Company: ASAN
Filing Date: 2025-12-02
Form Type: 10-Q
Source: 0001477720-25-000237
Chunk: 382

Company: Asana, Inc.
Filing Date: 2025-12-02
Form: 10-Q
Item: Part I, Item 2
Chunk 382
---
 and consultants; or litigation, regulatory action, and other potential liabilities. 

If any of these breaches of security or other security incidents should occur, we cannot guarantee that recovery protocols and backup systems will be sufficient to prevent data loss. Additionally, any security breaches or incidents that we have suffered or may in the future suffer, may lead to damage to our reputation and brand, our business suffering, requirements to expend significant capital and other resources to alleviate problems caused by such breaches and incidents, and exposure to risk of loss, litigation or regulatory action, and other potential liabilities, such as investigations, fines, penalties, audits, inspections, injunctions, additional oversight, or restrictions or bans on processing personal information. Actual or anticipated security breaches, incidents, or attacks may cause us to incur increasing costs, including costs to deploy additional personnel and protection technologies, train employees, and engage third-party experts and consultants. 

Remote work has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers, and devices outside our premises or network, including working from home, while in transit and in public locations. Additionally, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.

The previously identified or similar threats could cause a security breach or incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our information technology systems and confidential, proprietary, and sensitive information, or those of the third parties with whom we work. For example, periodically we become aware of attempts to phish Asana employees or attempts to circumvent spam protections we’ve put in place in our product. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our products or services or could impact our reputation.

Any compromise or breach of our security measures, or those of the third parties with whom we work, could also violate applicable privacy, data protection, security, and other laws, and cause significant legal and financial exposure, adverse publicity, and a loss of confidence in our security measures, which could have a material adverse effect on our business, results of operations, and