are subject to stringent and evolving U.S. and foreign laws, regulations, rules, contractual obligations, industry standards, policies and other obligations related to artificial intelligence, privacy, data protection, and security. Our actual or perceived failure to comply with such obligations (or such failure by the third parties with whom we work) could lead to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse business consequences. 

We receive, process, store, and use business and personal information belonging to individuals who interact with Asana, including our users and prospective, current, and former customers. There are numerous federal, state, local, and foreign laws and regulations regarding privacy, data protection, security and the storing, sharing, use, processing, disclosure, and protection of business and personal information including personal information privacy laws, state data breach notification laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act) and other similar laws (e.g., wiretapping laws). These laws continue to evolve in scope and are subject to differing interpretations, and may contain inconsistencies or pose conflicts with other legal requirements. Preparing for and attempting to comply with these laws and other obligations requires significant resources and, potentially, changes to our technologies, systems, and practices and those of any third parties that process personal information on our behalf.

We seek to comply with applicable laws, regulations, policies, legal obligations, contracts, and industry standards and have developed privacy notices and policies, data processing addenda, and internal privacy procedures to reflect such compliance. However, it is possible that these obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other rules or our practices. Failure or perceived failure by us (or third parties with whom we work) to comply with our privacy notices and policies, privacy-related obligations to users, customers, or other third parties, or privacy or security-related legal obligations, 

63

or any data compromise that results in the accidental or unauthorized release, misuse, or transfer of business or personal information or other user or customer data, may result in domestic or foreign governmental enforcement actions, investigations